This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/7a067c-ea19-405a-8e74-b4a3fc3a01f1/1/MBc-_VmPqpjUtSWOUfs6txbXrHE.mft File: MBc-_VmPqpjUtSWOUfs6txbXrHE.mft (raw, json) Hash identifier: aZn1vBfMuGfG68VM4IQil/m0J67pY/pE35h5vBvDbQQ= Subject key identifier: F8:A6:59:A7:08:7C:FE:A9:2E:95:3E:C2:4F:D8:80:C4:EB:CF:DD:85 Authority key identifier: 30:17:3E:FD:59:8F:AA:98:D4:B5:25:8E:51:FB:3A:B7:16:D7:AC:71 Certificate issuer: /CN=30173efd598faa98d4b5258e51fb3ab716d7ac71 Certificate serial: 019B27E48E5F7EF225698A2E7AAE1A20DD13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MBc-_VmPqpjUtSWOUfs6txbXrHE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/7a067c-ea19-405a-8e74-b4a3fc3a01f1/1/MBc-_VmPqpjUtSWOUfs6txbXrHE.mft Manifest number: 1628 Signing time: Tue 16 Dec 2025 16:00:48 +0000 Manifest this update: Tue 16 Dec 2025 16:00:48 +0000 Manifest next update: Wed 17 Dec 2025 16:00:48 +0000 Files and hashes: 1: MBc-_VmPqpjUtSWOUfs6txbXrHE.crl (hash: WFiEQbZojLsE4vAk9uOKglsJ9LhfCdjNauYpTAA/N5k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/7a067c-ea19-405a-8e74-b4a3fc3a01f1/1/MBc-_VmPqpjUtSWOUfs6txbXrHE.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/7a067c-ea19-405a-8e74-b4a3fc3a01f1/1/MBc-_VmPqpjUtSWOUfs6txbXrHE.mft rsync://rpki.ripe.net/repository/DEFAULT/MBc-_VmPqpjUtSWOUfs6txbXrHE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:e4:8e:5f:7e:f2:25:69:8a:2e:7a:ae:1a:20:dd:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30173efd598faa98d4b5258e51fb3ab716d7ac71 Validity Not Before: Dec 16 16:00:48 2025 GMT Not After : Dec 17 16:00:48 2025 GMT Subject: CN=f8a659a7087cfea92e953ec24fd880c4ebcfdd85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:91:e6:43:08:27:9d:df:eb:dc:37:15:3a:64: 1b:03:9c:6a:e3:66:7e:bd:08:35:dc:95:b5:20:fb: e2:50:2e:99:d6:2d:0d:84:ae:e1:6e:1a:f2:94:cf: 59:61:25:73:6b:d9:79:a6:5e:ed:77:85:20:cf:1d: 88:7e:77:e3:65:c3:2f:0b:2b:e5:1e:fb:ff:11:af: b5:92:20:3c:e9:ac:c8:3e:cf:86:af:95:bd:bf:bd: e4:ae:4b:6d:48:32:6c:1e:3f:1d:50:a1:32:0c:e9: 98:de:4d:75:3e:7d:18:54:1f:31:47:f9:55:29:14: ca:9d:93:8b:8b:56:2b:b4:44:dc:10:31:2a:31:ff: 41:0a:7c:c9:dd:a2:e5:3f:1f:b0:b1:d3:94:89:ea: 9f:16:3c:e8:e9:a1:5b:78:5e:63:0b:2b:e0:f6:ef: 41:af:cd:d6:36:82:4e:5f:0f:8c:a3:93:5b:bc:61: 7d:36:49:ac:74:30:69:f9:71:78:5e:8c:35:72:6c: 1b:b0:bb:93:76:8f:61:c7:fc:da:9e:9b:b0:64:96: ca:ee:4e:5b:74:64:09:5b:78:80:a9:35:59:8c:c0: d7:86:9e:a1:53:2f:b2:32:ea:43:33:76:a1:70:d1: 19:f9:b8:c8:7c:60:87:f1:25:fa:74:3a:05:da:d2: 5d:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:A6:59:A7:08:7C:FE:A9:2E:95:3E:C2:4F:D8:80:C4:EB:CF:DD:85 X509v3 Authority Key Identifier: keyid:30:17:3E:FD:59:8F:AA:98:D4:B5:25:8E:51:FB:3A:B7:16:D7:AC:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBc-_VmPqpjUtSWOUfs6txbXrHE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/7a067c-ea19-405a-8e74-b4a3fc3a01f1/1/MBc-_VmPqpjUtSWOUfs6txbXrHE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/7a067c-ea19-405a-8e74-b4a3fc3a01f1/1/MBc-_VmPqpjUtSWOUfs6txbXrHE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:c5:61:a9:36:4a:cd:52:5e:54:6c:fc:1b:67:52:8f:3d:08: b9:e8:57:29:2c:9a:0b:58:43:dd:fb:c0:00:0b:15:62:bc:f0: 04:40:46:d6:bf:da:79:a2:2f:b2:b2:17:9e:c7:2a:e9:b7:ef: 63:c3:05:48:83:3f:a3:32:59:36:1c:e5:ec:b9:6e:c7:e2:1c: d6:46:ec:1c:78:d8:c8:e2:3e:9d:c5:5d:48:96:ae:53:98:f6: 93:29:ea:2c:b8:a8:ee:5e:4f:42:a1:e9:d9:16:df:12:fb:7d: f3:03:f7:fc:f1:6b:4a:4b:26:1f:f2:da:b7:0b:cd:02:ab:f8: e0:d5:99:6d:78:4e:b4:56:00:68:1f:76:d8:09:00:a1:37:29: e7:f4:b4:d6:50:87:6a:9f:a3:33:b1:1b:40:ee:2b:3a:80:e9: 14:9f:82:1b:39:98:52:31:70:1f:73:67:d7:0a:79:8c:18:55: 8e:70:c9:57:0e:c0:10:45:11:7f:3f:21:de:8a:b4:66:c5:cb: 3e:5a:89:8e:75:e0:60:90:d9:9f:63:79:4b:a7:bd:44:1f:04: 1d:e4:4f:05:fc:17:6f:8e:19:6e:87:f1:1a:21:25:57:13:08: 8e:21:6f:34:8e:66:5b:54:eb:7b:7e:5b:8f:a4:8e:33:da:b7: fd:d5:6d:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsn5I5ffvIlaYoueq4aIN0TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwMTczZWZkNTk4ZmFhOThkNGI1MjU4ZTUxZmIzYWI3MTZk N2FjNzEwHhcNMjUxMjE2MTYwMDQ4WhcNMjUxMjE3MTYwMDQ4WjAzMTEwLwYDVQQD EyhmOGE2NTlhNzA4N2NmZWE5MmU5NTNlYzI0ZmQ4ODBjNGViY2ZkZDg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopHmQwgnnd/r3DcVOmQbA5xq42Z+ vQg13JW1IPviUC6Z1i0NhK7hbhrylM9ZYSVza9l5pl7td4Ugzx2IfnfjZcMvCyvl Hvv/Ea+1kiA86azIPs+Gr5W9v73krkttSDJsHj8dUKEyDOmY3k11Pn0YVB8xR/lV KRTKnZOLi1YrtETcEDEqMf9BCnzJ3aLlPx+wsdOUieqfFjzo6aFbeF5jCyvg9u9B r83WNoJOXw+Mo5NbvGF9NkmsdDBp+XF4Xow1cmwbsLuTdo9hx/zanpuwZJbK7k5b dGQJW3iAqTVZjMDXhp6hUy+yMupDM3ahcNEZ+bjIfGCH8SX6dDoF2tJdHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPimWacIfP6pLpU+wk/YgMTrz92FMB8GA1UdIwQY MBaAFDAXPv1Zj6qY1LUljlH7OrcW16xxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUJjLV9WbVBxcGpVdFNXT1VmczZ0eGJYckhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC83YTA2N2MtZWExOS00MDVhLThlNzQt YjRhM2ZjM2EwMWYxLzEvTUJjLV9WbVBxcGpVdFNXT1VmczZ0eGJYckhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC83YTA2N2MtZWExOS00MDVhLThlNzQtYjRhM2ZjM2EwMWYx LzEvTUJjLV9WbVBxcGpVdFNXT1VmczZ0eGJYckhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO8VhqTZK zVJeVGz8G2dSjz0IuehXKSyaC1hD3fvAAAsVYrzwBEBG1r/aeaIvsrIXnscq6bfv Y8MFSIM/ozJZNhzl7Llux+Ic1kbsHHjYyOI+ncVdSJauU5j2kynqLLio7l5PQqHp 2RbfEvt98wP3/PFrSksmH/LatwvNAqv44NWZbXhOtFYAaB922AkAoTcp5/S01lCH ap+jM7EbQO4rOoDpFJ+CGzmYUjFwH3Nn1wp5jBhVjnDJVw7AEEURfz8h3oq0ZsXL PlqJjnXgYJDZn2N5S6e9RB8EHeRPBfwXb44ZbofxGiElVxMIjiFvNI5mW1Tre35b j6SOM9q3/dVtSQ== -----END CERTIFICATE-----Generated at Wed Dec 17 00:25:41 2025 by rpki-client