This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.mft File: MKNPnR29IKqH-w9ivStsXjDGFKI.mft (raw, json) Hash identifier: 13P/LDYCDo9gUI+WbhPTrSaNY6jG9LxJ3X2KV59C0vQ= Subject key identifier: 0E:7F:8A:06:3F:92:0D:8D:9A:77:CE:11:28:20:BB:12:7A:45:D6:27 Authority key identifier: 30:A3:4F:9D:1D:BD:20:AA:87:FB:0F:62:BD:2B:6C:5E:30:C6:14:A2 Certificate issuer: /CN=30a34f9d1dbd20aa87fb0f62bd2b6c5e30c614a2 Certificate serial: 019AF653DC9E399E6DC983F49C468BE75E35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MKNPnR29IKqH-w9ivStsXjDGFKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.mft Manifest number: 0819 Signing time: Sun 07 Dec 2025 01:01:22 +0000 Manifest this update: Sun 07 Dec 2025 01:01:22 +0000 Manifest next update: Mon 08 Dec 2025 01:01:22 +0000 Files and hashes: 1: HwsAcAwNO9JxJWLCv2jrj68hfnA.roa (hash: 0sMtghO8XAE5AkvpZg4vPQp/pLiIiuagLK53j4z/s5k=) 2: MKNPnR29IKqH-w9ivStsXjDGFKI.crl (hash: UUtjEDoV2gUCZ5KUxI/BgHNxw2Fn7UJsi2azQ1iYKJY=) 3: UwwvQBBO6j_9pYHYLHx-7usc0Bw.roa (hash: C7nkcdmQSHS7lgQHz28p2qZkreR4v70DdZOITk/le4g=) 4: pHa9pNSqhegXl-F2Rnj5qm1kKYY.roa (hash: NaSVWzADFkveB7jFn1yrCHIkaQHOjYyq2bcymguUkY8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.mft rsync://rpki.ripe.net/repository/DEFAULT/MKNPnR29IKqH-w9ivStsXjDGFKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:53:dc:9e:39:9e:6d:c9:83:f4:9c:46:8b:e7:5e:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30a34f9d1dbd20aa87fb0f62bd2b6c5e30c614a2 Validity Not Before: Dec 7 01:01:22 2025 GMT Not After : Dec 8 01:01:22 2025 GMT Subject: CN=0e7f8a063f920d8d9a77ce112820bb127a45d627 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:51:d5:62:02:72:cf:cf:d2:b0:9d:8e:27:d0: f1:4f:ba:da:9c:c5:04:5b:64:a6:a6:cf:76:df:d7: 77:0c:fc:f7:38:de:5a:ea:39:3d:e4:09:56:58:92: 44:08:a3:68:e0:f4:95:29:62:58:c5:28:c5:c5:29: e2:94:bb:20:1a:cf:95:ec:b7:97:53:2f:6a:05:fa: 8d:fd:12:16:97:ac:14:4b:93:a2:a9:3e:f3:2d:bc: 7f:e8:ff:eb:5d:65:60:fd:a9:af:54:0c:9f:a0:a1: e6:08:2e:d5:32:17:d5:9d:25:78:dd:a9:75:ef:f3: ff:01:fb:35:e4:e5:0e:28:fd:33:3e:3c:a0:08:7e: e1:60:89:fa:07:7c:9a:9e:77:a0:a0:31:f8:f5:55: 8a:a7:db:4d:6c:e4:bb:a7:24:d8:78:7e:e5:34:32: f0:ee:54:66:2f:b4:f5:fc:00:ef:85:5b:b6:7e:0b: c7:7d:9c:7f:6e:46:21:93:5a:68:a6:92:62:18:83: 9d:03:90:63:13:77:a7:e9:ba:ce:aa:22:f3:61:27: ff:19:08:f4:c9:8e:d9:ec:4d:11:1d:89:0a:d9:43: 8d:3b:f1:9b:93:12:2c:06:dd:1d:a4:83:29:66:4b: 4c:95:f9:e3:65:fb:8b:7f:84:b4:60:84:b7:98:4d: 7d:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:7F:8A:06:3F:92:0D:8D:9A:77:CE:11:28:20:BB:12:7A:45:D6:27 X509v3 Authority Key Identifier: keyid:30:A3:4F:9D:1D:BD:20:AA:87:FB:0F:62:BD:2B:6C:5E:30:C6:14:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKNPnR29IKqH-w9ivStsXjDGFKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:2e:8f:fd:07:aa:6a:53:86:c6:ce:1e:da:7c:1d:ad:30:ce: 88:a1:c3:24:41:74:42:ac:79:09:93:7a:09:e4:08:05:8b:26: 81:68:dc:5e:5d:0c:e2:8c:82:f5:e7:5f:87:f9:c2:94:62:73: 13:ef:2f:c9:1e:a4:61:e7:41:32:04:4f:3d:9f:51:44:aa:94: c7:b5:4b:54:ea:ab:9b:28:70:cc:34:fb:88:66:e6:0f:84:e1: 84:48:29:33:e7:d0:23:b4:e6:14:f3:8f:7e:1a:19:9b:71:1b: ce:e1:2f:72:34:6c:48:a7:83:cd:cc:a0:93:dc:0e:a3:c5:17: 90:7b:5e:04:f8:25:84:34:fd:84:a9:4e:89:ab:07:5c:e0:b4: c8:2b:86:66:60:e0:53:f9:12:db:82:91:08:e4:69:a2:10:b2: 19:08:b5:43:a2:da:22:36:36:1f:39:e2:17:de:e7:bf:eb:67: 47:a7:5b:6f:a1:a6:fa:41:cb:7e:9c:66:91:13:b8:5f:71:1d: 2a:d6:cd:d2:ce:41:41:56:fd:fc:f6:97:25:e4:7b:51:7f:49: f9:3b:34:b9:3f:aa:77:42:b0:dd:28:72:a7:57:57:36:e3:c7: 36:ed:22:e9:03:66:b5:78:4f:dc:35:fb:9c:4c:cb:25:77:21: 44:b2:cc:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2U9yeOZ5tyYP0nEaL5141MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwYTM0ZjlkMWRiZDIwYWE4N2ZiMGY2MmJkMmI2YzVlMzBj NjE0YTIwHhcNMjUxMjA3MDEwMTIyWhcNMjUxMjA4MDEwMTIyWjAzMTEwLwYDVQQD EygwZTdmOGEwNjNmOTIwZDhkOWE3N2NlMTEyODIwYmIxMjdhNDVkNjI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3lHVYgJyz8/SsJ2OJ9DxT7ranMUE W2Smps9239d3DPz3ON5a6jk95AlWWJJECKNo4PSVKWJYxSjFxSnilLsgGs+V7LeX Uy9qBfqN/RIWl6wUS5OiqT7zLbx/6P/rXWVg/amvVAyfoKHmCC7VMhfVnSV43al1 7/P/Afs15OUOKP0zPjygCH7hYIn6B3yannegoDH49VWKp9tNbOS7pyTYeH7lNDLw 7lRmL7T1/ADvhVu2fgvHfZx/bkYhk1poppJiGIOdA5BjE3en6brOqiLzYSf/GQj0 yY7Z7E0RHYkK2UONO/GbkxIsBt0dpIMpZktMlfnjZfuLf4S0YIS3mE193wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA5/igY/kg2NmnfOESgguxJ6RdYnMB8GA1UdIwQY MBaAFDCjT50dvSCqh/sPYr0rbF4wxhSiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUtOUG5SMjlJS3FILXc5aXZTdHNYakRHRktJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9lZTQ3MzItYzNiYS00MDg4LWE1ZmEt ZWI2NTNkMzYyMmJiLzEvTUtOUG5SMjlJS3FILXc5aXZTdHNYakRHRktJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9lZTQ3MzItYzNiYS00MDg4LWE1ZmEtZWI2NTNkMzYyMmJi LzEvTUtOUG5SMjlJS3FILXc5aXZTdHNYakRHRktJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQi6P/Qeq alOGxs4e2nwdrTDOiKHDJEF0Qqx5CZN6CeQIBYsmgWjcXl0M4oyC9edfh/nClGJz E+8vyR6kYedBMgRPPZ9RRKqUx7VLVOqrmyhwzDT7iGbmD4ThhEgpM+fQI7TmFPOP fhoZm3EbzuEvcjRsSKeDzcygk9wOo8UXkHteBPglhDT9hKlOiasHXOC0yCuGZmDg U/kS24KRCORpohCyGQi1Q6LaIjY2HzniF97nv+tnR6dbb6Gm+kHLfpxmkRO4X3Ed KtbN0s5BQVb9/PaXJeR7UX9J+Ts0uT+qd0Kw3Shyp1dXNuPHNu0i6QNmtXhP3DX7 nEzLJXchRLLMZg== -----END CERTIFICATE-----Generated at Sun Dec 7 04:08:01 2025 by rpki-client