This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft File: MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft (raw, json) Hash identifier: kNBuLiBKlzjr2Ya31iqwUmXyx/nFIkpWULzIXa5Ghho= Subject key identifier: 6D:96:BA:3F:7D:A5:B0:83:DF:6C:A3:CD:99:D9:EE:F1:10:91:44:29 Authority key identifier: 30:16:B1:0D:0A:C2:18:01:7C:74:93:94:E4:F2:51:9C:F2:C0:51:4E Certificate issuer: /CN=3016b10d0ac218017c749394e4f2519cf2c0514e Certificate serial: 019B3F7ECD837842186127033C3B2C385237 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MBaxDQrCGAF8dJOU5PJRnPLAUU4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft Manifest number: 178E Signing time: Sun 21 Dec 2025 06:00:33 +0000 Manifest this update: Sun 21 Dec 2025 06:00:33 +0000 Manifest next update: Mon 22 Dec 2025 06:00:33 +0000 Files and hashes: 1: HlO9ZQi1YEqVxRv4xtahO5YLBGA.roa (hash: aJ2b3cCx1ndyavIj0cgELjQKu/oO/oTwQkl8MyIO1oI=) 2: MBaxDQrCGAF8dJOU5PJRnPLAUU4.crl (hash: OXjlPtA1GCmgjXUSORZYcOpbLjOSyKI/ZfpJKx7N3wI=) 3: SnB27P4aE00JP6FbecTTod9K1rk.roa (hash: 5E+ZR3tJKvaUJ0xYE7TDulpUYo4F5Unw9Ys//QosG5Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft rsync://rpki.ripe.net/repository/DEFAULT/MBaxDQrCGAF8dJOU5PJRnPLAUU4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:7e:cd:83:78:42:18:61:27:03:3c:3b:2c:38:52:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3016b10d0ac218017c749394e4f2519cf2c0514e Validity Not Before: Dec 21 06:00:33 2025 GMT Not After : Dec 22 06:00:33 2025 GMT Subject: CN=6d96ba3f7da5b083df6ca3cd99d9eef110914429 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f4:87:31:4a:0f:ad:d7:00:06:93:46:77:4e: 46:72:98:83:71:01:14:62:28:5f:0b:34:2c:fb:dc: b0:fa:2c:dc:7e:d2:05:12:95:6a:49:5d:9f:93:0b: b6:b6:ea:e7:ac:1c:be:f9:fc:72:a9:ac:51:51:88: 08:d7:fd:78:aa:26:46:6d:df:9e:ad:bc:f7:7f:04: 2a:be:34:7f:35:62:10:ae:35:6e:0d:33:e2:af:c5: 9a:79:95:c2:db:ad:de:5b:d9:11:ed:9e:ef:a5:f9: ab:6a:c8:13:c5:94:ae:63:4b:c8:22:05:f0:81:59: dc:5a:e3:c8:76:07:95:50:d1:ff:b8:52:3b:8a:76: ed:d0:0f:a8:1a:c4:eb:78:47:36:d7:8c:54:f6:fd: 31:c5:2b:15:64:fd:15:d1:70:bc:16:e1:13:f1:d9: 7e:29:45:cb:3b:7f:51:4f:16:2b:14:99:30:43:02: 4e:48:e1:c8:62:78:62:30:bb:e4:03:63:cf:c2:e3: 11:ae:76:09:93:6c:c6:73:20:fa:2d:3c:69:2e:57: 73:7d:24:4f:5d:a8:a0:87:9c:bf:82:d5:55:24:33: 26:ca:5a:98:bc:95:5e:ee:e0:0b:0c:91:a7:42:9f: 56:7a:ca:de:c5:ff:cb:a1:13:7f:d5:80:af:9e:2d: 54:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:96:BA:3F:7D:A5:B0:83:DF:6C:A3:CD:99:D9:EE:F1:10:91:44:29 X509v3 Authority Key Identifier: keyid:30:16:B1:0D:0A:C2:18:01:7C:74:93:94:E4:F2:51:9C:F2:C0:51:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBaxDQrCGAF8dJOU5PJRnPLAUU4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:90:38:d3:ce:7a:97:3f:f3:1c:11:3e:4b:5d:9c:84:1a:26: cd:4e:eb:0b:d0:5e:2a:fe:64:79:ba:11:0d:10:bd:fa:c4:64: bc:12:f6:72:c4:d2:e0:8d:88:4d:30:21:50:97:55:53:6e:c9: 3b:78:66:a3:5f:65:4e:00:04:ea:82:bb:d8:cb:7b:28:8c:ef: 13:53:8b:17:a7:e4:ac:90:bf:3a:e6:72:fa:78:f7:c3:9c:66: 8b:17:cf:3b:46:ae:a4:e1:22:9f:26:75:cf:f4:d6:8d:1e:a3: 28:8d:24:7f:6a:7e:29:4b:83:87:34:03:f8:5f:e8:1f:58:63: 66:43:cc:b7:4e:4c:0c:56:05:61:7e:ee:75:c6:84:47:41:0e: 29:f1:01:3b:83:a8:96:f7:93:8b:6d:8e:db:6a:d6:04:bf:b6: 6e:d8:85:d4:82:08:16:fb:51:2d:4b:91:46:54:47:7a:e3:d2: a3:f1:ec:43:d1:84:22:41:88:fd:62:f4:af:f8:bf:2e:77:58: fb:e1:e6:b5:6a:66:0d:0d:d9:e4:8b:7a:1c:d4:60:ea:cd:83: 4e:a0:53:22:06:cd:6a:07:0e:26:1f:fa:08:66:0d:20:f8:34: 87:e1:01:e8:18:8e:38:5e:a8:0c:59:8f:3f:9b:37:4a:2c:a9: 3e:ec:06:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/fs2DeEIYYScDPDssOFI3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwMTZiMTBkMGFjMjE4MDE3Yzc0OTM5NGU0ZjI1MTljZjJj MDUxNGUwHhcNMjUxMjIxMDYwMDMzWhcNMjUxMjIyMDYwMDMzWjAzMTEwLwYDVQQD Eyg2ZDk2YmEzZjdkYTViMDgzZGY2Y2EzY2Q5OWQ5ZWVmMTEwOTE0NDI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfSHMUoPrdcABpNGd05GcpiDcQEU YihfCzQs+9yw+izcftIFEpVqSV2fkwu2turnrBy++fxyqaxRUYgI1/14qiZGbd+e rbz3fwQqvjR/NWIQrjVuDTPir8WaeZXC263eW9kR7Z7vpfmrasgTxZSuY0vIIgXw gVncWuPIdgeVUNH/uFI7inbt0A+oGsTreEc214xU9v0xxSsVZP0V0XC8FuET8dl+ KUXLO39RTxYrFJkwQwJOSOHIYnhiMLvkA2PPwuMRrnYJk2zGcyD6LTxpLldzfSRP Xaigh5y/gtVVJDMmylqYvJVe7uALDJGnQp9Wesrexf/LoRN/1YCvni1UKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG2Wuj99pbCD32yjzZnZ7vEQkUQpMB8GA1UdIwQY MBaAFDAWsQ0KwhgBfHSTlOTyUZzywFFOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUJheERRckNHQUY4ZEpPVTVQSlJuUExBVVU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8zZWI2NGEtZTZkZS00NWY1LWI2OGMt NjkzNjc2MmQyZmNlLzEvTUJheERRckNHQUY4ZEpPVTVQSlJuUExBVVU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS8zZWI2NGEtZTZkZS00NWY1LWI2OGMtNjkzNjc2MmQyZmNl LzEvTUJheERRckNHQUY4ZEpPVTVQSlJuUExBVVU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYpA40856 lz/zHBE+S12chBomzU7rC9BeKv5keboRDRC9+sRkvBL2csTS4I2ITTAhUJdVU27J O3hmo19lTgAE6oK72Mt7KIzvE1OLF6fkrJC/OuZy+nj3w5xmixfPO0aupOEinyZ1 z/TWjR6jKI0kf2p+KUuDhzQD+F/oH1hjZkPMt05MDFYFYX7udcaER0EOKfEBO4Oo lveTi22O22rWBL+2btiF1IIIFvtRLUuRRlRHeuPSo/HsQ9GEIkGI/WL0r/i/LndY ++HmtWpmDQ3Z5It6HNRg6s2DTqBTIgbNagcOJh/6CGYNIPg0h+EB6BiOOF6oDFmP P5s3SiypPuwGjg== -----END CERTIFICATE-----Generated at Sun Dec 21 13:36:56 2025 by rpki-client