This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/MKVWMuyQNMm5o_KQquzZoHwfJqs.mft File: MKVWMuyQNMm5o_KQquzZoHwfJqs.mft (raw, json) Hash identifier: bcWV+MMSb/Xzi80WG8e1ZKMRVnDEHUNJtbwB0G3M3BA= Subject key identifier: 4C:64:18:4A:AD:26:2D:34:D6:01:AA:76:0E:50:80:D0:77:7C:EF:4D Authority key identifier: 30:A5:56:32:EC:90:34:C9:B9:A3:F2:90:AA:EC:D9:A0:7C:1F:26:AB Certificate issuer: /CN=30a55632ec9034c9b9a3f290aaecd9a07c1f26ab Certificate serial: 019B7F399EAD805597EF7485FACE5EE8D920 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MKVWMuyQNMm5o_KQquzZoHwfJqs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/MKVWMuyQNMm5o_KQquzZoHwfJqs.mft Manifest number: 0B7E Signing time: Fri 02 Jan 2026 15:00:41 +0000 Manifest this update: Fri 02 Jan 2026 15:00:41 +0000 Manifest next update: Sat 03 Jan 2026 15:00:41 +0000 Files and hashes: 1: MKVWMuyQNMm5o_KQquzZoHwfJqs.crl (hash: UvTifEpczTowgY/LyIXdSsfsu+tv2YSrULL6oqb9PUs=) 2: b5hEA0skW7XIPdQy24vlGY78QsQ.roa (hash: wOWtUPMhhEOhukktL5n5JA5DpIw7T84vi3SfnV7rzhc=) 3: wb3Uxkn8voTzDwcrNKLjdYKwRZo.roa (hash: e7gIuzOOhyYERCBNmfCsDBCus3fRDqXK6S2fVbX8rlo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/MKVWMuyQNMm5o_KQquzZoHwfJqs.crl rsync://rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/MKVWMuyQNMm5o_KQquzZoHwfJqs.mft rsync://rpki.ripe.net/repository/DEFAULT/MKVWMuyQNMm5o_KQquzZoHwfJqs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:39:9e:ad:80:55:97:ef:74:85:fa:ce:5e:e8:d9:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30a55632ec9034c9b9a3f290aaecd9a07c1f26ab Validity Not Before: Jan 2 15:00:41 2026 GMT Not After : Jan 3 15:00:41 2026 GMT Subject: CN=4c64184aad262d34d601aa760e5080d0777cef4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e6:7d:dd:a7:ae:ff:59:4f:bf:09:d2:d8:6a: 76:38:90:ef:fb:4c:62:cd:54:18:39:31:08:75:23: 26:68:cb:1a:a1:68:44:05:1c:57:f6:42:00:b5:87: 91:78:1d:3a:8b:ae:bc:58:f8:07:5e:50:58:69:83: 1b:4b:09:10:53:af:85:e2:6f:75:bc:e6:6c:cf:1c: d2:fd:13:2b:e2:0b:97:92:bf:27:56:57:83:09:4b: f0:80:36:40:b5:43:93:bc:5a:ac:2c:5c:57:7c:39: bc:7c:3e:20:81:95:7d:4c:68:9e:90:ee:b5:c7:bc: 17:af:ec:2b:15:38:26:ca:ba:c1:6f:ea:ff:1c:35: 29:af:f9:19:da:0c:00:af:58:60:74:4f:64:ab:4c: 29:4c:47:01:2f:ca:b0:5d:33:f8:f0:d7:79:8b:d0: 8f:ba:f9:91:75:52:d8:87:c4:3b:a6:06:6d:69:07: 75:70:ae:e8:e0:ec:27:75:e1:dd:24:92:10:40:58: 9b:7c:6a:6e:cb:02:c9:93:12:f8:fa:e9:67:79:4c: d0:ab:d6:62:ea:48:67:27:4b:bd:9c:87:83:1b:cf: 7a:b7:c6:d9:ce:c7:d6:39:b7:36:3f:db:78:43:65: 13:fe:5b:9c:56:fd:59:3d:68:fc:4b:99:94:4d:75: 1f:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:64:18:4A:AD:26:2D:34:D6:01:AA:76:0E:50:80:D0:77:7C:EF:4D X509v3 Authority Key Identifier: keyid:30:A5:56:32:EC:90:34:C9:B9:A3:F2:90:AA:EC:D9:A0:7C:1F:26:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKVWMuyQNMm5o_KQquzZoHwfJqs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/MKVWMuyQNMm5o_KQquzZoHwfJqs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/MKVWMuyQNMm5o_KQquzZoHwfJqs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:aa:89:ce:cd:d1:d4:bf:7b:32:d1:15:4b:22:59:be:68:68: 0b:04:77:1d:0f:4a:a0:6c:58:c6:7c:02:7d:b7:01:bd:7a:c4: 39:56:50:52:96:ed:c5:94:d0:b9:b6:0c:df:b6:42:04:0e:46: 43:20:28:0c:a1:98:11:86:f7:94:ed:de:83:c3:bb:e8:64:fa: 27:b6:df:92:ca:ce:2f:c8:60:b1:6d:44:a5:50:ac:02:44:c7: cb:eb:8a:a4:34:c3:88:6c:fa:11:95:e8:8e:9f:aa:f4:ea:8b: 6e:39:a0:b1:65:81:23:10:ff:a1:73:a5:af:d2:a0:ac:bf:11: 20:fc:77:cf:67:33:80:84:15:52:95:1d:41:14:c0:e8:66:ec: b1:91:06:fc:88:79:cb:73:a0:e2:4d:78:90:b1:f2:ea:b7:2b: cd:57:d7:57:e8:d6:e2:1d:bf:5a:86:66:a4:f0:74:fd:1c:88: e8:e1:c5:70:a8:1e:cc:c3:87:38:2b:8a:a9:82:c3:24:c7:10: af:14:d5:40:53:4c:50:75:91:04:18:42:4d:56:19:bb:a4:ed: a6:44:aa:9b:54:cf:90:21:4d:ef:29:45:e2:f7:95:ae:19:93: 17:a4:05:9e:0d:c8:59:52:bd:65:50:a6:26:6a:ec:c8:68:85: 5a:2a:cc:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt/OZ6tgFWX73SF+s5e6NkgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwYTU1NjMyZWM5MDM0YzliOWEzZjI5MGFhZWNkOWEwN2Mx ZjI2YWIwHhcNMjYwMTAyMTUwMDQxWhcNMjYwMTAzMTUwMDQxWjAzMTEwLwYDVQQD Eyg0YzY0MTg0YWFkMjYyZDM0ZDYwMWFhNzYwZTUwODBkMDc3N2NlZjRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+Z93aeu/1lPvwnS2Gp2OJDv+0xi zVQYOTEIdSMmaMsaoWhEBRxX9kIAtYeReB06i668WPgHXlBYaYMbSwkQU6+F4m91 vOZszxzS/RMr4guXkr8nVleDCUvwgDZAtUOTvFqsLFxXfDm8fD4ggZV9TGiekO61 x7wXr+wrFTgmyrrBb+r/HDUpr/kZ2gwAr1hgdE9kq0wpTEcBL8qwXTP48Nd5i9CP uvmRdVLYh8Q7pgZtaQd1cK7o4OwndeHdJJIQQFibfGpuywLJkxL4+ulneUzQq9Zi 6khnJ0u9nIeDG896t8bZzsfWObc2P9t4Q2UT/lucVv1ZPWj8S5mUTXUf3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFExkGEqtJi001gGqdg5QgNB3fO9NMB8GA1UdIwQY MBaAFDClVjLskDTJuaPykKrs2aB8HyarMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUtWV011eVFOTW01b19LUXF1elpvSHdmSnFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84NTAwMjQtODRlZS00NGM4LWIyZDkt N2QyMGViMDYzNDU1LzEvTUtWV011eVFOTW01b19LUXF1elpvSHdmSnFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS84NTAwMjQtODRlZS00NGM4LWIyZDktN2QyMGViMDYzNDU1 LzEvTUtWV011eVFOTW01b19LUXF1elpvSHdmSnFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKqqJzs3R 1L97MtEVSyJZvmhoCwR3HQ9KoGxYxnwCfbcBvXrEOVZQUpbtxZTQubYM37ZCBA5G QyAoDKGYEYb3lO3eg8O76GT6J7bfksrOL8hgsW1EpVCsAkTHy+uKpDTDiGz6EZXo jp+q9OqLbjmgsWWBIxD/oXOlr9KgrL8RIPx3z2czgIQVUpUdQRTA6GbssZEG/Ih5 y3Og4k14kLHy6rcrzVfXV+jW4h2/WoZmpPB0/RyI6OHFcKgezMOHOCuKqYLDJMcQ rxTVQFNMUHWRBBhCTVYZu6TtpkSqm1TPkCFN7ylF4veVrhmTF6QFng3IWVK9ZVCm JmrsyGiFWirMEA== -----END CERTIFICATE-----Generated at Fri Jan 2 17:08:16 2026 by rpki-client