This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft File: mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft (raw, json) Hash identifier: EBRng3TSbJtul2DjYU8H9u9gTbf3oIrLfx0EZGZPB2k= Subject key identifier: 45:38:69:BA:77:79:EC:6A:9E:93:0B:F1:41:31:66:82:98:A2:EF:29 Authority key identifier: 9A:48:C1:D8:00:8C:DC:05:9D:B0:B2:7A:A9:51:47:99:C0:6D:54:43 Certificate issuer: /CN=9a48c1d8008cdc059db0b27aa9514799c06d5443 Certificate serial: 019AC7C3A23623D09AC0EC1E0E1FB99E0361 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft Manifest number: 12BC Signing time: Fri 28 Nov 2025 00:01:18 +0000 Manifest this update: Fri 28 Nov 2025 00:01:18 +0000 Manifest next update: Sat 29 Nov 2025 00:01:18 +0000 Files and hashes: 1: GS3n997-WSAnBFI5sxW4oYhya68.roa (hash: 9uLSgMiqXXeu2TS+gBYSbYKO48DlZM21pWe2MUShNG8=) 2: K1RZ-_Fg9dSZIebCMUhpe6gbgJc.roa (hash: DeEJ/lwM2EUWvyFmV2osr5NnI9rnfMu9oAVwUv2cQPg=) 3: mkjB2ACM3AWdsLJ6qVFHmcBtVEM.crl (hash: VezbN3r4chybfgmhyOtnFid1ZOtOsI/tWcmKH0NrjgI=) 4: tKjpgYt3F1U92FlxxtExmwv_VJA.roa (hash: PCobIxyuHsntJ/hl1UTuu1qlban1/mIdUKP0z5QY3l0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.crl rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft rsync://rpki.ripe.net/repository/DEFAULT/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 29 Nov 2025 00:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c7:c3:a2:36:23:d0:9a:c0:ec:1e:0e:1f:b9:9e:03:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a48c1d8008cdc059db0b27aa9514799c06d5443 Validity Not Before: Nov 28 00:01:18 2025 GMT Not After : Nov 29 00:01:18 2025 GMT Subject: CN=453869ba7779ec6a9e930bf14131668298a2ef29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e0:6e:5e:aa:14:4a:64:07:83:67:df:c8:7b: c2:8a:48:39:95:98:38:ee:92:dd:83:c6:35:e0:9d: a9:21:ca:07:07:a7:5d:f2:d8:9c:cd:54:34:78:f7: 0a:21:0a:9b:26:f6:c2:1f:42:82:db:66:db:87:5d: c8:b2:bf:a6:3d:a0:4e:90:31:42:a0:34:f2:31:28: d4:12:ee:c7:38:7f:75:15:8c:c8:1d:8c:3d:57:d8: 5e:37:9e:f4:3e:2e:1a:b4:f7:f1:44:c8:78:62:c7: 24:4c:3f:c8:9e:48:c6:39:3e:38:a6:3e:6e:21:2d: b2:a2:0f:fe:5c:24:0c:2e:10:ee:14:86:75:a0:45: 31:e5:c5:4b:5b:cd:96:fc:b1:a1:0e:5b:ca:67:df: 77:b3:79:e8:8f:86:78:77:86:57:55:37:79:d9:73: fa:54:c7:e7:14:b2:c1:d0:b1:78:05:56:5f:3e:e8: 75:73:49:3b:82:f5:24:bb:a6:ed:2c:d1:5c:b4:71: 4b:79:a7:f4:fd:2f:e4:95:f0:22:4c:1a:d0:43:d6: 8a:1a:35:aa:7f:3c:25:ee:89:45:19:59:a2:24:39: e8:64:8e:9a:f7:33:5a:92:32:71:99:6b:3b:c3:39: f8:90:4c:9c:5f:ba:31:e0:84:47:7b:0f:fe:50:49: 20:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:38:69:BA:77:79:EC:6A:9E:93:0B:F1:41:31:66:82:98:A2:EF:29 X509v3 