This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.mft File: MBpkhyXuJqRgy5scvNnJyDLESa8.mft (raw, json) Hash identifier: rjO2JVde/YZ6TdySH4njhMLkVkuqgkhU8aK4nXrlxXs= Subject key identifier: C6:BB:6F:CD:61:EA:BB:AE:DF:8D:55:7E:8B:86:9A:2D:56:CF:F8:7F Authority key identifier: 30:1A:64:87:25:EE:26:A4:60:CB:9B:1C:BC:D9:C9:C8:32:C4:49:AF Certificate issuer: /CN=301a648725ee26a460cb9b1cbcd9c9c832c449af Certificate serial: 019B405C19933726B1BF4D8F6D525DF11919 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MBpkhyXuJqRgy5scvNnJyDLESa8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.mft Manifest number: 0DA7 Signing time: Sun 21 Dec 2025 10:02:16 +0000 Manifest this update: Sun 21 Dec 2025 10:02:16 +0000 Manifest next update: Mon 22 Dec 2025 10:02:16 +0000 Files and hashes: 1: 8q_1sdbmWayLtmP8mTZB8kLpDTw.roa (hash: uQTkc3VWGLAWZhJNFH53PtzgfyjjEyHOxqo6DRrQtqk=) 2: MBpkhyXuJqRgy5scvNnJyDLESa8.crl (hash: T0f0/Vtu2KjAcHk0rUAr7qQs999g6BtzxzGEtc/qbOw=) 3: YAbDv-nvwGeHChb6zA0HOhLQzuU.roa (hash: VK3+gni3RnR7xKTmJLnlw17ysmyb1yYsUhENUHdwkVo=) 4: tu5XYH6b7aUk4QwLTx8RlrN8pdA.roa (hash: UdM+cRgEm1VOucuDuMrXqMuyPx7BCYacYlYJHHlKn/k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.mft rsync://rpki.ripe.net/repository/DEFAULT/MBpkhyXuJqRgy5scvNnJyDLESa8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5c:19:93:37:26:b1:bf:4d:8f:6d:52:5d:f1:19:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=301a648725ee26a460cb9b1cbcd9c9c832c449af Validity Not Before: Dec 21 10:02:16 2025 GMT Not After : Dec 22 10:02:16 2025 GMT Subject: CN=c6bb6fcd61eabbaedf8d557e8b869a2d56cff87f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c2:c6:cf:7f:da:dc:f8:16:be:1c:5e:11:a1: 70:0b:79:8f:17:ea:ab:5b:28:fb:28:14:93:63:36: c8:e9:38:53:a2:40:be:8a:6c:2d:7e:12:4d:36:21: e8:ee:eb:8b:18:83:2c:80:89:27:4f:75:39:40:a9: ea:94:7e:a0:03:13:ca:97:c1:1c:5d:ef:0b:f1:36: 84:5b:8e:99:a9:48:9d:9e:ed:83:18:d9:16:b2:3b: a3:9d:4c:4e:3d:d7:fa:2d:b7:eb:20:dd:ef:3e:59: 70:3b:31:46:03:45:1f:29:7f:e8:51:7e:60:43:e0: 80:55:ef:20:49:6c:31:e8:cf:2d:94:d7:f4:f4:1f: 5b:67:38:d7:80:d8:dc:c1:60:d5:d1:00:bf:b2:51: 1f:de:61:53:e7:bf:31:35:f4:58:60:41:d8:4d:7e: 03:f0:6a:0e:ed:cf:c1:1f:05:17:73:d3:26:a6:21: b1:94:89:22:37:bb:73:2c:58:31:6e:12:70:6b:55: cf:c9:76:24:95:8a:d6:1e:84:8b:7f:1c:48:d6:c2: ca:a9:42:30:53:8c:1e:f9:29:89:39:1f:9f:0c:e8: 56:0a:d7:d5:af:df:90:7e:ee:b9:eb:bf:a5:f6:68: 84:52:94:85:ce:04:bc:1d:33:06:82:05:db:38:d6: e7:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:BB:6F:CD:61:EA:BB:AE:DF:8D:55:7E:8B:86:9A:2D:56:CF:F8:7F X509v3 Authority Key Identifier: keyid:30:1A:64:87:25:EE:26:A4:60:CB:9B:1C:BC:D9:C9:C8:32:C4:49:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBpkhyXuJqRgy5scvNnJyDLESa8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:d1:fc:53:ae:e3:bb:1d:c2:63:a9:f2:99:fb:ae:43:24:f5: 5d:2b:78:5c:7c:52:7c:d9:5f:f0:07:9f:25:11:70:78:21:0a: dd:a3:80:93:1c:b6:e1:1d:d1:04:2d:2c:8a:9c:1e:83:b1:e9: 7c:3f:de:20:82:57:8f:fc:83:a2:e1:c4:be:28:61:d1:69:cc: 13:4d:ea:8e:bd:b2:26:0f:71:4f:42:5c:3c:28:e6:ea:69:d4: 76:83:e0:fa:c7:06:5a:58:94:76:46:9b:7d:11:32:4a:61:5c: 22:c6:f5:08:e3:7f:16:f9:e2:2d:b1:da:77:c6:5d:78:b8:3a: a9:e0:ec:b7:e5:70:af:22:22:20:bf:40:bb:8e:05:2d:ba:a1: 7d:68:3a:ff:6e:a6:b2:4a:53:4d:ca:f6:c9:fa:8f:a9:96:1b: 28:9f:c4:84:e4:40:08:95:4d:ff:c2:dc:03:2e:bc:1f:b5:9a: 1a:0e:19:d9:fa:96:5b:13:5c:31:1e:5a:10:3c:5d:b4:74:ba: 1a:e7:ca:7a:bc:27:4a:a8:10:07:03:66:3c:86:c9:e7:1a:34: b9:ec:9f:28:44:35:1b:32:2b:cc:77:46:c0:06:7e:88:a4:5a: 13:af:24:c3:fc:c9:b2:63:1e:9d:e9:b6:6b:5c:f4:bd:53:fa: c8:32:89:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAXBmTNyaxv02PbVJd8RkZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwMWE2NDg3MjVlZTI2YTQ2MGNiOWIxY2JjZDljOWM4MzJj NDQ5YWYwHhcNMjUxMjIxMTAwMjE2WhcNMjUxMjIyMTAwMjE2WjAzMTEwLwYDVQQD EyhjNmJiNmZjZDYxZWFiYmFlZGY4ZDU1N2U4Yjg2OWEyZDU2Y2ZmODdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0MLGz3/a3PgWvhxeEaFwC3mPF+qr Wyj7KBSTYzbI6ThTokC+imwtfhJNNiHo7uuLGIMsgIknT3U5QKnqlH6gAxPKl8Ec Xe8L8TaEW46ZqUidnu2DGNkWsjujnUxOPdf6LbfrIN3vPllwOzFGA0UfKX/oUX5g Q+CAVe8gSWwx6M8tlNf09B9bZzjXgNjcwWDV0QC/slEf3mFT578xNfRYYEHYTX4D 8GoO7c/BHwUXc9MmpiGxlIkiN7tzLFgxbhJwa1XPyXYklYrWHoSLfxxI1sLKqUIw U4we+SmJOR+fDOhWCtfVr9+Qfu6567+l9miEUpSFzgS8HTMGggXbONbnvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMa7b81h6ruu341VfouGmi1Wz/h/MB8GA1UdIwQY MBaAFDAaZIcl7iakYMubHLzZycgyxEmvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUJwa2h5WHVKcVJneTVzY3ZObkp5RExFU2E4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS8wMjRmMGYtMjBjNS00ODI4LWIzMzIt YTViMmQwOWUwNWNmLzEvTUJwa2h5WHVKcVJneTVzY3ZObkp5RExFU2E4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS8wMjRmMGYtMjBjNS00ODI4LWIzMzItYTViMmQwOWUwNWNm LzEvTUJwa2h5WHVKcVJneTVzY3ZObkp5RExFU2E4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtNH8U67j ux3CY6nymfuuQyT1XSt4XHxSfNlf8AefJRFweCEK3aOAkxy24R3RBC0sipweg7Hp fD/eIIJXj/yDouHEvihh0WnME03qjr2yJg9xT0JcPCjm6mnUdoPg+scGWliUdkab fREySmFcIsb1CON/FvniLbHad8ZdeLg6qeDst+VwryIiIL9Au44FLbqhfWg6/26m skpTTcr2yfqPqZYbKJ/EhORACJVN/8LcAy68H7WaGg4Z2fqWWxNcMR5aEDxdtHS6 GufKerwnSqgQBwNmPIbJ5xo0ueyfKEQ1GzIrzHdGwAZ+iKRaE68kw/zJsmMenem2 a1z0vVP6yDKJdQ== -----END CERTIFICATE-----Generated at Sun Dec 21 13:23:20 2025 by rpki-client