This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/5b373e-d314-4459-b858-cf1d1f007a36/1/mxKd6eumtHUW8KFVc0IFq7uYt8I.mft File: mxKd6eumtHUW8KFVc0IFq7uYt8I.mft (raw, json) Hash identifier: 8jV2vkrO00gg4lS/jWFF2j5jQbrXwdlKzts1p688HY8= Subject key identifier: B0:FD:B7:25:A6:B9:D9:59:21:37:C9:7A:D6:B0:AE:B8:2E:0B:24:67 Authority key identifier: 9B:12:9D:E9:EB:A6:B4:75:16:F0:A1:55:73:42:05:AB:BB:98:B7:C2 Certificate issuer: /CN=9b129de9eba6b47516f0a155734205abbb98b7c2 Certificate serial: 019B41A439CC80772D5E7E5C17920B7114EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mxKd6eumtHUW8KFVc0IFq7uYt8I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/5b373e-d314-4459-b858-cf1d1f007a36/1/mxKd6eumtHUW8KFVc0IFq7uYt8I.mft Manifest number: 178B Signing time: Sun 21 Dec 2025 16:00:40 +0000 Manifest this update: Sun 21 Dec 2025 16:00:40 +0000 Manifest next update: Mon 22 Dec 2025 16:00:40 +0000 Files and hashes: 1: Kd7_5vl2w2YSR6oDwH4ZLSBCJg4.roa (hash: EwnV+wUuaOySMH9KRvnlNbPyo/46xzUnRyjwxeytk6w=) 2: mxKd6eumtHUW8KFVc0IFq7uYt8I.crl (hash: BQidKkgQ67a2qA2pIRJKP9ckCEloRHjgcP4pzMGuZ8I=) 3: wmU9vLlEZyocLQ741PHIufr10v0.roa (hash: PwSdmNeGC1GPxHMJkBQhH54QcJIdpfP5NSJA3xMbqZI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/5b373e-d314-4459-b858-cf1d1f007a36/1/mxKd6eumtHUW8KFVc0IFq7uYt8I.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/5b373e-d314-4459-b858-cf1d1f007a36/1/mxKd6eumtHUW8KFVc0IFq7uYt8I.mft rsync://rpki.ripe.net/repository/DEFAULT/mxKd6eumtHUW8KFVc0IFq7uYt8I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 16:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:a4:39:cc:80:77:2d:5e:7e:5c:17:92:0b:71:14:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b129de9eba6b47516f0a155734205abbb98b7c2 Validity Not Before: Dec 21 16:00:40 2025 GMT Not After : Dec 22 16:00:40 2025 GMT Subject: CN=b0fdb725a6b9d9592137c97ad6b0aeb82e0b2467 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:ae:d9:a0:1c:9a:09:af:55:cc:38:ab:cc:7a: 2e:60:40:e5:7c:8a:7d:2d:10:93:9c:92:9a:2b:7d: ca:79:d2:a5:9d:ff:61:84:57:2d:7f:49:21:2d:e5: 6c:f6:4c:e5:92:f5:05:55:56:de:26:26:46:c5:d0: 75:e0:9d:da:97:56:2f:3d:d0:c8:41:6e:13:5b:52: 81:1e:8e:75:fb:10:7b:3d:93:68:3a:a1:49:d4:37: 94:8e:28:c2:36:18:25:46:42:80:10:4e:9c:b0:d0: 90:be:a5:0f:ea:c2:8e:a5:1e:6b:78:90:8b:2f:ad: 93:a7:a8:97:cb:f2:58:41:db:49:a1:c4:57:81:19: a6:46:78:09:54:39:ea:e7:03:74:bb:b2:6f:d4:23: 31:81:ac:66:bc:f0:b0:38:50:e8:68:5a:4a:5f:c1: 42:12:d4:d1:09:d5:35:1e:cd:a5:d8:97:43:50:23: 9c:d6:1e:49:31:fd:2e:cb:54:7f:e6:ae:ca:1e:d3: 04:4d:d8:9c:6f:28:da:92:44:9b:36:69:fc:65:67: cf:fb:04:5a:f2:70:59:0f:02:8f:f7:44:1b:ba:35: 09:51:c4:40:31:b5:f0:cb:27:85:a0:87:c3:db:78: 59:cc:5a:13:e0:25:1b:21:7a:4d:6e:c5:76:fe:2b: f7:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:FD:B7:25:A6:B9:D9:59:21:37:C9:7A:D6:B0:AE:B8:2E:0B:24:67 X509v3 Authority Key Identifier: