This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c6d984-6bfc-4602-9d58-ab2d5e7d4a7b/1/mjk-8WAn_AO8XARf-SidS7t_82Q.mft File: mjk-8WAn_AO8XARf-SidS7t_82Q.mft (raw, json) Hash identifier: YKKKgfl3uRE4W2/NYeaiXX161RAsSn+O6fPcY8iCSd8= Subject key identifier: 99:07:27:BD:1C:7D:2A:7B:6F:4C:32:72:15:4B:2D:F9:88:71:88:E3 Authority key identifier: 9A:39:3E:F1:60:27:FC:03:BC:5C:04:5F:F9:28:9D:4B:BB:7F:F3:64 Certificate issuer: /CN=9a393ef16027fc03bc5c045ff9289d4bbb7ff364 Certificate serial: 019B3C7EA802064AB3E5124C8FA74E60D98E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mjk-8WAn_AO8XARf-SidS7t_82Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/c6d984-6bfc-4602-9d58-ab2d5e7d4a7b/1/mjk-8WAn_AO8XARf-SidS7t_82Q.mft Manifest number: 13D1 Signing time: Sat 20 Dec 2025 16:01:31 +0000 Manifest this update: Sat 20 Dec 2025 16:01:31 +0000 Manifest next update: Sun 21 Dec 2025 16:01:31 +0000 Files and hashes: 1: 1-clNUolPp_tHK-YnMn1XJMAOUjs.roa (hash: KJW40p6GcC71WhI5WuddxJyJBJzYeaQczvMIzcE32ao=) 2: ThrNo6kiekZ1KA2l01FtFpnY2fk.roa (hash: sguoljLucbHptttLjY2jSVxQGOBsjlswaEqE7sugblE=) 3: cV3BD5-gE9KIDxyMlti5rVaXSy8.roa (hash: PvTekp3dawXrC4YtfV0s/U4et5tU6tfVspZ3Sv6BzkQ=) 4: mjk-8WAn_AO8XARf-SidS7t_82Q.crl (hash: K6f5UDtpentPF69dnGOWb0NOr7TzdNhrcV49wpyuRQ4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/c6d984-6bfc-4602-9d58-ab2d5e7d4a7b/1/mjk-8WAn_AO8XARf-SidS7t_82Q.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/c6d984-6bfc-4602-9d58-ab2d5e7d4a7b/1/mjk-8WAn_AO8XARf-SidS7t_82Q.mft rsync://rpki.ripe.net/repository/DEFAULT/mjk-8WAn_AO8XARf-SidS7t_82Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:a8:02:06:4a:b3:e5:12:4c:8f:a7:4e:60:d9:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a393ef16027fc03bc5c045ff9289d4bbb7ff364 Validity Not Before: Dec 20 16:01:31 2025 GMT Not After : Dec 21 16:01:31 2025 GMT Subject: CN=990727bd1c7d2a7b6f4c3272154b2df9887188e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:cb:21:a0:e2:07:e0:9c:54:26:7f:7d:96:53: cd:f0:0f:22:62:57:5e:04:de:c5:11:48:47:61:22: 57:bd:7b:d5:78:b7:4d:ec:e1:64:8b:5b:62:3e:ec: 19:5f:21:52:47:a1:71:7f:c9:4d:2e:59:c7:3d:ac: c3:96:e1:d9:4d:c5:ee:02:02:cc:d8:1a:2f:71:37: 67:a0:02:5e:19:21:c4:90:5d:74:40:45:f1:c8:e1: a3:2f:c7:45:aa:c9:eb:d3:dd:60:cb:1e:76:c7:09: 65:3a:b7:55:5c:24:61:16:51:e9:cc:0c:66:8d:be: b7:8d:07:80:53:06:0d:d0:7c:75:68:7b:f8:11:4a: 0f:21:94:58:6f:7e:fc:1b:f7:3e:5b:31:fa:a7:3a: 29:a3:4b:71:0b:62:d6:37:e4:9b:ab:0a:ce:32:a6: f6:07:37:55:cf:6f:d7:32:df:3f:b8:f7:52:78:80: 30:26:bc:73:21:6c:da:c8:fc:d6:64:36:40:30:d0: c8:56:82:81:b9:c1:f1:70:17:77:8a:8c:99:f5:7b: 57:3e:c8:a6:35:eb:25:82:30:30:6e:55:29:f3:45: 95:28:0e:ad:90:35:6d:e8:10:59:b8:6c:0a:89:8f: 3c:f9:dd:ea:99:60:18:22:21:89:1d:7e:d6:9d:69: 64:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:07:27:BD:1C:7D:2A:7B:6F:4C:32:72:15:4B:2D:F9:88:71:88:E3 X509v3 Authority Key