This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/d37bbf-056d-48f0-90e7-b379ea03fbaa/1/MK7HNts6BEOzui_FtKQkWG-0zhU.mft File: MK7HNts6BEOzui_FtKQkWG-0zhU.mft (raw, json) Hash identifier: tgwK5LQuE38F/BJrX1Tt+5kP8Jnz/BauP06cBxkiKOw= Subject key identifier: A4:31:12:30:D1:A6:C4:53:4E:FB:BF:27:BF:0E:22:CD:8C:53:AF:97 Authority key identifier: 30:AE:C7:36:DB:3A:04:43:B3:BA:2F:C5:B4:A4:24:58:6F:B4:CE:15 Certificate issuer: /CN=30aec736db3a0443b3ba2fc5b4a424586fb4ce15 Certificate serial: 019B593EE9B8CB6B9C178698A9A891DECFD7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MK7HNts6BEOzui_FtKQkWG-0zhU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/d37bbf-056d-48f0-90e7-b379ea03fbaa/1/MK7HNts6BEOzui_FtKQkWG-0zhU.mft Manifest number: B1 Signing time: Fri 26 Dec 2025 06:00:53 +0000 Manifest this update: Fri 26 Dec 2025 06:00:53 +0000 Manifest next update: Sat 27 Dec 2025 06:00:53 +0000 Files and hashes: 1: 6H_HYtmg2UdJqU5MWI0lffy1dSc.roa (hash: AKgGfr6wkzXFXCjq2IfcxYtjAtEln9LUULf9VwKwDj8=) 2: MK7HNts6BEOzui_FtKQkWG-0zhU.crl (hash: z/rZjWBx8fKHD36ZnA3NxKl9VdROyQtR62ymbwJkEoM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/d37bbf-056d-48f0-90e7-b379ea03fbaa/1/MK7HNts6BEOzui_FtKQkWG-0zhU.crl rsync://rpki.ripe.net/repository/DEFAULT/79/d37bbf-056d-48f0-90e7-b379ea03fbaa/1/MK7HNts6BEOzui_FtKQkWG-0zhU.mft rsync://rpki.ripe.net/repository/DEFAULT/MK7HNts6BEOzui_FtKQkWG-0zhU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:3e:e9:b8:cb:6b:9c:17:86:98:a9:a8:91:de:cf:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30aec736db3a0443b3ba2fc5b4a424586fb4ce15 Validity Not Before: Dec 26 06:00:53 2025 GMT Not After : Dec 27 06:00:53 2025 GMT Subject: CN=a4311230d1a6c4534efbbf27bf0e22cd8c53af97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b7:b3:8c:d5:3c:c8:73:45:ff:f5:5f:d0:db: 57:1d:4e:e8:f0:00:2e:29:e1:19:27:25:2e:a4:1e: d0:31:12:b6:5a:64:24:06:a4:26:0e:b1:65:43:2f: 97:b1:cc:d3:af:49:43:ff:1d:8d:47:ff:5f:09:5d: aa:6f:6a:a4:15:3c:4d:ba:ab:e7:43:2e:a0:bb:ab: 7d:54:3c:28:50:ce:55:b6:c7:58:7c:13:d0:c1:6c: 4e:71:61:2c:e2:af:22:23:a2:e6:19:df:b8:bd:c1: 76:d0:cf:bd:46:70:0b:cf:3f:ac:3d:5d:60:e4:27: 9f:18:1c:d9:23:cf:05:4f:73:e5:fb:00:65:12:c5: 8c:c9:64:59:0e:91:42:17:66:0a:8d:80:9c:46:9d: 38:3c:33:8f:7d:6d:28:fe:07:76:38:3f:5b:10:a4: fc:4f:6d:3c:5b:a8:f9:c9:7f:29:a8:2b:61:be:e3: 6f:d4:45:8b:94:85:16:3c:fb:0d:f5:38:95:aa:87: c0:12:ab:ed:81:e7:3c:05:f4:0c:fc:a0:37:e7:75: f8:d7:0f:eb:77:cb:dd:0a:3b:74:a8:e5:38:22:6c: 47:7a:94:47:dd:7c:f0:df:c8:c1:8f:3a:6b:6f:9d: 55:a6:6c:47:1b:e0:80:f1:c5:33:5d:c1:30:4f:51: 8d:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:31:12:30:D1:A6:C4:53:4E:FB:BF:27:BF:0E:22:CD:8C:53:AF:97 X509v3 Authority Key Identifier: keyid:30:AE:C7:36:DB:3A:04:43:B3:BA:2F:C5:B4:A4:24:58:6F:B4:CE:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MK7HNts6BEOzui_FtKQkWG-0zhU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/d37bbf-056d-48f0-90e7-b379ea03fbaa/1/MK7HNts6BEOzui_FtKQkWG-0zhU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/d37bbf-056d-48f0-90e7-b379ea03fbaa/1/MK7HNts6BEOzui_FtKQkWG-0zhU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:20:35:cd:2d:06:d9:24:51:82:3b:cb:67:a9:a9:8a:a9:0f: a1:e8:ec:4d:44:66:b6:fc:17:5b:41:fc:0a:bb:f8:f4:80:d9: 0b:52:01:83:4f:b9:cb:70:49:c1:7b:48:fd:b3:b4:aa:82:f3: d3:2c:b6:a4:0d:80:29:7a:83:fb:dd:a1:a1:24:72:01:80:0c: bb:7c:ce:69:f1:41:61:30:25:b0:41:ab:73:bf:71:a4:3f:5a: a1:af:61:65:0f:17:28:02:07:55:06:e3:b0:f4:91:94:97:84: 6c:0b:54:77:87:71:10:9a:1b:b4:c9:46:4b:1d:e2:41:5b:9b: 8a:e2:66:5b:1a:26:cf:aa:28:f7:a3:c0:f4:5f:52:32:9b:d1: c6:a4:17:ff:53:f4:02:d4:1b:4b:8f:72:53:4d:50:2c:10:9e: 18:d2:c8:cb:5a:54:2f:27:20:84:39:76:d5:34:42:b1:9e:28: b6:1d:82:b1:f5:ab:f6:2b:f0:76:a6:c0:e3:d7:6c:58:68:be: c9:e4:fe:8a:1a:12:1d:41:7c:bb:a3:af:a4:f9:de:9b:06:38: 34:98:23:5b:ce:2e:ec:8b:d7:d9:d6:7f:2f:88:c2:7b:e3:9e: cf:06:18:77:28:fc:0c:6a:3c:b5:d8:00:e0:f3:b9:db:ef:ae: c0:0d:a7:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZPum4y2ucF4aYqaiR3s/XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwYWVjNzM2ZGIzYTA0NDNiM2JhMmZjNWI0YTQyNDU4NmZi NGNlMTUwHhcNMjUxMjI2MDYwMDUzWhcNMjUxMjI3MDYwMDUzWjAzMTEwLwYDVQQD EyhhNDMxMTIzMGQxYTZjNDUzNGVmYmJmMjdiZjBlMjJjZDhjNTNhZjk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLezjNU8yHNF//Vf0NtXHU7o8AAu KeEZJyUupB7QMRK2WmQkBqQmDrFlQy+XsczTr0lD/x2NR/9fCV2qb2qkFTxNuqvn Qy6gu6t9VDwoUM5VtsdYfBPQwWxOcWEs4q8iI6LmGd+4vcF20M+9RnALzz+sPV1g 5CefGBzZI88FT3Pl+wBlEsWMyWRZDpFCF2YKjYCcRp04PDOPfW0o/gd2OD9bEKT8 T208W6j5yX8pqCthvuNv1EWLlIUWPPsN9TiVqofAEqvtgec8BfQM/KA353X41w/r d8vdCjt0qOU4ImxHepRH3Xzw38jBjzprb51VpmxHG+CA8cUzXcEwT1GNOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKQxEjDRpsRTTvu/J78OIs2MU6+XMB8GA1UdIwQY MBaAFDCuxzbbOgRDs7ovxbSkJFhvtM4VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUs3SE50czZCRU96dWlfRnRLUWtXRy0wemhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9kMzdiYmYtMDU2ZC00OGYwLTkwZTct YjM3OWVhMDNmYmFhLzEvTUs3SE50czZCRU96dWlfRnRLUWtXRy0wemhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS9kMzdiYmYtMDU2ZC00OGYwLTkwZTctYjM3OWVhMDNmYmFh LzEvTUs3SE50czZCRU96dWlfRnRLUWtXRy0wemhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoCA1zS0G 2SRRgjvLZ6mpiqkPoejsTURmtvwXW0H8Crv49IDZC1IBg0+5y3BJwXtI/bO0qoLz 0yy2pA2AKXqD+92hoSRyAYAMu3zOafFBYTAlsEGrc79xpD9aoa9hZQ8XKAIHVQbj sPSRlJeEbAtUd4dxEJobtMlGSx3iQVubiuJmWxomz6oo96PA9F9SMpvRxqQX/1P0 AtQbS49yU01QLBCeGNLIy1pULycghDl21TRCsZ4oth2CsfWr9ivwdqbA49dsWGi+ yeT+ihoSHUF8u6OvpPnemwY4NJgjW84u7IvX2dZ/L4jCe+OezwYYdyj8DGo8tdgA 4PO52++uwA2nyg== -----END CERTIFICATE-----Generated at Fri Dec 26 14:17:21 2025 by rpki-client