This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft File: MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft (raw, json) Hash identifier: 7pQKadXspi7HmO8fgAURdZD0cFurlgqD7Y3sT2e5jLo= Subject key identifier: 00:BB:5E:57:DF:2E:05:61:20:A6:0B:B1:51:A9:1F:F3:2B:95:69:30 Authority key identifier: 31:B0:F6:4C:69:D3:30:B6:6E:BC:D0:3A:9B:F0:FD:C1:9F:31:47:D8 Certificate issuer: /CN=31b0f64c69d330b66ebcd03a9bf0fdc19f3147d8 Certificate serial: 019B3AC686BFD908FCCED735C5FF821A9EC6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft Manifest number: 14B9 Signing time: Sat 20 Dec 2025 08:00:47 +0000 Manifest this update: Sat 20 Dec 2025 08:00:47 +0000 Manifest next update: Sun 21 Dec 2025 08:00:47 +0000 Files and hashes: 1: 6WAg8JrDfDvaRdqnJoreTiAMqjo.roa (hash: UPvZw2SufTUPSG/smPYEJeeJol9ZJRChCX3XNigGkpQ=) 2: MbD2TGnTMLZuvNA6m_D9wZ8xR9g.crl (hash: +Em6Fv0x/lQbKkk7tfPtMOQGMAAuL5RKcdpwjZEG64w=) 3: sv4EXNYI7McAyTz9VxEmavOg_ZI.roa (hash: pthqg1S6F7UF6pnwC1X+wqv/djtBaR5pS3UCBYsUWnw=) 4: vFLgCTe-UJbqLfUe3y5RaRMMkfQ.roa (hash: IEG6zoQ0fCsuLu4vs2hhEQUL3h31kYLoRcvO00kJOpM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft rsync://rpki.ripe.net/repository/DEFAULT/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 08:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:c6:86:bf:d9:08:fc:ce:d7:35:c5:ff:82:1a:9e:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31b0f64c69d330b66ebcd03a9bf0fdc19f3147d8 Validity Not Before: Dec 20 08:00:47 2025 GMT Not After : Dec 21 08:00:47 2025 GMT Subject: CN=00bb5e57df2e056120a60bb151a91ff32b956930 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:63:b6:4e:df:ab:a3:71:8f:4a:08:d6:70:5a: ed:5b:54:38:ac:02:d8:4c:8a:27:10:45:ac:23:79: 68:43:6f:3b:73:3d:6c:38:1a:b1:52:5a:73:6b:ca: 5f:ef:c8:f8:48:b4:7d:56:b8:9c:b1:b0:46:a8:59: de:01:f1:22:9a:55:81:d5:78:40:b6:75:0b:c8:ac: 58:ea:b4:4b:6e:4e:53:28:f4:e5:5f:74:17:4a:d4: d8:55:fe:d1:48:f6:0d:bd:15:03:10:9d:a4:d6:b6: c0:4c:d4:81:51:b4:f3:1b:2e:dc:c2:6b:cb:be:12: 04:f1:6e:04:33:fe:f6:35:bb:3d:9f:71:0a:d5:11: 2c:ad:e3:5f:e8:58:84:20:77:46:33:55:9e:be:4a: 61:19:e1:56:4b:60:33:dd:a9:c6:a5:b2:e4:38:40: 5b:5e:19:95:1c:c3:6e:40:96:a0:81:75:6e:ed:98: f4:ba:14:6f:cc:0c:a8:f3:21:65:96:83:6c:06:d4: 43:e6:80:23:89:e5:92:e4:40:ea:a1:63:21:a9:27: 52:5a:bc:05:02:a2:75:16:0a:6a:74:fd:e7:da:00: 72:2f:95:78:ab:d0:97:7d:08:e6:ef:59:9a:94:a2: 48:39:a6:43:d5:c9:97:f9:34:ec:29:0a:ad:9f:74: 0e:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:BB:5E:57:DF:2E:05:61:20:A6:0B:B1:51:A9:1F:F3:2B:95:69:30 X509v3 Authority Key Identifier: keyid:31:B0:F6:4C:69:D3:30:B6:6E:BC:D0:3A:9B:F0:FD:C1:9F:31:47:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:5e:0e:b5:56:41:e4:93:92:51:ac:a4:cc:c8:58:3d:14:7c: 14:d2:1f:a9:04:25:6e:cc:55:80:dc:6d:de:e2:e6:1b:b9:35: 40:fb:20:ec:61:58:b5:80:0a:a1:9d:7e:36:20:15:47:c9:19: 03:91:1f:48:08:64:68:dc:42:7d:7e:e6:2f:ef:c6:62:9b:60: 71:b9:81:4c:ed:c0:c7:9c:3f:55:ad:5a:f7:17:9a:98:53:b6: 5e:7e:2f:74:7e:56:89:1d:20:22:35:57:cf:16:50:75:c8:b6: 9d:be:78:71:ee:0f:f5:ad:00:02:81:db:be:e5:a6:67:48:0e: e0:bd:7f:71:4b:67:0a:4d:b4:17:bd:37:31:9e:81:46:30:2f: 97:f7:ca:6b:c2:9e:42:41:ff:ce:c1:69:53:f5:7e:54:20:40: 10:22:a5:e6:00:a5:e8:3a:c4:ec:53:3b:17:3f:8a:0f:61:90: 7e:30:b8:36:ff:19:e3:3f:31:b8:70:35:c0:d5:3f:2e:b0:75: 03:92:51:5b:83:01:ad:83:38:0b:2c:4a:9e:89:16:04:8f:13: 7c:3a:88:1d:2a:63:a5:a0:05:32:5b:fc:ec:21:4f:7c:87:1d: 11:70:51:35:2b:73:5a:08:da:af:37:ed:f9:eb:56:28:0f:51: 61:89:17:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6xoa/2Qj8ztc1xf+CGp7GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxYjBmNjRjNjlkMzMwYjY2ZWJjZDAzYTliZjBmZGMxOWYz MTQ3ZDgwHhcNMjUxMjIwMDgwMDQ3WhcNMjUxMjIxMDgwMDQ3WjAzMTEwLwYDVQQD EygwMGJiNWU1N2RmMmUwNTYxMjBhNjBiYjE1MWE5MWZmMzJiOTU2OTMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGO2Tt+ro3GPSgjWcFrtW1Q4rALY TIonEEWsI3loQ287cz1sOBqxUlpza8pf78j4SLR9VricsbBGqFneAfEimlWB1XhA tnULyKxY6rRLbk5TKPTlX3QXStTYVf7RSPYNvRUDEJ2k1rbATNSBUbTzGy7cwmvL vhIE8W4EM/72Nbs9n3EK1REsreNf6FiEIHdGM1WevkphGeFWS2Az3anGpbLkOEBb XhmVHMNuQJaggXVu7Zj0uhRvzAyo8yFlloNsBtRD5oAjieWS5EDqoWMhqSdSWrwF AqJ1FgpqdP3n2gByL5V4q9CXfQjm71malKJIOaZD1cmX+TTsKQqtn3QOJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAC7XlffLgVhIKYLsVGpH/MrlWkwMB8GA1UdIwQY MBaAFDGw9kxp0zC2brzQOpvw/cGfMUfYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWJEMlRHblRNTFp1dk5BNm1fRDl3Wjh4UjlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8yZmI0NzMtOGU2Yi00ZjBkLWFkMzAt ZDQ5MzQ0OTNhNjc5LzEvTWJEMlRHblRNTFp1dk5BNm1fRDl3Wjh4UjlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8yZmI0NzMtOGU2Yi00ZjBkLWFkMzAtZDQ5MzQ0OTNhNjc5 LzEvTWJEMlRHblRNTFp1dk5BNm1fRDl3Wjh4UjlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO14OtVZB 5JOSUaykzMhYPRR8FNIfqQQlbsxVgNxt3uLmG7k1QPsg7GFYtYAKoZ1+NiAVR8kZ A5EfSAhkaNxCfX7mL+/GYptgcbmBTO3Ax5w/Va1a9xeamFO2Xn4vdH5WiR0gIjVX zxZQdci2nb54ce4P9a0AAoHbvuWmZ0gO4L1/cUtnCk20F703MZ6BRjAvl/fKa8Ke QkH/zsFpU/V+VCBAECKl5gCl6DrE7FM7Fz+KD2GQfjC4Nv8Z4z8xuHA1wNU/LrB1 A5JRW4MBrYM4CyxKnokWBI8TfDqIHSpjpaAFMlv87CFPfIcdEXBRNStzWgjarzft +etWKA9RYYkXBQ== -----END CERTIFICATE-----Generated at Sat Dec 20 17:51:42 2025 by rpki-client