This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/812a15-c6e4-416a-b09d-84bf31de8413/1/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.mft File: MKnJV9IJHSTg3-X2bJe-SqH5MIQ.mft (raw, json) Hash identifier: OiXUIOnzDyXhgLbvgi5O63kD0dtgbwFq54ACObb++fA= Subject key identifier: 2B:3C:D5:2D:0C:B0:1C:FE:20:3F:4C:AD:B9:ED:93:F0:CE:93:AF:D1 Authority key identifier: 30:A9:C9:57:D2:09:1D:24:E0:DF:E5:F6:6C:97:BE:4A:A1:F9:30:84 Certificate issuer: /CN=30a9c957d2091d24e0dfe5f66c97be4aa1f93084 Certificate serial: 019B34200CA8B8C9993FC71C1920A318A500 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/812a15-c6e4-416a-b09d-84bf31de8413/1/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.mft Manifest number: 1781 Signing time: Fri 19 Dec 2025 01:01:14 +0000 Manifest this update: Fri 19 Dec 2025 01:01:14 +0000 Manifest next update: Sat 20 Dec 2025 01:01:14 +0000 Files and hashes: 1: MKnJV9IJHSTg3-X2bJe-SqH5MIQ.crl (hash: /0qXupfgmmNCturneK3DSaU4/ZoDNEW109IbmmFFHUw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/812a15-c6e4-416a-b09d-84bf31de8413/1/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/812a15-c6e4-416a-b09d-84bf31de8413/1/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.mft rsync://rpki.ripe.net/repository/DEFAULT/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:20:0c:a8:b8:c9:99:3f:c7:1c:19:20:a3:18:a5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30a9c957d2091d24e0dfe5f66c97be4aa1f93084 Validity Not Before: Dec 19 01:01:14 2025 GMT Not After : Dec 20 01:01:14 2025 GMT Subject: CN=2b3cd52d0cb01cfe203f4cadb9ed93f0ce93afd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f9:7f:71:59:29:91:85:67:e3:e0:8e:77:ad: 0d:e8:03:e3:d0:d8:3f:2e:cc:6e:c8:ef:24:49:ff: 77:e8:34:a9:87:52:5a:49:31:1f:2f:cb:4b:4d:5f: 1f:27:a8:ba:65:e7:97:8f:18:07:68:27:c4:24:ad: 7c:a0:7c:10:c7:e4:8a:8f:4d:7e:d4:a1:66:36:fb: da:c9:72:95:23:bf:6e:b3:3b:16:71:ad:60:cd:19: 7a:2a:36:6c:a5:e5:66:f1:23:91:9c:c1:63:50:d2: cd:c2:a5:24:a5:fe:b7:b0:7c:95:a7:a5:db:ab:97: 36:36:10:fe:ca:c2:cc:70:22:5e:43:91:d9:bf:70: 91:18:bc:73:b6:cb:2f:a8:b5:4a:32:2c:87:fa:8c: 4c:ca:ca:e7:26:42:60:00:e9:e5:b0:27:35:f4:8b: 41:ab:99:2b:79:90:4d:3e:e9:a1:79:6b:42:86:ed: 1b:75:66:d4:47:ec:5f:76:24:09:79:55:87:0b:d8: 03:b5:18:0a:f0:d1:cd:b6:9d:a6:23:7a:b7:f2:87: 87:d7:2a:c9:12:4b:fc:2a:db:ba:e9:5a:6d:78:e9: 22:d6:e1:10:42:ef:af:3e:64:8a:5f:62:15:a3:96: 13:91:58:79:0e:47:2c:de:a3:33:4e:ea:56:42:a0: e7:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:3C:D5:2D:0C:B0:1C:FE:20:3F:4C:AD:B9:ED:93:F0:CE:93:AF:D1 X509v3 Authority Key Identifier: keyid:30:A9:C9:57:D2:09:1D:24:E0:DF:E5:F6:6C:97:BE:4A:A1:F9:30:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/812a15-c6e4-416a-b09d-84bf31de8413/1/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/812a15-c6e4-416a-b09d-84bf31de8413/1/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:d4:a1:f3:d4:9b:6a:60:df:d3:d2:76:c8:fb:1f:1c:0f:37: 8a:83:09:45:db:95:04:96:f7:1b:17:33:ea:f3:b9:0f:73:bb: da:0c:d8:55:c6:60:05:31:12:03:c3:64:05:05:43:4c:b7:70: d9:bd:f2:c6:9b:33:8a:f5:c3:13:06:7a:f3:d5:b2:28:a1:c0: 7e:a6:d4:63:83:11:fd:6b:c5:d5:dc:10:de:93:5f:57:45:2b: 04:ec:fc:2b:18:d6:86:f8:30:5d:27:2e:8e:86:be:fa:26:35: b6:e2:ca:34:e4:3f:a2:92:53:ef:7b:8f:04:aa:c0:8a:ee:43: 1a:e5:61:67:50:d7:f0:a4:f7:6a:99:fb:a0:4f:e6:a6:e8:80: e0:2d:43:b6:a0:96:8f:fa:87:1e:9a:92:e2:c6:25:a5:31:97: 97:63:e2:32:07:50:ed:65:60:39:68:a2:56:1b:bb:79:a2:5b: 01:68:81:0b:39:8a:cd:12:20:44:0f:47:f3:99:f1:3c:c4:3d: 83:2c:0b:01:28:88:4a:7a:ba:5c:6d:f3:09:d0:f5:67:96:fa: 5e:49:d2:ab:7e:fd:07:45:a0:3b:5f:40:7e:20:89:56:3a:94: 7e:d0:47:f6:3b:d2:e1:12:dc:a6:c2:d7:b2:4c:1c:9d:b8:15: aa:92:5a:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0IAyouMmZP8ccGSCjGKUAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwYTljOTU3ZDIwOTFkMjRlMGRmZTVmNjZjOTdiZTRhYTFm OTMwODQwHhcNMjUxMjE5MDEwMTE0WhcNMjUxMjIwMDEwMTE0WjAzMTEwLwYDVQQD EygyYjNjZDUyZDBjYjAxY2ZlMjAzZjRjYWRiOWVkOTNmMGNlOTNhZmQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvl/cVkpkYVn4+COd60N6APj0Ng/ LsxuyO8kSf936DSph1JaSTEfL8tLTV8fJ6i6ZeeXjxgHaCfEJK18oHwQx+SKj01+ 1KFmNvvayXKVI79uszsWca1gzRl6KjZspeVm8SORnMFjUNLNwqUkpf63sHyVp6Xb q5c2NhD+ysLMcCJeQ5HZv3CRGLxztssvqLVKMiyH+oxMysrnJkJgAOnlsCc19ItB q5kreZBNPumheWtChu0bdWbUR+xfdiQJeVWHC9gDtRgK8NHNtp2mI3q38oeH1yrJ Ekv8Ktu66VpteOki1uEQQu+vPmSKX2IVo5YTkVh5Dkcs3qMzTupWQqDnDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCs81S0MsBz+ID9Mrbntk/DOk6/RMB8GA1UdIwQY MBaAFDCpyVfSCR0k4N/l9myXvkqh+TCEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUtuSlY5SUpIU1RnMy1YMmJKZS1TcUg1TUlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy84MTJhMTUtYzZlNC00MTZhLWIwOWQt ODRiZjMxZGU4NDEzLzEvTUtuSlY5SUpIU1RnMy1YMmJKZS1TcUg1TUlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy84MTJhMTUtYzZlNC00MTZhLWIwOWQtODRiZjMxZGU4NDEz LzEvTUtuSlY5SUpIU1RnMy1YMmJKZS1TcUg1TUlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVNSh89Sb amDf09J2yPsfHA83ioMJRduVBJb3Gxcz6vO5D3O72gzYVcZgBTESA8NkBQVDTLdw 2b3yxpszivXDEwZ689WyKKHAfqbUY4MR/WvF1dwQ3pNfV0UrBOz8KxjWhvgwXScu joa++iY1tuLKNOQ/opJT73uPBKrAiu5DGuVhZ1DX8KT3apn7oE/mpuiA4C1DtqCW j/qHHpqS4sYlpTGXl2PiMgdQ7WVgOWiiVhu7eaJbAWiBCzmKzRIgRA9H85nxPMQ9 gywLASiISnq6XG3zCdD1Z5b6XknSq379B0WgO19AfiCJVjqUftBH9jvS4RLcpsLX skwcnbgVqpJaZw== -----END CERTIFICATE-----Generated at Fri Dec 19 06:49:49 2025 by rpki-client