This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c6d984-6bfc-4602-9d58-ab2d5e7d4a7b/1/mjk-8WAn_AO8XARf-SidS7t_82Q.mft File: mjk-8WAn_AO8XARf-SidS7t_82Q.mft (raw, json) Hash identifier: PVhasMyjybDB0oi5gAFeeACPMOGi/b9I2taceLqZmv0= Subject key identifier: 6B:69:54:A9:6F:44:22:3E:CC:B1:1E:B4:D4:1D:58:A9:32:B1:7E:8E Authority key identifier: 9A:39:3E:F1:60:27:FC:03:BC:5C:04:5F:F9:28:9D:4B:BB:7F:F3:64 Certificate issuer: /CN=9a393ef16027fc03bc5c045ff9289d4bbb7ff364 Certificate serial: 019B4438423B2F7BCE32A8F58CC4981973D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mjk-8WAn_AO8XARf-SidS7t_82Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/c6d984-6bfc-4602-9d58-ab2d5e7d4a7b/1/mjk-8WAn_AO8XARf-SidS7t_82Q.mft Manifest number: 13D5 Signing time: Mon 22 Dec 2025 04:01:36 +0000 Manifest this update: Mon 22 Dec 2025 04:01:36 +0000 Manifest next update: Tue 23 Dec 2025 04:01:36 +0000 Files and hashes: 1: 1-clNUolPp_tHK-YnMn1XJMAOUjs.roa (hash: KJW40p6GcC71WhI5WuddxJyJBJzYeaQczvMIzcE32ao=) 2: ThrNo6kiekZ1KA2l01FtFpnY2fk.roa (hash: sguoljLucbHptttLjY2jSVxQGOBsjlswaEqE7sugblE=) 3: cV3BD5-gE9KIDxyMlti5rVaXSy8.roa (hash: PvTekp3dawXrC4YtfV0s/U4et5tU6tfVspZ3Sv6BzkQ=) 4: mjk-8WAn_AO8XARf-SidS7t_82Q.crl (hash: 1JsKGav4pd2Dkw3n2wWQvYLfrHfjU7poprWrfXOrKbk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/c6d984-6bfc-4602-9d58-ab2d5e7d4a7b/1/mjk-8WAn_AO8XARf-SidS7t_82Q.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/c6d984-6bfc-4602-9d58-ab2d5e7d4a7b/1/mjk-8WAn_AO8XARf-SidS7t_82Q.mft rsync://rpki.ripe.net/repository/DEFAULT/mjk-8WAn_AO8XARf-SidS7t_82Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 04:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:38:42:3b:2f:7b:ce:32:a8:f5:8c:c4:98:19:73:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a393ef16027fc03bc5c045ff9289d4bbb7ff364 Validity Not Before: Dec 22 04:01:36 2025 GMT Not After : Dec 23 04:01:36 2025 GMT Subject: CN=6b6954a96f44223eccb11eb4d41d58a932b17e8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:51:84:62:dd:68:f2:8e:24:26:48:8c:a9:4e: 36:41:bd:47:e8:51:8d:00:8d:c6:89:ed:30:14:7c: c1:25:3f:11:5f:26:29:cc:1e:95:fd:98:80:94:25: 71:5f:1e:7b:a1:f5:91:2d:63:a9:a7:a2:d1:70:77: 72:58:af:de:79:31:53:61:d4:23:fb:0e:1b:da:46: 8d:b8:f4:ab:aa:6f:4a:ca:92:ea:2a:f6:76:84:3e: 04:9b:8f:11:fd:a6:a3:cd:24:fc:49:03:d2:bb:20: 76:3a:3c:c5:3b:91:a8:5f:64:4e:a0:38:36:ee:2a: 3c:b8:d0:bf:74:08:69:01:2b:f5:49:7f:17:e4:3b: b3:d9:b1:ee:c3:72:b0:28:20:13:ad:77:f6:c9:ba: 47:fd:91:5e:bf:8b:20:59:47:d2:ad:fe:04:f0:d1: a6:8f:00:1b:47:8b:12:81:7e:9c:21:42:e5:84:b1: c4:32:fb:b1:e3:2d:72:3b:17:06:68:2b:5b:9b:2f: bc:f1:0a:19:db:83:43:10:cc:5a:03:a6:8c:4e:e1: 24:d6:c0:47:2e:41:fa:35:dd:45:33:35:78:7a:75: e9:00:e0:c4:27:37:09:ac:7d:12:ac:7a:57:bb:9e: 1b:a5:9b:69:65:65:c1:f1:eb:50:a4:8c:6c:3f:3d: d5:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:69:54:A9:6F:44:22:3E:CC:B1:1E:B4:D4:1D:58:A9:32:B1:7E:8E