This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3d93a5-5fbd-402e-ad87-e986904c8d0c/1/MbtzCxs_U-c6JXQi5bvs5Dtnf-M.mft File: MbtzCxs_U-c6JXQi5bvs5Dtnf-M.mft (raw, json) Hash identifier: lD3GSyxlgq7BdalB2Q3sw8lTlxvi90WSHHlPb2zG4y8= Subject key identifier: 68:AB:47:B2:5D:08:AF:D1:C5:B5:B9:F5:53:70:F3:4C:A3:3C:B0:58 Authority key identifier: 31:BB:73:0B:1B:3F:53:E7:3A:25:74:22:E5:BB:EC:E4:3B:67:7F:E3 Certificate issuer: /CN=31bb730b1b3f53e73a257422e5bbece43b677fe3 Certificate serial: 019B3F7F2A87AD5478A5FC48945AFE3CE6C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MbtzCxs_U-c6JXQi5bvs5Dtnf-M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3d93a5-5fbd-402e-ad87-e986904c8d0c/1/MbtzCxs_U-c6JXQi5bvs5Dtnf-M.mft Manifest number: 01A4 Signing time: Sun 21 Dec 2025 06:00:57 +0000 Manifest this update: Sun 21 Dec 2025 06:00:57 +0000 Manifest next update: Mon 22 Dec 2025 06:00:57 +0000 Files and hashes: 1: MbtzCxs_U-c6JXQi5bvs5Dtnf-M.crl (hash: J4t7jxnVMIRMc5IIGLlWJaM/h0IpT07I9WJ+I17w174=) 2: R-6gZG6Qkp3ae09ud4PH3JpfB80.roa (hash: BAAGIDlz41luoFtKlUFhcgsonLyEAYtSldgK/GTu16Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3d93a5-5fbd-402e-ad87-e986904c8d0c/1/MbtzCxs_U-c6JXQi5bvs5Dtnf-M.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/3d93a5-5fbd-402e-ad87-e986904c8d0c/1/MbtzCxs_U-c6JXQi5bvs5Dtnf-M.mft rsync://rpki.ripe.net/repository/DEFAULT/MbtzCxs_U-c6JXQi5bvs5Dtnf-M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:7f:2a:87:ad:54:78:a5:fc:48:94:5a:fe:3c:e6:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31bb730b1b3f53e73a257422e5bbece43b677fe3 Validity Not Before: Dec 21 06:00:57 2025 GMT Not After : Dec 22 06:00:57 2025 GMT Subject: CN=68ab47b25d08afd1c5b5b9f55370f34ca33cb058 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:71:77:bd:f3:12:8c:dc:0e:af:01:5d:34:83: 6d:af:44:c5:7a:52:15:81:05:d2:e6:a7:f6:5b:42: d9:67:bd:a3:53:df:be:1b:ff:7c:b1:98:04:21:a0: db:05:d2:68:d0:65:9b:70:99:2e:d3:29:95:d6:db: 5d:0e:52:fd:17:07:81:83:bb:94:6b:84:13:ed:34: 1a:ab:34:bc:f1:e3:bd:b3:4a:7e:de:79:1a:3b:3e: b3:b1:18:0e:6f:09:2a:09:30:5b:79:ef:52:76:dc: 99:b4:de:a9:4c:b0:62:2c:98:ba:9b:75:f9:50:dd: c6:4b:ca:59:55:39:b4:03:c6:5e:d9:05:56:0b:f1: 64:8f:c3:5b:92:5c:0f:71:37:59:85:46:c5:28:13: 8b:1a:be:95:a6:26:3c:f9:83:fa:99:d0:a1:58:f8: c8:da:97:d2:d0:50:82:ec:a8:ae:ed:5e:ca:24:aa: 22:28:2d:cf:03:fe:08:6c:ed:79:92:5b:19:79:02: b5:ad:a8:da:34:12:b1:69:c8:6c:da:db:d8:5f:ed: 24:46:23:d1:c5:3f:1f:3f:77:55:d0:1c:6c:a0:3b: ed:0c:8e:c4:39:22:ec:a3:0c:59:6c:54:ad:bd:07: 3d:26:98:63:c1:48:56:4a:94:38:4d:19:e1:0b:25: 98:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:AB:47:B2:5D:08:AF:D1:C5:B5:B9:F5:53:70:F3:4C:A3:3C:B0:58 X509v3 Authority Key Identifier: keyid:31:BB:73:0B:1B:3F:53:E7:3A:25:74:22:E5:BB:EC:E4:3B:67:7F:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MbtzCxs_U-c6JXQi5bvs5Dtnf-M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3d93a5-5fbd-402e-ad87-e986904c8d0c/1/MbtzCxs_U-c6JXQi5bvs5Dtnf-M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3d93a5-5fbd-402e-ad87-e986904c8d0c/1/MbtzCxs_U-c6JXQi5bvs5Dtnf-M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:d4:93:9d:63:bc:14:ab:97:a5:e3:0a:fc:75:67:76:78:96: a0:d4:01:bb:79:64:fb:48:02:a5:3a:06:b3:d3:f3:b2:21:1a: a6:b2:8d:8a:5f:e6:9a:a1:1b:a8:20:e4:a5:bc:d8:25:ea:08: f4:a1:af:dc:ba:ce:a0:72:5f:b7:4f:c1:dd:3f:65:47:60:5c: 3d:57:99:47:bc:15:ed:07:5f:14:bf:b1:2b:da:11:2d:4a:62: 6b:dc:68:a4:fe:3f:4b:69:ed:b6:a8:27:aa:8a:24:3d:0a:1b: b6:2b:48:37:12:21:50:da:87:9a:b7:b9:6f:61:03:28:b0:68: 0f:fd:ad:86:0e:6f:bd:07:13:eb:31:d9:90:2b:f6:e8:97:e7: 7b:fd:0d:67:0a:07:b3:dc:57:2a:fa:d8:d0:1d:ec:43:c9:e6: 24:26:94:19:6f:9e:1d:54:a7:64:87:c0:d7:07:39:42:ac:a6: 80:e7:78:e4:d3:8d:9d:5e:6e:b1:5c:ff:54:0b:7f:55:ca:30: 41:2c:58:d9:5a:18:0e:82:21:a6:70:85:2c:58:20:2d:ae:67: 34:fb:a2:25:1b:30:21:c5:74:be:40:7e:f2:3b:04:e4:70:c9: 24:8e:92:ff:64:c4:45:84:8c:6a:3e:b0:b5:9c:3c:e4:90:54: 5b:96:02:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/fyqHrVR4pfxIlFr+PObHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxYmI3MzBiMWIzZjUzZTczYTI1NzQyMmU1YmJlY2U0M2I2 NzdmZTMwHhcNMjUxMjIxMDYwMDU3WhcNMjUxMjIyMDYwMDU3WjAzMTEwLwYDVQQD Eyg2OGFiNDdiMjVkMDhhZmQxYzViNWI5ZjU1MzcwZjM0Y2EzM2NiMDU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4XF3vfMSjNwOrwFdNINtr0TFelIV gQXS5qf2W0LZZ72jU9++G/98sZgEIaDbBdJo0GWbcJku0ymV1ttdDlL9FweBg7uU a4QT7TQaqzS88eO9s0p+3nkaOz6zsRgObwkqCTBbee9SdtyZtN6pTLBiLJi6m3X5 UN3GS8pZVTm0A8Ze2QVWC/Fkj8NbklwPcTdZhUbFKBOLGr6VpiY8+YP6mdChWPjI 2pfS0FCC7Kiu7V7KJKoiKC3PA/4IbO15klsZeQK1rajaNBKxachs2tvYX+0kRiPR xT8fP3dV0BxsoDvtDI7EOSLsowxZbFStvQc9JphjwUhWSpQ4TRnhCyWYnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGirR7JdCK/RxbW59VNw80yjPLBYMB8GA1UdIwQY MBaAFDG7cwsbP1PnOiV0IuW77OQ7Z3/jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWJ0ekN4c19VLWM2SlhRaTVidnM1RHRuZi1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zZDkzYTUtNWZiZC00MDJlLWFkODct ZTk4NjkwNGM4ZDBjLzEvTWJ0ekN4c19VLWM2SlhRaTVidnM1RHRuZi1NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8zZDkzYTUtNWZiZC00MDJlLWFkODctZTk4NjkwNGM4ZDBj LzEvTWJ0ekN4c19VLWM2SlhRaTVidnM1RHRuZi1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQdSTnWO8 FKuXpeMK/HVndniWoNQBu3lk+0gCpToGs9PzsiEaprKNil/mmqEbqCDkpbzYJeoI 9KGv3LrOoHJft0/B3T9lR2BcPVeZR7wV7QdfFL+xK9oRLUpia9xopP4/S2nttqgn qookPQobtitINxIhUNqHmre5b2EDKLBoD/2thg5vvQcT6zHZkCv26Jfne/0NZwoH s9xXKvrY0B3sQ8nmJCaUGW+eHVSnZIfA1wc5QqymgOd45NONnV5usVz/VAt/Vcow QSxY2VoYDoIhpnCFLFggLa5nNPuiJRswIcV0vkB+8jsE5HDJJI6S/2TERYSMaj6w tZw85JBUW5YCmA== -----END CERTIFICATE-----Generated at Sun Dec 21 10:16:33 2025 by rpki-client