This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.mft File: MKNPnR29IKqH-w9ivStsXjDGFKI.mft (raw, json) Hash identifier: cmM3w+PMvrqSBlAOxRUXhhMBCAeT1iswWp/FboNskuM= Subject key identifier: 3F:4B:FC:EC:81:FF:56:1F:59:A9:2B:C4:EE:39:DC:D6:7F:5A:9B:5F Authority key identifier: 30:A3:4F:9D:1D:BD:20:AA:87:FB:0F:62:BD:2B:6C:5E:30:C6:14:A2 Certificate issuer: /CN=30a34f9d1dbd20aa87fb0f62bd2b6c5e30c614a2 Certificate serial: 019B38D8350E2BB756B54562A8A7D677FB30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MKNPnR29IKqH-w9ivStsXjDGFKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.mft Manifest number: 083D Signing time: Fri 19 Dec 2025 23:00:51 +0000 Manifest this update: Fri 19 Dec 2025 23:00:51 +0000 Manifest next update: Sat 20 Dec 2025 23:00:51 +0000 Files and hashes: 1: EeGzcFK_vgrG-lbak3s8iHIsBMk.roa (hash: naeuyNRX3zr50oConoDBqcwqCtbzobuOXBOxpr57IKQ=) 2: MKNPnR29IKqH-w9ivStsXjDGFKI.crl (hash: Fg0Vj4PIaJSqltEWOJRU7uc4pDJAdhOrfCw41xDspgI=) 3: UwwvQBBO6j_9pYHYLHx-7usc0Bw.roa (hash: C7nkcdmQSHS7lgQHz28p2qZkreR4v70DdZOITk/le4g=) 4: VippXv6P37a_HWUsJKzrXMsT_7o.roa (hash: CzlLA7YeTFuz8+dgTCtbqax7U6Kd7C5qz1Hkvi6wr5A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.mft rsync://rpki.ripe.net/repository/DEFAULT/MKNPnR29IKqH-w9ivStsXjDGFKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:d8:35:0e:2b:b7:56:b5:45:62:a8:a7:d6:77:fb:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30a34f9d1dbd20aa87fb0f62bd2b6c5e30c614a2 Validity Not Before: Dec 19 23:00:51 2025 GMT Not After : Dec 20 23:00:51 2025 GMT Subject: CN=3f4bfcec81ff561f59a92bc4ee39dcd67f5a9b5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:1e:8d:85:36:49:d3:75:c4:5e:af:7a:76:aa: 65:27:c8:02:d1:e9:6b:3e:2a:86:ed:6f:54:2d:26: ee:46:ab:7d:5c:5c:86:f5:74:fd:2a:fa:0c:07:fe: 6c:82:13:74:af:ff:ad:05:be:9d:12:66:4e:a5:22: 11:43:1c:91:7c:d0:f6:dc:c1:0c:6c:7d:46:ac:cd: 51:07:d8:e3:2e:cf:27:cc:5e:c6:b0:5e:af:f1:0e: ba:23:f8:2b:63:4a:b5:b2:e4:6e:15:d3:d8:2f:a8: 26:06:81:c1:34:20:21:ab:b2:c1:b9:dd:11:7a:87: a2:d6:5d:ab:6d:db:0e:e9:4b:5b:8f:07:2a:f3:46: 2b:80:df:dd:44:40:14:44:ff:3c:cf:20:9a:14:0b: 29:2e:03:f4:49:c9:34:3a:e7:a4:b4:f5:94:dd:e1: 34:bd:0b:c7:e2:6d:22:96:4c:e7:74:cf:9f:44:18: 4d:2c:b0:8c:41:89:5a:70:da:8d:5b:c5:98:d9:cc: 38:b0:bc:53:71:55:13:38:c8:f5:1b:ac:a0:31:ab: 69:c7:28:29:52:79:af:cd:c8:cd:d7:80:68:e4:5b: c0:de:71:b5:ed:63:20:6f:61:63:53:e4:e4:00:b2: 9c:5e:c8:d9:d0:85:d1:5d:46:1b:ae:67:5e:ad:be: b8:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:4B:FC:EC:81:FF:56:1F:59:A9:2B:C4:EE:39:DC:D6:7F:5A:9B:5F X509v3 Authority Key Identifier: keyid:30:A3:4F:9D:1D:BD:20:AA:87:FB:0F:62:BD:2B:6C:5E:30:C6:14:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKNPnR29IKqH-w9ivStsXjDGFKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:69:d3:be:81:74:10:35:6a:35:a5:3c:ad:94:2a:db:76:a3: 12:b2:99:df:b4:7f:54:c2:e7:02:40:4f:37:33:6a:be:e9:18: f3:b2:89:3a:6c:56:fd:32:bf:ef:bc:b5:d2:16:1c:57:dd:33: b1:27:53:f9:14:27:d8:7e:c4:78:01:6d:f9:a5:2f:c1:0f:c2: 7a:66:a8:d9:85:14:b6:d1:c4:bf:a2:dd:69:0e:85:15:71:ed: a2:9a:eb:f0:19:99:ab:63:45:5f:af:92:fe:ad:c2:6b:ce:d2: 43:93:a9:36:d0:d9:db:fc:c5:d2:ba:e5:d1:62:6b:50:e4:60: 87:50:e7:30:ef:9e:e0:e4:41:29:84:9f:6e:95:c2:26:d2:90: 54:e6:59:86:de:4b:f6:64:a8:7e:74:b3:4f:0e:9c:5d:c9:72: 68:44:1e:08:a8:99:eb:25:c8:4a:e7:7f:be:a0:c1:2e:76:b3: 44:63:d8:2d:77:6f:7c:c4:2c:a6:c0:71:d6:16:d3:f7:e9:e9: 09:0f:98:4c:d8:95:6e:51:9f:87:ec:94:e3:14:7d:b7:4d:2f: b6:28:e6:dd:8a:e0:10:77:7e:da:69:86:ae:50:de:0b:05:1b: aa:64:93:f2:0a:12:f5:60:7b:50:13:07:21:07:fc:ad:0a:3a: 1a:2a:a1:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs42DUOK7dWtUViqKfWd/swMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwYTM0ZjlkMWRiZDIwYWE4N2ZiMGY2MmJkMmI2YzVlMzBj NjE0YTIwHhcNMjUxMjE5MjMwMDUxWhcNMjUxMjIwMjMwMDUxWjAzMTEwLwYDVQQD EygzZjRiZmNlYzgxZmY1NjFmNTlhOTJiYzRlZTM5ZGNkNjdmNWE5YjVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlR6NhTZJ03XEXq96dqplJ8gC0elr PiqG7W9ULSbuRqt9XFyG9XT9KvoMB/5sghN0r/+tBb6dEmZOpSIRQxyRfND23MEM bH1GrM1RB9jjLs8nzF7GsF6v8Q66I/grY0q1suRuFdPYL6gmBoHBNCAhq7LBud0R eoei1l2rbdsO6Utbjwcq80YrgN/dREAURP88zyCaFAspLgP0Sck0OuektPWU3eE0 vQvH4m0ilkzndM+fRBhNLLCMQYlacNqNW8WY2cw4sLxTcVUTOMj1G6ygMatpxygp UnmvzcjN14Bo5FvA3nG17WMgb2FjU+TkALKcXsjZ0IXRXUYbrmderb64sQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD9L/OyB/1YfWakrxO453NZ/WptfMB8GA1UdIwQY MBaAFDCjT50dvSCqh/sPYr0rbF4wxhSiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUtOUG5SMjlJS3FILXc5aXZTdHNYakRHRktJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9lZTQ3MzItYzNiYS00MDg4LWE1ZmEt ZWI2NTNkMzYyMmJiLzEvTUtOUG5SMjlJS3FILXc5aXZTdHNYakRHRktJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9lZTQ3MzItYzNiYS00MDg4LWE1ZmEtZWI2NTNkMzYyMmJi LzEvTUtOUG5SMjlJS3FILXc5aXZTdHNYakRHRktJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuGnTvoF0 EDVqNaU8rZQq23ajErKZ37R/VMLnAkBPNzNqvukY87KJOmxW/TK/77y10hYcV90z sSdT+RQn2H7EeAFt+aUvwQ/Cemao2YUUttHEv6LdaQ6FFXHtoprr8BmZq2NFX6+S /q3Ca87SQ5OpNtDZ2/zF0rrl0WJrUORgh1DnMO+e4ORBKYSfbpXCJtKQVOZZht5L 9mSofnSzTw6cXclyaEQeCKiZ6yXISud/vqDBLnazRGPYLXdvfMQspsBx1hbT9+np CQ+YTNiVblGfh+yU4xR9t00vtijm3YrgEHd+2mmGrlDeCwUbqmST8goS9WB7UBMH IQf8rQo6GiqhKg== -----END CERTIFICATE-----Generated at Sat Dec 20 00:22:49 2025 by rpki-client