This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/812a15-c6e4-416a-b09d-84bf31de8413/1/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.mft File: MKnJV9IJHSTg3-X2bJe-SqH5MIQ.mft (raw, json) Hash identifier: nMbRZthjbhu1zPFupkljyghSYtB8VWAyXDU5ssrLPfo= Subject key identifier: 5B:B3:12:C3:D1:40:47:BD:90:6E:D7:23:1F:D7:A0:85:96:9D:98:0A Authority key identifier: 30:A9:C9:57:D2:09:1D:24:E0:DF:E5:F6:6C:97:BE:4A:A1:F9:30:84 Certificate issuer: /CN=30a9c957d2091d24e0dfe5f66c97be4aa1f93084 Certificate serial: 019B5CADB3B571539DFD282D2C41D5A56375 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/812a15-c6e4-416a-b09d-84bf31de8413/1/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.mft Manifest number: 1796 Signing time: Fri 26 Dec 2025 22:00:46 +0000 Manifest this update: Fri 26 Dec 2025 22:00:46 +0000 Manifest next update: Sat 27 Dec 2025 22:00:46 +0000 Files and hashes: 1: MKnJV9IJHSTg3-X2bJe-SqH5MIQ.crl (hash: GscJatV7xnZKG+a8xKdSAjlKlZJgnOBX8+SKX2eWqhE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/812a15-c6e4-416a-b09d-84bf31de8413/1/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/812a15-c6e4-416a-b09d-84bf31de8413/1/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.mft rsync://rpki.ripe.net/repository/DEFAULT/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5c:ad:b3:b5:71:53:9d:fd:28:2d:2c:41:d5:a5:63:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30a9c957d2091d24e0dfe5f66c97be4aa1f93084 Validity Not Before: Dec 26 22:00:46 2025 GMT Not After : Dec 27 22:00:46 2025 GMT Subject: CN=5bb312c3d14047bd906ed7231fd7a085969d980a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:fb:af:16:01:13:8c:cb:de:9d:c0:d5:a2:c5: a8:f0:b4:38:68:47:8c:5a:9d:81:63:64:2a:c3:68: 12:c9:5e:cb:7e:f6:e6:8e:f1:73:01:dc:70:a6:c1: 27:1e:09:32:e5:64:cd:36:2d:21:8b:4f:87:ff:8b: 17:f3:9a:97:30:2c:27:42:0c:c3:25:3e:81:3c:d1: 8e:d3:91:55:5f:84:6f:0b:5b:40:78:ea:c0:67:b4: dd:ac:7d:d9:5c:1c:31:5e:a5:03:70:a5:f9:62:5e: cb:00:98:ae:e7:9f:5c:c5:55:88:da:5f:34:87:2b: d7:3d:4d:77:a1:9e:a6:49:f3:b4:e0:4e:de:07:dc: 96:f3:86:2f:c5:09:40:6e:86:27:8f:de:d8:71:b1: 9c:90:b1:8d:98:80:1c:d3:43:4b:05:3f:46:72:1a: c9:1f:2d:68:34:14:fc:70:ab:3b:43:37:ff:f5:00: 36:c6:6a:67:cc:69:0c:e2:44:14:1b:7c:d5:be:8e: a7:2c:1e:b7:c4:b7:23:f2:6d:4b:1f:e5:0f:42:a1: f7:42:74:2e:be:7d:a5:8d:08:7e:e2:3e:1a:4d:9a: 21:1d:e1:f6:fb:2a:01:44:6f:36:47:fb:e5:66:b5: e2:44:7f:4b:47:c5:3c:f5:87:7b:4a:8f:dd:56:c9: c4:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:B3:12:C3:D1:40:47:BD:90:6E:D7:23:1F:D7:A0:85:96:9D:98:0A X509v3 Authority Key Identifier: keyid:30:A9:C9:57:D2:09:1D:24:E0:DF:E5:F6:6C:97:BE:4A:A1:F9:30:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/812a15-c6e4-416a-b09d-84bf31de8413/1/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/812a15-c6e4-416a-b09d-84bf31de8413/1/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:d9:4c:c1:28:15:38:5e:6a:5d:42:d9:da:b2:12:0d:b1:fd: 7e:53:28:73:0a:cd:4a:fe:1f:c6:d7:44:09:a9:72:9d:42:81: a8:77:8d:c0:2c:30:a4:c6:09:a4:5e:33:3b:43:d2:b7:c6:06: ca:be:2f:ac:82:a2:c5:b2:f2:f7:b0:40:3f:a7:79:b1:1e:d9: 0b:de:de:ae:ef:e9:a6:13:91:12:81:c5:e2:fe:15:cf:47:6a: ff:7e:66:19:81:de:05:69:cf:99:91:9c:f7:f9:18:85:bf:8c: 91:e6:30:10:06:16:b9:f6:50:15:5f:a9:71:ef:2b:ac:1a:85: 68:3e:c5:ac:e5:62:67:cd:8a:76:95:32:e4:d2:55:73:b0:24: 24:94:90:45:10:f3:54:10:6c:4f:06:01:09:09:0f:f9:9f:6d: 3a:37:09:6b:fd:65:93:c4:86:af:db:a4:ee:4e:94:09:26:a4: b8:56:da:a9:c7:41:f6:c0:15:92:ce:c2:cc:7b:84:43:b3:fb: d3:1f:dd:b1:7b:ff:3e:67:13:74:4e:a5:78:80:33:2c:b0:6f: 0d:ce:80:08:0a:12:61:17:cc:b1:84:b4:40:85:23:0c:96:57: d2:c0:62:f4:87:b1:c4:5f:3f:e5:83:e9:9b:00:b2:f8:dc:58: bf:5b:71:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtcrbO1cVOd/SgtLEHVpWN1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwYTljOTU3ZDIwOTFkMjRlMGRmZTVmNjZjOTdiZTRhYTFm OTMwODQwHhcNMjUxMjI2MjIwMDQ2WhcNMjUxMjI3MjIwMDQ2WjAzMTEwLwYDVQQD Eyg1YmIzMTJjM2QxNDA0N2JkOTA2ZWQ3MjMxZmQ3YTA4NTk2OWQ5ODBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/uvFgETjMvencDVosWo8LQ4aEeM Wp2BY2Qqw2gSyV7LfvbmjvFzAdxwpsEnHgky5WTNNi0hi0+H/4sX85qXMCwnQgzD JT6BPNGO05FVX4RvC1tAeOrAZ7TdrH3ZXBwxXqUDcKX5Yl7LAJiu559cxVWI2l80 hyvXPU13oZ6mSfO04E7eB9yW84YvxQlAboYnj97YcbGckLGNmIAc00NLBT9GchrJ Hy1oNBT8cKs7Qzf/9QA2xmpnzGkM4kQUG3zVvo6nLB63xLcj8m1LH+UPQqH3QnQu vn2ljQh+4j4aTZohHeH2+yoBRG82R/vlZrXiRH9LR8U89Yd7So/dVsnEWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFuzEsPRQEe9kG7XIx/XoIWWnZgKMB8GA1UdIwQY MBaAFDCpyVfSCR0k4N/l9myXvkqh+TCEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUtuSlY5SUpIU1RnMy1YMmJKZS1TcUg1TUlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy84MTJhMTUtYzZlNC00MTZhLWIwOWQt ODRiZjMxZGU4NDEzLzEvTUtuSlY5SUpIU1RnMy1YMmJKZS1TcUg1TUlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy84MTJhMTUtYzZlNC00MTZhLWIwOWQtODRiZjMxZGU4NDEz LzEvTUtuSlY5SUpIU1RnMy1YMmJKZS1TcUg1TUlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASNlMwSgV OF5qXULZ2rISDbH9flMocwrNSv4fxtdECalynUKBqHeNwCwwpMYJpF4zO0PSt8YG yr4vrIKixbLy97BAP6d5sR7ZC97eru/pphOREoHF4v4Vz0dq/35mGYHeBWnPmZGc 9/kYhb+MkeYwEAYWufZQFV+pce8rrBqFaD7FrOViZ82KdpUy5NJVc7AkJJSQRRDz VBBsTwYBCQkP+Z9tOjcJa/1lk8SGr9uk7k6UCSakuFbaqcdB9sAVks7CzHuEQ7P7 0x/dsXv/PmcTdE6leIAzLLBvDc6ACAoSYRfMsYS0QIUjDJZX0sBi9IexxF8/5YPp mwCy+NxYv1txGQ== -----END CERTIFICATE-----Generated at Sat Dec 27 02:16:12 2025 by rpki-client