This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft File: mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft (raw, json) Hash identifier: YlZyPjx2n/7acLT7Z/2aFvh3JNTqfIN8xfwcLXeYKS4= Subject key identifier: F9:17:B7:85:2E:6E:93:50:D2:E3:CB:7C:AF:33:C8:77:B5:47:C9:FD Authority key identifier: 9A:48:C1:D8:00:8C:DC:05:9D:B0:B2:7A:A9:51:47:99:C0:6D:54:43 Certificate issuer: /CN=9a48c1d8008cdc059db0b27aa9514799c06d5443 Certificate serial: 019B3BA295EE4D47D00A82EE0DDEF2466E06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft Manifest number: 12F8 Signing time: Sat 20 Dec 2025 12:01:09 +0000 Manifest this update: Sat 20 Dec 2025 12:01:09 +0000 Manifest next update: Sun 21 Dec 2025 12:01:09 +0000 Files and hashes: 1: GS3n997-WSAnBFI5sxW4oYhya68.roa (hash: 9uLSgMiqXXeu2TS+gBYSbYKO48DlZM21pWe2MUShNG8=) 2: K1RZ-_Fg9dSZIebCMUhpe6gbgJc.roa (hash: DeEJ/lwM2EUWvyFmV2osr5NnI9rnfMu9oAVwUv2cQPg=) 3: mkjB2ACM3AWdsLJ6qVFHmcBtVEM.crl (hash: OxsnVGXKqlkeOKe4LrHy6uk/apW8f5g8mauKQNiZ8j4=) 4: tKjpgYt3F1U92FlxxtExmwv_VJA.roa (hash: PCobIxyuHsntJ/hl1UTuu1qlban1/mIdUKP0z5QY3l0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.crl rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft rsync://rpki.ripe.net/repository/DEFAULT/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:95:ee:4d:47:d0:0a:82:ee:0d:de:f2:46:6e:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a48c1d8008cdc059db0b27aa9514799c06d5443 Validity Not Before: Dec 20 12:01:09 2025 GMT Not After : Dec 21 12:01:09 2025 GMT Subject: CN=f917b7852e6e9350d2e3cb7caf33c877b547c9fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:f4:82:ca:84:fc:86:3e:ce:b4:de:98:89:a0: b4:5d:3e:93:ac:2e:34:29:49:ba:4c:c2:7b:72:0d: 5f:50:8d:cf:b2:2e:78:72:c8:f9:1a:95:c0:c9:a1: f2:60:95:a2:02:8f:0d:31:7f:00:12:2d:43:8a:fd: af:c7:dc:f1:8a:3d:4b:15:d1:71:b1:57:9c:8d:b5: 37:8e:a7:98:ee:04:07:a4:d8:e6:2d:4b:12:82:26: 0d:23:68:49:cd:c0:6a:47:cc:74:6c:ba:46:bb:a4: fa:87:ab:54:9e:8d:53:f6:a9:55:ab:fa:23:49:45: 57:8a:e3:fe:6d:45:73:3d:ae:9d:ef:50:b4:d4:ca: f3:8c:bc:52:26:0d:b5:64:39:db:d6:c0:1b:2f:01: 14:0c:b3:5f:9c:47:39:e4:db:97:db:0d:a7:dd:ed: 62:35:d5:d9:91:00:99:52:03:c0:cb:69:15:5d:20: f9:e0:a2:ed:c8:8b:ef:62:cf:5e:10:85:c6:f1:57: 06:e2:d2:93:35:76:b0:2d:ad:92:ce:df:0d:b9:7b: af:6d:55:cf:2b:fa:f0:e8:32:2c:21:37:53:9d:19: 7b:31:97:5c:11:cd:8f:b7:26:70:93:05:1e:0a:24: ba:8d:3d:4b:e3:7d:b3:6b:eb:6f:b9:c0:dd:a9:b1: e4:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:17:B7:85:2E:6E:93:50:D2:E3:CB:7C:AF:33:C8:77:B5:47:C9:FD X509v3 Authority Key Identifier: