This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft File: MK_3UgloSjVGaQYdI9op-OovHV4.mft (raw, json) Hash identifier: kHcvs1S3F4NGa7VEqC+KqKyhAd7Bj8cb8WjdNWOgjPY= Subject key identifier: 05:A9:D1:6C:A5:0D:1A:DC:24:31:39:5C:A3:45:39:7F:50:0A:ED:B7 Authority key identifier: 30:AF:F7:52:09:68:4A:35:46:69:06:1D:23:DA:29:F8:EA:2F:1D:5E Certificate issuer: /CN=30aff75209684a354669061d23da29f8ea2f1d5e Certificate serial: 019B0E92A7FDCC4C533F4D333B44BE950AA6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MK_3UgloSjVGaQYdI9op-OovHV4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft Manifest number: 1770 Signing time: Thu 11 Dec 2025 18:00:50 +0000 Manifest this update: Thu 11 Dec 2025 18:00:50 +0000 Manifest next update: Fri 12 Dec 2025 18:00:50 +0000 Files and hashes: 1: C-bdkM4lL8tTpeZXpiv45nhPUuM.roa (hash: dO9wg4oa3fmXkWxOi24v6xA9xh5CDmqHbzYIcdtWFXo=) 2: IbRWuE5EQO-8LgU2mAsS5QizVAY.roa (hash: s+vcUKeYVky97TEOonv9opKh34KAYu2tRcLDRkyQ5gI=) 3: MK_3UgloSjVGaQYdI9op-OovHV4.crl (hash: 3yZQlRIg9ZpvlfRl0CMMYDh1bWWISl2xOi/OIr/aEz8=) 4: jBuJavuseI2B0_WgKkHYJZFvr_Q.roa (hash: tLuargg/vipoJVRdIR5x9HBU5Ji9GHfTNJavehQ1uxE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.crl rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft rsync://rpki.ripe.net/repository/DEFAULT/MK_3UgloSjVGaQYdI9op-OovHV4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:92:a7:fd:cc:4c:53:3f:4d:33:3b:44:be:95:0a:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30aff75209684a354669061d23da29f8ea2f1d5e Validity Not Before: Dec 11 18:00:50 2025 GMT Not After : Dec 12 18:00:50 2025 GMT Subject: CN=05a9d16ca50d1adc2431395ca345397f500aedb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:4d:0f:87:59:07:34:29:13:33:3e:f0:7c:eb: 60:7a:26:b8:e4:0a:da:e0:e0:66:86:05:99:36:c4: 65:f8:b4:4e:c0:48:c6:bf:72:4b:8e:bd:29:65:05: 2f:b2:e9:4f:ac:d6:e4:5a:3e:b9:2a:db:f9:79:a8: 41:5d:b9:69:f4:75:8e:f4:a3:a2:22:80:e4:e7:99: 43:16:8e:09:e7:10:07:64:77:2d:3e:2b:a3:87:21: 07:07:77:0d:a5:be:70:df:8e:db:be:3f:20:23:f5: a4:ef:f7:f2:be:2f:c6:ea:3e:b7:1c:f0:75:67:a5: bd:0c:15:0e:21:f2:9a:8f:00:61:33:a0:7e:fa:c4: 7f:c3:f6:a3:6f:1c:98:75:4a:70:5f:12:5e:ad:9d: 4f:ce:40:09:5c:13:3c:95:d3:e7:81:f1:b4:a3:92: 16:a3:62:17:ad:e8:7d:c6:07:47:29:a4:e5:bb:c6: 87:d5:d7:5c:d7:13:31:e2:ab:a7:68:e1:9e:87:5d: 04:2a:cd:4e:4b:31:61:54:2a:8a:e8:d5:11:68:f5: af:ce:e2:61:48:1f:3b:63:bc:d4:31:6e:04:4a:51: 53:3a:d1:9e:b4:83:0c:0f:75:ea:6c:7a:3d:06:28: 97:32:eb:de:59:16:fe:dd:48:4e:91:fd:83:2f:d8: b6:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:A9:D1:6C:A5:0D:1A:DC:24:31:39:5C:A3:45:39:7F:50:0A:ED:B7 X509v3 Authority Key Identifier: