This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.mft File: MXuBR1A-oZ9YHKANKNvuXljLj0g.mft (raw, json) Hash identifier: 2ASOqo8AZ9D8x291Ks1vp434UFvqscTJ48YAjoGvbaA= Subject key identifier: BB:40:4F:47:71:F0:1D:4B:00:A5:72:D1:53:01:79:83:1C:6D:B9:CA Authority key identifier: 31:7B:81:47:50:3E:A1:9F:58:1C:A0:0D:28:DB:EE:5E:58:CB:8F:48 Certificate issuer: /CN=317b8147503ea19f581ca00d28dbee5e58cb8f48 Certificate serial: 019B3DFE5B050FC505F85FC3880CE220B366 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MXuBR1A-oZ9YHKANKNvuXljLj0g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 23:00:38 +0000 Manifest this update: Sat 20 Dec 2025 23:00:38 +0000 Manifest next update: Sun 21 Dec 2025 23:00:38 +0000 Files and hashes: 1: MXuBR1A-oZ9YHKANKNvuXljLj0g.crl (hash: VxMslKsb6mQBhpjP//+5tDb1XGTiRKDwQYxL2fEPkQI=) 2: Xvq5E9FjSgetaXURRKNVucLHpJA.roa (hash: Q0VYCtfy8botfioT4TVhD+jb4Ht709fLdZsnE/9HQwY=) 3: ZthEX-bem71wxx1bLgVPG5w9ZTc.roa (hash: T1Z1de8P32daOdZ6/2GmlJdKCTcAVlmu6uwlpR9ZYC8=) 4: cpm1MJFdWjEQeCJ1LBHfzw5iKXY.roa (hash: gbGURzXBFbe9SdreBkh+gl3ChVchhLD0ie8p4XE7DdU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.mft rsync://rpki.ripe.net/repository/DEFAULT/MXuBR1A-oZ9YHKANKNvuXljLj0g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:5b:05:0f:c5:05:f8:5f:c3:88:0c:e2:20:b3:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=317b8147503ea19f581ca00d28dbee5e58cb8f48 Validity Not Before: Dec 20 23:00:38 2025 GMT Not After : Dec 21 23:00:38 2025 GMT Subject: CN=bb404f4771f01d4b00a572d1530179831c6db9ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:2b:01:95:a9:ea:3e:6e:0f:d0:5e:77:86:a8: eb:f2:c8:ea:00:e0:62:57:04:86:28:c2:28:f8:9f: c1:56:8b:89:3d:8a:d0:2c:0b:5c:f6:4b:d1:73:9f: 77:f5:65:b8:23:d4:d3:99:cc:1a:2a:0b:f8:2b:48: 82:9b:92:25:ba:e7:93:b6:b6:51:1f:95:b0:4d:46: d3:3b:75:d7:30:ed:43:1e:47:ad:0b:de:34:23:1f: 59:8d:b0:60:08:a1:d0:b1:34:cf:95:d0:e3:ff:b4: 07:20:84:a7:b8:5f:c5:33:22:b9:80:01:ff:fa:4b: c8:2d:b6:13:e8:16:0f:87:ed:23:07:43:65:06:37: 28:b3:01:66:f2:0e:a7:98:05:55:ab:f3:ad:59:c7: 7f:c1:9c:e8:7b:13:99:18:04:55:50:16:08:0e:36: 3a:dd:91:b9:a3:4b:dd:96:df:ee:5c:a6:a7:9a:36: d4:75:7f:b4:df:4e:a7:b5:8e:09:df:6e:95:7c:9c: 11:1f:ac:dc:19:54:38:2e:79:77:b5:f5:5a:1c:2b: d4:4a:03:37:b0:89:0f:50:45:a5:5b:97:1f:21:5a: 48:60:53:be:9b:b2:cc:09:a3:f9:d7:c9:49:d8:93: 4d:4a:8e:ae:72:d8:dc:4f:97:ab:af:2a:cb:f5:53: 09:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:40:4F:47:71:F0:1D:4B:00:A5:72:D1:53:01:79:83:1C:6D:B9:CA X509v3 Authority Key Identifier: