This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.mft File: MkZ5WtaKa63Vr8trpGU-nAkPyFo.mft (raw, json) Hash identifier: iAkOZ4FhLPEZaXTRr7xAxQAtaS526R1y29n+LcD0Z94= Subject key identifier: 37:24:12:A0:52:8F:1F:B2:E6:E4:C6:7E:4D:A4:9F:ED:48:53:7C:2D Authority key identifier: 32:46:79:5A:D6:8A:6B:AD:D5:AF:CB:6B:A4:65:3E:9C:09:0F:C8:5A Certificate issuer: /CN=3246795ad68a6badd5afcb6ba4653e9c090fc85a Certificate serial: 019B3DFEF12820774DE55475BFD99EF3A876 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MkZ5WtaKa63Vr8trpGU-nAkPyFo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.mft Manifest number: 1527 Signing time: Sat 20 Dec 2025 23:01:16 +0000 Manifest this update: Sat 20 Dec 2025 23:01:16 +0000 Manifest next update: Sun 21 Dec 2025 23:01:16 +0000 Files and hashes: 1: LZ8uAkntmN0c-t2Y6sQNZXRHvWc.roa (hash: pnKmEkhVyamHT8q5re1u8FHw0CqLvJSlSrJsXdTnczY=) 2: MkZ5WtaKa63Vr8trpGU-nAkPyFo.crl (hash: SzN2zhzvPPwkelNh0/sQgP9mQacstevZi2D+gqx9q7A=) 3: RB-1Fy5sD5ZVDFZv751PSyh3H9Q.roa (hash: mxQ53KQYRRHLBJuqI/DtJ482oAxxveSfP/pLhygbyl4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.mft rsync://rpki.ripe.net/repository/DEFAULT/MkZ5WtaKa63Vr8trpGU-nAkPyFo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:f1:28:20:77:4d:e5:54:75:bf:d9:9e:f3:a8:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3246795ad68a6badd5afcb6ba4653e9c090fc85a Validity Not Before: Dec 20 23:01:16 2025 GMT Not After : Dec 21 23:01:16 2025 GMT Subject: CN=372412a0528f1fb2e6e4c67e4da49fed48537c2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:45:2d:ca:78:89:ce:78:39:53:50:9d:50:36: 54:a3:c9:c2:91:d4:2b:c7:07:28:76:92:d8:4d:e4: ef:7c:30:6b:9e:72:73:07:33:50:34:b8:55:30:0f: 88:7b:b8:1e:1b:d2:78:eb:f9:99:2c:74:c2:f0:33: 50:f0:45:ae:c2:7b:0c:20:57:07:6b:da:d4:6e:b6: ac:f5:54:6f:0f:19:da:05:36:89:bb:68:db:4b:08: d2:8c:ef:1c:5a:b1:15:74:cc:5f:76:a5:c6:9e:5a: b8:bf:0c:06:45:97:c5:ca:9e:81:b9:2f:d7:dd:c7: bc:2e:9c:e6:9a:be:9c:80:60:00:e3:3c:74:e7:90: 91:80:ac:31:58:7f:71:a0:e8:96:fc:6a:49:65:e8: 98:f6:38:ca:79:cc:23:bb:b8:81:2f:61:2e:13:d6: 46:00:cf:c9:67:22:ec:14:83:82:f5:69:93:c7:b7: c8:15:8c:68:8f:19:3b:cb:a0:10:e2:2e:35:51:dc: 51:5c:7a:f0:6a:61:28:dc:9a:ff:fb:d4:6c:65:7b: d0:98:0e:6b:a3:5d:b4:65:78:48:ef:ab:43:65:94: 46:ff:3e:bf:9e:ee:e0:d0:33:09:72:13:4e:50:3d: fa:e0:8e:90:c6:7d:c1:36:91:a2:c0:59:ed:d0:97: 51:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:24:12:A0:52:8F:1F:B2:E6:E4:C6:7E:4D:A4:9F:ED:48:53:7C:2D X509v3 Authority Key Identifier: keyid:32:46:79:5A:D6:8A:6B:AD:D5:AF:CB:6B:A4:65:3E:9C:09:0F:C8:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MkZ5WtaKa63Vr8trpGU-nAkPyFo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:d0:55:c1:63:3e:9f:32:ce:fd:e0:cf:de:1d:af:74:61:5d: 30:da:a8:2d:db:a6:46:af:97:b9:21:09:94:66:ad:6a:95:55: 76:aa:9d:b7:b0:aa:94:2b:6d:26:df:ed:46:46:4a:0c:6a:e6: 8c:4d:b2:ad:9d:50:c2:27:17:fb:ff:97:07:64:b5:58:c5:cd: 11:84:77:50:0f:e7:c8:44:ad:e8:2c:bc:29:8e:82:bf:99:f6: dc:3c:84:26:15:3b:8d:b6:a2:65:af:6b:aa:4e:e1:c6:4e:fa: 76:22:6d:08:20:2c:b3:ba:ea:a1:a3:6e:54:42:6b:23:8f:17: 26:de:e2:52:9b:96:25:5b:26:4f:53:33:c6:e3:1c:de:86:1f: c0:e1:e8:8d:e6:da:47:bc:94:4b:11:e0:e8:fd:c7:3b:57:13: ee:13:14:d4:9b:05:74:36:73:66:62:8c:04:11:ae:b3:0f:79: dc:06:fe:77:bf:20:d4:eb:9d:52:6f:86:67:76:88:c6:be:ee: 35:b1:73:81:d8:ec:4b:73:7a:77:28:a0:53:a4:04:1f:dc:7d: f4:a5:1d:f1:2d:e9:0d:6b:00:1e:a8:42:7b:6b:53:ba:80:be: d1:11:ac:0b:36:96:ac:c1:5f:23:d9:cc:68:c9:54:58:76:91: 1d:f8:d1:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/vEoIHdN5VR1v9me86h2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNDY3OTVhZDY4YTZiYWRkNWFmY2I2YmE0NjUzZTljMDkw ZmM4NWEwHhcNMjUxMjIwMjMwMTE2WhcNMjUxMjIxMjMwMTE2WjAzMTEwLwYDVQQD EygzNzI0MTJhMDUyOGYxZmIyZTZlNGM2N2U0ZGE0OWZlZDQ4NTM3YzJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5UUtyniJzng5U1CdUDZUo8nCkdQr xwcodpLYTeTvfDBrnnJzBzNQNLhVMA+Ie7geG9J46/mZLHTC8DNQ8EWuwnsMIFcH a9rUbras9VRvDxnaBTaJu2jbSwjSjO8cWrEVdMxfdqXGnlq4vwwGRZfFyp6BuS/X 3ce8Lpzmmr6cgGAA4zx055CRgKwxWH9xoOiW/GpJZeiY9jjKecwju7iBL2EuE9ZG AM/JZyLsFIOC9WmTx7fIFYxojxk7y6AQ4i41UdxRXHrwamEo3Jr/+9RsZXvQmA5r o120ZXhI76tDZZRG/z6/nu7g0DMJchNOUD364I6Qxn3BNpGiwFnt0JdRTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDckEqBSjx+y5uTGfk2kn+1IU3wtMB8GA1UdIwQY MBaAFDJGeVrWimut1a/La6RlPpwJD8haMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWtaNVd0YUthNjNWcjh0cnBHVS1uQWtQeUZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC85NDc5Y2EtM2RiNS00ZjYyLThlMjMt NzMwYjE3ZjA2OWFiLzEvTWtaNVd0YUthNjNWcjh0cnBHVS1uQWtQeUZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC85NDc5Y2EtM2RiNS00ZjYyLThlMjMtNzMwYjE3ZjA2OWFi LzEvTWtaNVd0YUthNjNWcjh0cnBHVS1uQWtQeUZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsNBVwWM+ nzLO/eDP3h2vdGFdMNqoLdumRq+XuSEJlGatapVVdqqdt7CqlCttJt/tRkZKDGrm jE2yrZ1QwicX+/+XB2S1WMXNEYR3UA/nyESt6Cy8KY6Cv5n23DyEJhU7jbaiZa9r qk7hxk76diJtCCAss7rqoaNuVEJrI48XJt7iUpuWJVsmT1MzxuMc3oYfwOHojeba R7yUSxHg6P3HO1cT7hMU1JsFdDZzZmKMBBGusw953Ab+d78g1OudUm+GZ3aIxr7u NbFzgdjsS3N6dyigU6QEH9x99KUd8S3pDWsAHqhCe2tTuoC+0RGsCzaWrMFfI9nM aMlUWHaRHfjRyA== -----END CERTIFICATE-----Generated at Sun Dec 21 03:51:25 2025 by rpki-client