This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/5b0494-5ad6-4ea4-95fa-a83d9d920d31/1/mk-ppgpaJP_mFLbftYgT2SWjsxg.mft File: mk-ppgpaJP_mFLbftYgT2SWjsxg.mft (raw, json) Hash identifier: Bwu360ABU0Hmjrr8FDnvDpzv8OIjJdjGklm3OY9/f/I= Subject key identifier: A6:BA:7A:96:AD:F7:C0:90:86:3F:FF:2F:F2:B9:20:40:F5:1B:22:CE Authority key identifier: 9A:4F:A9:A6:0A:5A:24:FF:E6:14:B6:DF:B5:88:13:D9:25:A3:B3:18 Certificate issuer: /CN=9a4fa9a60a5a24ffe614b6dfb58813d925a3b318 Certificate serial: 019B428021FED7B55204FA4E00EE0D65FF05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mk-ppgpaJP_mFLbftYgT2SWjsxg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/5b0494-5ad6-4ea4-95fa-a83d9d920d31/1/mk-ppgpaJP_mFLbftYgT2SWjsxg.mft Manifest number: 0EA0 Signing time: Sun 21 Dec 2025 20:00:52 +0000 Manifest this update: Sun 21 Dec 2025 20:00:52 +0000 Manifest next update: Mon 22 Dec 2025 20:00:52 +0000 Files and hashes: 1: WF_UUzJyBXVRYaWBRz9A5RqP7uM.roa (hash: fXJDB7viVboUYMb0Tq5yYms1zX+sjGa50QbTOcD6d1o=) 2: mk-ppgpaJP_mFLbftYgT2SWjsxg.crl (hash: tHZkztXbuuDzpiofSWCVy+WfkeIcQeQnqUZK9cMVE3w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/5b0494-5ad6-4ea4-95fa-a83d9d920d31/1/mk-ppgpaJP_mFLbftYgT2SWjsxg.crl rsync://rpki.ripe.net/repository/DEFAULT/48/5b0494-5ad6-4ea4-95fa-a83d9d920d31/1/mk-ppgpaJP_mFLbftYgT2SWjsxg.mft rsync://rpki.ripe.net/repository/DEFAULT/mk-ppgpaJP_mFLbftYgT2SWjsxg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 20:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:80:21:fe:d7:b5:52:04:fa:4e:00:ee:0d:65:ff:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a4fa9a60a5a24ffe614b6dfb58813d925a3b318 Validity Not Before: Dec 21 20:00:52 2025 GMT Not After : Dec 22 20:00:52 2025 GMT Subject: CN=a6ba7a96adf7c090863fff2ff2b92040f51b22ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:21:5b:b7:63:c9:f2:f0:60:74:91:fc:9a:ca: 74:90:7d:f8:8b:46:e9:74:14:eb:43:a0:4c:a2:1a: 01:c4:5d:fd:10:7e:10:3c:f6:b3:48:91:20:e8:79: d2:44:19:16:2d:91:c4:4f:0b:ed:ca:50:ca:0e:fa: f9:b2:5f:22:45:95:3a:0d:86:ce:2a:2b:bf:11:ea: 33:f5:e1:74:49:36:1a:53:fd:c0:36:87:3f:02:67: 24:8c:7a:e7:02:94:9f:e0:9b:74:18:3c:43:6b:4a: 58:58:3b:bc:69:64:d2:32:23:7a:fb:83:a0:f3:1a: 2a:bc:49:42:ce:39:bc:f7:34:c5:be:29:88:13:0d: 08:5a:54:3a:1a:32:d5:a2:4a:02:89:c6:0c:64:25: ee:5b:e2:44:dd:21:28:fc:bb:8a:1e:dd:31:c5:24: 72:87:97:17:0d:40:b2:51:a5:33:8d:59:3f:cf:0e: fc:4b:f7:9a:cc:8b:cc:99:96:98:8f:c9:2f:22:80: 6a:e0:a0:79:fe:70:31:32:76:af:81:6b:ed:9c:91: 6a:6e:f8:e6:e6:a7:e9:1f:29:50:ff:f5:36:d3:a7: 2d:a2:4c:e5:03:b0:2a:11:52:e3:3a:c0:41:bb:92: a7:12:3e:11:e9:0f:3e:1f:1a:ce:b3:37:31:e0:78: 04:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:BA:7A:96:AD:F7:C0:90:86:3F:FF:2F:F2:B9:20:40:F5:1B:22:CE X509v3 Authority Key Identifier: