This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/3d4e04-93d4-4f5a-8dcd-332f34588365/1/MmboynDkwXGKCYBFOPnkYLMF-bM.mft File: MmboynDkwXGKCYBFOPnkYLMF-bM.mft (raw, json) Hash identifier: rGmNcdRrOPUWVJEhLXlP8YNO4LvoqaBc7pf4zHqYv7Q= Subject key identifier: 8A:84:46:2C:3C:07:5C:28:D4:5B:1E:6D:E1:C5:77:2F:76:4B:DD:4E Authority key identifier: 32:66:E8:CA:70:E4:C1:71:8A:09:80:45:38:F9:E4:60:B3:05:F9:B3 Certificate issuer: /CN=3266e8ca70e4c1718a09804538f9e460b305f9b3 Certificate serial: 019AF38A196D2E37D8A0DE4674F3CBC13951 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmboynDkwXGKCYBFOPnkYLMF-bM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/3d4e04-93d4-4f5a-8dcd-332f34588365/1/MmboynDkwXGKCYBFOPnkYLMF-bM.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 12:01:45 +0000 Manifest this update: Sat 06 Dec 2025 12:01:45 +0000 Manifest next update: Sun 07 Dec 2025 12:01:45 +0000 Files and hashes: 1: MmboynDkwXGKCYBFOPnkYLMF-bM.crl (hash: NFW96CaFM4PlxsVCBlrfVV7QJEq8k5J4BNgXx1BX2PM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/3d4e04-93d4-4f5a-8dcd-332f34588365/1/MmboynDkwXGKCYBFOPnkYLMF-bM.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/3d4e04-93d4-4f5a-8dcd-332f34588365/1/MmboynDkwXGKCYBFOPnkYLMF-bM.mft rsync://rpki.ripe.net/repository/DEFAULT/MmboynDkwXGKCYBFOPnkYLMF-bM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:8a:19:6d:2e:37:d8:a0:de:46:74:f3:cb:c1:39:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3266e8ca70e4c1718a09804538f9e460b305f9b3 Validity Not Before: Dec 6 12:01:45 2025 GMT Not After : Dec 7 12:01:45 2025 GMT Subject: CN=8a84462c3c075c28d45b1e6de1c5772f764bdd4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:e7:aa:cc:ce:33:65:70:07:39:ca:f7:59:8c: 9d:eb:5e:de:f9:40:40:85:bd:5a:f2:59:61:fc:e5: 4b:d1:45:f8:99:87:04:cf:08:09:ca:34:99:79:5e: 91:fe:f3:1e:07:09:bb:1f:a3:85:c6:57:7e:e5:da: 69:f0:39:0f:cc:24:7c:79:5c:cc:ab:0e:fb:52:95: de:c9:c9:2f:61:14:48:d6:d1:9c:80:b4:5e:3e:ad: 96:be:28:13:fc:0f:9a:59:cc:99:2c:ec:d4:ef:37: 17:34:51:62:2b:14:2f:e1:02:b6:14:3b:94:2e:d1: 6b:ac:e5:00:e8:c8:3b:0f:41:e6:6c:d2:b1:2b:ab: 2f:bc:3b:5d:7d:3c:94:bc:64:30:a4:37:be:95:85: 43:b7:74:1a:15:b1:de:57:2a:2c:fc:38:d3:ab:91: 70:ed:be:9a:e6:49:ed:36:6e:94:20:e9:60:88:75: c5:2f:c2:22:12:a2:c9:d0:56:75:ea:a1:ef:c9:a1: 4e:b6:82:1b:31:1f:2c:a2:2b:cc:56:23:e5:62:1e: 53:34:73:4e:c5:ef:e0:16:38:4b:67:a0:95:a0:38: 81:04:9c:74:04:a7:63:e3:43:cd:cb:ff:d3:03:56: e2:60:c5:41:c7:ed:fc:84:51:e6:1a:f8:28:60:f4: c3:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:84:46:2C:3C:07:5C:28:D4:5B:1E:6D:E1:C5:77:2F:76:4B:DD:4E X509v3 Authority Key Identifier: