This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/4e9e37-6e66-41b1-aa99-1516b6d82e2d/1/mXFUBuche_wTgSpHBMYq4JnnyP8.mft File: mXFUBuche_wTgSpHBMYq4JnnyP8.mft (raw, json) Hash identifier: qJWjsY/tXdBsefsxfeg1+66geylPF8+wRGp/eyHKdyw= Subject key identifier: 8A:82:0F:60:5D:87:10:07:F2:B8:09:16:4F:19:1D:6F:D0:AA:9C:6F Authority key identifier: 99:71:54:06:E7:21:7B:FC:13:81:2A:47:04:C6:2A:E0:99:E7:C8:FF Certificate issuer: /CN=99715406e7217bfc13812a4704c62ae099e7c8ff Certificate serial: 019B5CADFEB2BA6DD22817473BF853B1FB2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mXFUBuche_wTgSpHBMYq4JnnyP8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/4e9e37-6e66-41b1-aa99-1516b6d82e2d/1/mXFUBuche_wTgSpHBMYq4JnnyP8.mft Manifest number: 04B6 Signing time: Fri 26 Dec 2025 22:01:05 +0000 Manifest this update: Fri 26 Dec 2025 22:01:05 +0000 Manifest next update: Sat 27 Dec 2025 22:01:05 +0000 Files and hashes: 1: mXFUBuche_wTgSpHBMYq4JnnyP8.crl (hash: +OjzMksZveOgEC1ivbPZTeVBcFRKfQ+98vgwCS4kQvU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/4e9e37-6e66-41b1-aa99-1516b6d82e2d/1/mXFUBuche_wTgSpHBMYq4JnnyP8.crl rsync://rpki.ripe.net/repository/DEFAULT/19/4e9e37-6e66-41b1-aa99-1516b6d82e2d/1/mXFUBuche_wTgSpHBMYq4JnnyP8.mft rsync://rpki.ripe.net/repository/DEFAULT/mXFUBuche_wTgSpHBMYq4JnnyP8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5c:ad:fe:b2:ba:6d:d2:28:17:47:3b:f8:53:b1:fb:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99715406e7217bfc13812a4704c62ae099e7c8ff Validity Not Before: Dec 26 22:01:05 2025 GMT Not After : Dec 27 22:01:05 2025 GMT Subject: CN=8a820f605d871007f2b809164f191d6fd0aa9c6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:cf:5f:20:ae:4f:a5:9a:5d:85:89:7c:33:33: 0a:59:84:c2:27:69:78:6e:fd:c4:b9:6c:12:4a:7c: 66:70:d5:4f:a5:d7:46:97:5f:ab:cf:40:92:3f:4e: 88:c6:49:96:27:fb:06:4e:8c:45:e0:a1:87:03:d8: 99:e1:1d:7c:6d:9c:c0:21:4b:95:51:44:73:d9:91: de:06:8c:24:15:2b:71:a7:b3:7d:cd:e1:e4:6f:b3: 70:f4:99:b1:fa:d3:78:2a:8a:3c:0e:58:17:b2:9c: 6b:d4:eb:46:3c:1d:7f:8f:86:b8:69:97:c6:b6:c1: 09:42:ed:1b:32:2e:f8:a6:98:84:de:21:b3:34:37: 21:78:da:70:8e:d8:20:d0:66:26:2e:52:d8:80:67: 8d:fc:20:f7:ed:7f:bc:84:20:ff:05:ad:6d:54:7a: 0a:52:5e:1f:54:58:95:eb:55:76:9d:1b:2c:dd:0e: 21:cc:dd:35:0c:84:d6:01:bd:37:c2:9b:10:ce:0f: 6b:cb:25:c4:47:fa:6b:d0:0c:60:7d:d0:e1:e8:5a: 20:b8:d3:14:4a:da:d6:04:e8:e1:4c:48:d8:9f:b2: 9e:6c:45:9c:a2:84:5d:6a:46:59:53:52:95:7b:7d: f8:61:2e:15:d5:f0:20:49:79:0b:17:4d:63:bd:a9: 37:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:82:0F:60:5D:87:10:07:F2:B8:09:16:4F:19:1D:6F:D0:AA:9C:6F X509v3 Authority Key Identifier: