This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/9e982d-ad5b-4100-8d9d-d1efceec34c1/1/mbBCW3HCtRzX6-R9Pv58uYYbTYI.mft File: mbBCW3HCtRzX6-R9Pv58uYYbTYI.mft (raw, json) Hash identifier: Nby2sdqSwmN6eKuGuZZmAJb9zsS/ShGAX/UcIVCpKYo= Subject key identifier: 0D:6D:B2:E7:9A:1C:22:1F:90:A6:6B:9F:59:06:B0:5F:02:12:40:B0 Authority key identifier: 99:B0:42:5B:71:C2:B5:1C:D7:EB:E4:7D:3E:FE:7C:B9:86:1B:4D:82 Certificate issuer: /CN=99b0425b71c2b51cd7ebe47d3efe7cb9861b4d82 Certificate serial: 019B53ABFED6D61C792E6E78ED8E55EAF7D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mbBCW3HCtRzX6-R9Pv58uYYbTYI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/9e982d-ad5b-4100-8d9d-d1efceec34c1/1/mbBCW3HCtRzX6-R9Pv58uYYbTYI.mft Manifest number: 0D69 Signing time: Thu 25 Dec 2025 04:02:19 +0000 Manifest this update: Thu 25 Dec 2025 04:02:19 +0000 Manifest next update: Fri 26 Dec 2025 04:02:19 +0000 Files and hashes: 1: mbBCW3HCtRzX6-R9Pv58uYYbTYI.crl (hash: 0yB2QEtncWn8xee2OnpJrL5Si9eKHfmouqR9oj5InNA=) 2: nZK_WOZBkx5CjkyneO9yoAn9z7M.roa (hash: dpA6T/m8yk0xZEgRWH2rVz82pLkCcKV+oqNh5OTEUXU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/9e982d-ad5b-4100-8d9d-d1efceec34c1/1/mbBCW3HCtRzX6-R9Pv58uYYbTYI.crl rsync://rpki.ripe.net/repository/DEFAULT/66/9e982d-ad5b-4100-8d9d-d1efceec34c1/1/mbBCW3HCtRzX6-R9Pv58uYYbTYI.mft rsync://rpki.ripe.net/repository/DEFAULT/mbBCW3HCtRzX6-R9Pv58uYYbTYI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:ab:fe:d6:d6:1c:79:2e:6e:78:ed:8e:55:ea:f7:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99b0425b71c2b51cd7ebe47d3efe7cb9861b4d82 Validity Not Before: Dec 25 04:02:19 2025 GMT Not After : Dec 26 04:02:19 2025 GMT Subject: CN=0d6db2e79a1c221f90a66b9f5906b05f021240b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:10:8a:08:1f:55:87:86:61:65:55:79:fe:35: 56:55:69:15:7c:53:08:79:d6:b3:8f:f6:72:28:17: cf:91:cf:cb:2b:e3:07:f0:16:3d:87:94:27:cd:6d: 62:ca:6f:5c:ac:24:fe:28:ea:68:70:83:bc:eb:a7: dc:e3:96:74:2c:ff:0b:6b:49:27:62:8b:17:d3:33: 91:42:76:40:91:ca:a1:37:f9:4e:8c:41:bd:2d:fb: c6:6a:05:78:a5:a8:57:51:12:2f:ce:5e:0f:64:52: 63:56:a2:5d:9f:27:27:90:84:15:39:8b:f4:43:07: 56:95:be:7a:17:1a:2a:21:a1:50:a3:f1:db:81:4a: fb:41:38:18:78:1f:24:5c:53:c3:73:5e:47:4f:a7: 10:fa:27:86:8f:b9:9f:33:50:81:59:64:eb:97:e7: 5a:66:47:fe:bf:a3:26:04:d6:5a:b5:4d:f3:84:ff: e4:3b:ce:0f:07:4f:33:7d:4d:44:e6:a2:49:9c:3f: d4:fc:06:90:1a:59:54:06:85:e0:33:b6:b7:01:06: 03:3b:fc:d9:f7:db:4e:0e:09:ce:58:59:5a:8e:bb: 2f:f8:ab:2f:37:9c:1d:32:fa:06:a6:7f:e2:c7:bb: f0:a2:bc:40:e6:72:c1:13:86:1b:53:d0:c5:b2:19: fb:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:6D:B2:E7:9A:1C:22:1F:90:A6:6B:9F:59:06:B0:5F:02:12:40:B0 X509v3 Authority Key Identifier: keyid:99:B0:42:5B:71:C2:B5:1C:D7:EB:E4:7D:3E:FE:7C:B9:86:1B:4D:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mbBCW3HCtRzX6-R9Pv58uYYbTYI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9e982d-ad5b-4100-8d9d-d1efceec34c1/1/mbBCW3HCtRzX6-R9Pv58uYYbTYI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9e982d-ad5b-4100-8d9d-d1efceec34c1/1/mbBCW3HCtRzX6-R9Pv58uYYbTYI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:36:81:41:c8:3d:b4:ec:56:59:2f:db:55:6d:37:bf:78:6b: e2:84:09:b6:c6:1f:46:b8:02:fb:92:08:f1:ba:cf:bb:bb:d2: ed:cb:04:fc:ea:b5:a4:fe:71:5a:cc:0d:ce:b9:fc:b3:20:ac: 18:e8:7a:54:7f:e1:67:6c:57:b6:98:c3:f9:05:a8:3a:e9:6d: 73:d1:6c:6f:d3:42:1c:4e:07:78:92:2c:20:b3:95:e9:e4:2c: 2a:2d:94:fd:0a:c8:65:83:e3:ad:13:42:b1:8c:c9:7c:dc:84: 60:1c:92:08:27:47:13:59:ad:bd:7a:3c:21:28:db:33:b6:2f: 9b:26:2b:84:93:17:bd:0b:2f:39:d2:53:99:ab:a0:e5:6f:1d: fd:f5:39:d2:fa:f2:bc:76:cf:94:b1:f1:83:01:86:61:c8:2d: 34:03:db:cc:50:84:f2:52:6e:aa:d0:d9:16:f2:cb:f3:bf:56: 48:e4:d4:bb:39:d7:29:33:2c:15:b8:2f:3e:b4:04:e5:6d:a2: 2e:d2:eb:98:af:1e:ca:5e:09:91:6f:d5:29:5c:4b:ba:76:53: ee:a5:8c:d2:18:70:e2:fc:92:a0:b1:42:6a:4d:37:48:97:c4: 82:1b:d7:b9:b2:ca:ce:93:8c:3b:3d:74:e3:3d:44:2c:1d:f1: aa:24:be:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTq/7W1hx5Lm547Y5V6vfSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5YjA0MjViNzFjMmI1MWNkN2ViZTQ3ZDNlZmU3Y2I5ODYx YjRkODIwHhcNMjUxMjI1MDQwMjE5WhcNMjUxMjI2MDQwMjE5WjAzMTEwLwYDVQQD EygwZDZkYjJlNzlhMWMyMjFmOTBhNjZiOWY1OTA2YjA1ZjAyMTI0MGIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBCKCB9Vh4ZhZVV5/jVWVWkVfFMI edazj/ZyKBfPkc/LK+MH8BY9h5QnzW1iym9crCT+KOpocIO866fc45Z0LP8La0kn YosX0zORQnZAkcqhN/lOjEG9LfvGagV4pahXURIvzl4PZFJjVqJdnycnkIQVOYv0 QwdWlb56FxoqIaFQo/HbgUr7QTgYeB8kXFPDc15HT6cQ+ieGj7mfM1CBWWTrl+da Zkf+v6MmBNZatU3zhP/kO84PB08zfU1E5qJJnD/U/AaQGllUBoXgM7a3AQYDO/zZ 99tODgnOWFlajrsv+KsvN5wdMvoGpn/ix7vworxA5nLBE4YbU9DFshn7HQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA1tsueaHCIfkKZrn1kGsF8CEkCwMB8GA1UdIwQY MBaAFJmwQltxwrUc1+vkfT7+fLmGG02CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWJCQ1czSEN0UnpYNi1SOVB2NTh1WVliVFlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni85ZTk4MmQtYWQ1Yi00MTAwLThkOWQt ZDFlZmNlZWMzNGMxLzEvbWJCQ1czSEN0UnpYNi1SOVB2NTh1WVliVFlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni85ZTk4MmQtYWQ1Yi00MTAwLThkOWQtZDFlZmNlZWMzNGMx LzEvbWJCQ1czSEN0UnpYNi1SOVB2NTh1WVliVFlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArjaBQcg9 tOxWWS/bVW03v3hr4oQJtsYfRrgC+5II8brPu7vS7csE/Oq1pP5xWswNzrn8syCs GOh6VH/hZ2xXtpjD+QWoOultc9Fsb9NCHE4HeJIsILOV6eQsKi2U/QrIZYPjrRNC sYzJfNyEYBySCCdHE1mtvXo8ISjbM7YvmyYrhJMXvQsvOdJTmaug5W8d/fU50vry vHbPlLHxgwGGYcgtNAPbzFCE8lJuqtDZFvLL879WSOTUuznXKTMsFbgvPrQE5W2i LtLrmK8eyl4JkW/VKVxLunZT7qWM0hhw4vySoLFCak03SJfEghvXubLKzpOMOz10 4z1ELB3xqiS+AQ== -----END CERTIFICATE-----Generated at Thu Dec 25 12:29:51 2025 by rpki-client