keyid:9B:12:9D:E9:EB:A6:B4:75:16:F0:A1:55:73:42:05:AB:BB:98:B7:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mxKd6eumtHUW8KFVc0IFq7uYt8I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5b373e-d314-4459-b858-cf1d1f007a36/1/mxKd6eumtHUW8KFVc0IFq7uYt8I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5b373e-d314-4459-b858-cf1d1f007a36/1/mxKd6eumtHUW8KFVc0IFq7uYt8I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:96:37:cd:4f:fb:0d:aa:fb:82:9e:c0:74:a4:87:19:85:f2: 96:73:9c:a5:16:fe:46:77:a1:9d:42:28:c3:1b:d4:46:9e:9e: d7:fc:70:cd:35:ce:ae:ec:d0:27:de:b4:65:30:8e:73:bf:59: 63:36:6a:14:a3:b6:d4:6d:4c:2f:9d:92:cd:b6:ec:41:d6:88: 52:b2:01:51:9c:71:5d:5a:b5:f3:b1:60:c0:9c:9c:c4:15:52: f6:28:7e:b9:b6:d3:91:66:a9:0f:22:c5:a4:19:5d:28:50:5a: 4b:72:6e:da:dc:d8:f6:b0:fb:5e:cd:f2:45:21:20:20:bf:c6: 74:e9:0d:ff:94:9d:95:c8:9b:ac:16:d3:3a:d2:38:7e:70:57: a2:a9:49:77:92:6a:e8:c6:16:fb:1b:f5:d6:de:b7:88:46:8e: ed:d6:0a:c6:f1:52:a7:1a:cf:f2:a6:d9:40:25:48:8e:65:e8: ad:53:f0:19:b4:2d:ad:58:a3:3a:06:2b:70:17:af:66:11:c6: 9c:ef:82:8f:96:09:c4:cf:c3:ef:91:66:c3:ab:79:92:6f:b0: c5:7e:5e:e4:df:12:53:e1:3e:3b:30:ed:fe:b7:ed:45:80:e9: e1:db:5d:94:d9:48:07:da:88:ce:fe:b4:e5:51:2f:1a:8e:f1: ca:e3:a8:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBpDnMgHctXn5cF5ILcRTsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliMTI5ZGU5ZWJhNmI0NzUxNmYwYTE1NTczNDIwNWFiYmI5 OGI3YzIwHhcNMjUxMjIxMTYwMDQwWhcNMjUxMjIyMTYwMDQwWjAzMTEwLwYDVQQD EyhiMGZkYjcyNWE2YjlkOTU5MjEzN2M5N2FkNmIwYWViODJlMGIyNDY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3q7ZoByaCa9VzDirzHouYEDlfIp9 LRCTnJKaK33KedKlnf9hhFctf0khLeVs9kzlkvUFVVbeJiZGxdB14J3al1YvPdDI QW4TW1KBHo51+xB7PZNoOqFJ1DeUjijCNhglRkKAEE6csNCQvqUP6sKOpR5reJCL L62Tp6iXy/JYQdtJocRXgRmmRngJVDnq5wN0u7Jv1CMxgaxmvPCwOFDoaFpKX8FC EtTRCdU1Hs2l2JdDUCOc1h5JMf0uy1R/5q7KHtMETdicbyjakkSbNmn8ZWfP+wRa 8nBZDwKP90QbujUJUcRAMbXwyyeFoIfD23hZzFoT4CUbIXpNbsV2/iv3dQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLD9tyWmudlZITfJetawrrguCyRnMB8GA1UdIwQY MBaAFJsSnenrprR1FvChVXNCBau7mLfCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXhLZDZldW10SFVXOEtGVmMwSUZxN3VZdDhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy81YjM3M2UtZDMxNC00NDU5LWI4NTgt Y2YxZDFmMDA3YTM2LzEvbXhLZDZldW10SFVXOEtGVmMwSUZxN3VZdDhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy81YjM3M2UtZDMxNC00NDU5LWI4NTgtY2YxZDFmMDA3YTM2 LzEvbXhLZDZldW10SFVXOEtGVmMwSUZxN3VZdDhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaJY3zU/7 Dar7gp7AdKSHGYXylnOcpRb+RnehnUIowxvURp6e1/xwzTXOruzQJ960ZTCOc79Z YzZqFKO21G1ML52SzbbsQdaIUrIBUZxxXVq187FgwJycxBVS9ih+ubbTkWapDyLF pBldKFBaS3Ju2tzY9rD7Xs3yRSEgIL/GdOkN/5SdlcibrBbTOtI4fnBXoqlJd5Jq 6MYW+xv11t63iEaO7dYKxvFSpxrP8qbZQCVIjmXorVPwGbQtrVijOgYrcBevZhHG nO+Cj5YJxM/D75Fmw6t5km+wxX5e5N8SU+E+OzDt/rftRYDp4dtdlNlIB9qIzv60 5VEvGo7xyuOonQ== -----END CERTIFICATE-----Generated at Mon Dec 22 01:02:47 2025 by rpki-client