This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/3d4e04-93d4-4f5a-8dcd-332f34588365/1/MmboynDkwXGKCYBFOPnkYLMF-bM.mft File: MmboynDkwXGKCYBFOPnkYLMF-bM.mft (raw, json) Hash identifier: NYbfhjzOrYkzMYpX/EDgNcCu2Sh1j3Epi+U7JPdkDac= Subject key identifier: 0F:10:F7:0D:2F:B3:49:B3:6E:83:23:9C:E5:1B:49:C7:14:39:66:BD Authority key identifier: 32:66:E8:CA:70:E4:C1:71:8A:09:80:45:38:F9:E4:60:B3:05:F9:B3 Certificate issuer: /CN=3266e8ca70e4c1718a09804538f9e460b305f9b3 Certificate serial: 019B334482004A3BC35546F695F2605C9502 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmboynDkwXGKCYBFOPnkYLMF-bM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/3d4e04-93d4-4f5a-8dcd-332f34588365/1/MmboynDkwXGKCYBFOPnkYLMF-bM.mft Manifest number: 1781 Signing time: Thu 18 Dec 2025 21:01:26 +0000 Manifest this update: Thu 18 Dec 2025 21:01:26 +0000 Manifest next update: Fri 19 Dec 2025 21:01:26 +0000 Files and hashes: 1: MmboynDkwXGKCYBFOPnkYLMF-bM.crl (hash: GMDea3/80pT31LESHIVgwSL7bUCQPVd3dvQAoZSAYvk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/3d4e04-93d4-4f5a-8dcd-332f34588365/1/MmboynDkwXGKCYBFOPnkYLMF-bM.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/3d4e04-93d4-4f5a-8dcd-332f34588365/1/MmboynDkwXGKCYBFOPnkYLMF-bM.mft rsync://rpki.ripe.net/repository/DEFAULT/MmboynDkwXGKCYBFOPnkYLMF-bM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 21:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:44:82:00:4a:3b:c3:55:46:f6:95:f2:60:5c:95:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3266e8ca70e4c1718a09804538f9e460b305f9b3 Validity Not Before: Dec 18 21:01:26 2025 GMT Not After : Dec 19 21:01:26 2025 GMT Subject: CN=0f10f70d2fb349b36e83239ce51b49c7143966bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:c4:49:d8:10:33:ef:dd:e3:b0:e1:dc:61:dd: b7:b7:0a:ce:b0:bf:81:85:2b:97:58:81:f6:8a:53: fc:4a:88:61:6d:dc:0b:23:77:41:e7:5a:10:70:a5: 26:26:f8:70:dc:c0:4a:0b:da:d2:41:9d:c3:26:8f: 0e:10:1a:af:33:9a:5e:2d:b5:a3:96:25:04:50:0a: c2:c7:a1:89:ab:af:d7:d5:3f:bc:86:ab:35:20:cc: 67:73:63:b0:e8:d4:3d:15:fd:5d:87:93:49:35:b0: e7:02:d6:d4:c4:7b:2b:9b:8c:70:9e:41:40:94:53: 2e:6e:d1:87:6a:6d:64:25:d6:44:24:d4:4b:4d:71: 9e:7c:66:25:c6:69:0c:f7:9a:e6:1b:10:6c:43:96: fa:3d:0c:12:e8:3f:10:b0:d8:b3:22:85:00:39:8c: c0:18:e3:54:68:49:99:a3:3c:ae:40:4d:83:d6:89: 78:51:ad:e7:24:3d:21:6b:d0:1c:5d:6c:65:bd:dd: d9:e4:5d:8a:bc:5f:96:59:4b:c5:52:e6:b2:c2:50: 1a:46:1d:84:68:6d:fe:28:dc:00:94:c6:35:78:96: 1b:ba:c6:98:e4:da:e7:bc:38:8b:6a:68:e6:40:8b: bc:85:5b:76:5a:ef:ce:97:49:3e:a1:55:09:b2:44: 56:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:10:F7:0D:2F:B3:49:B3:6E:83:23:9C:E5:1B:49:C7:14:39:66:BD X509v3 Authority Key Identifier: keyid:32:66:E8:CA:70:E4:C1:71:8A:09:80:45:38:F9:E4:60:B3:05:F9:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmboynDkwXGKCYBFOPnkYLMF-bM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3d4e04-93d4-4f5a-8dcd-332f34588365/1/MmboynDkwXGKCYBFOPnkYLMF-bM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3d4e04-93d4-4f5a-8dcd-332f34588365/1/MmboynDkwXGKCYBFOPnkYLMF-bM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:3e:27:d6:20:06:e4:80:29:7d:1c:98:dd:cc:21:95:38:3a: 32:ae:c0:4c:a7:8d:05:53:b3:a1:0e:50:fa:1d:d2:1e:e0:a1: 17:e0:26:7f:a5:d7:97:11:99:aa:e9:af:65:5c:4f:0c:dc:f9: 0f:c5:f7:d2:06:38:bd:f5:52:f8:8a:df:c6:89:ac:9f:ce:44: 92:cb:f0:a8:fb:d1:9a:0e:93:40:34:9a:4f:0a:48:d2:c4:77: a1:3f:80:11:7a:17:ac:3e:c1:d3:9d:35:82:79:00:14:41:eb: 75:64:28:29:ff:87:7c:1d:1b:03:96:ae:fd:1a:fa:28:ae:85: e5:9b:ef:0e:b1:b1:07:8d:d5:8f:47:17:02:da:81:75:06:33: d6:7f:92:3c:c8:3e:94:3e:73:4f:86:35:8f:44:d1:7c:82:c7: eb:ba:66:5d:91:c6:9d:84:90:b6:86:63:b7:a9:db:b2:d7:0e: bf:92:9c:49:11:d2:53:eb:e5:2a:d9:89:19:d6:c7:fc:17:a3: 8c:a4:d1:d6:6f:18:95:78:37:50:04:13:de:16:b9:b1:99:71: 2a:63:29:70:84:6c:4e:df:74:6f:34:78:de:7f:e5:f6:5a:86: f9:fb:30:a7:c1:39:28:6a:b8:83:7a:f9:54:0a:1a:7e:b9:63: 3b:8a:01:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszRIIASjvDVUb2lfJgXJUCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNjZlOGNhNzBlNGMxNzE4YTA5ODA0NTM4ZjllNDYwYjMw NWY5YjMwHhcNMjUxMjE4MjEwMTI2WhcNMjUxMjE5MjEwMTI2WjAzMTEwLwYDVQQD EygwZjEwZjcwZDJmYjM0OWIzNmU4MzIzOWNlNTFiNDljNzE0Mzk2NmJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMRJ2BAz793jsOHcYd23twrOsL+B hSuXWIH2ilP8SohhbdwLI3dB51oQcKUmJvhw3MBKC9rSQZ3DJo8OEBqvM5peLbWj liUEUArCx6GJq6/X1T+8hqs1IMxnc2Ow6NQ9Ff1dh5NJNbDnAtbUxHsrm4xwnkFA lFMubtGHam1kJdZEJNRLTXGefGYlxmkM95rmGxBsQ5b6PQwS6D8QsNizIoUAOYzA GONUaEmZozyuQE2D1ol4Ua3nJD0ha9AcXWxlvd3Z5F2KvF+WWUvFUuaywlAaRh2E aG3+KNwAlMY1eJYbusaY5NrnvDiLamjmQIu8hVt2Wu/Ol0k+oVUJskRWjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA8Q9w0vs0mzboMjnOUbSccUOWa9MB8GA1UdIwQY MBaAFDJm6Mpw5MFxigmARTj55GCzBfmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTW1ib3luRGt3WEdLQ1lCRk9QbmtZTE1GLWJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8zZDRlMDQtOTNkNC00ZjVhLThkY2Qt MzMyZjM0NTg4MzY1LzEvTW1ib3luRGt3WEdLQ1lCRk9QbmtZTE1GLWJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC8zZDRlMDQtOTNkNC00ZjVhLThkY2QtMzMyZjM0NTg4MzY1 LzEvTW1ib3luRGt3WEdLQ1lCRk9QbmtZTE1GLWJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxj4n1iAG 5IApfRyY3cwhlTg6Mq7ATKeNBVOzoQ5Q+h3SHuChF+Amf6XXlxGZqumvZVxPDNz5 D8X30gY4vfVS+Irfxomsn85EksvwqPvRmg6TQDSaTwpI0sR3oT+AEXoXrD7B0501 gnkAFEHrdWQoKf+HfB0bA5au/Rr6KK6F5ZvvDrGxB43Vj0cXAtqBdQYz1n+SPMg+ lD5zT4Y1j0TRfILH67pmXZHGnYSQtoZjt6nbstcOv5KcSRHSU+vlKtmJGdbH/Bej jKTR1m8YlXg3UAQT3ha5sZlxKmMpcIRsTt90bzR43n/l9lqG+fswp8E5KGq4g3r5 VAoafrljO4oB7Q== -----END CERTIFICATE-----Generated at Fri Dec 19 02:25:04 2025 by rpki-client