This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft File: mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft (raw, json) Hash identifier: PJxrQGWoqjanu9+vLBXTnBQtq/tia4i+BFg+38VG8A8= Subject key identifier: FC:60:4A:B6:3A:5F:6D:0D:C2:A3:B3:B2:BB:72:34:71:26:55:54:F5 Authority key identifier: 9A:48:C1:D8:00:8C:DC:05:9D:B0:B2:7A:A9:51:47:99:C0:6D:54:43 Certificate issuer: /CN=9a48c1d8008cdc059db0b27aa9514799c06d5443 Certificate serial: 019B2C2F52CC767D22FB6F749F6EE7D3118A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft Manifest number: 12F0 Signing time: Wed 17 Dec 2025 12:00:57 +0000 Manifest this update: Wed 17 Dec 2025 12:00:57 +0000 Manifest next update: Thu 18 Dec 2025 12:00:57 +0000 Files and hashes: 1: GS3n997-WSAnBFI5sxW4oYhya68.roa (hash: 9uLSgMiqXXeu2TS+gBYSbYKO48DlZM21pWe2MUShNG8=) 2: K1RZ-_Fg9dSZIebCMUhpe6gbgJc.roa (hash: DeEJ/lwM2EUWvyFmV2osr5NnI9rnfMu9oAVwUv2cQPg=) 3: mkjB2ACM3AWdsLJ6qVFHmcBtVEM.crl (hash: W07QKvSdOooDKDIOgcD0R+iaXXFSgqde1sQuMhBv7IU=) 4: tKjpgYt3F1U92FlxxtExmwv_VJA.roa (hash: PCobIxyuHsntJ/hl1UTuu1qlban1/mIdUKP0z5QY3l0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.crl rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft rsync://rpki.ripe.net/repository/DEFAULT/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:2f:52:cc:76:7d:22:fb:6f:74:9f:6e:e7:d3:11:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a48c1d8008cdc059db0b27aa9514799c06d5443 Validity Not Before: Dec 17 12:00:57 2025 GMT Not After : Dec 18 12:00:57 2025 GMT Subject: CN=fc604ab63a5f6d0dc2a3b3b2bb723471265554f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:06:cf:97:ab:da:e5:35:a9:a7:f2:79:ac:e1: 9c:61:bc:ad:32:d0:09:7f:0a:15:31:9a:2f:95:45: 85:47:f4:e3:2b:e5:a9:98:75:1e:20:67:37:8b:c4: 25:09:6e:c6:da:21:18:d9:02:3d:cb:60:bc:d7:fe: 55:b9:2c:83:8c:fc:1e:f5:fe:b0:28:c0:22:d5:f7: fd:73:d3:da:ca:6f:dd:fd:66:6c:bb:34:6d:9e:0f: 90:e6:40:06:af:e5:6d:de:c1:75:01:cf:4a:30:3b: 31:52:47:8e:cd:90:33:e0:00:5c:cd:52:95:05:e2: f8:c2:27:57:c0:37:1a:87:fb:07:55:59:af:5c:3e: 08:ce:19:44:08:54:54:a1:15:d0:87:e3:e4:a8:54: 1c:73:f9:3d:81:ad:be:33:aa:77:3a:16:4a:50:e2: 7f:86:07:5e:c1:2b:aa:e3:6c:9a:69:46:90:1b:25: de:fe:ec:72:99:d6:ed:4a:48:93:0c:08:3e:23:aa: 42:24:4d:6a:ba:db:e0:c4:fa:9a:b6:da:e8:2e:d4: 31:7c:03:4b:9e:73:3f:e9:7b:5a:fc:94:27:18:3f: 6c:7d:74:3a:92:ec:5c:c2:32:18:af:77:00:8a:ca: fc:8a:af:f6:10:42:4a:7a:4d:a4:94:d0:7f:0e:a7: 89:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:60:4A:B6:3A:5F:6D:0D:C2:A3:B3:B2:BB:72:34:71:26:55:54:F5 X509v3 Authority Key Identifier: keyid:9A:48:C1:D8:00:8C:DC:05:9D:B0:B2:7A:A9:51:47:99:C0:6D:54:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:04:23:06:56:07:05:b3:95:e6:40:9e:8d:fb:9b:46:29:0a: 00:81:3e:94:01:dc:87:70:62:f6:b8:a7:89:0b:9c:14:28:63: 74:6a:61:46:d9:b3:e8:85:29:11:d7:da:7f:d5:da:46:12:c3: ec:f9:8f:ab:6a:a9:c7:b2:ec:8c:8b:46:22:f2:66:95:59:d7: ae:07:87:48:8f:3c:4e:cb:ef:16:a0:e5:0f:99:63:c0:dc:32: 3f:ef:2a:75:52:c1:e1:b4:6b:d0:50:ed:6b:6f:32:aa:1f:8b: 4d:26:22:98:7e:48:0e:fc:3c:f5:f3:43:9e:83:49:eb:4c:01: 2f:91:3a:20:3a:d9:04:de:e4:d4:23:bc:b2:45:46:70:c3:ad: 67:18:7c:c0:dd:65:57:86:59:6a:4e:55:2c:01:4f:67:35:db: 43:37:ee:74:0c:ff:b0:a5:fa:c7:4b:b6:a3:8f:dc:75:f6:d8: 6b:19:a2:ed:e3:8d:6c:f9:ba:c7:03:0c:a2:4a:33:44:19:77: 36:01:2a:d9:6e:35:8b:9b:f5:ee:85:77:f9:dd:57:62:b6:f2: cd:1e:7a:e4:1b:8d:96:70:c5:46:7f:2d:14:e7:5f:d1:10:c4: 43:24:7d:86:31:a1:0e:a0:cf:e8:5d:30:14:20:15:72:47:a9: e9:c3:b9:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssL1LMdn0i+290n27n0xGKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhNDhjMWQ4MDA4Y2RjMDU5ZGIwYjI3YWE5NTE0Nzk5YzA2 ZDU0NDMwHhcNMjUxMjE3MTIwMDU3WhcNMjUxMjE4MTIwMDU3WjAzMTEwLwYDVQQD EyhmYzYwNGFiNjNhNWY2ZDBkYzJhM2IzYjJiYjcyMzQ3MTI2NTU1NGY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwbPl6va5TWpp/J5rOGcYbytMtAJ fwoVMZovlUWFR/TjK+WpmHUeIGc3i8QlCW7G2iEY2QI9y2C81/5VuSyDjPwe9f6w KMAi1ff9c9Paym/d/WZsuzRtng+Q5kAGr+Vt3sF1Ac9KMDsxUkeOzZAz4ABczVKV BeL4widXwDcah/sHVVmvXD4IzhlECFRUoRXQh+PkqFQcc/k9ga2+M6p3OhZKUOJ/ hgdewSuq42yaaUaQGyXe/uxymdbtSkiTDAg+I6pCJE1qutvgxPqattroLtQxfANL nnM/6Xta/JQnGD9sfXQ6kuxcwjIYr3cAisr8iq/2EEJKek2klNB/DqeJAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPxgSrY6X20NwqOzsrtyNHEmVVT1MB8GA1UdIwQY MBaAFJpIwdgAjNwFnbCyeqlRR5nAbVRDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWtqQjJBQ00zQVdkc0xKNnFWRkhtY0J0VkVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9jYjYxNGMtNDk1ZS00MTBlLTg3MzAt NWEzNjYzMTVjMTY2LzEvbWtqQjJBQ00zQVdkc0xKNnFWRkhtY0J0VkVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy9jYjYxNGMtNDk1ZS00MTBlLTg3MzAtNWEzNjYzMTVjMTY2 LzEvbWtqQjJBQ00zQVdkc0xKNnFWRkhtY0J0VkVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcAQjBlYH BbOV5kCejfubRikKAIE+lAHch3Bi9riniQucFChjdGphRtmz6IUpEdfaf9XaRhLD 7PmPq2qpx7LsjItGIvJmlVnXrgeHSI88TsvvFqDlD5ljwNwyP+8qdVLB4bRr0FDt a28yqh+LTSYimH5IDvw89fNDnoNJ60wBL5E6IDrZBN7k1CO8skVGcMOtZxh8wN1l V4ZZak5VLAFPZzXbQzfudAz/sKX6x0u2o4/cdfbYaxmi7eONbPm6xwMMokozRBl3 NgEq2W41i5v17oV3+d1XYrbyzR565BuNlnDFRn8tFOdf0RDEQyR9hjGhDqDP6F0w FCAVckep6cO5YA== -----END CERTIFICATE-----Generated at Wed Dec 17 19:08:45 2025 by rpki-client