This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/a8d38b-3176-4cc5-bb4f-c362d2a9e121/1/MklHwK7O_of525bltFvrEK65h6Y.mft File: MklHwK7O_of525bltFvrEK65h6Y.mft (raw, json) Hash identifier: TSpb2fZBAUlVUNaN3R5K96T2qShF0WD4OQvjcw3zx+A= Subject key identifier: 59:15:83:B1:13:05:45:79:A5:BC:64:27:75:4A:C3:DD:1D:FB:34:90 Authority key identifier: 32:49:47:C0:AE:CE:FE:87:F9:DB:96:E5:B4:5B:EB:10:AE:B9:87:A6 Certificate issuer: /CN=324947c0aecefe87f9db96e5b45beb10aeb987a6 Certificate serial: 019B552B17CA18C6A757187122E58B550770 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MklHwK7O_of525bltFvrEK65h6Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/a8d38b-3176-4cc5-bb4f-c362d2a9e121/1/MklHwK7O_of525bltFvrEK65h6Y.mft Manifest number: 0CA9 Signing time: Thu 25 Dec 2025 11:00:46 +0000 Manifest this update: Thu 25 Dec 2025 11:00:46 +0000 Manifest next update: Fri 26 Dec 2025 11:00:46 +0000 Files and hashes: 1: MklHwK7O_of525bltFvrEK65h6Y.crl (hash: i+N1rQn4cjjrVgPGvlff1cqzRit5lADuR2mi5MsotUk=) 2: TnUa9Ik5MIEZFyAPb51t3lEzTlw.roa (hash: VAA3uHujk9bmdBTaro78iFRxhf25M26lepAeKhwVT4w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/a8d38b-3176-4cc5-bb4f-c362d2a9e121/1/MklHwK7O_of525bltFvrEK65h6Y.crl rsync://rpki.ripe.net/repository/DEFAULT/22/a8d38b-3176-4cc5-bb4f-c362d2a9e121/1/MklHwK7O_of525bltFvrEK65h6Y.mft rsync://rpki.ripe.net/repository/DEFAULT/MklHwK7O_of525bltFvrEK65h6Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:55:2b:17:ca:18:c6:a7:57:18:71:22:e5:8b:55:07:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=324947c0aecefe87f9db96e5b45beb10aeb987a6 Validity Not Before: Dec 25 11:00:46 2025 GMT Not After : Dec 26 11:00:46 2025 GMT Subject: CN=591583b113054579a5bc6427754ac3dd1dfb3490 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:65:72:a7:e8:d1:3d:7b:a1:82:ae:6b:96:b3: 04:7c:16:bb:4f:6e:b1:2c:40:7f:4b:26:06:a4:17: 7e:c5:9e:47:29:fd:19:20:ad:5f:dd:d2:49:38:41: d5:1e:c9:4c:6f:be:8a:a5:35:be:1a:62:ec:d8:6e: c9:8f:15:fb:cd:3c:0d:83:d6:af:fb:a0:72:88:66: a4:04:f3:99:81:14:f7:d5:26:8d:b8:3d:13:08:6f: 31:d5:81:db:36:5d:5c:42:30:27:78:bf:0d:e1:73: bd:67:05:06:ef:fa:4b:7c:90:0d:ac:cf:c1:18:68: 39:e5:6d:bf:67:6c:6d:d9:aa:9a:53:71:b0:0c:b8: 6a:33:37:fd:c4:07:e8:59:bb:11:92:c9:68:e5:d9: 8b:be:73:e7:4a:f2:52:f7:5b:ff:11:00:7c:67:88: cb:40:c2:c0:95:fd:f3:f9:c0:af:f6:d6:e0:60:d5: 82:dc:24:dd:7b:51:fb:26:b3:a9:8f:23:ac:f2:d4: a6:1f:5b:6f:18:e4:c6:ea:3e:57:aa:7c:88:ad:e4: 5f:c9:22:a1:aa:c6:a3:46:36:66:d9:94:55:ff:1e: 8c:67:e5:4a:8c:78:3f:ae:7e:75:86:3f:d3:55:b5: 59:b2:ff:b1:d5:2e:12:40:31:21:e9:ca:e2:a1:9e: 24:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:15:83:B1:13:05:45:79:A5:BC:64:27:75:4A:C3:DD:1D:FB:34:90 X509v3 Authority Key Identifier: keyid:32:49:47:C0:AE:CE:FE:87:F9:DB:96:E5:B4:5B:EB:10:AE:B9:87:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MklHwK7O_of525bltFvrEK65h6Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/a8d38b-3176-4cc5-bb4f-c362d2a9e121/1/MklHwK7O_of525bltFvrEK65h6Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/a8d38b-3176-4cc5-bb4f-c362d2a9e121/1/MklHwK7O_of525bltFvrEK65h6Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:71:80:76:03:ba:54:e5:e6:41:47:15:0e:c4:c1:bb:19:e0: 97:79:31:52:d9:66:94:83:aa:f1:8b:fc:cd:b9:bf:22:fb:1f: aa:90:ac:7e:05:5c:02:3a:5b:4e:25:50:ba:2a:08:fb:1a:ec: 85:7b:04:8a:57:c8:32:68:93:21:ef:e9:98:c3:b5:a8:e0:c0: 3c:06:76:02:20:cf:63:c4:82:72:17:2d:e9:f9:dc:31:da:b5: fc:46:4a:7c:19:45:dc:b6:b0:40:15:ae:2f:43:e4:c7:ef:bf: 7c:09:9e:ef:0f:6e:a1:a5:d9:03:87:f5:ea:c2:03:7c:c8:59: 44:7b:57:a0:94:fb:9e:9c:e7:55:ca:9d:8a:51:90:ac:d5:0d: 26:8c:c8:13:09:f8:fd:b1:31:a2:89:8d:41:2b:af:73:e1:7b: 47:13:f5:69:9d:e6:9b:e5:67:91:5e:27:f6:7b:5a:5a:18:00: 21:bf:40:8c:01:18:77:40:50:ee:95:2a:ec:d7:b9:de:95:3c: b1:bd:89:18:d3:d9:7f:f5:21:4c:30:07:5b:27:85:7d:40:1d: 1a:03:ff:d0:cb:fa:23:4d:34:01:7c:c0:ac:0b:23:ea:f0:cb: 6c:dc:fc:4e:5c:39:b6:31:c7:2a:6c:33:46:04:da:86:cd:36: 68:16:f4:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtVKxfKGManVxhxIuWLVQdwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNDk0N2MwYWVjZWZlODdmOWRiOTZlNWI0NWJlYjEwYWVi OTg3YTYwHhcNMjUxMjI1MTEwMDQ2WhcNMjUxMjI2MTEwMDQ2WjAzMTEwLwYDVQQD Eyg1OTE1ODNiMTEzMDU0NTc5YTViYzY0Mjc3NTRhYzNkZDFkZmIzNDkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWVyp+jRPXuhgq5rlrMEfBa7T26x LEB/SyYGpBd+xZ5HKf0ZIK1f3dJJOEHVHslMb76KpTW+GmLs2G7JjxX7zTwNg9av +6ByiGakBPOZgRT31SaNuD0TCG8x1YHbNl1cQjAneL8N4XO9ZwUG7/pLfJANrM/B GGg55W2/Z2xt2aqaU3GwDLhqMzf9xAfoWbsRkslo5dmLvnPnSvJS91v/EQB8Z4jL QMLAlf3z+cCv9tbgYNWC3CTde1H7JrOpjyOs8tSmH1tvGOTG6j5XqnyIreRfySKh qsajRjZm2ZRV/x6MZ+VKjHg/rn51hj/TVbVZsv+x1S4SQDEh6crioZ4kLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFkVg7ETBUV5pbxkJ3VKw90d+zSQMB8GA1UdIwQY MBaAFDJJR8Cuzv6H+duW5bRb6xCuuYemMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWtsSHdLN09fb2Y1MjVibHRGdnJFSzY1aDZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9hOGQzOGItMzE3Ni00Y2M1LWJiNGYt YzM2MmQyYTllMTIxLzEvTWtsSHdLN09fb2Y1MjVibHRGdnJFSzY1aDZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi9hOGQzOGItMzE3Ni00Y2M1LWJiNGYtYzM2MmQyYTllMTIx LzEvTWtsSHdLN09fb2Y1MjVibHRGdnJFSzY1aDZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfnGAdgO6 VOXmQUcVDsTBuxngl3kxUtlmlIOq8Yv8zbm/IvsfqpCsfgVcAjpbTiVQuioI+xrs hXsEilfIMmiTIe/pmMO1qODAPAZ2AiDPY8SCchct6fncMdq1/EZKfBlF3LawQBWu L0Pkx++/fAme7w9uoaXZA4f16sIDfMhZRHtXoJT7npznVcqdilGQrNUNJozIEwn4 /bExoomNQSuvc+F7RxP1aZ3mm+VnkV4n9ntaWhgAIb9AjAEYd0BQ7pUq7Ne53pU8 sb2JGNPZf/UhTDAHWyeFfUAdGgP/0Mv6I000AXzArAsj6vDLbNz8Tlw5tjHHKmwz RgTahs02aBb0Pg== -----END CERTIFICATE-----Generated at Thu Dec 25 13:03:59 2025 by rpki-client