This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.mft File: MkdKx8qF4JwtSLM-e_Zvjtdk3g8.mft (raw, json) Hash identifier: N+qm817x0dnxCbwwJ598hPPsLOsbAVlSDPIthQcUkRM= Subject key identifier: 90:03:37:55:2E:D4:72:F5:3A:2A:C8:FD:53:38:92:2D:38:64:AC:0B Authority key identifier: 32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F Certificate issuer: /CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f Certificate serial: 019B378E6FC6B96DB84B8D28373F8CC625BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.mft Manifest number: 17AF Signing time: Fri 19 Dec 2025 17:00:40 +0000 Manifest this update: Fri 19 Dec 2025 17:00:40 +0000 Manifest next update: Sat 20 Dec 2025 17:00:40 +0000 Files and hashes: 1: 08x65D62xajmjuWxGOGX--5GFZ4.roa (hash: ku01TCluM3ObD1DEPpsLr/8jGhA1O5espf/zteTKSkk=) 2: 0UoizghhK2t_Hs9ANXwnp2V3H9g.roa (hash: j4VZblrlmGvi/zncbh9YoYNVMyrFMgKvx6DiuKh68sw=) 3: 1-fxNLZQMykWE3SLBLsEKwibzn3o.roa (hash: U9t8UfOKITE6D0gBLc/Dtn9zr6EfXzJkxHJL0LBQvTo=) 4: FDmDvOACHulfshItBSDCX5mBYSQ.roa (hash: aexzHKGvD/WM+wZ6/qx7vyWxEHAqx7gswtzEcmCk74k=) 5: FzyJ-A4chBzu8lQqhpLh4dfVe9s.roa (hash: kikBFtCVFZZA5yK1FlsJJ2Y15ol/mIm/K3+f2pwmt3Q=) 6: JRfXlKgZScSlnAP9_s4mWUCHMzI.roa (hash: Yofq9QzaUqxyhMLfnSLcXXtmS3vz0xWVOjl3kItQ1gM=) 7: MkdKx8qF4JwtSLM-e_Zvjtdk3g8.crl (hash: 97S8qoZXlIuRA3GeGj32v0ca927157LEl3R5lYmR6wU=) 8: RV1rjCwSnXKPzqWOYcizuue6Tmw.roa (hash: ZJyuiQwoYun/WqH4NVoy2nm760NToV5F7bd+tbvhpZI=) 9: UI2cnhatNs5ZeysmslxEpLBSTew.roa (hash: axZPCQgEFKrONNIyjteNC+Y0RYmX6khaCS5yj1K7lFE=) 10: XIqtTjvuJ5glY39EaIP6KmILhoo.roa (hash: oyK+JoJZ3ZJXn7BAWGpujgyfoF5xI3Ds91YiwWdI2PE=) 11: XwhTClSP1UI8joFe2laQDXk_PGU.roa (hash: Vu9nNK134kjM8iGZdGpKi0T5ZrLtuDBr7FKT4joBB3w=) 12: b_MAVuI29oBciIh7vGGq0NJVEzc.roa (hash: hDxp3S5bhbbLqI6OACypq5MMFaQlI+7lCsYe3tJ2F9c=) 13: dOfaSe3fIYIhGR1xcwXjfUk3OeI.roa (hash: uz8UfxMH6M1zEnn7EFrd8TVCQANQpajV/Ux4YkN59Jk=) 14: ivBw7pb2lERE4O4pT70f-IjK-H8.roa (hash: 9+du4uvg6+sqYU99LVsbimMbdhpdO5ppSVPQO3/HDIY=) 15: vaL0J_r43BzBTm5r8Bo75j0pTF8.roa (hash: 75FzmVXUE4MjGcr9LiSgeGxgqkVwVmsZ6mF1xXYO59Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.mft rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:8e:6f:c6:b9:6d:b8:4b:8d:28:37:3f:8c:c6:25:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f Validity Not Before: Dec 19 17:00:40 2025 GMT Not After : Dec 20 17:00:40 2025 GMT Subject: CN=900337552ed472f53a2ac8fd5338922d3864ac0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:c7:aa:64:9b:1c:2a:a1:34:70:27:59:79:5a: f1:31:90:6c:fe:ef:d4:bf:8a:d5:87:02:93:4e:2b: 50:59:c8:c8:46:af:f2:99:ae:28:76:60:30:34:90: 84:a2:5e:ba:38:b9:dd:3c:3c:37:66:22:c9:24:47: 2e:3e:e0:b4:0e:5b:ad:c6:fa:b7:18:9c:39:14:50: f8:49:8f:dc:5c:85:28:9a:6a:50:57:cc:26:9b:9b: c1:9a:ae:f0:22:69:87:0a:3d:0c:9f:4a:40:c1:a5: bc:35:7c:84:63:b3:87:11:93:95:8a:27:3d:5c:b5: bc:4d:fe:57:a2:d7:98:0e:7e:ae:8d:de:95:df:ff: c0:ef:c8:8f:a9:ab:78:30:01:87:6d:95:9f:86:34: 95:a3:79:94:85:f5:76:cd:df:a4:6c:0c:a6:43:c8: b1:6f:37:cb:44:2e:ad:07:c6:6f:56:29:fe:1a:17: 59:99:93:3f:21:af:f5:83:c7:6c:83:1d:60:00:82: ec:55:98:ca:91:fa:b9:15:46:39:3b:9a:32:d4:78: 64:c8:90:1e:65:47:df:eb:5c:73:21:f9:97:72:09: c0:db:7a:a2:45:d8:79:4f:ff:ae:6a:f6:b5:57:6b: 48:e3:22:8d:9b:9c:25:82:33:fd:21:ba:ce:21:19: b5:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:03:37:55:2E:D4:72:F5:3A:2A:C8:FD:53:38:92:2D:38:64:AC:0B X509v3 Authority Key Identifier: keyid:32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:de:ff:a7:6b:f7:49:ad:c8:4a:fd:e9:79:2c:b3:3c:ca:b5: ba:2b:56:2d:29:05:80:8b:e9:ec:6c:93:b2:94:de:d4:d4:95: 43:46:52:08:db:8e:d8:ac:97:3f:d6:ba:3e:68:1b:6e:11:a3: 3c:d1:f6:0e:c7:98:af:d5:19:5d:fa:63:c6:8d:22:84:b4:04: 76:f3:a6:60:f2:6f:33:67:70:b2:8a:89:b3:af:70:c1:44:d7: 5f:9f:e3:57:87:81:aa:4f:69:89:74:07:0c:77:98:d9:be:d1: c4:ec:f4:56:13:84:42:72:2e:06:8b:17:08:1e:0c:e7:cd:3c: dd:37:66:5b:fb:d2:c7:e6:90:b7:d9:f7:2e:36:70:6e:be:b5: 7a:fb:97:3e:6a:c1:5e:01:e7:b7:59:76:48:6f:e8:ba:4c:97: 75:f0:f2:02:1b:ad:db:eb:92:59:cf:45:78:ea:b4:51:e8:7d: 93:e3:9e:67:41:62:b2:d8:2f:b4:90:92:d3:5d:ec:aa:d3:5b: 81:e9:82:bb:91:d9:d5:6d:e8:72:26:e5:54:9d:03:65:22:51: a1:9f:66:36:17:a8:bd:05:87:d8:9f:4c:13:83:b1:83:37:41: 3d:d1:9e:c9:04:4a:a8:eb:0c:9f:c0:be:40:6a:ca:61:47:bc: 62:a8:a9:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3jm/GuW24S40oNz+MxiW6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNDc0YWM3Y2E4NWUwOWMyZDQ4YjMzZTdiZjY2ZjhlZDc2 NGRlMGYwHhcNMjUxMjE5MTcwMDQwWhcNMjUxMjIwMTcwMDQwWjAzMTEwLwYDVQQD Eyg5MDAzMzc1NTJlZDQ3MmY1M2EyYWM4ZmQ1MzM4OTIyZDM4NjRhYzBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA48eqZJscKqE0cCdZeVrxMZBs/u/U v4rVhwKTTitQWcjIRq/yma4odmAwNJCEol66OLndPDw3ZiLJJEcuPuC0Dlutxvq3 GJw5FFD4SY/cXIUommpQV8wmm5vBmq7wImmHCj0Mn0pAwaW8NXyEY7OHEZOViic9 XLW8Tf5XoteYDn6ujd6V3//A78iPqat4MAGHbZWfhjSVo3mUhfV2zd+kbAymQ8ix bzfLRC6tB8ZvVin+GhdZmZM/Ia/1g8dsgx1gAILsVZjKkfq5FUY5O5oy1HhkyJAe ZUff61xzIfmXcgnA23qiRdh5T/+uava1V2tI4yKNm5wlgjP9IbrOIRm1lQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJADN1Uu1HL1OirI/VM4ki04ZKwLMB8GA1UdIwQY MBaAFDJHSsfKheCcLUizPnv2b47XZN4PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWtkS3g4cUY0Snd0U0xNLWVfWnZqdGRrM2c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8xZmQwYTYtNDUxNy00YTBiLWIzYzkt MTJlYzIyYzljNWEyLzEvTWtkS3g4cUY0Snd0U0xNLWVfWnZqdGRrM2c4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC8xZmQwYTYtNDUxNy00YTBiLWIzYzktMTJlYzIyYzljNWEy LzEvTWtkS3g4cUY0Snd0U0xNLWVfWnZqdGRrM2c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj97/p2v3 Sa3ISv3peSyzPMq1uitWLSkFgIvp7GyTspTe1NSVQ0ZSCNuO2KyXP9a6PmgbbhGj PNH2DseYr9UZXfpjxo0ihLQEdvOmYPJvM2dwsoqJs69wwUTXX5/jV4eBqk9piXQH DHeY2b7RxOz0VhOEQnIuBosXCB4M58083TdmW/vSx+aQt9n3LjZwbr61evuXPmrB XgHnt1l2SG/oukyXdfDyAhut2+uSWc9FeOq0Ueh9k+OeZ0FistgvtJCS013sqtNb gemCu5HZ1W3ociblVJ0DZSJRoZ9mNheovQWH2J9ME4OxgzdBPdGeyQRKqOsMn8C+ QGrKYUe8YqipMg== -----END CERTIFICATE-----Generated at Fri Dec 19 22:37:15 2025 by rpki-client