Identifier: keyid:9A:39:3E:F1:60:27:FC:03:BC:5C:04:5F:F9:28:9D:4B:BB:7F:F3:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mjk-8WAn_AO8XARf-SidS7t_82Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c6d984-6bfc-4602-9d58-ab2d5e7d4a7b/1/mjk-8WAn_AO8XARf-SidS7t_82Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c6d984-6bfc-4602-9d58-ab2d5e7d4a7b/1/mjk-8WAn_AO8XARf-SidS7t_82Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:40:22:e8:12:73:13:98:36:32:93:fc:4a:e2:31:eb:0a:65: 0f:4a:a4:4a:e0:dd:07:a9:e4:bd:c8:56:97:9b:56:b1:f2:4c: 86:8a:63:2b:0e:fd:63:e5:e4:83:67:93:d7:68:0c:99:65:57: f4:87:0c:79:45:a6:58:7e:fc:b0:5d:50:4c:52:48:be:6f:af: 3d:67:03:73:73:f3:a7:11:20:a4:ad:8d:90:b6:ca:c8:70:5a: a2:34:d2:3f:5b:f8:70:ec:9b:2c:97:6f:ab:1a:e0:8f:3c:ca: 01:8c:59:91:3e:ea:7e:b7:d0:39:54:7b:9d:8a:7b:98:65:da: 9b:e4:2a:c2:e9:b7:17:85:01:86:59:1f:7d:e1:bb:02:7d:ce: cd:28:b6:d6:b8:d5:ed:b0:93:47:b5:94:8e:1a:b2:30:a0:65: 23:84:29:fa:51:5d:28:52:07:29:a7:24:75:83:72:b8:98:3e: 39:43:0e:37:59:09:f7:2b:98:3d:97:47:be:44:78:a0:b3:62: 6c:92:38:7e:e4:d0:68:e7:37:f1:3b:a1:dd:81:95:e2:1b:aa: 7a:26:72:04:c4:d8:a1:70:68:17:a5:43:e3:33:c1:5a:4f:d3: 58:f6:cc:32:db:ce:98:99:a4:70:75:0c:94:07:5e:f5:70:86: a0:e5:9c:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fqgCBkqz5RJMj6dOYNmOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhMzkzZWYxNjAyN2ZjMDNiYzVjMDQ1ZmY5Mjg5ZDRiYmI3 ZmYzNjQwHhcNMjUxMjIwMTYwMTMxWhcNMjUxMjIxMTYwMTMxWjAzMTEwLwYDVQQD Eyg5OTA3MjdiZDFjN2QyYTdiNmY0YzMyNzIxNTRiMmRmOTg4NzE4OGUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6cshoOIH4JxUJn99llPN8A8iYlde BN7FEUhHYSJXvXvVeLdN7OFki1tiPuwZXyFSR6Fxf8lNLlnHPazDluHZTcXuAgLM 2BovcTdnoAJeGSHEkF10QEXxyOGjL8dFqsnr091gyx52xwllOrdVXCRhFlHpzAxm jb63jQeAUwYN0Hx1aHv4EUoPIZRYb378G/c+WzH6pzopo0txC2LWN+SbqwrOMqb2 BzdVz2/XMt8/uPdSeIAwJrxzIWzayPzWZDZAMNDIVoKBucHxcBd3ioyZ9XtXPsim NeslgjAwblUp80WVKA6tkDVt6BBZuGwKiY88+d3qmWAYIiGJHX7WnWlk0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJkHJ70cfSp7b0wychVLLfmIcYjjMB8GA1UdIwQY MBaAFJo5PvFgJ/wDvFwEX/konUu7f/NkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWprLThXQW5fQU84WEFSZi1TaWRTN3RfODJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9jNmQ5ODQtNmJmYy00NjAyLTlkNTgt YWIyZDVlN2Q0YTdiLzEvbWprLThXQW5fQU84WEFSZi1TaWRTN3RfODJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC9jNmQ5ODQtNmJmYy00NjAyLTlkNTgtYWIyZDVlN2Q0YTdi LzEvbWprLThXQW5fQU84WEFSZi1TaWRTN3RfODJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ0Ai6BJz E5g2MpP8SuIx6wplD0qkSuDdB6nkvchWl5tWsfJMhopjKw79Y+Xkg2eT12gMmWVX 9IcMeUWmWH78sF1QTFJIvm+vPWcDc3PzpxEgpK2NkLbKyHBaojTSP1v4cOybLJdv qxrgjzzKAYxZkT7qfrfQOVR7nYp7mGXam+Qqwum3F4UBhlkffeG7An3OzSi21rjV 7bCTR7WUjhqyMKBlI4Qp+lFdKFIHKackdYNyuJg+OUMON1kJ9yuYPZdHvkR4oLNi bJI4fuTQaOc38Tuh3YGV4huqeiZyBMTYoXBoF6VD4zPBWk/TWPbMMtvOmJmkcHUM lAde9XCGoOWcRg== -----END CERTIFICATE-----Generated at Sun Dec 21 01:30:58 2025 by rpki-client