This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft File: mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft (raw, json) Hash identifier: QnqEzvRLofMHzyG7JfVtkuCKwcswllJxuAvYmkN3Rj4= Subject key identifier: CE:00:6D:8F:CB:C0:1B:7D:13:C2:08:AE:58:09:0E:2F:1C:01:83:72 Authority key identifier: 9A:B6:E9:B9:33:BD:0C:C9:0C:59:92:44:6F:8A:C8:47:26:91:6B:1A Certificate issuer: /CN=9ab6e9b933bd0cc90c5992446f8ac84726916b1a Certificate serial: 019B511739B5802BF5E2143F9AEBEC617EED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mrbpuTO9DMkMWZJEb4rIRyaRaxo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft Manifest number: 0DC0 Signing time: Wed 24 Dec 2025 16:00:35 +0000 Manifest this update: Wed 24 Dec 2025 16:00:35 +0000 Manifest next update: Thu 25 Dec 2025 16:00:35 +0000 Files and hashes: 1: bm8ink1EnYeZoE7eF0O4NwMqDE8.roa (hash: ybm88hkKSlN5zUNNYgkBe2I5P6bnL+MMj8/tMIJfo60=) 2: mrbpuTO9DMkMWZJEb4rIRyaRaxo.crl (hash: k+HGWXJe0ThebQXCLGPWgQW2gbmIVPiJdUqOKkAd0ho=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.crl rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft rsync://rpki.ripe.net/repository/DEFAULT/mrbpuTO9DMkMWZJEb4rIRyaRaxo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:17:39:b5:80:2b:f5:e2:14:3f:9a:eb:ec:61:7e:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab6e9b933bd0cc90c5992446f8ac84726916b1a Validity Not Before: Dec 24 16:00:35 2025 GMT Not After : Dec 25 16:00:35 2025 GMT Subject: CN=ce006d8fcbc01b7d13c208ae58090e2f1c018372 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:0f:cb:1e:29:82:3e:36:04:f4:86:57:4a:80: 40:5c:da:cd:32:90:47:e2:8e:60:1b:b2:c0:b2:a9: 4a:c2:dd:48:db:3c:8a:e2:5b:aa:ed:bc:d0:fe:45: e1:e9:21:09:7f:87:24:6e:ca:6f:f7:ce:e5:a5:f2: 05:77:9f:9c:5e:b4:2b:34:d9:d3:f8:9b:f5:51:bf: 8d:9d:60:36:f9:59:6b:5f:1a:59:8b:af:70:f3:97: 91:26:8d:9e:4c:8d:7c:9a:b2:2d:6a:09:1a:27:ed: 64:9e:f2:1e:b4:fd:c0:06:92:77:b9:40:a8:02:99: 88:2b:fb:d6:58:a4:09:6e:5a:a5:fe:91:83:80:3b: d3:f9:96:4f:0f:52:7b:bb:84:58:df:8f:5f:dc:32: e3:1d:8d:af:4f:db:e9:b2:54:df:00:1e:a6:02:01: 27:f8:b1:98:ba:f2:6f:d6:28:82:4f:40:ea:00:2a: 4f:a1:43:96:ce:19:a9:6d:59:dd:ed:3d:39:a6:7c: 40:fe:da:c9:8c:85:b7:47:8d:e6:0c:95:97:79:a8: 2b:ba:30:1d:7a:40:4d:14:f9:9f:8b:05:bb:c7:47: 1b:39:ac:b0:31:00:4e:3b:c6:b0:ab:a5:b1:34:a2: da:44:51:ae:2b:01:60:8e:22:30:2a:43:e3:cc:44: 6b:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:00:6D:8F:CB:C0:1B:7D:13:C2:08:AE:58:09:0E:2F:1C:01:83:72 X509v3 Authority Key Identifier: keyid:9A:B6:E9:B9:33:BD:0C:C9:0C:59:92:44:6F:8A:C8:47:26:91:6B:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mrbpuTO9DMkMWZJEb4rIRyaRaxo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:8c:45:60:97:82:bd:ea:2d:a8:2c:c8:39:0c:d8:f7:30:6a: 65:7a:6e:75:22:72:8e:6b:7c:17:fa:c4:49:5d:bc:46:3b:59: 21:74:3f:cc:77:0d:e3:f1:6a:75:a1:76:1f:a7:05:b6:a6:3a: 41:5e:a8:e8:3c:b1:c0:92:51:45:00:ed:b9:ab:2f:8c:f4:bc: fb:f4:2b:ad:31:77:f3:92:8d:e5:b0:f1:3a:63:a7:20:d0:e1: 47:e1:ec:d9:78:14:d7:88:2b:17:bb:e2:a9:25:b3:20:53:9c: af:ca:d1:82:5f:48:2c:72:f0:4e:bd:d0:01:91:59:a7:c9:44: b8:77:98:f9:09:ac:a4:ee:ed:53:91:a6:29:ee:0e:c4:5a:b3: e6:04:64:4d:03:f5:b9:b0:bd:0d:0b:ab:71:11:50:44:24:4c: b8:6b:50:44:87:f9:eb:bd:89:f7:8b:ae:c0:d5:48:1a:53:f3: dd:0d:7b:49:0f:75:ce:40:2c:76:07:47:0d:f3:a9:25:ad:e9: c4:2d:e4:cd:b2:ac:0b:6c:ef:89:0e:d6:d0:b1:9c:86:e0:29: 1f:f1:50:e7:93:17:ab:43:47:0e:4f:22:78:8c:e9:13:e0:77: 9d:55:67:d6:64:49:ba:92:f0:94:f5:28:bd:6a:90:57:05:92: 93:42:97:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRFzm1gCv14hQ/muvsYX7tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhYjZlOWI5MzNiZDBjYzkwYzU5OTI0NDZmOGFjODQ3MjY5 MTZiMWEwHhcNMjUxMjI0MTYwMDM1WhcNMjUxMjI1MTYwMDM1WjAzMTEwLwYDVQQD EyhjZTAwNmQ4ZmNiYzAxYjdkMTNjMjA4YWU1ODA5MGUyZjFjMDE4MzcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQ/LHimCPjYE9IZXSoBAXNrNMpBH 4o5gG7LAsqlKwt1I2zyK4luq7bzQ/kXh6SEJf4ckbspv987lpfIFd5+cXrQrNNnT +Jv1Ub+NnWA2+VlrXxpZi69w85eRJo2eTI18mrItagkaJ+1knvIetP3ABpJ3uUCo ApmIK/vWWKQJblql/pGDgDvT+ZZPD1J7u4RY349f3DLjHY2vT9vpslTfAB6mAgEn +LGYuvJv1iiCT0DqACpPoUOWzhmpbVnd7T05pnxA/trJjIW3R43mDJWXeagrujAd ekBNFPmfiwW7x0cbOaywMQBOO8awq6WxNKLaRFGuKwFgjiIwKkPjzERrDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM4AbY/LwBt9E8IIrlgJDi8cAYNyMB8GA1UdIwQY MBaAFJq26bkzvQzJDFmSRG+KyEcmkWsaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXJicHVUTzlETWtNV1pKRWI0cklSeWFSYXhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9hNDQ0N2MtNGNmMi00MWNhLTg4NTEt NDFhY2UxOTU4MDNhLzEvbXJicHVUTzlETWtNV1pKRWI0cklSeWFSYXhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi9hNDQ0N2MtNGNmMi00MWNhLTg4NTEtNDFhY2UxOTU4MDNh LzEvbXJicHVUTzlETWtNV1pKRWI0cklSeWFSYXhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC4xFYJeC veotqCzIOQzY9zBqZXpudSJyjmt8F/rESV28RjtZIXQ/zHcN4/FqdaF2H6cFtqY6 QV6o6DyxwJJRRQDtuasvjPS8+/QrrTF385KN5bDxOmOnINDhR+Hs2XgU14grF7vi qSWzIFOcr8rRgl9ILHLwTr3QAZFZp8lEuHeY+QmspO7tU5GmKe4OxFqz5gRkTQP1 ubC9DQurcRFQRCRMuGtQRIf5672J94uuwNVIGlPz3Q17SQ91zkAsdgdHDfOpJa3p xC3kzbKsC2zviQ7W0LGchuApH/FQ55MXq0NHDk8ieIzpE+B3nVVn1mRJupLwlPUo vWqQVwWSk0KX+w== -----END CERTIFICATE-----Generated at Wed Dec 24 21:49:20 2025 by rpki-client