X509v3 Authority Key Identifier: keyid:9A:39:3E:F1:60:27:FC:03:BC:5C:04:5F:F9:28:9D:4B:BB:7F:F3:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mjk-8WAn_AO8XARf-SidS7t_82Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c6d984-6bfc-4602-9d58-ab2d5e7d4a7b/1/mjk-8WAn_AO8XARf-SidS7t_82Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c6d984-6bfc-4602-9d58-ab2d5e7d4a7b/1/mjk-8WAn_AO8XARf-SidS7t_82Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:e5:b0:99:9c:ab:52:36:b5:96:bc:c5:f3:dc:1b:ee:25:7f: e8:fa:89:49:04:bd:43:b3:3b:6d:f7:c7:09:b0:02:70:64:dd: d8:3d:4b:69:37:f7:ef:d2:cc:a3:60:1f:33:5d:5d:99:ae:05: 60:10:2f:1f:41:f1:60:f9:bf:b7:2a:39:4d:39:4b:06:c2:bb: 19:ba:a4:eb:d2:2d:72:ec:98:e7:20:97:88:4a:bf:a1:3c:f7: d6:38:ce:a1:fc:e9:7c:dc:c0:f7:5e:8d:8d:ab:8d:7c:0c:be: f6:65:77:52:68:fb:88:e5:b7:d7:3a:89:0c:2b:27:2a:31:96: a2:58:f7:2c:cd:32:38:b6:c5:2f:1c:62:f5:83:b2:6e:9e:00: 5b:97:be:9a:b3:2f:38:ba:bb:34:15:98:c6:b9:0f:82:8e:94: 44:21:e6:6a:30:e8:81:fe:48:6e:12:e9:b7:81:ce:2a:6c:7f: c9:ec:ea:b8:01:f6:91:ab:f8:fb:d2:b3:c0:f8:82:7c:0e:87: cb:10:21:64:f4:e8:91:0e:a6:80:c2:8d:37:05:5a:7d:8d:58: 70:a8:cf:e8:b0:38:fe:6f:38:2a:87:b0:00:52:3a:1c:01:bc: e4:df:ce:b3:8b:21:9c:1c:cf:d5:39:ef:59:3b:8f:6d:d2:66: c6:db:bf:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEOEI7L3vOMqj1jMSYGXPYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhMzkzZWYxNjAyN2ZjMDNiYzVjMDQ1ZmY5Mjg5ZDRiYmI3 ZmYzNjQwHhcNMjUxMjIyMDQwMTM2WhcNMjUxMjIzMDQwMTM2WjAzMTEwLwYDVQQD Eyg2YjY5NTRhOTZmNDQyMjNlY2NiMTFlYjRkNDFkNThhOTMyYjE3ZThlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFGEYt1o8o4kJkiMqU42Qb1H6FGN AI3Gie0wFHzBJT8RXyYpzB6V/ZiAlCVxXx57ofWRLWOpp6LRcHdyWK/eeTFTYdQj +w4b2kaNuPSrqm9KypLqKvZ2hD4Em48R/aajzST8SQPSuyB2OjzFO5GoX2ROoDg2 7io8uNC/dAhpASv1SX8X5Duz2bHuw3KwKCATrXf2ybpH/ZFev4sgWUfSrf4E8NGm jwAbR4sSgX6cIULlhLHEMvux4y1yOxcGaCtbmy+88QoZ24NDEMxaA6aMTuEk1sBH LkH6Nd1FMzV4enXpAODEJzcJrH0SrHpXu54bpZtpZWXB8etQpIxsPz3VGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGtpVKlvRCI+zLEetNQdWKkysX6OMB8GA1UdIwQY MBaAFJo5PvFgJ/wDvFwEX/konUu7f/NkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWprLThXQW5fQU84WEFSZi1TaWRTN3RfODJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9jNmQ5ODQtNmJmYy00NjAyLTlkNTgt YWIyZDVlN2Q0YTdiLzEvbWprLThXQW5fQU84WEFSZi1TaWRTN3RfODJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC9jNmQ5ODQtNmJmYy00NjAyLTlkNTgtYWIyZDVlN2Q0YTdi LzEvbWprLThXQW5fQU84WEFSZi1TaWRTN3RfODJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArOWwmZyr Uja1lrzF89wb7iV/6PqJSQS9Q7M7bffHCbACcGTd2D1LaTf379LMo2AfM11dma4F YBAvH0HxYPm/tyo5TTlLBsK7Gbqk69ItcuyY5yCXiEq/oTz31jjOofzpfNzA916N jauNfAy+9mV3Umj7iOW31zqJDCsnKjGWolj3LM0yOLbFLxxi9YOybp4AW5e+mrMv OLq7NBWYxrkPgo6URCHmajDogf5IbhLpt4HOKmx/yezquAH2kav4+9KzwPiCfA6H yxAhZPTokQ6mgMKNNwVafY1YcKjP6LA4/m84KoewAFI6HAG85N/Os4shnBzP1Tnv WTuPbdJmxtu/Og== -----END CERTIFICATE-----Generated at Mon Dec 22 14:11:46 2025 by rpki-client