This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.mft File: MkZ5WtaKa63Vr8trpGU-nAkPyFo.mft (raw, json) Hash identifier: PuBoarQPfmklNtqVFWKj1maEcix8cl+18SGARvH4iO0= Subject key identifier: 29:90:D8:2C:FD:AB:3C:CF:89:0B:87:67:57:A1:CB:F1:32:EC:69:F8 Authority key identifier: 32:46:79:5A:D6:8A:6B:AD:D5:AF:CB:6B:A4:65:3E:9C:09:0F:C8:5A Certificate issuer: /CN=3246795ad68a6badd5afcb6ba4653e9c090fc85a Certificate serial: 019B307A3AB38E8617D791C757DB9DA85AAD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MkZ5WtaKa63Vr8trpGU-nAkPyFo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.mft Manifest number: 1520 Signing time: Thu 18 Dec 2025 08:01:15 +0000 Manifest this update: Thu 18 Dec 2025 08:01:15 +0000 Manifest next update: Fri 19 Dec 2025 08:01:15 +0000 Files and hashes: 1: LZ8uAkntmN0c-t2Y6sQNZXRHvWc.roa (hash: pnKmEkhVyamHT8q5re1u8FHw0CqLvJSlSrJsXdTnczY=) 2: MkZ5WtaKa63Vr8trpGU-nAkPyFo.crl (hash: 3JYNamD+v1IKRiFBPBDqX7EsfrCoaS1S4qeY2x1G0Aw=) 3: RB-1Fy5sD5ZVDFZv751PSyh3H9Q.roa (hash: mxQ53KQYRRHLBJuqI/DtJ482oAxxveSfP/pLhygbyl4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.mft rsync://rpki.ripe.net/repository/DEFAULT/MkZ5WtaKa63Vr8trpGU-nAkPyFo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:7a:3a:b3:8e:86:17:d7:91:c7:57:db:9d:a8:5a:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3246795ad68a6badd5afcb6ba4653e9c090fc85a Validity Not Before: Dec 18 08:01:15 2025 GMT Not After : Dec 19 08:01:15 2025 GMT Subject: CN=2990d82cfdab3ccf890b876757a1cbf132ec69f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:6a:a8:6d:41:37:37:19:dc:a2:07:72:c7:6c: e8:90:fc:9c:38:f3:d2:02:98:0d:97:9c:96:b8:0d: 2f:3d:7c:8a:b6:22:b5:f2:f7:ab:4c:ee:e6:d8:7c: e4:36:1e:44:ff:be:ca:ed:7e:2c:5a:0f:38:45:ea: 5f:56:c5:50:c5:90:b2:36:38:ed:8a:9f:a9:24:c6: 39:f6:9f:9e:f0:a7:28:40:28:89:24:c6:ce:66:21: c5:04:9d:b8:34:f9:54:b2:63:ab:71:cf:19:03:d1: 42:40:c4:e6:f2:ba:47:74:9a:16:97:bc:84:b1:f9: 41:2f:a7:47:63:28:da:50:f0:94:b1:42:82:e1:c4: ab:5e:49:25:1b:71:ad:b2:9e:26:0e:cb:b7:14:e0: 9a:b7:a9:69:21:e3:ff:df:f9:ee:d5:5e:da:33:66: b5:a0:aa:95:07:7d:f5:ad:41:bc:bf:2d:9f:25:bf: 88:4a:03:9c:4c:9c:32:88:6c:d2:3c:64:b3:24:c7: 7c:41:5e:0c:fc:1b:05:3a:fc:46:5a:48:71:db:12: 70:48:8b:ca:11:46:03:a0:1c:d9:a9:11:a3:bc:b1: de:0e:34:98:f0:5d:a2:40:47:26:4f:1c:90:c1:16: 21:86:49:34:ff:44:53:8c:d6:9b:2c:6d:2d:bd:13: 21:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:90:D8:2C:FD:AB:3C:CF:89:0B:87:67:57:A1:CB:F1:32:EC:69:F8 X509v3 Authority Key Identifier: keyid:32:46:79:5A:D6:8A:6B:AD:D5:AF:CB:6B:A4:65:3E:9C:09:0F:C8:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MkZ5WtaKa63Vr8trpGU-nAkPyFo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:f9:29:43:34:34:e1:36:fd:05:d4:dd:c3:eb:c5:a5:46:38: c5:cc:7e:b4:ef:b8:35:30:a4:7d:df:de:17:d3:30:87:f2:ad: ce:59:c4:98:e2:b9:9a:8e:8e:04:63:d5:07:46:d7:8b:6a:03: a4:22:26:a5:b6:66:c8:b7:e4:8c:49:6b:c2:9b:13:1f:39:52: ca:7e:a3:a9:2b:af:d0:02:20:9e:82:87:9e:b0:9e:77:af:39: 93:72:ab:6a:32:d2:e9:64:a0:06:41:56:51:2b:83:a3:f5:68: e0:ba:f6:77:35:a4:52:66:83:67:d1:1a:79:1e:1c:0c:5b:3f: e7:23:04:70:17:04:b0:41:6a:b7:76:11:32:b6:7c:8e:1d:01: 62:20:aa:0d:bf:5b:70:fd:4c:3e:f4:f5:de:48:44:33:cf:94: be:cb:33:b0:db:17:d7:2d:46:20:21:38:c4:08:c1:c1:b3:b7: 2e:d3:71:31:20:f3:36:35:cc:ec:99:34:6d:f2:a3:11:a5:cb: 72:c6:e7:da:b4:a1:09:7b:e7:99:48:7c:8e:bf:1e:40:15:26: 33:cb:ba:ff:2e:ee:90:7f:34:e7:c0:5d:34:33:49:b0:0b:bd: c2:29:c0:19:da:15:b7:36:1a:ea:95:9e:f3:70:2d:1d:ba:c5: a9:ab:c1:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZswejqzjoYX15HHV9udqFqtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNDY3OTVhZDY4YTZiYWRkNWFmY2I2YmE0NjUzZTljMDkw ZmM4NWEwHhcNMjUxMjE4MDgwMTE1WhcNMjUxMjE5MDgwMTE1WjAzMTEwLwYDVQQD EygyOTkwZDgyY2ZkYWIzY2NmODkwYjg3Njc1N2ExY2JmMTMyZWM2OWY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2qobUE3Nxncogdyx2zokPycOPPS ApgNl5yWuA0vPXyKtiK18verTO7m2HzkNh5E/77K7X4sWg84RepfVsVQxZCyNjjt ip+pJMY59p+e8KcoQCiJJMbOZiHFBJ24NPlUsmOrcc8ZA9FCQMTm8rpHdJoWl7yE sflBL6dHYyjaUPCUsUKC4cSrXkklG3Gtsp4mDsu3FOCat6lpIeP/3/nu1V7aM2a1 oKqVB331rUG8vy2fJb+ISgOcTJwyiGzSPGSzJMd8QV4M/BsFOvxGWkhx2xJwSIvK EUYDoBzZqRGjvLHeDjSY8F2iQEcmTxyQwRYhhkk0/0RTjNabLG0tvRMhkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCmQ2Cz9qzzPiQuHZ1ehy/Ey7Gn4MB8GA1UdIwQY MBaAFDJGeVrWimut1a/La6RlPpwJD8haMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWtaNVd0YUthNjNWcjh0cnBHVS1uQWtQeUZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC85NDc5Y2EtM2RiNS00ZjYyLThlMjMt NzMwYjE3ZjA2OWFiLzEvTWtaNVd0YUthNjNWcjh0cnBHVS1uQWtQeUZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC85NDc5Y2EtM2RiNS00ZjYyLThlMjMtNzMwYjE3ZjA2OWFi LzEvTWtaNVd0YUthNjNWcjh0cnBHVS1uQWtQeUZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbfkpQzQ0 4Tb9BdTdw+vFpUY4xcx+tO+4NTCkfd/eF9Mwh/KtzlnEmOK5mo6OBGPVB0bXi2oD pCImpbZmyLfkjElrwpsTHzlSyn6jqSuv0AIgnoKHnrCed685k3KrajLS6WSgBkFW USuDo/Vo4Lr2dzWkUmaDZ9EaeR4cDFs/5yMEcBcEsEFqt3YRMrZ8jh0BYiCqDb9b cP1MPvT13khEM8+UvsszsNsX1y1GICE4xAjBwbO3LtNxMSDzNjXM7Jk0bfKjEaXL csbn2rShCXvnmUh8jr8eQBUmM8u6/y7ukH8058BdNDNJsAu9winAGdoVtzYa6pWe 83AtHbrFqavBwA== -----END CERTIFICATE-----Generated at Thu Dec 18 09:58:45 2025 by rpki-client