keyid:31:7B:81:47:50:3E:A1:9F:58:1C:A0:0D:28:DB:EE:5E:58:CB:8F:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MXuBR1A-oZ9YHKANKNvuXljLj0g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:8c:95:d0:ff:8f:61:73:0d:fc:45:2c:d3:03:90:a7:67:bb: c4:5d:50:ed:f4:b6:43:54:91:8b:1e:37:68:f6:1a:a8:0a:40: e7:b7:fb:5f:b2:ed:8d:eb:ef:2b:f2:15:91:92:c3:61:35:ad: 7e:28:f8:e3:42:9c:44:1f:52:93:49:01:27:93:19:bf:d5:45: 81:41:a3:9c:8f:23:bd:15:7b:06:03:78:ff:9f:73:21:94:56: 31:36:7b:04:f5:5e:f6:35:09:fc:2c:be:e7:75:c8:ab:de:4c: fe:a4:68:ac:f9:2a:35:b8:ff:33:9b:a8:70:a8:6c:97:9e:ec: a2:e3:77:94:eb:5c:a4:34:cf:06:d7:ec:fb:c7:fd:2a:28:f2: 19:82:9e:21:4c:15:31:3c:c3:ca:33:5f:3b:d6:15:b9:f4:ef: c6:78:ea:01:ee:04:bb:63:23:7c:b1:0a:a9:be:d2:3d:a3:05: 97:9f:a0:6e:f8:aa:5c:b7:91:37:49:b2:33:34:20:0f:a0:5c: 27:e7:95:14:52:af:66:79:4c:66:dd:37:93:1a:d8:94:4a:39: 13:15:74:5e:ff:0a:23:fd:75:ca:29:4a:3c:84:6e:92:f9:79: cd:d5:40:75:52:bf:e9:0e:88:66:90:0e:29:e1:be:34:b1:fc: c6:8f:44:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/lsFD8UF+F/DiAziILNmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxN2I4MTQ3NTAzZWExOWY1ODFjYTAwZDI4ZGJlZTVlNThj YjhmNDgwHhcNMjUxMjIwMjMwMDM4WhcNMjUxMjIxMjMwMDM4WjAzMTEwLwYDVQQD EyhiYjQwNGY0NzcxZjAxZDRiMDBhNTcyZDE1MzAxNzk4MzFjNmRiOWNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ysBlanqPm4P0F53hqjr8sjqAOBi VwSGKMIo+J/BVouJPYrQLAtc9kvRc5939WW4I9TTmcwaKgv4K0iCm5IluueTtrZR H5WwTUbTO3XXMO1DHketC940Ix9ZjbBgCKHQsTTPldDj/7QHIISnuF/FMyK5gAH/ +kvILbYT6BYPh+0jB0NlBjcoswFm8g6nmAVVq/OtWcd/wZzoexOZGARVUBYIDjY6 3ZG5o0vdlt/uXKanmjbUdX+0306ntY4J326VfJwRH6zcGVQ4Lnl3tfVaHCvUSgM3 sIkPUEWlW5cfIVpIYFO+m7LMCaP518lJ2JNNSo6uctjcT5erryrL9VMJ/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLtAT0dx8B1LAKVy0VMBeYMcbbnKMB8GA1UdIwQY MBaAFDF7gUdQPqGfWBygDSjb7l5Yy49IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVh1QlIxQS1vWjlZSEtBTktOdnVYbGpMajBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8yZTRlNTQtMDU0OC00ZDBjLTkzZjEt NzU0NjFhYmJiNWE0LzEvTVh1QlIxQS1vWjlZSEtBTktOdnVYbGpMajBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS8yZTRlNTQtMDU0OC00ZDBjLTkzZjEtNzU0NjFhYmJiNWE0 LzEvTVh1QlIxQS1vWjlZSEtBTktOdnVYbGpMajBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlYyV0P+P YXMN/EUs0wOQp2e7xF1Q7fS2Q1SRix43aPYaqApA57f7X7LtjevvK/IVkZLDYTWt fij440KcRB9Sk0kBJ5MZv9VFgUGjnI8jvRV7BgN4/59zIZRWMTZ7BPVe9jUJ/Cy+ 53XIq95M/qRorPkqNbj/M5uocKhsl57souN3lOtcpDTPBtfs+8f9KijyGYKeIUwV MTzDyjNfO9YVufTvxnjqAe4Eu2MjfLEKqb7SPaMFl5+gbviqXLeRN0myMzQgD6Bc J+eVFFKvZnlMZt03kxrYlEo5ExV0Xv8KI/11yilKPIRukvl5zdVAdVK/6Q6IZpAO KeG+NLH8xo9EHg== -----END CERTIFICATE-----Generated at Sun Dec 21 04:11:05 2025 by rpki-client