This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/812a15-c6e4-416a-b09d-84bf31de8413/1/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.mft File: MKnJV9IJHSTg3-X2bJe-SqH5MIQ.mft (raw, json) Hash identifier: 5c03WMtexNNq4KU80VvTf5VL1JzfOP9DldEkdSSORvQ= Subject key identifier: 24:1A:93:F5:E6:4D:BF:CB:24:A0:EF:B9:C7:38:C3:36:4E:49:E1:5E Authority key identifier: 30:A9:C9:57:D2:09:1D:24:E0:DF:E5:F6:6C:97:BE:4A:A1:F9:30:84 Certificate issuer: /CN=30a9c957d2091d24e0dfe5f66c97be4aa1f93084 Certificate serial: 019B37FCDB398D1865C3036BA8C1E41E5757 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/812a15-c6e4-416a-b09d-84bf31de8413/1/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.mft Manifest number: 1783 Signing time: Fri 19 Dec 2025 19:01:16 +0000 Manifest this update: Fri 19 Dec 2025 19:01:16 +0000 Manifest next update: Sat 20 Dec 2025 19:01:16 +0000 Files and hashes: 1: MKnJV9IJHSTg3-X2bJe-SqH5MIQ.crl (hash: bUPMXfwVp27nGOY5c1W0SA/tfnunTL6aNadpap5XQ60=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/812a15-c6e4-416a-b09d-84bf31de8413/1/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/812a15-c6e4-416a-b09d-84bf31de8413/1/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.mft rsync://rpki.ripe.net/repository/DEFAULT/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:fc:db:39:8d:18:65:c3:03:6b:a8:c1:e4:1e:57:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30a9c957d2091d24e0dfe5f66c97be4aa1f93084 Validity Not Before: Dec 19 19:01:16 2025 GMT Not After : Dec 20 19:01:16 2025 GMT Subject: CN=241a93f5e64dbfcb24a0efb9c738c3364e49e15e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f6:3b:ef:e4:87:bb:91:d4:51:2e:97:29:8f: b6:89:ef:91:d5:30:58:5a:50:cb:96:83:95:61:2f: c0:69:80:ea:a4:36:69:e3:12:03:bf:2d:28:bf:e2: 76:e7:5a:8b:94:d2:4d:83:7d:be:6e:66:b9:b4:e8: 4f:ca:a6:f8:8c:2a:5d:36:7f:eb:73:7f:2d:ce:c3: 99:a2:a1:c4:22:b5:c5:3d:86:82:86:b3:0f:50:40: 60:b1:d8:1d:8d:98:2a:38:68:4f:68:8e:a5:bb:a9: 6f:60:89:57:91:9a:1f:ee:a6:36:14:95:cb:12:e6: 71:40:70:3a:8d:df:18:b6:b0:bc:7a:87:c2:15:81: e2:7c:74:0e:8c:36:68:87:69:65:83:f3:ad:c0:0b: 41:db:fb:b6:9e:f8:4a:88:2a:7d:2c:35:9b:dc:42: 51:80:09:89:f2:81:5f:62:ed:64:2a:fe:f8:3a:50: dc:8b:33:49:b7:cb:8a:33:f9:7e:82:a5:d9:90:3c: d1:67:e6:e7:78:89:13:8b:fa:33:f9:2b:37:a0:23: 27:44:cb:7d:26:63:14:25:12:31:a0:24:9c:32:2d: e5:43:60:71:24:40:44:89:6e:0d:9f:31:9f:7e:cb: 9e:21:47:34:3b:b2:ff:11:b2:a3:8b:be:58:f6:39: 39:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:1A:93:F5:E6:4D:BF:CB:24:A0:EF:B9:C7:38:C3:36:4E:49:E1:5E X509v3 Authority Key Identifier: keyid:30:A9:C9:57:D2:09:1D:24:E0:DF:E5:F6:6C:97:BE:4A:A1:F9:30:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/812a15-c6e4-416a-b09d-84bf31de8413/1/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/812a15-c6e4-416a-b09d-84bf31de8413/1/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:17:dd:07:49:ca:b0:38:34:74:36:e7:ba:a4:66:9b:20:d4: 05:9a:e6:5c:a3:1b:8b:1c:22:96:07:89:02:bd:52:9f:03:28: 9b:c1:db:07:e6:6d:27:fe:e5:ab:ea:4f:6d:a5:89:ad:aa:d2: 07:6e:54:24:21:b2:02:9e:2b:cf:0d:dc:0e:f9:c9:d7:83:0f: 6b:4e:32:2b:91:c0:65:5a:41:05:95:80:2f:05:14:a4:bc:a1: e2:a7:d5:63:3f:57:02:23:7b:69:89:32:ab:06:c8:24:f2:99: 20:68:ec:31:16:f4:5f:8b:17:bb:b9:46:4c:9a:b1:d9:9e:68: 98:ca:08:ef:06:04:1f:88:1e:0b:dd:04:ac:85:44:38:bf:16: 8a:11:4e:68:ba:ea:d7:79:49:7e:e4:cb:67:04:fe:18:db:a7: a5:c1:51:cb:b6:c6:70:55:c9:5d:cb:88:aa:86:af:1b:2a:2c: c5:ad:2d:ee:d4:d6:68:7b:22:c5:44:d4:8b:9c:6f:7f:8f:ac: a6:19:88:b5:0a:4b:74:c4:11:c7:3d:42:80:c1:65:eb:73:d3: de:4a:72:4a:c8:66:f7:99:72:25:ae:3a:ba:fe:db:0d:c2:da: b5:27:0c:8a:3f:e2:a6:e1:24:a4:85:8b:ba:9e:2c:b7:19:4f: fc:d5:7b:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3/Ns5jRhlwwNrqMHkHldXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwYTljOTU3ZDIwOTFkMjRlMGRmZTVmNjZjOTdiZTRhYTFm OTMwODQwHhcNMjUxMjE5MTkwMTE2WhcNMjUxMjIwMTkwMTE2WjAzMTEwLwYDVQQD EygyNDFhOTNmNWU2NGRiZmNiMjRhMGVmYjljNzM4YzMzNjRlNDllMTVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPY77+SHu5HUUS6XKY+2ie+R1TBY WlDLloOVYS/AaYDqpDZp4xIDvy0ov+J251qLlNJNg32+bma5tOhPyqb4jCpdNn/r c38tzsOZoqHEIrXFPYaChrMPUEBgsdgdjZgqOGhPaI6lu6lvYIlXkZof7qY2FJXL EuZxQHA6jd8YtrC8eofCFYHifHQOjDZoh2llg/OtwAtB2/u2nvhKiCp9LDWb3EJR gAmJ8oFfYu1kKv74OlDcizNJt8uKM/l+gqXZkDzRZ+bneIkTi/oz+Ss3oCMnRMt9 JmMUJRIxoCScMi3lQ2BxJEBEiW4NnzGffsueIUc0O7L/EbKji75Y9jk5jQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCQak/XmTb/LJKDvucc4wzZOSeFeMB8GA1UdIwQY MBaAFDCpyVfSCR0k4N/l9myXvkqh+TCEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUtuSlY5SUpIU1RnMy1YMmJKZS1TcUg1TUlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy84MTJhMTUtYzZlNC00MTZhLWIwOWQt ODRiZjMxZGU4NDEzLzEvTUtuSlY5SUpIU1RnMy1YMmJKZS1TcUg1TUlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy84MTJhMTUtYzZlNC00MTZhLWIwOWQtODRiZjMxZGU4NDEz LzEvTUtuSlY5SUpIU1RnMy1YMmJKZS1TcUg1TUlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJxfdB0nK sDg0dDbnuqRmmyDUBZrmXKMbixwilgeJAr1SnwMom8HbB+ZtJ/7lq+pPbaWJrarS B25UJCGyAp4rzw3cDvnJ14MPa04yK5HAZVpBBZWALwUUpLyh4qfVYz9XAiN7aYky qwbIJPKZIGjsMRb0X4sXu7lGTJqx2Z5omMoI7wYEH4geC90ErIVEOL8WihFOaLrq 13lJfuTLZwT+GNunpcFRy7bGcFXJXcuIqoavGyosxa0t7tTWaHsixUTUi5xvf4+s phmItQpLdMQRxz1CgMFl63PT3kpySshm95lyJa46uv7bDcLatScMij/ipuEkpIWL up4stxlP/NV70Q== -----END CERTIFICATE-----Generated at Fri Dec 19 21:08:38 2025 by rpki-client