This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.mft File: MkZ5WtaKa63Vr8trpGU-nAkPyFo.mft (raw, json) Hash identifier: UB6E5WcdP1+kZHOAqeVaHiIFU+1dNteXCz6nwlzIGus= Subject key identifier: BB:A3:1E:D4:56:F5:9A:62:F5:0A:0E:CB:82:32:36:0E:6A:B9:2A:73 Authority key identifier: 32:46:79:5A:D6:8A:6B:AD:D5:AF:CB:6B:A4:65:3E:9C:09:0F:C8:5A Certificate issuer: /CN=3246795ad68a6badd5afcb6ba4653e9c090fc85a Certificate serial: 019B2C9D7E22AC35659EAC656BAC794A0D43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MkZ5WtaKa63Vr8trpGU-nAkPyFo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.mft Manifest number: 151E Signing time: Wed 17 Dec 2025 14:01:17 +0000 Manifest this update: Wed 17 Dec 2025 14:01:17 +0000 Manifest next update: Thu 18 Dec 2025 14:01:17 +0000 Files and hashes: 1: LZ8uAkntmN0c-t2Y6sQNZXRHvWc.roa (hash: pnKmEkhVyamHT8q5re1u8FHw0CqLvJSlSrJsXdTnczY=) 2: MkZ5WtaKa63Vr8trpGU-nAkPyFo.crl (hash: dVsReQDiX2WY0TeG4Z0XqE0awnUSE53e8lZSSC2Y3lA=) 3: RB-1Fy5sD5ZVDFZv751PSyh3H9Q.roa (hash: mxQ53KQYRRHLBJuqI/DtJ482oAxxveSfP/pLhygbyl4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.mft rsync://rpki.ripe.net/repository/DEFAULT/MkZ5WtaKa63Vr8trpGU-nAkPyFo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:9d:7e:22:ac:35:65:9e:ac:65:6b:ac:79:4a:0d:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3246795ad68a6badd5afcb6ba4653e9c090fc85a Validity Not Before: Dec 17 14:01:17 2025 GMT Not After : Dec 18 14:01:17 2025 GMT Subject: CN=bba31ed456f59a62f50a0ecb8232360e6ab92a73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:50:b1:1e:e7:70:8d:e9:b1:8b:56:d8:89:e8: 5a:86:eb:56:7f:b0:53:eb:b2:ba:c1:82:15:1f:1b: 21:7c:33:09:e8:8d:2f:a5:b2:e0:3b:4f:fe:2f:03: e0:38:b2:bd:c7:82:bc:d4:48:06:3c:13:68:b3:0f: 6e:95:a9:20:75:92:ff:d7:a4:fa:7b:61:a2:26:96: da:2b:37:e5:92:72:7c:5e:89:ac:b6:ac:24:60:c3: 98:44:db:24:42:c8:88:76:46:44:33:1b:ec:8c:e4: 72:03:aa:f0:5c:f6:fb:5a:69:f1:26:ad:67:55:95: 32:5f:2c:1f:70:36:22:6e:5f:af:8a:00:c2:d2:21: b1:7f:3f:1c:9e:a6:af:ad:1a:6b:63:98:32:01:45: 86:03:73:67:ac:5d:98:2f:88:57:ea:99:2e:75:17: 67:11:53:c0:ab:d3:da:87:01:88:8f:f1:d5:7d:c2: 34:d2:2a:33:2f:bd:2b:f7:5b:f6:65:68:ba:d8:65: b1:3a:df:d6:62:3d:69:02:5b:ab:04:7a:93:9a:36: e1:51:9c:67:c8:af:27:fc:b0:dc:fe:b2:39:7b:d7: db:37:46:5d:34:75:e8:a5:14:e4:06:10:1f:42:d0: 83:74:5c:02:33:05:a2:e8:b3:5b:23:d4:d8:25:e3: 8d:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:A3:1E:D4:56:F5:9A:62:F5:0A:0E:CB:82:32:36:0E:6A:B9:2A:73 X509v3 Authority Key Identifier: keyid:32:46:79:5A:D6:8A:6B:AD:D5:AF:CB:6B:A4:65:3E:9C:09:0F:C8:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MkZ5WtaKa63Vr8trpGU-nAkPyFo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:eb:4c:1f:53:d6:31:66:28:95:f7:61:65:c7:fd:00:34:b9: 6d:e2:6d:b0:49:65:03:70:79:ed:1d:0d:e7:7a:8e:e5:fe:a5: 9a:f1:cd:e8:08:bd:ac:ac:e0:4f:5d:20:da:df:b4:47:7f:ed: 63:72:a6:93:ec:50:fc:ff:59:4a:60:1b:1b:a3:fc:9c:dd:5d: 54:c8:98:51:d1:1f:80:75:3e:72:44:70:b8:87:96:c8:9e:7a: 10:55:bf:b3:66:94:df:1e:e5:48:52:60:6a:cd:9d:a0:03:30: c7:df:2b:7b:81:09:4c:75:a8:9f:6b:88:01:ab:9c:dd:53:96: 67:de:63:c8:9e:76:3b:8e:35:f9:60:33:aa:a6:50:b3:a2:b8: 8c:51:eb:04:12:a4:3c:6f:e1:fc:cd:23:cf:44:9a:d8:c7:a5: 30:56:21:ba:a3:32:d3:c7:31:df:07:a2:c9:55:9a:59:50:4a: a6:7a:91:47:6d:8b:e8:5f:2c:0e:12:be:e4:df:e9:d2:d8:31: 6a:e1:c3:91:56:18:1c:09:81:51:ba:49:41:85:0a:9c:63:50: 8f:0c:63:c6:86:20:f4:00:fc:64:2e:b9:36:e1:05:ad:b8:c3: 88:09:95:e1:a7:ea:9e:77:22:86:48:3b:c9:dd:07:ee:1b:bb: a0:25:cd:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssnX4irDVlnqxla6x5Sg1DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNDY3OTVhZDY4YTZiYWRkNWFmY2I2YmE0NjUzZTljMDkw ZmM4NWEwHhcNMjUxMjE3MTQwMTE3WhcNMjUxMjE4MTQwMTE3WjAzMTEwLwYDVQQD EyhiYmEzMWVkNDU2ZjU5YTYyZjUwYTBlY2I4MjMyMzYwZTZhYjkyYTczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFCxHudwjemxi1bYiehahutWf7BT 67K6wYIVHxshfDMJ6I0vpbLgO0/+LwPgOLK9x4K81EgGPBNosw9ulakgdZL/16T6 e2GiJpbaKzflknJ8XomstqwkYMOYRNskQsiIdkZEMxvsjORyA6rwXPb7WmnxJq1n VZUyXywfcDYibl+vigDC0iGxfz8cnqavrRprY5gyAUWGA3NnrF2YL4hX6pkudRdn EVPAq9PahwGIj/HVfcI00iozL70r91v2ZWi62GWxOt/WYj1pAlurBHqTmjbhUZxn yK8n/LDc/rI5e9fbN0ZdNHXopRTkBhAfQtCDdFwCMwWi6LNbI9TYJeONJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLujHtRW9Zpi9QoOy4IyNg5quSpzMB8GA1UdIwQY MBaAFDJGeVrWimut1a/La6RlPpwJD8haMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWtaNVd0YUthNjNWcjh0cnBHVS1uQWtQeUZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC85NDc5Y2EtM2RiNS00ZjYyLThlMjMt NzMwYjE3ZjA2OWFiLzEvTWtaNVd0YUthNjNWcjh0cnBHVS1uQWtQeUZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC85NDc5Y2EtM2RiNS00ZjYyLThlMjMtNzMwYjE3ZjA2OWFi LzEvTWtaNVd0YUthNjNWcjh0cnBHVS1uQWtQeUZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlutMH1PW MWYolfdhZcf9ADS5beJtsEllA3B57R0N53qO5f6lmvHN6Ai9rKzgT10g2t+0R3/t Y3Kmk+xQ/P9ZSmAbG6P8nN1dVMiYUdEfgHU+ckRwuIeWyJ56EFW/s2aU3x7lSFJg as2doAMwx98re4EJTHWon2uIAauc3VOWZ95jyJ52O441+WAzqqZQs6K4jFHrBBKk PG/h/M0jz0Sa2MelMFYhuqMy08cx3weiyVWaWVBKpnqRR22L6F8sDhK+5N/p0tgx auHDkVYYHAmBUbpJQYUKnGNQjwxjxoYg9AD8ZC65NuEFrbjDiAmV4afqnncihkg7 yd0H7hu7oCXNPw== -----END CERTIFICATE-----Generated at Wed Dec 17 19:03:41 2025 by rpki-client