keyid:99:71:54:06:E7:21:7B:FC:13:81:2A:47:04:C6:2A:E0:99:E7:C8:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mXFUBuche_wTgSpHBMYq4JnnyP8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/4e9e37-6e66-41b1-aa99-1516b6d82e2d/1/mXFUBuche_wTgSpHBMYq4JnnyP8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/4e9e37-6e66-41b1-aa99-1516b6d82e2d/1/mXFUBuche_wTgSpHBMYq4JnnyP8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:39:d6:cb:fa:5d:94:18:97:0f:5f:d7:4d:19:2f:df:6e:8a: 9f:20:20:0a:94:c3:a4:db:e6:4c:74:cd:4d:82:e7:e3:bc:6f: 48:32:fa:4a:56:6f:94:74:6d:4f:64:96:cb:a1:7f:e0:40:9b: 48:e6:12:53:98:49:bd:80:a7:be:f9:9d:f3:56:0c:b4:b8:b0: f8:f2:94:4d:54:e9:f5:2d:57:29:4a:9f:de:0a:d3:bf:15:28: 29:68:ff:96:e0:c6:87:27:4d:10:ce:43:fa:63:41:18:73:62: 1b:2e:38:0f:84:5a:2e:fb:3e:6f:75:19:40:63:d3:3e:b0:bc: 29:2f:6e:ec:ce:2a:17:16:25:7e:c7:d9:8e:e1:34:73:ba:09: 5f:84:63:14:cc:39:e1:bf:17:12:a3:3f:f4:dd:e3:07:b1:69: 02:fb:15:93:c5:3e:52:86:02:d4:74:31:bf:88:9d:8a:11:af: 56:90:21:89:1e:2a:01:b9:60:1d:dd:34:e9:d5:a7:47:64:96: f6:b9:29:a6:53:4a:05:09:98:1e:74:20:17:d9:7d:fc:6c:78: e6:b5:4b:80:40:2f:41:03:36:8d:e8:5f:c1:73:e1:f1:b0:55: f4:84:64:67:7d:91:46:d8:15:6f:1a:24:fd:d5:db:01:eb:e0: 24:73:e1:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtcrf6yum3SKBdHO/hTsfsqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5NzE1NDA2ZTcyMTdiZmMxMzgxMmE0NzA0YzYyYWUwOTll N2M4ZmYwHhcNMjUxMjI2MjIwMTA1WhcNMjUxMjI3MjIwMTA1WjAzMTEwLwYDVQQD Eyg4YTgyMGY2MDVkODcxMDA3ZjJiODA5MTY0ZjE5MWQ2ZmQwYWE5YzZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu89fIK5PpZpdhYl8MzMKWYTCJ2l4 bv3EuWwSSnxmcNVPpddGl1+rz0CSP06IxkmWJ/sGToxF4KGHA9iZ4R18bZzAIUuV UURz2ZHeBowkFStxp7N9zeHkb7Nw9Jmx+tN4Koo8DlgXspxr1OtGPB1/j4a4aZfG tsEJQu0bMi74ppiE3iGzNDcheNpwjtgg0GYmLlLYgGeN/CD37X+8hCD/Ba1tVHoK Ul4fVFiV61V2nRss3Q4hzN01DITWAb03wpsQzg9ryyXER/pr0AxgfdDh6FoguNMU StrWBOjhTEjYn7KebEWcooRdakZZU1KVe334YS4V1fAgSXkLF01jvak3HwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIqCD2BdhxAH8rgJFk8ZHW/QqpxvMB8GA1UdIwQY MBaAFJlxVAbnIXv8E4EqRwTGKuCZ58j/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVhGVUJ1Y2hlX3dUZ1NwSEJNWXE0Sm5ueVA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS80ZTllMzctNmU2Ni00MWIxLWFhOTkt MTUxNmI2ZDgyZTJkLzEvbVhGVUJ1Y2hlX3dUZ1NwSEJNWXE0Sm5ueVA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS80ZTllMzctNmU2Ni00MWIxLWFhOTktMTUxNmI2ZDgyZTJk LzEvbVhGVUJ1Y2hlX3dUZ1NwSEJNWXE0Sm5ueVA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHDnWy/pd lBiXD1/XTRkv326KnyAgCpTDpNvmTHTNTYLn47xvSDL6SlZvlHRtT2SWy6F/4ECb SOYSU5hJvYCnvvmd81YMtLiw+PKUTVTp9S1XKUqf3grTvxUoKWj/luDGhydNEM5D +mNBGHNiGy44D4RaLvs+b3UZQGPTPrC8KS9u7M4qFxYlfsfZjuE0c7oJX4RjFMw5 4b8XEqM/9N3jB7FpAvsVk8U+UoYC1HQxv4idihGvVpAhiR4qAblgHd006dWnR2SW 9rkpplNKBQmYHnQgF9l9/Gx45rVLgEAvQQM2jehfwXPh8bBV9IRkZ32RRtgVbxok /dXbAevgJHPhJw== -----END CERTIFICATE-----Generated at Sat Dec 27 03:58:09 2025 by rpki-client