This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.mft File: MBlcO7BQWGtfTlAEEYAHxIs06uU.mft (raw, json) Hash identifier: Oksy42GT0YGAmxk1auL6RxUr6ZMy6CIbw5u8MXby+dU= Subject key identifier: 24:FF:2F:73:87:D1:ED:A3:50:47:9D:F2:79:B0:AA:1B:BD:7D:95:B0 Authority key identifier: 30:19:5C:3B:B0:50:58:6B:5F:4E:50:04:11:80:07:C4:8B:34:EA:E5 Certificate issuer: /CN=30195c3bb050586b5f4e5004118007c48b34eae5 Certificate serial: 019B3A21BBDA8B46E39B1C046315541BA18C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MBlcO7BQWGtfTlAEEYAHxIs06uU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.mft Manifest number: 1786 Signing time: Sat 20 Dec 2025 05:00:47 +0000 Manifest this update: Sat 20 Dec 2025 05:00:47 +0000 Manifest next update: Sun 21 Dec 2025 05:00:47 +0000 Files and hashes: 1: FVoKa0hbyicRxj9T5QoKnrF-IQk.roa (hash: PJKMkHGyKfQ7AHpH2DcIDSD5neBvRyes+CMY82lEecA=) 2: MBlcO7BQWGtfTlAEEYAHxIs06uU.crl (hash: K/cWbdfx1dGdlHB+B2gLRouAVZmd7Wh29Ntc0QkWiLQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.crl rsync://rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.mft rsync://rpki.ripe.net/repository/DEFAULT/MBlcO7BQWGtfTlAEEYAHxIs06uU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 05:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:21:bb:da:8b:46:e3:9b:1c:04:63:15:54:1b:a1:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30195c3bb050586b5f4e5004118007c48b34eae5 Validity Not Before: Dec 20 05:00:47 2025 GMT Not After : Dec 21 05:00:47 2025 GMT Subject: CN=24ff2f7387d1eda350479df279b0aa1bbd7d95b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:b6:74:4b:5e:93:0f:e7:04:11:00:83:23:77: a0:1d:48:38:82:c9:d5:8c:af:a9:9d:77:ad:57:39: 9c:99:2d:24:02:6d:64:2c:4a:d8:23:21:be:10:f8: 60:82:00:6b:3b:a5:1f:ff:75:01:88:4f:4c:e6:b6: f4:21:a4:d9:6e:ca:e8:8a:c2:cf:53:53:29:58:a8: 11:15:6c:60:88:d7:64:f1:61:91:96:40:ce:9c:14: 46:e2:f4:ee:23:9e:f1:2d:15:98:65:b5:2f:cf:2e: 39:2d:50:b3:81:0e:ee:a6:92:89:73:ee:bb:85:7b: 04:24:66:2f:83:a6:d9:b0:21:d0:b3:b7:03:68:19: 89:58:da:59:76:e2:e7:60:32:a1:55:dd:84:21:09: 67:b9:a1:16:9d:b2:c1:47:86:ce:6e:ef:1e:4a:3a: d3:83:69:3e:7e:37:26:c5:e4:9b:3c:e3:0b:61:4e: 32:3f:b3:20:15:fe:41:fa:35:53:56:f6:68:37:d9: 30:85:00:e7:c9:d4:bb:8b:d8:a7:7d:27:e3:0f:2c: 70:11:8e:bb:38:2d:0c:6b:f5:02:99:a2:cf:50:ac: 4e:d8:c9:43:04:1a:8d:0f:e5:a9:2c:66:cc:d4:60: ac:6d:2e:33:e3:d2:6e:ac:8a:6f:95:43:6a:48:d2: fd:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:FF:2F:73:87:D1:ED:A3:50:47:9D:F2:79:B0:AA:1B:BD:7D:95:B0 X509v3 Authority Key Identifier: keyid:30:19:5C:3B:B0:50:58:6B:5F:4E:50:04:11:80:07:C4:8B:34:EA:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBlcO7BQWGtfTlAEEYAHxIs06uU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:8c:27:5e:40:fc:ec:1e:7a:7a:ac:7c:d0:ef:07:3f:75:be: d7:75:3b:6d:20:d2:33:c0:6e:a1:64:20:22:2f:7b:ce:1c:77: f3:f5:a6:ba:97:9b:0a:61:56:ac:2b:2f:2e:3d:cf:7d:f0:af: ae:10:b8:fa:4a:26:e1:cb:a8:b9:27:42:21:6b:97:34:c6:16: fb:ce:b5:4e:56:da:7d:a3:77:48:19:a5:5d:f8:d0:5a:9f:ca: 32:97:a3:43:4a:b9:68:28:86:d0:3e:9e:db:0a:9a:05:df:86: f8:5c:3d:a1:e1:a1:11:87:f3:32:9b:97:19:44:c3:7f:d7:35: 96:13:c1:2c:e1:ca:87:34:63:5f:ad:35:8f:89:7b:64:de:43: 4b:ef:9c:d1:2b:86:2b:97:0c:01:37:b6:4c:1f:b1:03:fe:31: c6:46:e3:a1:4b:b7:89:04:b0:3a:e4:e2:d2:ba:2d:68:73:a2: 42:85:4b:5c:c1:4b:c8:09:7e:38:9b:b1:eb:25:87:6a:71:19: e5:0c:98:56:63:80:41:fb:49:95:f8:fe:6b:66:a8:ea:e0:b0: 94:dc:0f:83:97:99:47:59:4c:eb:ea:42:5c:af:b8:29:40:6b: d9:d2:c4:0c:c8:26:00:ab:03:f6:7a:f9:fd:49:95:c6:19:2c: af:39:81:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6Ibvai0bjmxwEYxVUG6GMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwMTk1YzNiYjA1MDU4NmI1ZjRlNTAwNDExODAwN2M0OGIz NGVhZTUwHhcNMjUxMjIwMDUwMDQ3WhcNMjUxMjIxMDUwMDQ3WjAzMTEwLwYDVQQD EygyNGZmMmY3Mzg3ZDFlZGEzNTA0NzlkZjI3OWIwYWExYmJkN2Q5NWIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7Z0S16TD+cEEQCDI3egHUg4gsnV jK+pnXetVzmcmS0kAm1kLErYIyG+EPhgggBrO6Uf/3UBiE9M5rb0IaTZbsroisLP U1MpWKgRFWxgiNdk8WGRlkDOnBRG4vTuI57xLRWYZbUvzy45LVCzgQ7uppKJc+67 hXsEJGYvg6bZsCHQs7cDaBmJWNpZduLnYDKhVd2EIQlnuaEWnbLBR4bObu8eSjrT g2k+fjcmxeSbPOMLYU4yP7MgFf5B+jVTVvZoN9kwhQDnydS7i9infSfjDyxwEY67 OC0Ma/UCmaLPUKxO2MlDBBqND+WpLGbM1GCsbS4z49JurIpvlUNqSNL9kwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCT/L3OH0e2jUEed8nmwqhu9fZWwMB8GA1UdIwQY MBaAFDAZXDuwUFhrX05QBBGAB8SLNOrlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUJsY083QlFXR3RmVGxBRUVZQUh4SXMwNnVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9jNzYyNzUtZDhkYS00NTIzLTgzYWQt YjQyMWMzOGIyZjdmLzEvTUJsY083QlFXR3RmVGxBRUVZQUh4SXMwNnVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9jNzYyNzUtZDhkYS00NTIzLTgzYWQtYjQyMWMzOGIyZjdm LzEvTUJsY083QlFXR3RmVGxBRUVZQUh4SXMwNnVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzIwnXkD8 7B56eqx80O8HP3W+13U7bSDSM8BuoWQgIi97zhx38/WmupebCmFWrCsvLj3PffCv rhC4+kom4cuouSdCIWuXNMYW+861TlbafaN3SBmlXfjQWp/KMpejQ0q5aCiG0D6e 2wqaBd+G+Fw9oeGhEYfzMpuXGUTDf9c1lhPBLOHKhzRjX601j4l7ZN5DS++c0SuG K5cMATe2TB+xA/4xxkbjoUu3iQSwOuTi0rotaHOiQoVLXMFLyAl+OJux6yWHanEZ 5QyYVmOAQftJlfj+a2ao6uCwlNwPg5eZR1lM6+pCXK+4KUBr2dLEDMgmAKsD9nr5 /UmVxhksrzmBgw== -----END CERTIFICATE-----Generated at Sat Dec 20 13:56:46 2025 by rpki-client