This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.mft File: MK7hGylDVy0RvsxCXGhLSLuyy9Q.mft (raw, json) Hash identifier: OOIxH45L7+0pqLuN5FzWD92HooCBZ8C1xN0WZEWlsAU= Subject key identifier: DB:88:0B:46:6A:2D:B2:AB:0D:C5:0B:3E:23:D3:4D:E0:DB:7A:03:E1 Authority key identifier: 30:AE:E1:1B:29:43:57:2D:11:BE:CC:42:5C:68:4B:48:BB:B2:CB:D4 Certificate issuer: /CN=30aee11b2943572d11becc425c684b48bbb2cbd4 Certificate serial: 019B30E85900FD51756896BF17A91C02FF00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MK7hGylDVy0RvsxCXGhLSLuyy9Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.mft Manifest number: 1782 Signing time: Thu 18 Dec 2025 10:01:31 +0000 Manifest this update: Thu 18 Dec 2025 10:01:31 +0000 Manifest next update: Fri 19 Dec 2025 10:01:31 +0000 Files and hashes: 1: MK7hGylDVy0RvsxCXGhLSLuyy9Q.crl (hash: ZhCqXXcs5m+5INOvvJL4LZEX6fK7RUvb8dGK964t254=) 2: hldVZlO6d8WWA7-GTHuwlp4u6fM.roa (hash: fXvwRBJ+hinYD3qF0h+tIsxkZ7408ikqGqdWmZh6YUU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.crl rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.mft rsync://rpki.ripe.net/repository/DEFAULT/MK7hGylDVy0RvsxCXGhLSLuyy9Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:e8:59:00:fd:51:75:68:96:bf:17:a9:1c:02:ff:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30aee11b2943572d11becc425c684b48bbb2cbd4 Validity Not Before: Dec 18 10:01:31 2025 GMT Not After : Dec 19 10:01:31 2025 GMT Subject: CN=db880b466a2db2ab0dc50b3e23d34de0db7a03e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:00:d7:41:14:47:09:ed:77:c1:dd:ab:b0:f2: 3c:c9:89:37:ce:9c:8e:e4:a9:e5:56:97:da:0d:e9: e9:93:ac:fe:12:f5:e6:11:25:36:3e:5e:28:f3:28: c2:15:eb:8b:c9:43:05:12:3a:91:3e:0b:38:a9:2c: a4:0e:45:67:05:dc:3b:8b:42:50:36:06:b0:9b:25: 2f:e6:39:d0:21:b4:ab:ea:8d:b4:70:d6:fb:ac:e5: 31:f4:97:02:5b:a1:7a:38:d2:64:cd:b3:40:91:a7: 0b:93:55:ff:50:ed:c6:a9:e0:49:31:3f:e3:48:ab: d3:b8:8b:e4:da:e5:15:a8:e4:ac:8f:dd:9f:c9:44: 0c:93:4c:af:59:c2:ed:9b:3a:97:05:9d:32:0f:9a: 3b:53:72:e6:b3:9b:64:f5:67:63:fb:e8:31:24:6e: 36:bc:29:52:7e:43:97:f5:e8:ab:3a:e8:68:13:cb: ab:24:33:2f:4e:c8:36:27:a1:9f:6e:44:91:ee:a5: 05:de:34:b4:1b:35:8f:ac:b0:37:85:37:6e:2f:cd: b0:12:20:85:04:db:bf:c0:05:50:27:06:cd:20:a0: 93:d6:76:66:88:0a:a3:31:60:c8:ee:2c:11:cc:46: 19:4d:dd:0c:d3:bc:5f:ed:43:d4:59:80:06:0f:09: b6:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:88:0B:46:6A:2D:B2:AB:0D:C5:0B:3E:23:D3:4D:E0:DB:7A:03:E1 X509v3 Authority Key Identifier: keyid:30:AE:E1:1B:29:43:57:2D:11:BE:CC:42:5C:68:4B:48:BB:B2:CB:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MK7hGylDVy0RvsxCXGhLSLuyy9Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:53:4a:95:ee:96:75:41:f1:19:35:ae:22:0c:65:2d:ff:dc: 5a:b6:5e:dd:fb:0f:fe:20:b8:22:9f:f1:36:07:cb:67:73:82: 26:9f:93:c7:50:85:29:6d:41:1f:95:a4:11:cb:df:b0:39:98: 71:31:f4:36:35:a1:7f:36:4b:aa:b1:a8:27:01:5d:f0:f2:ab: cb:89:05:07:b1:a7:f3:2d:49:1c:ad:2f:28:fb:d6:43:67:a1: 8e:53:b2:36:df:0e:1a:b3:79:83:7f:a5:42:bb:3a:0e:34:93: 16:1f:3d:03:32:08:60:6c:e8:14:5b:b5:7a:19:6c:9c:ae:98: 49:ef:b6:ee:c0:35:8e:6c:29:64:23:61:06:d2:4c:89:28:86: e3:7a:e8:34:15:df:5e:55:2e:5e:a2:ee:74:f0:34:65:68:bf: f3:f6:b9:e8:64:de:16:d0:1a:d2:94:52:46:0f:79:82:ef:3e: c9:30:d2:67:77:02:3f:46:3e:a4:31:8a:5f:e6:16:fd:9e:54: 3e:b8:9b:13:83:b2:8c:7c:31:4b:85:25:36:a0:5e:8f:15:1b: f6:da:35:30:e0:9c:f6:27:92:12:d8:93:c3:2d:3c:e1:75:08: b5:cf:19:3e:b4:e4:a5:23:39:bb:38:dc:58:bf:b9:de:1d:08: 09:ed:36:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsw6FkA/VF1aJa/F6kcAv8AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwYWVlMTFiMjk0MzU3MmQxMWJlY2M0MjVjNjg0YjQ4YmJi MmNiZDQwHhcNMjUxMjE4MTAwMTMxWhcNMjUxMjE5MTAwMTMxWjAzMTEwLwYDVQQD EyhkYjg4MGI0NjZhMmRiMmFiMGRjNTBiM2UyM2QzNGRlMGRiN2EwM2UxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgDXQRRHCe13wd2rsPI8yYk3zpyO 5KnlVpfaDenpk6z+EvXmESU2Pl4o8yjCFeuLyUMFEjqRPgs4qSykDkVnBdw7i0JQ NgawmyUv5jnQIbSr6o20cNb7rOUx9JcCW6F6ONJkzbNAkacLk1X/UO3GqeBJMT/j SKvTuIvk2uUVqOSsj92fyUQMk0yvWcLtmzqXBZ0yD5o7U3Lms5tk9Wdj++gxJG42 vClSfkOX9eirOuhoE8urJDMvTsg2J6GfbkSR7qUF3jS0GzWPrLA3hTduL82wEiCF BNu/wAVQJwbNIKCT1nZmiAqjMWDI7iwRzEYZTd0M07xf7UPUWYAGDwm2OwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNuIC0ZqLbKrDcULPiPTTeDbegPhMB8GA1UdIwQY MBaAFDCu4RspQ1ctEb7MQlxoS0i7ssvUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUs3aEd5bERWeTBSdnN4Q1hHaExTTHV5eTlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS82ZmFlMDItMGMzNy00ZjA1LTgxYmEt MWI0NmQyZWI1NDEyLzEvTUs3aEd5bERWeTBSdnN4Q1hHaExTTHV5eTlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS82ZmFlMDItMGMzNy00ZjA1LTgxYmEtMWI0NmQyZWI1NDEy LzEvTUs3aEd5bERWeTBSdnN4Q1hHaExTTHV5eTlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtFNKle6W dUHxGTWuIgxlLf/cWrZe3fsP/iC4Ip/xNgfLZ3OCJp+Tx1CFKW1BH5WkEcvfsDmY cTH0NjWhfzZLqrGoJwFd8PKry4kFB7Gn8y1JHK0vKPvWQ2ehjlOyNt8OGrN5g3+l Qrs6DjSTFh89AzIIYGzoFFu1ehlsnK6YSe+27sA1jmwpZCNhBtJMiSiG43roNBXf XlUuXqLudPA0ZWi/8/a56GTeFtAa0pRSRg95gu8+yTDSZ3cCP0Y+pDGKX+YW/Z5U PribE4OyjHwxS4UlNqBejxUb9to1MOCc9ieSEtiTwy084XUItc8ZPrTkpSM5uzjc WL+53h0ICe02Xw== -----END CERTIFICATE-----Generated at Thu Dec 18 12:24:03 2025 by rpki-client