This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.mft File: mk123S9GBosIca1FAKxuV3r-Rpw.mft (raw, json) Hash identifier: qcfl5K+3dw7xeT98yov5NN8DcKrCCFAMKBjdRAUgvxE= Subject key identifier: 63:34:28:D9:A8:3C:02:26:9E:9F:29:9E:68:3B:1E:DC:23:AF:33:42 Authority key identifier: 9A:4D:76:DD:2F:46:06:8B:08:71:AD:45:00:AC:6E:57:7A:FE:46:9C Certificate issuer: /CN=9a4d76dd2f46068b0871ad4500ac6e577afe469c Certificate serial: 019B3EA34F98D5ABB7CCD9F6B4BDC79DDF42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mk123S9GBosIca1FAKxuV3r-Rpw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.mft Manifest number: 1794 Signing time: Sun 21 Dec 2025 02:00:48 +0000 Manifest this update: Sun 21 Dec 2025 02:00:48 +0000 Manifest next update: Mon 22 Dec 2025 02:00:48 +0000 Files and hashes: 1: g_4HQ6dPEqLM5A1GtfThJC294J4.roa (hash: LZYhI0FV7wY5oWB7xQyZ5bQSIIqgJBDQ7uNwEne/gVE=) 2: j-Wf3znAxyHVOa1yHEzX6v3sp9U.roa (hash: OwOwX0XTVGFVpqs+QebopX8jgHz3h7KxGANJ/Crp1oA=) 3: mk123S9GBosIca1FAKxuV3r-Rpw.crl (hash: lyZA89Brne3jmO6EnLBjaUc+Vqh7fwu2sKdjioIo/UI=) 4: vscV7GZRMa0CPUTvFLBuSp-lIJ8.roa (hash: 2C3QYWkPGEbQmt4ETFEFUqH1R92qUMl/4nE7fTPMPhA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.mft rsync://rpki.ripe.net/repository/DEFAULT/mk123S9GBosIca1FAKxuV3r-Rpw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 02:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:a3:4f:98:d5:ab:b7:cc:d9:f6:b4:bd:c7:9d:df:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a4d76dd2f46068b0871ad4500ac6e577afe469c Validity Not Before: Dec 21 02:00:48 2025 GMT Not After : Dec 22 02:00:48 2025 GMT Subject: CN=633428d9a83c02269e9f299e683b1edc23af3342 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:1d:07:2b:73:e5:0f:f7:82:e7:0c:70:5c:07: 37:91:1e:c1:b8:d4:cc:13:dc:b4:66:6e:45:06:23: b8:4d:b4:c4:eb:69:fe:15:05:6a:f3:ac:ad:94:e1: 53:07:a1:9f:64:53:59:33:81:26:fb:96:b6:b3:23: 2a:07:6b:44:bb:36:8c:51:d1:d9:d0:92:93:24:cf: fb:7d:ed:50:81:8a:c9:40:4e:56:a9:5c:c0:9d:bf: ca:0f:52:dd:f1:3b:07:79:76:7f:e4:38:04:f7:16: 18:cf:7c:5c:f2:6b:ae:c8:59:ee:9a:ed:cf:bf:ec: ff:8c:67:eb:b3:23:7a:91:18:18:62:60:e7:91:5f: f0:a7:e4:35:ee:90:31:3d:41:08:28:96:92:0c:24: fb:bf:56:be:f6:3a:53:0b:17:46:58:d8:d0:8e:d3: c6:d7:39:e1:de:72:85:54:1a:0f:b8:ce:23:0e:13: 0e:97:63:bc:5d:6a:d6:dc:69:8e:22:89:f9:1a:a4: 4a:5b:5d:a2:30:41:32:ac:70:d1:89:57:43:60:a4: 74:53:c7:e2:4d:28:d6:70:3c:78:f6:e6:6e:1b:8e: c7:65:46:b8:96:0f:40:41:3a:d5:d0:08:24:28:7a: 3c:50:d0:31:8e:21:78:49:0f:9d:f4:8f:28:0d:76: cf:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:34:28:D9:A8:3C:02:26:9E:9F:29:9E:68:3B:1E:DC:23:AF:33:42 X509v3 Authority Key Identifier: keyid:9A:4D:76:DD:2F:46:06:8B:08:71:AD:45:00:AC:6E:57:7A:FE:46:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mk123S9GBosIca1FAKxuV3r-Rpw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:94:35:62:ba:cb:79:5e:c9:7c:c3:0c:0d:cf:ca:b1:12:a3: 40:70:4d:d7:01:9a:67:b0:15:88:5d:ec:16:23:d4:09:80:b4: e0:bd:98:7a:55:a1:c8:47:2b:01:12:1c:10:ed:c2:71:7d:ce: 11:b7:93:d1:96:8a:17:4d:f6:4b:ee:bd:c5:74:4f:a5:1f:39: 12:70:be:d7:90:10:da:fa:fb:fe:4c:e3:d0:24:1e:60:75:55: 2d:e3:90:d4:fe:a0:50:8d:5d:11:f3:83:63:31:07:57:ef:c2: ce:ae:28:49:f7:92:7d:cd:88:4a:f5:4c:be:19:04:84:8e:af: 28:31:38:56:fa:b3:3c:43:8d:df:a9:7d:06:88:ff:2e:c8:fa: 4c:02:fe:42:86:c2:00:bc:6f:91:42:2f:21:10:d1:8a:3f:70: 8e:af:9c:ca:99:8b:94:81:41:9a:bb:a6:9f:3e:30:2d:73:8b: 8f:76:79:1e:f1:a6:bc:17:c4:5a:e8:a0:9c:e4:e9:2e:53:4c: b8:c6:6e:d3:85:bc:fc:4d:dc:20:63:97:0a:94:19:0a:26:99: 4c:11:7f:ab:42:39:ba:df:3b:75:49:4f:04:36:b4:5d:2b:48: 90:3f:c1:38:13:62:b8:78:59:3a:51:5e:47:ac:12:c1:76:dd: b3:f2:8a:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+o0+Y1au3zNn2tL3Hnd9CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhNGQ3NmRkMmY0NjA2OGIwODcxYWQ0NTAwYWM2ZTU3N2Fm ZTQ2OWMwHhcNMjUxMjIxMDIwMDQ4WhcNMjUxMjIyMDIwMDQ4WjAzMTEwLwYDVQQD Eyg2MzM0MjhkOWE4M2MwMjI2OWU5ZjI5OWU2ODNiMWVkYzIzYWYzMzQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiR0HK3PlD/eC5wxwXAc3kR7BuNTM E9y0Zm5FBiO4TbTE62n+FQVq86ytlOFTB6GfZFNZM4Em+5a2syMqB2tEuzaMUdHZ 0JKTJM/7fe1QgYrJQE5WqVzAnb/KD1Ld8TsHeXZ/5DgE9xYYz3xc8muuyFnumu3P v+z/jGfrsyN6kRgYYmDnkV/wp+Q17pAxPUEIKJaSDCT7v1a+9jpTCxdGWNjQjtPG 1znh3nKFVBoPuM4jDhMOl2O8XWrW3GmOIon5GqRKW12iMEEyrHDRiVdDYKR0U8fi TSjWcDx49uZuG47HZUa4lg9AQTrV0AgkKHo8UNAxjiF4SQ+d9I8oDXbPxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGM0KNmoPAImnp8pnmg7HtwjrzNCMB8GA1UdIwQY MBaAFJpNdt0vRgaLCHGtRQCsbld6/kacMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWsxMjNTOUdCb3NJY2ExRkFLeHVWM3ItUnB3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9lZDdjOGEtMzk1Mi00NDAxLTlkZDQt NDQ2OTJkYmNjYjMyLzEvbWsxMjNTOUdCb3NJY2ExRkFLeHVWM3ItUnB3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC9lZDdjOGEtMzk1Mi00NDAxLTlkZDQtNDQ2OTJkYmNjYjMy LzEvbWsxMjNTOUdCb3NJY2ExRkFLeHVWM3ItUnB3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB5Q1YrrL eV7JfMMMDc/KsRKjQHBN1wGaZ7AViF3sFiPUCYC04L2YelWhyEcrARIcEO3CcX3O EbeT0ZaKF032S+69xXRPpR85EnC+15AQ2vr7/kzj0CQeYHVVLeOQ1P6gUI1dEfOD YzEHV+/Czq4oSfeSfc2ISvVMvhkEhI6vKDE4VvqzPEON36l9Boj/Lsj6TAL+QobC ALxvkUIvIRDRij9wjq+cypmLlIFBmrumnz4wLXOLj3Z5HvGmvBfEWuignOTpLlNM uMZu04W8/E3cIGOXCpQZCiaZTBF/q0I5ut87dUlPBDa0XStIkD/BOBNiuHhZOlFe R6wSwXbds/KKpQ== -----END CERTIFICATE-----Generated at Sun Dec 21 11:58:18 2025 by rpki-client