This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/d4b542-6392-43d0-a8c2-2cadcf6658ca/1/Mk73breQdOacczAs5MLgr0f0Uwc.mft File: Mk73breQdOacczAs5MLgr0f0Uwc.mft (raw, json) Hash identifier: hV3tLA+Lf7YSlbQzhpdA8zTH6N3S4VN/pJbXu3A4Nw8= Subject key identifier: FF:6A:9B:36:FA:E6:30:D7:E1:D7:AB:9B:BE:0F:09:EA:E4:64:A4:07 Authority key identifier: 32:4E:F7:6E:B7:90:74:E6:9C:73:30:2C:E4:C2:E0:AF:47:F4:53:07 Certificate issuer: /CN=324ef76eb79074e69c73302ce4c2e0af47f45307 Certificate serial: 019B6CC5E69CAB8DF433C7C0E0EAEEFB32AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mk73breQdOacczAs5MLgr0f0Uwc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/d4b542-6392-43d0-a8c2-2cadcf6658ca/1/Mk73breQdOacczAs5MLgr0f0Uwc.mft Manifest number: 05EA Signing time: Tue 30 Dec 2025 01:01:07 +0000 Manifest this update: Tue 30 Dec 2025 01:01:07 +0000 Manifest next update: Wed 31 Dec 2025 01:01:07 +0000 Files and hashes: 1: I9UkQ41YeX1efTDwQLbD_CMYPDQ.roa (hash: iSNpeYLJZVe6ucEI95ka4RakvFZqRgRE032Te/mBPRQ=) 2: Mk73breQdOacczAs5MLgr0f0Uwc.crl (hash: 0pIIYbt5V/b2+POJM9+p7dabFkIxw3Gr01yr0Kfrt50=) 3: x8qUgYPzT7g1nXs61F1j3vP06ZA.roa (hash: /RVMiuVCMeWyNuJCZhsV4JVmBiQgFuEHvbUPa8p74t4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/d4b542-6392-43d0-a8c2-2cadcf6658ca/1/Mk73breQdOacczAs5MLgr0f0Uwc.crl rsync://rpki.ripe.net/repository/DEFAULT/20/d4b542-6392-43d0-a8c2-2cadcf6658ca/1/Mk73breQdOacczAs5MLgr0f0Uwc.mft rsync://rpki.ripe.net/repository/DEFAULT/Mk73breQdOacczAs5MLgr0f0Uwc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 23:52:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6c:c5:e6:9c:ab:8d:f4:33:c7:c0:e0:ea:ee:fb:32:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=324ef76eb79074e69c73302ce4c2e0af47f45307 Validity Not Before: Dec 30 01:01:07 2025 GMT Not After : Dec 31 01:01:07 2025 GMT Subject: CN=ff6a9b36fae630d7e1d7ab9bbe0f09eae464a407 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:6b:29:81:e2:e7:88:3e:d1:5d:9a:f2:d5:38: 4a:57:f6:52:e1:41:11:02:88:a0:f6:c0:1c:a6:1b: 4e:6f:03:cf:08:46:0e:86:f9:e5:2b:01:9e:b6:33: 43:ed:25:81:1a:94:57:44:c8:34:e9:f2:73:f9:d2: 4e:40:cf:73:4b:eb:01:ab:0d:13:bd:7e:ce:f0:81: 78:6f:cc:01:35:06:41:51:53:f0:42:25:54:9c:9f: f9:9f:2e:df:74:4a:10:6d:73:2e:79:c7:33:76:ad: 85:27:72:4a:33:ab:0c:e3:97:43:5c:ce:35:6f:32: c7:3f:2b:12:68:30:b4:df:37:84:96:4a:be:f6:ab: a0:fb:e0:f7:91:31:dc:27:8f:07:2a:7c:1a:e4:53: 43:2a:d1:6c:1c:95:d1:d4:70:12:b4:57:6d:82:e3: c0:92:e5:74:1a:e4:86:22:cd:c9:dc:ff:db:5f:33: df:32:67:a4:9e:9a:db:c8:73:ca:33:ce:43:b2:19: a8:55:19:73:7b:1d:c7:b8:10:e0:ab:59:9f:21:5e: 02:21:12:ea:1c:7a:f0:9c:90:9f:85:79:9a:1f:ad: 35:be:3c:9b:c0:1e:2c:c7:df:b3:0b:c3:f1:44:1c: 43:12:4f:05:c1:8b:3b:6e:8f:4a:e7:56:9c:10:53: d0:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:6A:9B:36:FA:E6:30:D7:E1:D7:AB:9B:BE:0F:09:EA:E4:64:A4:07 X509v3 Authority Key Identifier: keyid:32:4E:F7:6E:B7:90:74:E6:9C:73:30:2C:E4:C2:E0:AF:47:F4:53:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mk73breQdOacczAs5MLgr0f0Uwc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/d4b542-6392-43d0-a8c2-2cadcf6658ca/1/Mk73breQdOacczAs5MLgr0f0Uwc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/d4b542-6392-43d0-a8c2-2cadcf6658ca/1/Mk73breQdOacczAs5MLgr0f0Uwc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:a1:4e:55:d1:a5:95:78:2e:66:11:c2:2d:09:c3:54:90:9e: fe:d0:df:88:af:cc:0c:af:33:4b:1d:a7:94:d6:85:07:0a:4a: 2c:da:03:63:27:16:36:60:c9:08:6b:b8:39:fd:5f:53:88:8d: da:b4:c7:be:cf:bb:84:c3:63:87:5a:60:3d:c4:ab:91:a1:0c: e6:31:5b:8e:6d:32:d5:4c:b7:82:1a:b7:88:71:a7:28:98:41: 00:b9:44:df:8f:55:ad:8a:bd:39:d6:8f:fb:b0:21:00:29:f4: 46:a1:f8:39:2a:d9:39:78:58:1d:42:8f:d9:1d:97:9e:8b:7d: e6:6d:0b:c3:e5:58:40:74:98:af:a0:cd:88:ad:3c:26:11:2c: e3:63:d1:f5:18:70:f9:a3:4c:8e:95:34:54:73:6c:9c:fc:f5: d8:30:4d:46:3a:f9:82:6a:d4:6f:0f:ba:84:bc:fe:39:3e:b3: 9c:b2:f0:33:0c:9f:bd:e2:70:de:ff:a5:01:6a:8f:d7:60:62: 39:5f:05:2e:9a:21:ea:8e:24:cb:66:f5:0c:5e:6e:fb:df:66: 36:ee:07:29:15:81:0d:07:06:8c:9c:ef:54:fd:4b:dc:a8:0c: 84:e2:c8:95:6f:9e:2a:36:18:49:11:89:40:ab:5f:b9:3d:a8: 18:5a:4a:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtsxeacq430M8fA4Oru+zKqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNGVmNzZlYjc5MDc0ZTY5YzczMzAyY2U0YzJlMGFmNDdm NDUzMDcwHhcNMjUxMjMwMDEwMTA3WhcNMjUxMjMxMDEwMTA3WjAzMTEwLwYDVQQD EyhmZjZhOWIzNmZhZTYzMGQ3ZTFkN2FiOWJiZTBmMDllYWU0NjRhNDA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmspgeLniD7RXZry1ThKV/ZS4UER Aoig9sAcphtObwPPCEYOhvnlKwGetjND7SWBGpRXRMg06fJz+dJOQM9zS+sBqw0T vX7O8IF4b8wBNQZBUVPwQiVUnJ/5ny7fdEoQbXMuecczdq2FJ3JKM6sM45dDXM41 bzLHPysSaDC03zeElkq+9qug++D3kTHcJ48HKnwa5FNDKtFsHJXR1HAStFdtguPA kuV0GuSGIs3J3P/bXzPfMmeknprbyHPKM85DshmoVRlzex3HuBDgq1mfIV4CIRLq HHrwnJCfhXmaH601vjybwB4sx9+zC8PxRBxDEk8FwYs7bo9K51acEFPQvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP9qmzb65jDX4derm74PCerkZKQHMB8GA1UdIwQY MBaAFDJO9263kHTmnHMwLOTC4K9H9FMHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWs3M2JyZVFkT2FjY3pBczVNTGdyMGYwVXdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9kNGI1NDItNjM5Mi00M2QwLWE4YzIt MmNhZGNmNjY1OGNhLzEvTWs3M2JyZVFkT2FjY3pBczVNTGdyMGYwVXdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC9kNGI1NDItNjM5Mi00M2QwLWE4YzItMmNhZGNmNjY1OGNh LzEvTWs3M2JyZVFkT2FjY3pBczVNTGdyMGYwVXdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEaFOVdGl lXguZhHCLQnDVJCe/tDfiK/MDK8zSx2nlNaFBwpKLNoDYycWNmDJCGu4Of1fU4iN 2rTHvs+7hMNjh1pgPcSrkaEM5jFbjm0y1Uy3ghq3iHGnKJhBALlE349VrYq9OdaP +7AhACn0RqH4OSrZOXhYHUKP2R2Xnot95m0Lw+VYQHSYr6DNiK08JhEs42PR9Rhw +aNMjpU0VHNsnPz12DBNRjr5gmrUbw+6hLz+OT6znLLwMwyfveJw3v+lAWqP12Bi OV8FLpoh6o4ky2b1DF5u+99mNu4HKRWBDQcGjJzvVP1L3KgMhOLIlW+eKjYYSRGJ QKtfuT2oGFpKXQ== -----END CERTIFICATE-----Generated at Tue Dec 30 02:11:44 2025 by rpki-client