This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/9aff54-5971-402f-ab69-a419670d17e1/1/MKqwK2VOkVytyjOSkuKMFcR9-Fg.mft File: MKqwK2VOkVytyjOSkuKMFcR9-Fg.mft (raw, json) Hash identifier: jFGut8lcoYfQn5fESvKerh23HSEieUdsgSIl1Lfse9o= Subject key identifier: 48:20:22:DE:77:B9:66:74:8E:32:68:E3:17:FC:47:9F:17:36:B5:A2 Authority key identifier: 30:AA:B0:2B:65:4E:91:5C:AD:CA:33:92:92:E2:8C:15:C4:7D:F8:58 Certificate issuer: /CN=30aab02b654e915cadca339292e28c15c47df858 Certificate serial: 019AF38993127577FDC90A3C0558E4C65B1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MKqwK2VOkVytyjOSkuKMFcR9-Fg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/9aff54-5971-402f-ab69-a419670d17e1/1/MKqwK2VOkVytyjOSkuKMFcR9-Fg.mft Manifest number: 05C4 Signing time: Sat 06 Dec 2025 12:01:10 +0000 Manifest this update: Sat 06 Dec 2025 12:01:10 +0000 Manifest next update: Sun 07 Dec 2025 12:01:10 +0000 Files and hashes: 1: MKqwK2VOkVytyjOSkuKMFcR9-Fg.crl (hash: nVmV614Iqe3+TDB0E3oi4ujYs+gXO4BGOjRve7DHLDg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/9aff54-5971-402f-ab69-a419670d17e1/1/MKqwK2VOkVytyjOSkuKMFcR9-Fg.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/9aff54-5971-402f-ab69-a419670d17e1/1/MKqwK2VOkVytyjOSkuKMFcR9-Fg.mft rsync://rpki.ripe.net/repository/DEFAULT/MKqwK2VOkVytyjOSkuKMFcR9-Fg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:93:12:75:77:fd:c9:0a:3c:05:58:e4:c6:5b:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30aab02b654e915cadca339292e28c15c47df858 Validity Not Before: Dec 6 12:01:10 2025 GMT Not After : Dec 7 12:01:10 2025 GMT Subject: CN=482022de77b966748e3268e317fc479f1736b5a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:5b:5f:47:57:94:3e:5b:4c:c8:55:25:95:07: 71:a2:43:3c:2b:65:41:33:83:38:ff:48:31:f6:ae: 5c:da:8e:66:dc:16:1f:9b:65:4c:b6:e4:c8:f7:de: 11:68:37:b1:66:0d:db:1d:df:e2:ba:45:be:71:30: c8:d9:57:df:93:96:83:c5:80:68:4e:51:c0:79:63: b2:e9:58:b8:32:5f:23:50:9d:bb:4d:d0:88:d2:fa: 24:cb:e3:28:6f:1d:21:dc:e1:b2:d9:e5:46:84:4e: c3:ec:e7:31:19:f0:e2:39:e3:7d:80:31:c5:b4:14: 7a:9c:b1:2e:b0:63:d2:85:71:e8:ac:05:1d:a7:dd: b9:fa:04:bb:d5:3f:2b:8a:ba:0a:22:0f:d2:7b:9a: 8b:37:65:e8:cc:5e:7b:30:6c:52:44:eb:3f:58:92: 7c:b5:68:03:44:13:69:ad:11:3e:62:4d:5f:27:96: 1f:82:a4:37:dd:52:e4:e1:18:93:d6:8f:a2:fd:b2: 40:42:0b:9e:58:a4:3e:db:f2:1a:5b:1f:3b:20:1f: 17:a7:e3:55:b4:fb:b9:13:9b:ae:b5:a2:c8:e9:29: de:bf:9d:d3:ce:35:bf:7e:29:42:d5:89:fb:0c:a9: 37:b4:7f:70:86:40:8f:92:00:2e:a6:c9:e2:3d:e3: 0b:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:20:22:DE:77:B9:66:74:8E:32:68:E3:17:FC:47:9F:17:36:B5:A2 X509v3 Authority Key Identifier: keyid:30:AA:B0:2B:65:4E:91:5C:AD:CA:33:92:92:E2:8C:15:C4:7D:F8:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKqwK2VOkVytyjOSkuKMFcR9-Fg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/9aff54-5971-402f-ab69-a419670d17e1/1/MKqwK2VOkVytyjOSkuKMFcR9-Fg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/9aff54-5971-402f-ab69-a419670d17e1/1/MKqwK2VOkVytyjOSkuKMFcR9-Fg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:1c:1d:f9:d3:3c:9a:a3:61:a5:0a:4e:89:5b:be:69:4f:2e: a4:1f:65:3a:41:6a:89:91:2a:6c:5c:5f:8d:d5:4c:3e:e6:c8: 72:4e:87:78:9c:bf:0e:c5:b8:f7:39:5e:24:eb:7e:b9:d8:4f: b9:03:47:8f:df:34:94:fa:00:12:3f:e1:cd:41:49:ac:92:76: 9f:fd:b4:10:5b:71:8d:0b:05:ea:43:f2:be:1b:b8:58:7f:61: eb:52:47:b3:ee:c6:9c:0e:f3:08:5f:bd:7d:5b:62:da:c7:02: e5:cf:29:fd:16:02:3b:1a:df:1e:41:46:56:dc:f5:33:04:8c: d4:38:99:f3:05:ae:52:91:6f:50:57:36:68:e0:de:14:26:aa: a5:8a:73:91:29:ee:2e:da:67:5d:1d:7f:cc:57:5e:14:33:90: 04:c2:a8:23:6c:eb:7d:2f:1c:73:10:dc:63:00:84:b9:76:02: fc:8f:cf:09:29:c5:0a:1c:82:c9:53:c9:cf:62:df:b9:b1:e0: a7:d2:88:77:5a:d9:19:ee:47:8c:ea:4c:83:d6:4f:b4:fe:1f: 72:c7:ef:89:da:ca:b3:9c:f3:b8:a6:36:f4:f6:8a:08:95:25: 6e:4b:fa:9d:c2:c2:0b:40:54:2f:e5:34:9e:b5:6f:72:d5:e4: 60:4f:6b:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziZMSdXf9yQo8BVjkxlsfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwYWFiMDJiNjU0ZTkxNWNhZGNhMzM5MjkyZTI4YzE1YzQ3 ZGY4NTgwHhcNMjUxMjA2MTIwMTEwWhcNMjUxMjA3MTIwMTEwWjAzMTEwLwYDVQQD Eyg0ODIwMjJkZTc3Yjk2Njc0OGUzMjY4ZTMxN2ZjNDc5ZjE3MzZiNWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFtfR1eUPltMyFUllQdxokM8K2VB M4M4/0gx9q5c2o5m3BYfm2VMtuTI994RaDexZg3bHd/iukW+cTDI2Vffk5aDxYBo TlHAeWOy6Vi4Ml8jUJ27TdCI0voky+Mobx0h3OGy2eVGhE7D7OcxGfDiOeN9gDHF tBR6nLEusGPShXHorAUdp925+gS71T8riroKIg/Se5qLN2XozF57MGxSROs/WJJ8 tWgDRBNprRE+Yk1fJ5YfgqQ33VLk4RiT1o+i/bJAQgueWKQ+2/IaWx87IB8Xp+NV tPu5E5uutaLI6Snev53TzjW/filC1Yn7DKk3tH9whkCPkgAupsniPeMLzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEggIt53uWZ0jjJo4xf8R58XNrWiMB8GA1UdIwQY MBaAFDCqsCtlTpFcrcozkpLijBXEffhYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUtxd0syVk9rVnl0eWpPU2t1S01GY1I5LUZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS85YWZmNTQtNTk3MS00MDJmLWFiNjkt YTQxOTY3MGQxN2UxLzEvTUtxd0syVk9rVnl0eWpPU2t1S01GY1I5LUZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS85YWZmNTQtNTk3MS00MDJmLWFiNjktYTQxOTY3MGQxN2Ux LzEvTUtxd0syVk9rVnl0eWpPU2t1S01GY1I5LUZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWxwd+dM8 mqNhpQpOiVu+aU8upB9lOkFqiZEqbFxfjdVMPubIck6HeJy/DsW49zleJOt+udhP uQNHj980lPoAEj/hzUFJrJJ2n/20EFtxjQsF6kPyvhu4WH9h61JHs+7GnA7zCF+9 fVti2scC5c8p/RYCOxrfHkFGVtz1MwSM1DiZ8wWuUpFvUFc2aODeFCaqpYpzkSnu LtpnXR1/zFdeFDOQBMKoI2zrfS8ccxDcYwCEuXYC/I/PCSnFChyCyVPJz2LfubHg p9KId1rZGe5HjOpMg9ZPtP4fcsfvidrKs5zzuKY29PaKCJUlbkv6ncLCC0BUL+U0 nrVvctXkYE9rzg== -----END CERTIFICATE-----Generated at Sat Dec 6 19:41:54 2025 by rpki-client