This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/3d4e04-93d4-4f5a-8dcd-332f34588365/1/MmboynDkwXGKCYBFOPnkYLMF-bM.mft File: MmboynDkwXGKCYBFOPnkYLMF-bM.mft (raw, json) Hash identifier: PQKsBYhE1WK4DMaAgzif4dmzZ5gnjhscnKbd0ITblDs= Subject key identifier: 85:6A:17:08:CC:2C:EF:82:33:95:07:EE:A1:CD:23:79:4E:A3:5B:5C Authority key identifier: 32:66:E8:CA:70:E4:C1:71:8A:09:80:45:38:F9:E4:60:B3:05:F9:B3 Certificate issuer: /CN=3266e8ca70e4c1718a09804538f9e460b305f9b3 Certificate serial: 019B40C869A2CED19A9AB0CDC926C11C5830 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmboynDkwXGKCYBFOPnkYLMF-bM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/3d4e04-93d4-4f5a-8dcd-332f34588365/1/MmboynDkwXGKCYBFOPnkYLMF-bM.mft Manifest number: 1788 Signing time: Sun 21 Dec 2025 12:00:34 +0000 Manifest this update: Sun 21 Dec 2025 12:00:34 +0000 Manifest next update: Mon 22 Dec 2025 12:00:34 +0000 Files and hashes: 1: MmboynDkwXGKCYBFOPnkYLMF-bM.crl (hash: u4W98kQ1cQU+6C+mCop9DzBDNjD/XCjDI2z5jzaRArY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/3d4e04-93d4-4f5a-8dcd-332f34588365/1/MmboynDkwXGKCYBFOPnkYLMF-bM.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/3d4e04-93d4-4f5a-8dcd-332f34588365/1/MmboynDkwXGKCYBFOPnkYLMF-bM.mft rsync://rpki.ripe.net/repository/DEFAULT/MmboynDkwXGKCYBFOPnkYLMF-bM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 12:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:c8:69:a2:ce:d1:9a:9a:b0:cd:c9:26:c1:1c:58:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3266e8ca70e4c1718a09804538f9e460b305f9b3 Validity Not Before: Dec 21 12:00:34 2025 GMT Not After : Dec 22 12:00:34 2025 GMT Subject: CN=856a1708cc2cef82339507eea1cd23794ea35b5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:29:c3:9b:84:1a:88:5a:4e:7a:ba:af:26:cd: d3:87:d0:a9:20:1a:96:8a:e0:15:1a:59:bd:a0:7b: b5:71:24:7a:7c:0a:bf:35:14:dd:9a:c0:ae:6a:ac: 55:88:10:a1:29:eb:27:e3:d3:7e:9a:8b:29:e9:12: 0c:49:c7:32:65:85:1b:8a:33:5d:d8:10:79:eb:d9: d9:e9:cb:92:42:88:87:95:69:66:ec:2f:12:ea:a9: ab:90:64:56:18:9e:ea:83:1d:e8:2a:6e:11:f2:e1: 4e:c9:81:a1:de:5c:7d:d3:73:cb:cf:4b:3a:cc:77: 5a:7c:ee:a7:a6:48:2a:34:03:bc:a0:2b:2f:62:cc: 24:17:f5:c8:c6:c3:c7:b6:15:db:ab:44:05:5a:0e: aa:1f:cf:c9:73:d3:f5:be:f9:0a:8f:f9:d1:9e:b8: 08:4a:82:b1:6f:ca:f2:a7:4b:fb:d6:69:bf:1e:f0: 7e:5a:36:63:d3:ad:41:7c:a4:8c:f8:3f:e8:4a:f7: 42:c4:0e:52:7b:2b:35:58:78:b0:3c:bc:7c:25:97: e0:8a:b3:30:72:aa:d7:5b:92:b8:8b:8f:04:16:5c: 62:6d:c1:66:a1:a5:ce:64:61:0a:36:02:46:c7:f3: 00:fa:d5:89:3d:62:f1:6a:94:ff:62:c3:96:c4:98: e9:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:6A:17:08:CC:2C:EF:82:33:95:07:EE:A1:CD:23:79:4E:A3:5B:5C X509v3 Authority Key Identifier: keyid:32:66:E8:CA:70:E4:C1:71:8A:09:80:45:38:F9:E4:60:B3:05:F9:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmboynDkwXGKCYBFOPnkYLMF-bM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3d4e04-93d4-4f5a-8dcd-332f34588365/1/MmboynDkwXGKCYBFOPnkYLMF-bM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3d4e04-93d4-4f5a-8dcd-332f34588365/1/MmboynDkwXGKCYBFOPnkYLMF-bM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:a9:cc:75:0f:c1:8a:54:3a:32:e6:c7:55:a9:6f:34:ce:22: ef:ab:69:b1:22:78:1d:61:5d:4e:7b:b1:9f:ce:58:b0:72:43: b0:d1:d8:7c:59:df:35:4a:ce:8f:c5:34:f8:2d:a2:56:75:e9: 7d:ae:c6:b7:b5:1c:3a:71:3e:f7:c8:66:f1:cd:14:08:a6:e8: 86:e8:ad:ed:13:f3:98:b9:6a:07:8d:7f:4e:7b:6e:30:a7:eb: 8e:c9:bd:80:1e:3e:1d:29:ba:5d:43:0e:bb:da:5d:f5:5a:1e: 5f:94:cd:f8:4b:14:2c:1a:40:9a:04:23:60:06:29:d0:f7:b0: b3:24:20:51:e2:25:a3:86:fa:dd:74:1e:6e:8f:05:b3:48:97: 74:bc:8e:85:cd:f3:f7:63:5c:08:6a:5f:5e:a6:7f:bc:dc:dc: 44:87:9d:90:fb:08:bb:fe:51:f2:cf:72:45:f7:5f:7d:6f:1f: 7b:ce:96:f7:c9:ba:65:e0:49:42:5e:c2:c0:09:05:3f:17:66: 03:86:8d:b2:37:1a:ee:26:40:5c:c1:38:5b:e5:63:68:6c:88: 02:fe:96:52:70:c7:74:d7:fd:52:3a:0b:18:af:57:5d:d2:a8: 87:57:3d:1a:22:8e:a3:a1:2b:b4:27:ce:ae:0c:47:5e:88:5b: 5e:e3:9d:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAyGmiztGamrDNySbBHFgwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNjZlOGNhNzBlNGMxNzE4YTA5ODA0NTM4ZjllNDYwYjMw NWY5YjMwHhcNMjUxMjIxMTIwMDM0WhcNMjUxMjIyMTIwMDM0WjAzMTEwLwYDVQQD Eyg4NTZhMTcwOGNjMmNlZjgyMzM5NTA3ZWVhMWNkMjM3OTRlYTM1YjVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxynDm4QaiFpOerqvJs3Th9CpIBqW iuAVGlm9oHu1cSR6fAq/NRTdmsCuaqxViBChKesn49N+mosp6RIMSccyZYUbijNd 2BB569nZ6cuSQoiHlWlm7C8S6qmrkGRWGJ7qgx3oKm4R8uFOyYGh3lx903PLz0s6 zHdafO6npkgqNAO8oCsvYswkF/XIxsPHthXbq0QFWg6qH8/Jc9P1vvkKj/nRnrgI SoKxb8ryp0v71mm/HvB+WjZj061BfKSM+D/oSvdCxA5Seys1WHiwPLx8JZfgirMw cqrXW5K4i48EFlxibcFmoaXOZGEKNgJGx/MA+tWJPWLxapT/YsOWxJjpewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIVqFwjMLO+CM5UH7qHNI3lOo1tcMB8GA1UdIwQY MBaAFDJm6Mpw5MFxigmARTj55GCzBfmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTW1ib3luRGt3WEdLQ1lCRk9QbmtZTE1GLWJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8zZDRlMDQtOTNkNC00ZjVhLThkY2Qt MzMyZjM0NTg4MzY1LzEvTW1ib3luRGt3WEdLQ1lCRk9QbmtZTE1GLWJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC8zZDRlMDQtOTNkNC00ZjVhLThkY2QtMzMyZjM0NTg4MzY1 LzEvTW1ib3luRGt3WEdLQ1lCRk9QbmtZTE1GLWJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOqnMdQ/B ilQ6MubHValvNM4i76tpsSJ4HWFdTnuxn85YsHJDsNHYfFnfNUrOj8U0+C2iVnXp fa7Gt7UcOnE+98hm8c0UCKbohuit7RPzmLlqB41/TntuMKfrjsm9gB4+HSm6XUMO u9pd9VoeX5TN+EsULBpAmgQjYAYp0PewsyQgUeIlo4b63XQebo8Fs0iXdLyOhc3z 92NcCGpfXqZ/vNzcRIedkPsIu/5R8s9yRfdffW8fe86W98m6ZeBJQl7CwAkFPxdm A4aNsjca7iZAXME4W+VjaGyIAv6WUnDHdNf9UjoLGK9XXdKoh1c9GiKOo6ErtCfO rgxHXohbXuOdRQ== -----END CERTIFICATE-----Generated at Sun Dec 21 15:41:36 2025 by rpki-client