keyid:9A:4F:A9:A6:0A:5A:24:FF:E6:14:B6:DF:B5:88:13:D9:25:A3:B3:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mk-ppgpaJP_mFLbftYgT2SWjsxg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5b0494-5ad6-4ea4-95fa-a83d9d920d31/1/mk-ppgpaJP_mFLbftYgT2SWjsxg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5b0494-5ad6-4ea4-95fa-a83d9d920d31/1/mk-ppgpaJP_mFLbftYgT2SWjsxg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:fd:21:37:04:1c:1f:f7:1c:73:5d:92:af:03:f9:1f:30:e8: 9e:32:dd:75:c5:0a:5d:50:83:ab:73:58:c2:79:b3:f1:73:49: 3d:1c:e1:2e:db:87:02:17:62:51:39:10:10:b1:07:38:de:a7: 1e:a5:2f:f2:18:39:48:60:5b:d5:36:44:c4:57:a1:8f:66:c0: 5a:03:63:99:62:04:bc:bb:7a:ca:e2:82:9a:c3:4e:8b:4d:7f: 8f:8a:62:49:27:32:31:de:e8:07:83:c5:2a:e9:1a:a0:37:3f: e7:24:aa:f7:8a:af:27:a6:41:6f:c4:09:5a:ea:32:7a:cd:2d: 89:44:fd:a2:fe:39:8a:3a:69:9e:76:06:ef:52:b6:14:a3:b5: 14:2a:3c:23:c7:0f:b5:99:d6:d4:c5:c1:9a:f3:19:02:ab:84: 90:30:10:b7:a4:de:c4:e0:77:51:ca:9e:50:61:b1:b9:b2:c0: 8b:1b:8d:fc:b0:f2:43:7b:9b:b2:a8:28:ce:a7:ee:b4:71:b4: 4f:98:f4:6e:84:dd:81:0a:0b:38:96:12:39:99:d2:c0:c8:f3: 44:85:27:58:c4:15:55:90:4f:52:f8:56:63:32:96:79:dd:d7: 0d:bd:2f:6b:3c:9f:cd:b9:ad:94:6b:47:67:5c:e5:38:31:1f: 55:d8:5c:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCgCH+17VSBPpOAO4NZf8FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhNGZhOWE2MGE1YTI0ZmZlNjE0YjZkZmI1ODgxM2Q5MjVh M2IzMTgwHhcNMjUxMjIxMjAwMDUyWhcNMjUxMjIyMjAwMDUyWjAzMTEwLwYDVQQD EyhhNmJhN2E5NmFkZjdjMDkwODYzZmZmMmZmMmI5MjA0MGY1MWIyMmNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCFbt2PJ8vBgdJH8msp0kH34i0bp dBTrQ6BMohoBxF39EH4QPPazSJEg6HnSRBkWLZHETwvtylDKDvr5sl8iRZU6DYbO Kiu/Eeoz9eF0STYaU/3ANoc/AmckjHrnApSf4Jt0GDxDa0pYWDu8aWTSMiN6+4Og 8xoqvElCzjm89zTFvimIEw0IWlQ6GjLVokoCicYMZCXuW+JE3SEo/LuKHt0xxSRy h5cXDUCyUaUzjVk/zw78S/eazIvMmZaYj8kvIoBq4KB5/nAxMnavgWvtnJFqbvjm 5qfpHylQ//U206ctokzlA7AqEVLjOsBBu5KnEj4R6Q8+HxrOszcx4HgE0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKa6epat98CQhj//L/K5IED1GyLOMB8GA1UdIwQY MBaAFJpPqaYKWiT/5hS237WIE9klo7MYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWstcHBncGFKUF9tRkxiZnRZZ1QyU1dqc3hnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC81YjA0OTQtNWFkNi00ZWE0LTk1ZmEt YTgzZDlkOTIwZDMxLzEvbWstcHBncGFKUF9tRkxiZnRZZ1QyU1dqc3hnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC81YjA0OTQtNWFkNi00ZWE0LTk1ZmEtYTgzZDlkOTIwZDMx LzEvbWstcHBncGFKUF9tRkxiZnRZZ1QyU1dqc3hnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkP0hNwQc H/ccc12SrwP5HzDonjLddcUKXVCDq3NYwnmz8XNJPRzhLtuHAhdiUTkQELEHON6n HqUv8hg5SGBb1TZExFehj2bAWgNjmWIEvLt6yuKCmsNOi01/j4piSScyMd7oB4PF KukaoDc/5ySq94qvJ6ZBb8QJWuoyes0tiUT9ov45ijppnnYG71K2FKO1FCo8I8cP tZnW1MXBmvMZAquEkDAQt6TexOB3UcqeUGGxubLAixuN/LDyQ3ubsqgozqfutHG0 T5j0boTdgQoLOJYSOZnSwMjzRIUnWMQVVZBPUvhWYzKWed3XDb0vazyfzbmtlGtH Z1zlODEfVdhcoA== -----END CERTIFICATE-----Generated at Mon Dec 22 00:47:15 2025 by rpki-client