keyid:30:AF:F7:52:09:68:4A:35:46:69:06:1D:23:DA:29:F8:EA:2F:1D:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MK_3UgloSjVGaQYdI9op-OovHV4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:57:e3:1c:6f:dd:6c:5b:6f:33:49:eb:be:a5:21:b9:57:38: 6c:bb:42:a5:c4:73:a8:e0:4c:fe:dd:9a:c4:ed:17:8b:3e:4d: 4f:cf:3d:b7:b1:45:57:55:0b:69:b8:85:9f:22:c3:2d:b7:2d: 5f:c3:a1:a5:df:01:6d:88:69:d3:05:d2:62:ec:9f:1c:95:da: 65:63:ba:ec:83:02:60:dd:42:3f:7d:19:d5:53:1a:10:f7:ae: 60:fd:1e:93:78:d0:a4:9f:c4:9d:01:35:f6:76:c0:b9:3f:5f: ef:c7:9d:fd:41:db:26:c0:c4:c9:5d:f5:df:76:c1:ee:a6:27: 83:07:eb:3c:43:f2:25:40:af:bf:03:c1:3a:02:b3:f9:b8:e8: 10:66:01:32:97:88:4f:e2:ae:c8:62:db:1c:d9:e3:97:4c:a8: f9:0f:c8:f0:69:0a:14:37:53:a5:82:68:ae:fb:04:32:8f:2a: 61:85:61:3f:50:8a:38:31:a1:d9:7e:61:31:69:23:54:d1:8d: bd:61:2f:8f:e2:2e:3c:c7:a8:7b:96:c5:d9:cd:53:2e:a4:2a: 0d:1e:ea:ad:03:52:89:6a:f9:37:f8:af:38:30:df:9c:6d:7d: 3e:0c:20:dc:f7:00:0a:3b:f9:84:af:fa:cc:5a:76:ca:a9:b2: 67:0d:21:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOkqf9zExTP00zO0S+lQqmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwYWZmNzUyMDk2ODRhMzU0NjY5MDYxZDIzZGEyOWY4ZWEy ZjFkNWUwHhcNMjUxMjExMTgwMDUwWhcNMjUxMjEyMTgwMDUwWjAzMTEwLwYDVQQD EygwNWE5ZDE2Y2E1MGQxYWRjMjQzMTM5NWNhMzQ1Mzk3ZjUwMGFlZGI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7E0Ph1kHNCkTMz7wfOtgeia45Ara 4OBmhgWZNsRl+LROwEjGv3JLjr0pZQUvsulPrNbkWj65Ktv5eahBXblp9HWO9KOi IoDk55lDFo4J5xAHZHctPiujhyEHB3cNpb5w347bvj8gI/Wk7/fyvi/G6j63HPB1 Z6W9DBUOIfKajwBhM6B++sR/w/ajbxyYdUpwXxJerZ1PzkAJXBM8ldPngfG0o5IW o2IXreh9xgdHKaTlu8aH1ddc1xMx4qunaOGeh10EKs1OSzFhVCqK6NURaPWvzuJh SB87Y7zUMW4ESlFTOtGetIMMD3XqbHo9BiiXMuveWRb+3UhOkf2DL9i22QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAWp0WylDRrcJDE5XKNFOX9QCu23MB8GA1UdIwQY MBaAFDCv91IJaEo1RmkGHSPaKfjqLx1eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUtfM1VnbG9TalZHYVFZZEk5b3AtT292SFY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS84NDRhMjUtYThkZi00NTYxLWIzZTct OTc4NWEzMzU1NDJhLzEvTUtfM1VnbG9TalZHYVFZZEk5b3AtT292SFY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS84NDRhMjUtYThkZi00NTYxLWIzZTctOTc4NWEzMzU1NDJh LzEvTUtfM1VnbG9TalZHYVFZZEk5b3AtT292SFY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeFfjHG/d bFtvM0nrvqUhuVc4bLtCpcRzqOBM/t2axO0Xiz5NT889t7FFV1ULabiFnyLDLbct X8Ohpd8BbYhp0wXSYuyfHJXaZWO67IMCYN1CP30Z1VMaEPeuYP0ek3jQpJ/EnQE1 9nbAuT9f78ed/UHbJsDEyV3133bB7qYngwfrPEPyJUCvvwPBOgKz+bjoEGYBMpeI T+KuyGLbHNnjl0yo+Q/I8GkKFDdTpYJorvsEMo8qYYVhP1CKODGh2X5hMWkjVNGN vWEvj+IuPMeoe5bF2c1TLqQqDR7qrQNSiWr5N/ivODDfnG19Pgwg3PcACjv5hK/6 zFp2yqmyZw0hbQ== -----END CERTIFICATE-----Generated at Fri Dec 12 00:10:37 2025 by rpki-client