This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/3d4e04-93d4-4f5a-8dcd-332f34588365/1/MmboynDkwXGKCYBFOPnkYLMF-bM.mft File: MmboynDkwXGKCYBFOPnkYLMF-bM.mft (raw, json) Hash identifier: uvOzsYlBYKWSpoap/cLmILfNsBG+//Oxg60gaz0k5/s= Subject key identifier: 96:3E:04:80:4F:5B:4B:EB:40:DB:89:C9:B8:5C:64:A5:86:70:53:A5 Authority key identifier: 32:66:E8:CA:70:E4:C1:71:8A:09:80:45:38:F9:E4:60:B3:05:F9:B3 Certificate issuer: /CN=3266e8ca70e4c1718a09804538f9e460b305f9b3 Certificate serial: 019B3EDA4D4AF784CD1884B8B8CD3CC80871 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmboynDkwXGKCYBFOPnkYLMF-bM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/3d4e04-93d4-4f5a-8dcd-332f34588365/1/MmboynDkwXGKCYBFOPnkYLMF-bM.mft Manifest number: 1787 Signing time: Sun 21 Dec 2025 03:00:52 +0000 Manifest this update: Sun 21 Dec 2025 03:00:52 +0000 Manifest next update: Mon 22 Dec 2025 03:00:52 +0000 Files and hashes: 1: MmboynDkwXGKCYBFOPnkYLMF-bM.crl (hash: t+v4iJi3BA32GU/3Fmd50nQ1XDUWRCZNUHgV/Q99++A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/3d4e04-93d4-4f5a-8dcd-332f34588365/1/MmboynDkwXGKCYBFOPnkYLMF-bM.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/3d4e04-93d4-4f5a-8dcd-332f34588365/1/MmboynDkwXGKCYBFOPnkYLMF-bM.mft rsync://rpki.ripe.net/repository/DEFAULT/MmboynDkwXGKCYBFOPnkYLMF-bM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:4d:4a:f7:84:cd:18:84:b8:b8:cd:3c:c8:08:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3266e8ca70e4c1718a09804538f9e460b305f9b3 Validity Not Before: Dec 21 03:00:52 2025 GMT Not After : Dec 22 03:00:52 2025 GMT Subject: CN=963e04804f5b4beb40db89c9b85c64a5867053a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:b3:9c:41:a9:71:bd:52:97:25:cd:13:05:61: fc:d2:2c:98:59:72:03:8c:0d:72:5d:7d:cd:ff:f3: fd:fb:27:10:54:bf:d5:b6:88:78:2b:1d:6c:86:93: d6:dd:d1:13:45:b8:bb:2a:5c:28:f4:22:19:27:9d: 74:b9:1e:3c:ac:8d:fc:94:be:ae:de:73:48:50:57: 62:0d:c6:76:dd:41:24:ad:1b:08:4d:04:46:21:84: 73:68:6a:ea:67:bd:7e:d6:3f:f5:2e:d7:cb:cc:ad: e8:42:5f:5a:1c:ae:ba:c8:84:c8:65:99:11:0a:2e: f6:e1:2e:d6:12:01:ae:d5:41:4f:5a:86:bf:4f:a3: 29:a2:fb:7e:b5:72:72:10:3f:93:a6:6b:94:e0:1f: e0:78:c9:a8:e7:57:08:fe:e7:02:6a:f3:25:ef:4e: 34:4e:2b:e3:63:58:3f:52:78:12:d8:5e:2f:c6:ed: 2a:2e:be:72:43:5f:46:fa:7b:31:54:11:5f:c2:63: 64:22:5c:22:0e:e8:4b:c4:9b:08:25:41:56:16:b5: df:06:4f:8f:55:da:a0:8e:67:fb:ce:02:6e:f5:46: 35:ef:60:d4:6a:34:92:bf:43:99:8b:af:c0:44:0f: e8:e9:f6:50:ba:27:49:16:af:0f:9a:44:1f:d5:95: 5f:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:3E:04:80:4F:5B:4B:EB:40:DB:89:C9:B8:5C:64:A5:86:70:53:A5 X509v3 Authority Key Identifier: keyid:32:66:E8:CA:70:E4:C1:71:8A:09:80:45:38:F9:E4:60:B3:05:F9:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmboynDkwXGKCYBFOPnkYLMF-bM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3d4e04-93d4-4f5a-8dcd-332f34588365/1/MmboynDkwXGKCYBFOPnkYLMF-bM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3d4e04-93d4-4f5a-8dcd-332f34588365/1/MmboynDkwXGKCYBFOPnkYLMF-bM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:c0:66:d5:84:1f:ce:1e:2a:f6:6d:af:22:5d:5d:3d:7b:8d: aa:7f:cb:c3:2e:ab:49:c1:03:47:25:50:93:3b:ef:32:92:14: c6:64:c5:ed:2c:a1:b9:5d:ef:f5:48:7a:ca:7a:7c:8d:0e:99: cb:76:bb:1d:46:fd:92:00:e6:b5:f0:f1:c1:bb:08:37:2d:65: d6:8b:ed:0c:a3:0d:60:73:04:8c:7e:16:b2:a8:54:a5:8b:42: 35:2c:ea:3f:af:df:59:dd:5f:73:db:ad:c0:83:d8:d0:f1:b3: 29:c9:ea:72:0f:02:bb:92:cb:da:a4:cc:e5:a2:64:68:5a:a6: 7f:e9:da:b4:1b:49:1f:1c:40:13:2b:29:9c:b9:68:4b:be:a6: b6:d4:b2:cf:da:b4:09:df:37:d2:ff:c3:82:70:86:3a:c2:a1: 02:45:9c:63:27:7d:7d:7b:ed:01:b5:be:b1:6b:64:53:5b:90: 70:e6:5c:7e:41:35:7b:b5:6e:4e:8a:ad:94:b3:13:20:86:91: 9c:84:86:ad:d6:d2:9b:4f:ef:a3:0a:c8:55:36:97:da:fb:8d: 74:07:70:6e:87:0b:ed:41:b6:6b:06:1a:4e:c1:e4:66:86:d0: f0:9f:a9:3d:0f:de:09:0a:b1:76:b1:c8:0f:48:7d:e6:72:80: 13:21:cc:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2k1K94TNGIS4uM08yAhxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNjZlOGNhNzBlNGMxNzE4YTA5ODA0NTM4ZjllNDYwYjMw NWY5YjMwHhcNMjUxMjIxMDMwMDUyWhcNMjUxMjIyMDMwMDUyWjAzMTEwLwYDVQQD Eyg5NjNlMDQ4MDRmNWI0YmViNDBkYjg5YzliODVjNjRhNTg2NzA1M2E1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA17OcQalxvVKXJc0TBWH80iyYWXID jA1yXX3N//P9+ycQVL/Vtoh4Kx1shpPW3dETRbi7Klwo9CIZJ510uR48rI38lL6u 3nNIUFdiDcZ23UEkrRsITQRGIYRzaGrqZ71+1j/1LtfLzK3oQl9aHK66yITIZZkR Ci724S7WEgGu1UFPWoa/T6Mpovt+tXJyED+TpmuU4B/geMmo51cI/ucCavMl7040 TivjY1g/UngS2F4vxu0qLr5yQ19G+nsxVBFfwmNkIlwiDuhLxJsIJUFWFrXfBk+P Vdqgjmf7zgJu9UY172DUajSSv0OZi6/ARA/o6fZQuidJFq8PmkQf1ZVfNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJY+BIBPW0vrQNuJybhcZKWGcFOlMB8GA1UdIwQY MBaAFDJm6Mpw5MFxigmARTj55GCzBfmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTW1ib3luRGt3WEdLQ1lCRk9QbmtZTE1GLWJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8zZDRlMDQtOTNkNC00ZjVhLThkY2Qt MzMyZjM0NTg4MzY1LzEvTW1ib3luRGt3WEdLQ1lCRk9QbmtZTE1GLWJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC8zZDRlMDQtOTNkNC00ZjVhLThkY2QtMzMyZjM0NTg4MzY1 LzEvTW1ib3luRGt3WEdLQ1lCRk9QbmtZTE1GLWJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWcBm1YQf zh4q9m2vIl1dPXuNqn/Lwy6rScEDRyVQkzvvMpIUxmTF7SyhuV3v9Uh6ynp8jQ6Z y3a7HUb9kgDmtfDxwbsINy1l1ovtDKMNYHMEjH4WsqhUpYtCNSzqP6/fWd1fc9ut wIPY0PGzKcnqcg8Cu5LL2qTM5aJkaFqmf+natBtJHxxAEyspnLloS76mttSyz9q0 Cd830v/DgnCGOsKhAkWcYyd9fXvtAbW+sWtkU1uQcOZcfkE1e7VuToqtlLMTIIaR nISGrdbSm0/vowrIVTaX2vuNdAdwbocL7UG2awYaTsHkZobQ8J+pPQ/eCQqxdrHI D0h95nKAEyHMBg== -----END CERTIFICATE-----Generated at Sun Dec 21 08:40:01 2025 by rpki-client