Authority Key Identifier: keyid:9A:48:C1:D8:00:8C:DC:05:9D:B0:B2:7A:A9:51:47:99:C0:6D:54:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:bc:eb:fe:41:0b:61:55:95:47:72:52:03:6b:92:4a:19:aa: 8b:fa:ce:32:25:bf:42:7b:3c:21:6a:ec:ae:86:7e:8a:5e:71: bd:ba:63:96:d8:e0:2f:86:0f:34:17:72:8e:91:0c:56:93:1d: 1d:07:52:e8:c5:51:ae:46:20:3a:39:d9:f7:59:92:cc:93:b2: f5:a4:3a:db:db:e9:f5:1a:23:76:6d:0a:7c:c4:eb:e2:ec:38: 83:1a:ea:9e:8d:b4:e0:16:21:ea:c8:30:15:39:08:7f:b8:ec: eb:bb:b8:d0:7b:60:e8:69:6a:d8:0b:0e:1f:7e:60:3b:8b:92: d6:a3:4e:12:65:53:f7:52:80:e5:22:49:ce:d1:8a:04:1d:dd: fe:28:4d:18:ab:43:ce:20:98:4a:d7:35:5e:7f:4e:43:7f:0c: f9:a5:da:cc:fd:1d:88:54:d5:ae:75:29:3d:f8:44:ef:7a:8d: 47:55:ab:67:83:bb:f9:1e:7f:6e:c9:93:98:0c:f9:aa:4f:9a: ce:3a:d6:c0:f3:87:6f:64:c7:2e:1d:65:d8:3a:b9:81:c5:f3: 9c:ee:cb:be:f7:54:c8:a6:1a:a1:d5:17:ec:b9:28:54:cc:33: 8d:a4:13:b8:33:2a:6a:c5:ba:41:51:fb:be:c3:ee:cf:4b:6c: 57:6b:12:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrHw6I2I9CawOweDh+5ngNhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhNDhjMWQ4MDA4Y2RjMDU5ZGIwYjI3YWE5NTE0Nzk5YzA2 ZDU0NDMwHhcNMjUxMTI4MDAwMTE4WhcNMjUxMTI5MDAwMTE4WjAzMTEwLwYDVQQD Eyg0NTM4NjliYTc3NzllYzZhOWU5MzBiZjE0MTMxNjY4Mjk4YTJlZjI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOBuXqoUSmQHg2ffyHvCikg5lZg4 7pLdg8Y14J2pIcoHB6dd8ticzVQ0ePcKIQqbJvbCH0KC22bbh13Isr+mPaBOkDFC oDTyMSjUEu7HOH91FYzIHYw9V9heN570Pi4atPfxRMh4YsckTD/InkjGOT44pj5u IS2yog/+XCQMLhDuFIZ1oEUx5cVLW82W/LGhDlvKZ993s3noj4Z4d4ZXVTd52XP6 VMfnFLLB0LF4BVZfPuh1c0k7gvUku6btLNFctHFLeaf0/S/klfAiTBrQQ9aKGjWq fzwl7olFGVmiJDnoZI6a9zNakjJxmWs7wzn4kEycX7ox4IRHew/+UEkgZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEU4abp3eexqnpML8UExZoKYou8pMB8GA1UdIwQY MBaAFJpIwdgAjNwFnbCyeqlRR5nAbVRDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWtqQjJBQ00zQVdkc0xKNnFWRkhtY0J0VkVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9jYjYxNGMtNDk1ZS00MTBlLTg3MzAt NWEzNjYzMTVjMTY2LzEvbWtqQjJBQ00zQVdkc0xKNnFWRkhtY0J0VkVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy9jYjYxNGMtNDk1ZS00MTBlLTg3MzAtNWEzNjYzMTVjMTY2 LzEvbWtqQjJBQ00zQVdkc0xKNnFWRkhtY0J0VkVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXLzr/kEL YVWVR3JSA2uSShmqi/rOMiW/Qns8IWrsroZ+il5xvbpjltjgL4YPNBdyjpEMVpMd HQdS6MVRrkYgOjnZ91mSzJOy9aQ629vp9Rojdm0KfMTr4uw4gxrqno204BYh6sgw FTkIf7js67u40Htg6Glq2AsOH35gO4uS1qNOEmVT91KA5SJJztGKBB3d/ihNGKtD ziCYStc1Xn9OQ38M+aXazP0diFTVrnUpPfhE73qNR1WrZ4O7+R5/bsmTmAz5qk+a zjrWwPOHb2THLh1l2Dq5gcXznO7LvvdUyKYaodUX7LkoVMwzjaQTuDMqasW6QVH7 vsPuz0tsV2sS4w== -----END CERTIFICATE-----Generated at Fri Nov 28 08:02:40 2025 by rpki-client