This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.mft File: MkZ5WtaKa63Vr8trpGU-nAkPyFo.mft (raw, json) Hash identifier: yNPN3ra126nI8mkutLLouuQnrpZlG+wAxfcWD9qHKPI= Subject key identifier: ED:0F:A8:0A:C5:C7:61:69:25:39:6F:DF:FE:9F:02:0D:B7:FB:E6:F3 Authority key identifier: 32:46:79:5A:D6:8A:6B:AD:D5:AF:CB:6B:A4:65:3E:9C:09:0F:C8:5A Certificate issuer: /CN=3246795ad68a6badd5afcb6ba4653e9c090fc85a Certificate serial: 019AF2AD7554D65086C1B5DF367C68554040 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MkZ5WtaKa63Vr8trpGU-nAkPyFo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.mft Manifest number: 1500 Signing time: Sat 06 Dec 2025 08:00:45 +0000 Manifest this update: Sat 06 Dec 2025 08:00:45 +0000 Manifest next update: Sun 07 Dec 2025 08:00:45 +0000 Files and hashes: 1: LZ8uAkntmN0c-t2Y6sQNZXRHvWc.roa (hash: pnKmEkhVyamHT8q5re1u8FHw0CqLvJSlSrJsXdTnczY=) 2: MkZ5WtaKa63Vr8trpGU-nAkPyFo.crl (hash: iGWz9rcROFShw1n9OA6sIwmB8FmJZcngKF6n3PK3CTQ=) 3: RB-1Fy5sD5ZVDFZv751PSyh3H9Q.roa (hash: mxQ53KQYRRHLBJuqI/DtJ482oAxxveSfP/pLhygbyl4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.mft rsync://rpki.ripe.net/repository/DEFAULT/MkZ5WtaKa63Vr8trpGU-nAkPyFo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:75:54:d6:50:86:c1:b5:df:36:7c:68:55:40:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3246795ad68a6badd5afcb6ba4653e9c090fc85a Validity Not Before: Dec 6 08:00:45 2025 GMT Not After : Dec 7 08:00:45 2025 GMT Subject: CN=ed0fa80ac5c7616925396fdffe9f020db7fbe6f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f7:60:59:2b:c6:cc:3d:0b:02:0b:9b:1c:b5: 5b:c2:22:a4:f5:64:8b:6a:8e:4a:91:fc:1b:fc:70: 27:6f:d3:fd:c8:7f:ca:ee:a7:48:c7:07:02:5b:7c: 85:06:55:ea:e9:46:f1:38:66:69:c5:92:35:dc:27: 00:0d:bf:08:8b:dd:89:ae:75:8b:8d:16:37:61:ce: fd:89:c5:67:c1:26:60:b5:45:34:79:a9:78:1b:dc: 42:e0:81:3e:c2:75:37:2a:29:1d:91:fa:26:a7:4b: 84:42:e4:45:b0:dd:49:9b:57:f6:71:50:e5:a7:e0: a6:9b:27:06:54:55:e8:78:6d:cd:e3:fe:42:37:93: e6:34:a1:4a:e6:8f:bc:29:b0:5f:9f:12:8e:26:64: e2:a1:95:c3:28:db:6d:aa:e6:ef:a7:37:17:dc:97: 54:4f:b5:de:82:1b:ae:03:4a:54:f1:56:f0:ba:b9: ba:71:09:51:df:bb:84:a9:88:c8:50:22:0a:40:af: 7f:83:fc:03:7f:e0:01:fc:5d:1e:cf:8d:45:9f:b5: 04:8e:11:67:1c:b4:33:53:d9:26:24:68:2e:a0:fd: 39:a7:99:bc:0e:aa:c6:20:30:7c:f9:ce:d2:12:fa: 38:a3:9a:26:2e:ac:61:06:96:bc:4d:cb:98:ae:b9: 0d:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:0F:A8:0A:C5:C7:61:69:25:39:6F:DF:FE:9F:02:0D:B7:FB:E6:F3 X509v3 Authority Key Identifier: keyid:32:46:79:5A:D6:8A:6B:AD:D5:AF:CB:6B:A4:65:3E:9C:09:0F:C8:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MkZ5WtaKa63Vr8trpGU-nAkPyFo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:cc:6e:95:86:dc:ac:7f:a5:5d:3f:f7:6b:c1:c6:c6:62:4a: d8:5d:e9:29:22:1f:73:8d:18:f3:fe:ef:5a:3c:ca:a6:6e:dc: e3:e7:9c:68:5f:64:f1:f4:63:50:ea:09:24:74:d8:f1:00:89: 95:64:5b:b4:e2:20:8c:a7:47:38:1b:bf:b0:26:cf:7d:7a:82: 06:77:dd:0a:be:51:74:cb:a8:8f:5e:b0:02:32:3d:5f:87:67: ce:3a:a9:ca:58:27:ab:09:02:1b:58:be:9e:90:ae:35:3c:8d: d9:6e:ff:dd:e2:36:d6:7b:26:29:4b:a5:50:cf:ff:80:55:b2: 33:1c:50:fa:4c:f5:1c:6a:1c:39:c6:d7:3f:2a:f6:77:11:bc: 0e:28:58:9c:7e:c7:0e:ac:97:af:e2:84:74:27:8a:39:42:b4: 8b:81:48:e2:7d:fd:1b:28:00:29:bd:3b:f7:ea:73:2a:87:ae: be:f5:3f:43:19:5f:f6:22:d7:f8:37:8d:b4:27:5f:b7:81:fc: d4:f2:b4:0d:3e:ad:b0:ae:c2:cd:ab:8d:93:89:51:b9:c0:0d: b0:0a:f9:3c:ed:5c:b2:9c:8d:77:aa:90:b6:6c:ea:1f:05:2d: d6:46:ae:56:89:26:ea:c6:0c:f4:5c:76:4e:a5:4c:3e:f2:aa: 44:ea:0f:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrXVU1lCGwbXfNnxoVUBAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNDY3OTVhZDY4YTZiYWRkNWFmY2I2YmE0NjUzZTljMDkw ZmM4NWEwHhcNMjUxMjA2MDgwMDQ1WhcNMjUxMjA3MDgwMDQ1WjAzMTEwLwYDVQQD EyhlZDBmYTgwYWM1Yzc2MTY5MjUzOTZmZGZmZTlmMDIwZGI3ZmJlNmYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0fdgWSvGzD0LAgubHLVbwiKk9WSL ao5Kkfwb/HAnb9P9yH/K7qdIxwcCW3yFBlXq6UbxOGZpxZI13CcADb8Ii92JrnWL jRY3Yc79icVnwSZgtUU0eal4G9xC4IE+wnU3Kikdkfomp0uEQuRFsN1Jm1f2cVDl p+CmmycGVFXoeG3N4/5CN5PmNKFK5o+8KbBfnxKOJmTioZXDKNttqubvpzcX3JdU T7XeghuuA0pU8Vbwurm6cQlR37uEqYjIUCIKQK9/g/wDf+AB/F0ez41Fn7UEjhFn HLQzU9kmJGguoP05p5m8DqrGIDB8+c7SEvo4o5omLqxhBpa8TcuYrrkNLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO0PqArFx2FpJTlv3/6fAg23++bzMB8GA1UdIwQY MBaAFDJGeVrWimut1a/La6RlPpwJD8haMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWtaNVd0YUthNjNWcjh0cnBHVS1uQWtQeUZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC85NDc5Y2EtM2RiNS00ZjYyLThlMjMt NzMwYjE3ZjA2OWFiLzEvTWtaNVd0YUthNjNWcjh0cnBHVS1uQWtQeUZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC85NDc5Y2EtM2RiNS00ZjYyLThlMjMtNzMwYjE3ZjA2OWFi LzEvTWtaNVd0YUthNjNWcjh0cnBHVS1uQWtQeUZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqMxulYbc rH+lXT/3a8HGxmJK2F3pKSIfc40Y8/7vWjzKpm7c4+ecaF9k8fRjUOoJJHTY8QCJ lWRbtOIgjKdHOBu/sCbPfXqCBnfdCr5RdMuoj16wAjI9X4dnzjqpylgnqwkCG1i+ npCuNTyN2W7/3eI21nsmKUulUM//gFWyMxxQ+kz1HGocOcbXPyr2dxG8DihYnH7H DqyXr+KEdCeKOUK0i4FI4n39GygAKb079+pzKoeuvvU/Qxlf9iLX+DeNtCdft4H8 1PK0DT6tsK7CzauNk4lRucANsAr5PO1cspyNd6qQtmzqHwUt1kauVokm6sYM9Fx2 TqVMPvKqROoP9Q== -----END CERTIFICATE-----Generated at Sat Dec 6 14:04:43 2025 by rpki-client