This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft File: MK_3UgloSjVGaQYdI9op-OovHV4.mft (raw, json) Hash identifier: WRX3sYOmJXZUwP7YUmc8Nl+e0HQanDlPZrFejK7mYak= Subject key identifier: 90:01:15:BB:DB:21:0D:A3:A9:7A:03:B9:3D:E0:3B:6E:FA:A4:51:9E Authority key identifier: 30:AF:F7:52:09:68:4A:35:46:69:06:1D:23:DA:29:F8:EA:2F:1D:5E Certificate issuer: /CN=30aff75209684a354669061d23da29f8ea2f1d5e Certificate serial: 019B3CECB77D66F733D2AC136BE4FF27C4B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MK_3UgloSjVGaQYdI9op-OovHV4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 18:01:44 +0000 Manifest this update: Sat 20 Dec 2025 18:01:44 +0000 Manifest next update: Sun 21 Dec 2025 18:01:44 +0000 Files and hashes: 1: C-bdkM4lL8tTpeZXpiv45nhPUuM.roa (hash: dO9wg4oa3fmXkWxOi24v6xA9xh5CDmqHbzYIcdtWFXo=) 2: IbRWuE5EQO-8LgU2mAsS5QizVAY.roa (hash: s+vcUKeYVky97TEOonv9opKh34KAYu2tRcLDRkyQ5gI=) 3: MK_3UgloSjVGaQYdI9op-OovHV4.crl (hash: q3n1bL3cHJYE654E9p4VhR+AFVyw1JhxxBPmoqjM2ns=) 4: jBuJavuseI2B0_WgKkHYJZFvr_Q.roa (hash: tLuargg/vipoJVRdIR5x9HBU5Ji9GHfTNJavehQ1uxE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.crl rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft rsync://rpki.ripe.net/repository/DEFAULT/MK_3UgloSjVGaQYdI9op-OovHV4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:b7:7d:66:f7:33:d2:ac:13:6b:e4:ff:27:c4:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30aff75209684a354669061d23da29f8ea2f1d5e Validity Not Before: Dec 20 18:01:44 2025 GMT Not After : Dec 21 18:01:44 2025 GMT Subject: CN=900115bbdb210da3a97a03b93de03b6efaa4519e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:52:29:01:6c:f7:cb:fc:0f:2d:89:31:dc:28: 54:48:f7:21:8c:98:98:22:44:4f:cc:1a:c5:f8:a7: 64:a8:96:33:e1:33:06:7f:43:e0:92:d5:a8:fa:21: 73:54:00:8d:82:ca:45:be:49:c8:d4:ad:b8:bb:59: 8d:91:bc:94:04:89:91:1c:c4:a9:71:3e:2a:44:4a: 0f:76:07:60:23:16:86:a2:7c:6f:83:63:ea:67:a9: 43:55:81:32:0a:2d:be:0e:0f:6b:6b:5a:69:89:7f: 63:e5:a4:dc:9b:1e:ad:43:e4:e6:63:df:5e:80:7b: 23:fd:13:27:4f:be:a0:3f:1f:07:0a:94:3d:05:2f: d7:2f:b9:66:ab:1b:9b:71:4b:98:35:b9:42:90:30: 09:08:48:9d:dc:42:46:71:a8:41:27:d3:93:eb:18: 70:45:03:3c:6d:6a:c8:fd:f0:7c:e1:7e:cd:85:7e: ff:bd:65:fa:4d:ea:57:5b:fc:e3:87:80:88:11:52: 78:b1:ff:82:da:19:a8:d0:c8:ea:25:d1:6f:38:13: c9:24:00:81:af:96:53:ed:99:87:f2:d2:5b:d2:09: 50:9e:79:45:a8:f3:e5:95:54:b8:8a:8f:ea:74:1c: d5:b0:ef:48:12:6b:63:4c:33:24:19:a0:80:dc:2b: 83:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:01:15:BB:DB:21:0D:A3:A9:7A:03:B9:3D:E0:3B:6E:FA:A4:51:9E X509v3 Authority Key Identifier: keyid:30:AF:F7:52:09:68:4A:35:46:69:06:1D:23:DA:29:F8:EA:2F:1D:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MK_3UgloSjVGaQYdI9op-OovHV4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:11:84:11:f3:80:b0:7a:e4:c9:bb:5b:23:fa:a1:96:36:67: e7:35:e0:a4:d1:01:a0:e3:aa:5c:fa:22:6b:02:7e:f6:1b:0f: e6:7f:5f:8a:a4:b0:26:70:4b:50:95:57:ca:88:2c:00:fd:ec: 36:7d:7f:8b:70:61:51:4b:ed:43:5d:50:17:fc:88:ee:69:de: b9:aa:af:25:a2:12:2d:a6:37:26:e2:d1:2e:73:09:9b:0a:89: e4:27:02:8b:4e:ce:0f:10:be:30:e2:53:69:59:2f:68:2e:bb: e5:6a:dd:a9:a9:c7:47:af:c2:88:d8:41:e3:c7:18:5e:d2:cd: 95:64:aa:07:23:a2:07:9b:fe:32:64:be:a1:e6:72:80:0f:b3: d2:a9:8e:ec:72:77:33:5a:ab:43:9e:94:41:fc:ff:39:df:b8: 31:42:cb:72:90:90:5b:f8:66:82:f0:ff:ab:6b:5c:b2:47:dc: 03:3f:37:d6:40:2c:e8:01:88:e2:06:a6:2d:c1:8d:d3:5b:1b: da:a6:ee:4e:46:bc:3f:1d:53:e0:02:42:8a:09:88:07:10:3d: 68:61:2b:29:02:96:82:80:67:fd:09:c6:9c:88:e4:9c:a0:e2: 8f:a7:f8:b8:9e:33:20:51:d2:0e:8b:84:36:6a:9c:ab:03:ed: c5:51:cc:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87Ld9Zvcz0qwTa+T/J8SzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwYWZmNzUyMDk2ODRhMzU0NjY5MDYxZDIzZGEyOWY4ZWEy ZjFkNWUwHhcNMjUxMjIwMTgwMTQ0WhcNMjUxMjIxMTgwMTQ0WjAzMTEwLwYDVQQD Eyg5MDAxMTViYmRiMjEwZGEzYTk3YTAzYjkzZGUwM2I2ZWZhYTQ1MTllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA21IpAWz3y/wPLYkx3ChUSPchjJiY IkRPzBrF+KdkqJYz4TMGf0PgktWo+iFzVACNgspFvknI1K24u1mNkbyUBImRHMSp cT4qREoPdgdgIxaGonxvg2PqZ6lDVYEyCi2+Dg9ra1ppiX9j5aTcmx6tQ+TmY99e gHsj/RMnT76gPx8HCpQ9BS/XL7lmqxubcUuYNblCkDAJCEid3EJGcahBJ9OT6xhw RQM8bWrI/fB84X7NhX7/vWX6TepXW/zjh4CIEVJ4sf+C2hmo0MjqJdFvOBPJJACB r5ZT7ZmH8tJb0glQnnlFqPPllVS4io/qdBzVsO9IEmtjTDMkGaCA3CuDCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJABFbvbIQ2jqXoDuT3gO276pFGeMB8GA1UdIwQY MBaAFDCv91IJaEo1RmkGHSPaKfjqLx1eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUtfM1VnbG9TalZHYVFZZEk5b3AtT292SFY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS84NDRhMjUtYThkZi00NTYxLWIzZTct OTc4NWEzMzU1NDJhLzEvTUtfM1VnbG9TalZHYVFZZEk5b3AtT292SFY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS84NDRhMjUtYThkZi00NTYxLWIzZTctOTc4NWEzMzU1NDJh LzEvTUtfM1VnbG9TalZHYVFZZEk5b3AtT292SFY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkxGEEfOA sHrkybtbI/qhljZn5zXgpNEBoOOqXPoiawJ+9hsP5n9fiqSwJnBLUJVXyogsAP3s Nn1/i3BhUUvtQ11QF/yI7mneuaqvJaISLaY3JuLRLnMJmwqJ5CcCi07ODxC+MOJT aVkvaC675WrdqanHR6/CiNhB48cYXtLNlWSqByOiB5v+MmS+oeZygA+z0qmO7HJ3 M1qrQ56UQfz/Od+4MULLcpCQW/hmgvD/q2tcskfcAz831kAs6AGI4gamLcGN01sb 2qbuTka8Px1T4AJCigmIBxA9aGErKQKWgoBn/QnGnIjknKDij6f4uJ4zIFHSDouE NmqcqwPtxVHMLg== -----END CERTIFICATE-----Generated at Sat Dec 20 19:57:13 2025 by rpki-client