This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft File: MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft (raw, json) Hash identifier: 6AX6FelOJnj1PXT7nIURFslGS45bGA+SipMSnDkeS0g= Subject key identifier: C3:E0:EB:7D:ED:B8:E3:FF:72:B1:DE:C4:CF:95:C0:67:FB:54:EC:F9 Authority key identifier: 30:A2:75:80:64:9A:99:2E:41:E3:2C:F8:C1:22:45:E0:7F:F9:F9:C5 Certificate issuer: /CN=30a27580649a992e41e32cf8c12245e07ff9f9c5 Certificate serial: 019B3BD9004D334AF188AD3567C0CF2DE694 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MKJ1gGSamS5B4yz4wSJF4H_5-cU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft Manifest number: 0E6D Signing time: Sat 20 Dec 2025 13:00:35 +0000 Manifest this update: Sat 20 Dec 2025 13:00:35 +0000 Manifest next update: Sun 21 Dec 2025 13:00:35 +0000 Files and hashes: 1: MKJ1gGSamS5B4yz4wSJF4H_5-cU.crl (hash: J6/+witmRVTRJpQM9km3m2jIy/An5qo6NJMqy6BHdLQ=) 2: WZEbVkL7G2Qj36QisnZkv8BFkNA.roa (hash: f7XKUwdOUxo0bFV2++z3NCiuNhXfpczYvfcpVS/l/Jk=) 3: yCz-ewAMqZx7lCDPn4Ya6LAQnZ4.roa (hash: biH7dwZg2HQ2zwVaqcwP5LR/5HOneIgO7AJ9Gj1riJ4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.crl rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft rsync://rpki.ripe.net/repository/DEFAULT/MKJ1gGSamS5B4yz4wSJF4H_5-cU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:00:4d:33:4a:f1:88:ad:35:67:c0:cf:2d:e6:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30a27580649a992e41e32cf8c12245e07ff9f9c5 Validity Not Before: Dec 20 13:00:35 2025 GMT Not After : Dec 21 13:00:35 2025 GMT Subject: CN=c3e0eb7dedb8e3ff72b1dec4cf95c067fb54ecf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:0f:cf:bb:61:6d:c9:55:45:54:ad:58:9e:3a: 08:4e:f2:7c:a0:3a:3f:f0:6a:bc:1f:f6:74:f0:be: 1d:a1:81:fe:80:d4:be:e6:28:cd:cf:d3:7e:13:cb: e0:9a:51:ac:41:de:5b:95:d9:4a:6c:c0:d5:a1:8e: 08:ad:41:87:a4:4b:fd:76:af:26:06:62:02:62:5a: 1a:81:2a:5e:b4:45:5c:b5:e8:40:bc:b2:27:e6:5f: 4d:ab:38:67:31:f2:b8:4c:38:31:d4:fa:d1:2e:55: f9:63:58:57:78:bd:04:5f:64:f0:d3:6e:d8:68:a2: 80:d3:4a:39:27:8f:56:10:e3:8a:0b:1a:b8:c0:79: 71:f3:94:3e:80:cf:89:e8:1a:75:d5:e6:82:dd:a2: 1c:15:5e:35:27:57:73:7b:48:ec:67:68:dc:4a:1c: 18:7d:2f:48:fa:04:1d:82:12:3e:f0:6c:97:09:75: 55:20:3b:5b:48:82:2d:24:97:29:42:95:fe:6d:f4: 15:36:ee:81:f0:5a:d3:29:4e:7a:49:0e:e1:3a:31: 0e:b5:87:5d:43:3a:4a:75:d7:d5:79:06:5f:13:c8: 47:c5:17:47:bb:59:fd:02:a2:75:d4:91:dc:9a:00: a1:56:bc:f1:70:b1:ef:32:76:1c:1f:bd:1d:57:64: 2b:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:E0:EB:7D:ED:B8:E3:FF:72:B1:DE:C4:CF:95:C0:67:FB:54:EC:F9 X509v3 Authority Key Identifier: keyid:30:A2:75:80:64:9A:99:2E:41:E3:2C:F8:C1:22:45:E0:7F:F9:F9:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKJ1gGSamS5B4yz4wSJF4H_5-cU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:d9:81:a8:09:05:37:c3:b7:45:14:68:24:fd:47:ed:07:f4: b7:50:6c:27:e8:94:25:c5:37:db:ad:b6:19:4d:fd:c6:ce:c9: 5c:22:4b:f6:e4:e5:39:a2:c6:07:3b:d9:16:fc:7c:b9:9e:48: 16:cf:fd:d1:fd:49:ce:ab:ed:3e:13:8b:98:dd:0c:59:f8:e2: d9:01:b9:0b:45:e5:e6:21:15:d2:cc:0f:75:cd:cd:74:3d:03: 13:c7:a6:51:4b:dd:3e:0f:46:76:02:f6:83:75:56:a9:88:e9: b1:64:b9:25:02:83:f1:01:01:32:45:89:2f:1b:56:21:ce:0a: 88:3d:91:3d:1c:c5:21:ee:71:05:df:6a:3d:d9:ad:a5:dc:0d: 76:73:f4:02:c6:cb:9e:81:ab:e6:d1:24:5d:fd:53:df:9a:b1: e3:d3:87:2f:5d:5d:bc:aa:26:23:35:86:2e:b2:fb:7a:9a:58: 78:e9:34:e0:12:58:1c:4b:f5:c0:a6:76:80:9b:93:53:8e:78: 3b:ae:18:73:29:2c:3e:d4:d0:de:4a:41:21:bc:14:0a:92:c6: 01:d6:6b:ed:21:65:50:0c:bc:2e:db:7d:de:11:69:31:76:63: 8b:7f:e9:8d:12:eb:c2:c0:c3:01:ee:49:91:bf:2f:09:0b:ca: 41:d7:63:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72QBNM0rxiK01Z8DPLeaUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwYTI3NTgwNjQ5YTk5MmU0MWUzMmNmOGMxMjI0NWUwN2Zm OWY5YzUwHhcNMjUxMjIwMTMwMDM1WhcNMjUxMjIxMTMwMDM1WjAzMTEwLwYDVQQD EyhjM2UwZWI3ZGVkYjhlM2ZmNzJiMWRlYzRjZjk1YzA2N2ZiNTRlY2Y5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtw/Pu2FtyVVFVK1YnjoITvJ8oDo/ 8Gq8H/Z08L4doYH+gNS+5ijNz9N+E8vgmlGsQd5bldlKbMDVoY4IrUGHpEv9dq8m BmICYloagSpetEVctehAvLIn5l9NqzhnMfK4TDgx1PrRLlX5Y1hXeL0EX2Tw027Y aKKA00o5J49WEOOKCxq4wHlx85Q+gM+J6Bp11eaC3aIcFV41J1dze0jsZ2jcShwY fS9I+gQdghI+8GyXCXVVIDtbSIItJJcpQpX+bfQVNu6B8FrTKU56SQ7hOjEOtYdd QzpKddfVeQZfE8hHxRdHu1n9AqJ11JHcmgChVrzxcLHvMnYcH70dV2Qr9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMPg633tuOP/crHexM+VwGf7VOz5MB8GA1UdIwQY MBaAFDCidYBkmpkuQeMs+MEiReB/+fnFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUtKMWdHU2FtUzVCNHl6NHdTSkY0SF81LWNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8yOWI0MmItNTY2ZS00M2U5LWEyZGMt ZjU0ODY5OWY5NDdhLzEvTUtKMWdHU2FtUzVCNHl6NHdTSkY0SF81LWNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy8yOWI0MmItNTY2ZS00M2U5LWEyZGMtZjU0ODY5OWY5NDdh LzEvTUtKMWdHU2FtUzVCNHl6NHdTSkY0SF81LWNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc9mBqAkF N8O3RRRoJP1H7Qf0t1BsJ+iUJcU32622GU39xs7JXCJL9uTlOaLGBzvZFvx8uZ5I Fs/90f1JzqvtPhOLmN0MWfji2QG5C0Xl5iEV0swPdc3NdD0DE8emUUvdPg9GdgL2 g3VWqYjpsWS5JQKD8QEBMkWJLxtWIc4KiD2RPRzFIe5xBd9qPdmtpdwNdnP0AsbL noGr5tEkXf1T35qx49OHL11dvKomIzWGLrL7eppYeOk04BJYHEv1wKZ2gJuTU454 O64YcyksPtTQ3kpBIbwUCpLGAdZr7SFlUAy8Ltt93hFpMXZji3/pjRLrwsDDAe5J kb8vCQvKQddjhg== -----END CERTIFICATE-----Generated at Sat Dec 20 17:14:20 2025 by rpki-client