This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.mft File: mKmHxs0KNvlNvvEO8qLGYCCpVhE.mft (raw, json) Hash identifier: ioB4Dm6Ai8oPxclt33HhUckIAmF0GqNw6WOJ7pGAQy0= Subject key identifier: 75:A4:BA:53:EF:AC:DB:7F:1D:7B:9C:3C:7C:5E:FF:3D:51:29:14:6B Authority key identifier: 98:A9:87:C6:CD:0A:36:F9:4D:BE:F1:0E:F2:A2:C6:60:20:A9:56:11 Certificate issuer: /CN=98a987c6cd0a36f94dbef10ef2a2c66020a95611 Certificate serial: 019B4625DA48CFCC9DE62E59488165F3CDA5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mKmHxs0KNvlNvvEO8qLGYCCpVhE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.mft Manifest number: 1321 Signing time: Mon 22 Dec 2025 13:00:44 +0000 Manifest this update: Mon 22 Dec 2025 13:00:44 +0000 Manifest next update: Tue 23 Dec 2025 13:00:44 +0000 Files and hashes: 1: KkXU6YkVywPte3FQKPTwmXq43Jw.roa (hash: +grv15uxretevWYIDb50yFoisYnL85l43pH++WpX3xI=) 2: mKmHxs0KNvlNvvEO8qLGYCCpVhE.crl (hash: tMixFhD5seRS5JKFoIJRMuuQo3hgx3u/JPoUdEBXq0Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.mft rsync://rpki.ripe.net/repository/DEFAULT/mKmHxs0KNvlNvvEO8qLGYCCpVhE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 10:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:25:da:48:cf:cc:9d:e6:2e:59:48:81:65:f3:cd:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98a987c6cd0a36f94dbef10ef2a2c66020a95611 Validity Not Before: Dec 22 13:00:44 2025 GMT Not After : Dec 23 13:00:44 2025 GMT Subject: CN=75a4ba53efacdb7f1d7b9c3c7c5eff3d5129146b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b9:ea:64:8c:1f:02:e8:4f:3f:b5:e5:fd:a5: 33:b4:ff:71:0a:92:00:e8:61:05:1e:bd:57:21:e7: ea:1b:44:fc:8a:da:d2:bc:a6:57:b8:89:51:0d:6b: 87:d5:7e:10:a9:30:5a:d9:69:63:de:2a:ec:d9:27: c7:30:33:e0:24:d1:b8:d7:1d:4d:12:96:8e:d9:52: 45:f4:b5:74:ed:e3:23:29:74:00:db:84:a3:8d:6c: 30:f4:11:27:c7:b2:17:d7:18:5e:9a:3e:21:86:57: a9:a9:e9:9b:47:76:ec:61:ad:21:8c:8d:59:98:b3: 94:55:13:17:e1:70:3f:67:02:a0:42:51:d1:f4:3a: 4c:46:fa:ad:19:0e:0c:88:62:14:87:1f:74:66:7c: 36:03:00:20:4e:4a:bd:b6:ee:02:c8:ae:0b:7a:18: e8:aa:3d:94:60:f0:2c:f9:87:db:7d:bb:28:d4:50: 91:00:7f:92:49:4e:12:25:91:30:42:82:aa:6f:47: 2d:0e:91:b6:cc:e5:48:12:85:d2:38:fa:59:a3:cc: 1b:d7:be:36:cc:1e:d5:59:f5:03:28:d9:6e:4c:ba: 4e:35:d1:4b:dd:d8:cd:23:80:f1:c3:ac:ed:ff:75: 65:47:63:42:46:89:62:7f:76:79:2f:0d:e2:28:d9: af:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:A4:BA:53:EF:AC:DB:7F:1D:7B:9C:3C:7C:5E:FF:3D:51:29:14:6B X509v3 Authority Key Identifier: keyid:98:A9:87:C6:CD:0A:36:F9:4D:BE:F1:0E:F2:A2:C6:60:20:A9:56:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mKmHxs0KNvlNvvEO8qLGYCCpVhE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:6e:b9:57:0a:65:0e:82:0c:21:50:64:ce:98:20:0c:f4:1c: 5a:d0:87:57:4b:31:68:56:09:22:88:ab:44:34:01:a8:44:ea: cf:18:38:30:60:14:20:93:8c:8e:4f:db:1a:2a:33:cb:50:68: e5:25:8a:fe:2e:d3:26:0a:20:83:7e:0f:5b:dc:64:9e:11:43: 62:9d:1c:69:20:63:87:2f:fd:40:4c:56:5d:da:c0:49:a9:26: e6:5d:88:14:b3:09:74:af:22:1b:11:12:25:43:ff:8a:42:eb: 08:fa:0d:45:13:08:30:8b:f0:1e:05:ac:00:0a:13:79:5c:2e: 5c:2e:09:03:8b:72:d4:06:f9:32:c5:1e:23:a2:52:17:66:c6: 27:06:bd:64:55:80:ce:21:46:44:35:68:68:29:6b:58:60:22: 5f:4d:56:e4:9e:30:78:f9:bc:bc:51:34:a3:8e:4c:1a:ac:cf: 8d:a2:10:51:70:fc:bd:7a:b0:ff:48:cb:4a:8b:9f:d6:3b:8f: 4a:fb:58:ed:77:a6:68:c9:62:8c:a3:cf:ec:79:0a:0b:5a:d1: d2:59:62:0b:8c:be:f7:5f:c9:c7:be:40:8f:04:c2:50:74:3c: 8c:66:f0:e2:f8:4f:e1:9a:82:17:ff:d7:75:45:0f:62:f8:5f: ca:73:43:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGJdpIz8yd5i5ZSIFl882lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4YTk4N2M2Y2QwYTM2Zjk0ZGJlZjEwZWYyYTJjNjYwMjBh OTU2MTEwHhcNMjUxMjIyMTMwMDQ0WhcNMjUxMjIzMTMwMDQ0WjAzMTEwLwYDVQQD Eyg3NWE0YmE1M2VmYWNkYjdmMWQ3YjljM2M3YzVlZmYzZDUxMjkxNDZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobnqZIwfAuhPP7Xl/aUztP9xCpIA 6GEFHr1XIefqG0T8itrSvKZXuIlRDWuH1X4QqTBa2Wlj3irs2SfHMDPgJNG41x1N EpaO2VJF9LV07eMjKXQA24SjjWww9BEnx7IX1xhemj4hhlepqembR3bsYa0hjI1Z mLOUVRMX4XA/ZwKgQlHR9DpMRvqtGQ4MiGIUhx90Znw2AwAgTkq9tu4CyK4Lehjo qj2UYPAs+Yfbfbso1FCRAH+SSU4SJZEwQoKqb0ctDpG2zOVIEoXSOPpZo8wb1742 zB7VWfUDKNluTLpONdFL3djNI4Dxw6zt/3VlR2NCRolif3Z5Lw3iKNmvWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHWkulPvrNt/HXucPHxe/z1RKRRrMB8GA1UdIwQY MBaAFJiph8bNCjb5Tb7xDvKixmAgqVYRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUttSHhzMEtOdmxOdnZFTzhxTEdZQ0NwVmhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9hYjgzMDctNWY5Yy00OWM2LThhMGIt ZjNiNDU4MTlmMmIwLzEvbUttSHhzMEtOdmxOdnZFTzhxTEdZQ0NwVmhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS9hYjgzMDctNWY5Yy00OWM2LThhMGItZjNiNDU4MTlmMmIw LzEvbUttSHhzMEtOdmxOdnZFTzhxTEdZQ0NwVmhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQG65Vwpl DoIMIVBkzpggDPQcWtCHV0sxaFYJIoirRDQBqETqzxg4MGAUIJOMjk/bGiozy1Bo 5SWK/i7TJgogg34PW9xknhFDYp0caSBjhy/9QExWXdrASakm5l2IFLMJdK8iGxES JUP/ikLrCPoNRRMIMIvwHgWsAAoTeVwuXC4JA4ty1Ab5MsUeI6JSF2bGJwa9ZFWA ziFGRDVoaClrWGAiX01W5J4wePm8vFE0o45MGqzPjaIQUXD8vXqw/0jLSouf1juP SvtY7XemaMlijKPP7HkKC1rR0lliC4y+91/Jx75AjwTCUHQ8jGbw4vhP4ZqCF//X dUUPYvhfynNDMQ== -----END CERTIFICATE-----Generated at Mon Dec 22 15:40:35 2025 by rpki-client