keyid:9A:48:C1:D8:00:8C:DC:05:9D:B0:B2:7A:A9:51:47:99:C0:6D:54:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:15:20:3c:2d:21:b5:08:f8:22:4d:43:f4:06:10:5a:16:d0: a4:22:1c:2e:50:d5:dd:53:ad:90:eb:f3:07:c4:ba:6b:d1:06: 29:f7:b3:e0:ae:d1:37:32:2d:8c:cd:47:b4:e7:eb:f6:35:7a: 5f:b1:10:8b:5e:4c:ad:c1:e6:6b:c5:b2:19:9f:40:76:b0:ce: f1:cd:16:54:ae:0e:79:d5:b5:59:72:55:f9:65:de:4e:8d:20: 29:bc:43:7c:40:be:8c:82:d2:f3:c6:4f:cb:52:b5:77:94:13: 8b:c9:8b:eb:ae:f9:ec:c6:d2:b0:7d:b3:af:83:a9:bd:7c:6d: 48:c9:cc:b3:17:7f:82:13:23:20:7f:21:25:6d:49:dd:12:d4: 34:45:8c:bb:f7:17:f2:86:2a:a7:9c:e7:5f:38:30:8b:9f:6a: a9:65:83:0e:7b:f1:31:8f:f2:61:e5:a6:9b:50:b4:04:ad:ca: d7:bf:7d:aa:f9:42:e6:fe:39:2b:a3:8c:5c:98:28:70:1e:84: 24:dd:c9:10:92:e6:a4:f6:d6:0a:3f:a2:22:d2:0f:d7:28:ee: 6a:5d:7a:cb:b5:d5:80:b1:2c:c5:c7:b0:ce:d8:c2:30:68:37: a7:fa:0a:d8:7d:b8:6b:86:6a:71:b1:92:e3:47:51:72:16:44: d2:9b:54:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7opXuTUfQCoLuDd7yRm4GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhNDhjMWQ4MDA4Y2RjMDU5ZGIwYjI3YWE5NTE0Nzk5YzA2 ZDU0NDMwHhcNMjUxMjIwMTIwMTA5WhcNMjUxMjIxMTIwMTA5WjAzMTEwLwYDVQQD EyhmOTE3Yjc4NTJlNmU5MzUwZDJlM2NiN2NhZjMzYzg3N2I1NDdjOWZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8fSCyoT8hj7OtN6YiaC0XT6TrC40 KUm6TMJ7cg1fUI3Psi54csj5GpXAyaHyYJWiAo8NMX8AEi1Div2vx9zxij1LFdFx sVecjbU3jqeY7gQHpNjmLUsSgiYNI2hJzcBqR8x0bLpGu6T6h6tUno1T9qlVq/oj SUVXiuP+bUVzPa6d71C01MrzjLxSJg21ZDnb1sAbLwEUDLNfnEc55NuX2w2n3e1i NdXZkQCZUgPAy2kVXSD54KLtyIvvYs9eEIXG8VcG4tKTNXawLa2Szt8NuXuvbVXP K/rw6DIsITdTnRl7MZdcEc2PtyZwkwUeCiS6jT1L432za+tvucDdqbHkAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPkXt4UubpNQ0uPLfK8zyHe1R8n9MB8GA1UdIwQY MBaAFJpIwdgAjNwFnbCyeqlRR5nAbVRDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWtqQjJBQ00zQVdkc0xKNnFWRkhtY0J0VkVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9jYjYxNGMtNDk1ZS00MTBlLTg3MzAt NWEzNjYzMTVjMTY2LzEvbWtqQjJBQ00zQVdkc0xKNnFWRkhtY0J0VkVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy9jYjYxNGMtNDk1ZS00MTBlLTg3MzAtNWEzNjYzMTVjMTY2 LzEvbWtqQjJBQ00zQVdkc0xKNnFWRkhtY0J0VkVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARBUgPC0h tQj4Ik1D9AYQWhbQpCIcLlDV3VOtkOvzB8S6a9EGKfez4K7RNzItjM1HtOfr9jV6 X7EQi15MrcHma8WyGZ9AdrDO8c0WVK4OedW1WXJV+WXeTo0gKbxDfEC+jILS88ZP y1K1d5QTi8mL66757MbSsH2zr4OpvXxtSMnMsxd/ghMjIH8hJW1J3RLUNEWMu/cX 8oYqp5znXzgwi59qqWWDDnvxMY/yYeWmm1C0BK3K1799qvlC5v45K6OMXJgocB6E JN3JEJLmpPbWCj+iItIP1yjual16y7XVgLEsxcewztjCMGg3p/oK2H24a4ZqcbGS 40dRchZE0ptUaQ== -----END CERTIFICATE-----Generated at Sat Dec 20 19:34:31 2025 by rpki-client