This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/4e9e37-6e66-41b1-aa99-1516b6d82e2d/1/mXFUBuche_wTgSpHBMYq4JnnyP8.mft File: mXFUBuche_wTgSpHBMYq4JnnyP8.mft (raw, json) Hash identifier: /zNykjh5wfahw2NMCYEd4Hoy8naq4a+1JwjOs2YFHnU= Subject key identifier: 33:A8:F8:9B:E3:0C:27:B2:07:C0:6D:DF:87:81:DC:52:7C:63:68:ED Authority key identifier: 99:71:54:06:E7:21:7B:FC:13:81:2A:47:04:C6:2A:E0:99:E7:C8:FF Certificate issuer: /CN=99715406e7217bfc13812a4704c62ae099e7c8ff Certificate serial: 019B4F2901A2BB03B1788D4A53F96BE37CD9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mXFUBuche_wTgSpHBMYq4JnnyP8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/4e9e37-6e66-41b1-aa99-1516b6d82e2d/1/mXFUBuche_wTgSpHBMYq4JnnyP8.mft Manifest number: 04AF Signing time: Wed 24 Dec 2025 07:00:45 +0000 Manifest this update: Wed 24 Dec 2025 07:00:45 +0000 Manifest next update: Thu 25 Dec 2025 07:00:45 +0000 Files and hashes: 1: mXFUBuche_wTgSpHBMYq4JnnyP8.crl (hash: ZhbDAwn9Rg39uzhvDjP7kO0h6u+1uh72oV53YJYxRAY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/4e9e37-6e66-41b1-aa99-1516b6d82e2d/1/mXFUBuche_wTgSpHBMYq4JnnyP8.crl rsync://rpki.ripe.net/repository/DEFAULT/19/4e9e37-6e66-41b1-aa99-1516b6d82e2d/1/mXFUBuche_wTgSpHBMYq4JnnyP8.mft rsync://rpki.ripe.net/repository/DEFAULT/mXFUBuche_wTgSpHBMYq4JnnyP8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 07:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:29:01:a2:bb:03:b1:78:8d:4a:53:f9:6b:e3:7c:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99715406e7217bfc13812a4704c62ae099e7c8ff Validity Not Before: Dec 24 07:00:45 2025 GMT Not After : Dec 25 07:00:45 2025 GMT Subject: CN=33a8f89be30c27b207c06ddf8781dc527c6368ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:89:e4:2d:c4:c1:77:83:87:03:bb:93:bf:1e: c6:2c:78:d6:47:b4:b0:10:50:56:f8:e4:ca:b6:6b: 15:88:aa:d7:5a:b4:1c:6d:4e:38:4b:b9:02:3b:a4: 2e:4d:41:5e:67:d6:3d:22:88:69:86:29:d2:ae:d4: 66:ec:49:89:9b:1d:95:df:4f:48:cb:1b:95:b4:06: 10:de:cb:9f:62:73:20:f1:8d:1e:0a:96:26:9d:7a: 6c:60:c8:1e:51:87:8e:e2:7b:14:ea:fd:95:3c:c3: 47:74:4d:94:93:66:db:1f:36:9c:b5:8c:14:ee:27: a0:e9:d4:4e:8c:b3:38:17:45:cc:26:e4:b7:b1:54: 53:51:7e:a1:0e:0a:ca:88:5c:d5:24:b3:94:7e:e4: f7:1f:a2:bd:73:c8:cd:0e:56:30:e5:61:7f:a5:1a: 77:54:0e:34:32:43:53:ba:fa:5c:94:c4:74:4a:37: aa:97:cb:86:ea:9d:31:1e:e0:40:ca:18:6e:b4:0a: 7d:d9:4c:75:a8:db:8d:23:d1:1f:7f:cb:9d:48:a9: 98:41:16:87:49:4f:c0:ca:85:9a:fe:d0:b6:c7:45: 29:d1:a1:e7:1f:bd:6a:e1:11:e8:4a:aa:53:7d:51: 08:50:c1:4c:47:1e:e4:af:d3:82:fe:f6:02:36:66: f1:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:A8:F8:9B:E3:0C:27:B2:07:C0:6D:DF:87:81:DC:52:7C:63:68:ED X509v3 Authority Key Identifier: keyid:99:71:54:06:E7:21:7B:FC:13:81:2A:47:04:C6:2A:E0:99:E7:C8:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mXFUBuche_wTgSpHBMYq4JnnyP8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/4e9e37-6e66-41b1-aa99-1516b6d82e2d/1/mXFUBuche_wTgSpHBMYq4JnnyP8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/4e9e37-6e66-41b1-aa99-1516b6d82e2d/1/mXFUBuche_wTgSpHBMYq4JnnyP8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:ce:01:f1:9b:15:05:dc:47:e3:6a:2b:76:ce:08:7f:1f:dc: f9:44:6b:73:bc:4c:30:e4:07:2f:29:31:7f:4e:b6:f2:f6:43: 32:0e:7b:60:d1:70:d3:31:9d:b4:f7:c1:1b:23:7b:18:da:a0: 8a:ce:13:29:9f:6f:3d:42:bc:a3:4d:38:53:4d:3f:23:91:78: a8:ec:6f:f0:e6:c1:ca:92:b4:ca:ed:36:f2:c6:89:9e:96:09: e6:ac:ce:db:54:12:9d:79:b0:1e:16:ea:ed:74:c4:d3:d4:d9: f8:c2:53:7b:bf:77:92:b4:a3:a1:81:e6:40:e6:85:ba:3a:53: 8a:3e:f9:85:81:93:a2:72:4b:28:3b:68:03:c3:cd:34:d3:d5: 4f:97:47:0b:ae:09:7e:7a:67:da:4d:37:bf:3b:9c:14:c1:cf: a3:59:f9:89:89:0f:0e:00:2e:06:08:e1:90:8c:2a:07:c3:c1: f0:e8:44:27:e3:b4:00:1f:c2:02:5a:03:3a:6c:5a:e4:44:c7: 52:e9:9f:46:83:92:39:6a:19:46:42:4d:5b:ac:3e:77:1a:52: 2c:8f:6b:66:56:96:56:95:05:85:a6:70:39:8a:bf:3d:9c:6b: a9:06:c6:4f:7c:ec:71:97:57:00:e7:91:52:cf:92:22:25:83: 17:96:de:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPKQGiuwOxeI1KU/lr43zZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5NzE1NDA2ZTcyMTdiZmMxMzgxMmE0NzA0YzYyYWUwOTll N2M4ZmYwHhcNMjUxMjI0MDcwMDQ1WhcNMjUxMjI1MDcwMDQ1WjAzMTEwLwYDVQQD EygzM2E4Zjg5YmUzMGMyN2IyMDdjMDZkZGY4NzgxZGM1MjdjNjM2OGVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYnkLcTBd4OHA7uTvx7GLHjWR7Sw EFBW+OTKtmsViKrXWrQcbU44S7kCO6QuTUFeZ9Y9IohphinSrtRm7EmJmx2V309I yxuVtAYQ3sufYnMg8Y0eCpYmnXpsYMgeUYeO4nsU6v2VPMNHdE2Uk2bbHzactYwU 7ieg6dROjLM4F0XMJuS3sVRTUX6hDgrKiFzVJLOUfuT3H6K9c8jNDlYw5WF/pRp3 VA40MkNTuvpclMR0Sjeql8uG6p0xHuBAyhhutAp92Ux1qNuNI9Eff8udSKmYQRaH SU/AyoWa/tC2x0Up0aHnH71q4RHoSqpTfVEIUMFMRx7kr9OC/vYCNmbxiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDOo+JvjDCeyB8Bt34eB3FJ8Y2jtMB8GA1UdIwQY MBaAFJlxVAbnIXv8E4EqRwTGKuCZ58j/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVhGVUJ1Y2hlX3dUZ1NwSEJNWXE0Sm5ueVA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS80ZTllMzctNmU2Ni00MWIxLWFhOTkt MTUxNmI2ZDgyZTJkLzEvbVhGVUJ1Y2hlX3dUZ1NwSEJNWXE0Sm5ueVA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS80ZTllMzctNmU2Ni00MWIxLWFhOTktMTUxNmI2ZDgyZTJk LzEvbVhGVUJ1Y2hlX3dUZ1NwSEJNWXE0Sm5ueVA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIc4B8ZsV BdxH42ords4Ifx/c+URrc7xMMOQHLykxf0628vZDMg57YNFw0zGdtPfBGyN7GNqg is4TKZ9vPUK8o004U00/I5F4qOxv8ObBypK0yu028saJnpYJ5qzO21QSnXmwHhbq 7XTE09TZ+MJTe793krSjoYHmQOaFujpTij75hYGTonJLKDtoA8PNNNPVT5dHC64J fnpn2k03vzucFMHPo1n5iYkPDgAuBgjhkIwqB8PB8OhEJ+O0AB/CAloDOmxa5ETH UumfRoOSOWoZRkJNW6w+dxpSLI9rZlaWVpUFhaZwOYq/PZxrqQbGT3zscZdXAOeR Us+SIiWDF5bexA== -----END CERTIFICATE-----Generated at Wed Dec 24 10:30:51 2025 by rpki-client