keyid:32:66:E8:CA:70:E4:C1:71:8A:09:80:45:38:F9:E4:60:B3:05:F9:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmboynDkwXGKCYBFOPnkYLMF-bM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3d4e04-93d4-4f5a-8dcd-332f34588365/1/MmboynDkwXGKCYBFOPnkYLMF-bM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3d4e04-93d4-4f5a-8dcd-332f34588365/1/MmboynDkwXGKCYBFOPnkYLMF-bM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:35:2f:08:1c:87:e5:f8:01:60:5d:9c:51:bf:aa:e2:2a:21: e5:ff:77:8a:47:02:07:fd:3f:33:a6:8c:d5:a9:9d:a5:19:2f: 88:0e:b6:94:0c:26:0b:9a:ae:ee:06:df:44:93:72:26:41:6a: df:4e:11:8a:06:90:d2:71:94:11:27:7b:e3:a3:a4:60:f5:9f: 53:52:00:0f:e0:d3:75:52:fa:53:92:06:1e:2f:af:e6:e2:42: 15:0e:38:06:64:da:2b:ec:0e:7e:bc:56:4d:0f:63:e8:5e:11: 40:82:e3:a3:4a:d9:e7:c2:d1:21:8a:6b:e9:b5:81:87:5b:28: 11:fb:b7:c2:a1:8f:df:05:c2:26:27:0c:0b:28:d7:04:7c:96: 41:b6:40:71:2f:94:45:66:d4:0d:29:9f:91:8d:91:e4:09:9f: 54:f8:96:1b:83:a7:f4:a3:7f:1a:f1:e8:fa:ac:f6:e1:19:88: 92:77:d8:9a:3e:82:17:61:9b:ed:cb:52:f7:d8:b1:88:5a:ff: 0f:33:60:b7:61:f3:cf:9f:55:7c:21:d0:27:c7:d1:e3:51:db: 3d:07:45:78:c0:8e:db:20:29:98:aa:a7:76:1c:94:2e:2b:a9: ee:ac:2f:80:b8:38:42:1b:e4:5f:cb:36:42:33:f6:75:18:ec: 44:64:73:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzihltLjfYoN5GdPPLwTlRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNjZlOGNhNzBlNGMxNzE4YTA5ODA0NTM4ZjllNDYwYjMw NWY5YjMwHhcNMjUxMjA2MTIwMTQ1WhcNMjUxMjA3MTIwMTQ1WjAzMTEwLwYDVQQD Eyg4YTg0NDYyYzNjMDc1YzI4ZDQ1YjFlNmRlMWM1NzcyZjc2NGJkZDRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOeqzM4zZXAHOcr3WYyd617e+UBA hb1a8llh/OVL0UX4mYcEzwgJyjSZeV6R/vMeBwm7H6OFxld+5dpp8DkPzCR8eVzM qw77UpXeyckvYRRI1tGcgLRePq2WvigT/A+aWcyZLOzU7zcXNFFiKxQv4QK2FDuU LtFrrOUA6Mg7D0HmbNKxK6svvDtdfTyUvGQwpDe+lYVDt3QaFbHeVyos/DjTq5Fw 7b6a5kntNm6UIOlgiHXFL8IiEqLJ0FZ16qHvyaFOtoIbMR8soivMViPlYh5TNHNO xe/gFjhLZ6CVoDiBBJx0BKdj40PNy//TA1biYMVBx+38hFHmGvgoYPTDtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIqERiw8B1wo1FsebeHFdy92S91OMB8GA1UdIwQY MBaAFDJm6Mpw5MFxigmARTj55GCzBfmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTW1ib3luRGt3WEdLQ1lCRk9QbmtZTE1GLWJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8zZDRlMDQtOTNkNC00ZjVhLThkY2Qt MzMyZjM0NTg4MzY1LzEvTW1ib3luRGt3WEdLQ1lCRk9QbmtZTE1GLWJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC8zZDRlMDQtOTNkNC00ZjVhLThkY2QtMzMyZjM0NTg4MzY1 LzEvTW1ib3luRGt3WEdLQ1lCRk9QbmtZTE1GLWJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfDUvCByH 5fgBYF2cUb+q4ioh5f93ikcCB/0/M6aM1amdpRkviA62lAwmC5qu7gbfRJNyJkFq 304RigaQ0nGUESd746OkYPWfU1IAD+DTdVL6U5IGHi+v5uJCFQ44BmTaK+wOfrxW TQ9j6F4RQILjo0rZ58LRIYpr6bWBh1soEfu3wqGP3wXCJicMCyjXBHyWQbZAcS+U RWbUDSmfkY2R5AmfVPiWG4On9KN/GvHo+qz24RmIknfYmj6CF2Gb7ctS99ixiFr/ DzNgt2Hzz59VfCHQJ8fR41HbPQdFeMCO2yApmKqndhyULiup7qwvgLg4QhvkX8s2 QjP2dRjsRGRzpw== -----END CERTIFICATE-----Generated at Sat Dec 6 19:16:42 2025 by rpki-client