This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/ba68bd-93a8-47d3-9c48-491cb485432d/1/Mb9CyzMks4trh4t81W9pk263w9M.mft File: Mb9CyzMks4trh4t81W9pk263w9M.mft (raw, json) Hash identifier: TIGuyBFB1QQrGRba7w3kLj1cc23BIfz8X6w6UybCl14= Subject key identifier: 15:A6:A8:49:F4:20:87:F9:4F:7E:B0:36:EB:38:40:6F:D7:51:52:B3 Authority key identifier: 31:BF:42:CB:33:24:B3:8B:6B:87:8B:7C:D5:6F:69:93:6E:B7:C3:D3 Certificate issuer: /CN=31bf42cb3324b38b6b878b7cd56f69936eb7c3d3 Certificate serial: 019B50E0E79BC426D00B9D0338473B7F9FC4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mb9CyzMks4trh4t81W9pk263w9M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/ba68bd-93a8-47d3-9c48-491cb485432d/1/Mb9CyzMks4trh4t81W9pk263w9M.mft Manifest number: 05D7 Signing time: Wed 24 Dec 2025 15:01:15 +0000 Manifest this update: Wed 24 Dec 2025 15:01:15 +0000 Manifest next update: Thu 25 Dec 2025 15:01:15 +0000 Files and hashes: 1: Mb9CyzMks4trh4t81W9pk263w9M.crl (hash: UfJ//BoYv8RAW9OnGbm/XyK/j+p/05W/yvBmpu0zPhk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/ba68bd-93a8-47d3-9c48-491cb485432d/1/Mb9CyzMks4trh4t81W9pk263w9M.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/ba68bd-93a8-47d3-9c48-491cb485432d/1/Mb9CyzMks4trh4t81W9pk263w9M.mft rsync://rpki.ripe.net/repository/DEFAULT/Mb9CyzMks4trh4t81W9pk263w9M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:e0:e7:9b:c4:26:d0:0b:9d:03:38:47:3b:7f:9f:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31bf42cb3324b38b6b878b7cd56f69936eb7c3d3 Validity Not Before: Dec 24 15:01:15 2025 GMT Not After : Dec 25 15:01:15 2025 GMT Subject: CN=15a6a849f42087f94f7eb036eb38406fd75152b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:23:ad:f1:c4:fd:34:2a:89:b2:74:25:61:52: 38:c9:ae:5d:17:51:b0:07:4a:75:b3:19:1b:9f:dd: 4a:c9:4f:f7:27:69:e8:c6:33:d0:fc:59:6b:1f:ae: 7d:fc:d9:dd:a3:88:0b:b8:11:25:78:50:78:d6:7f: a6:55:1b:bb:99:c0:0c:f0:df:e8:4a:f1:71:8b:a9: 7e:84:03:ab:55:c1:3c:a9:a0:0b:ff:5b:b4:53:77: bb:3e:d4:71:bd:d1:7a:b0:1f:fb:4f:b5:2d:37:17: 83:d4:b6:d7:b5:12:f1:19:c8:84:1d:6f:f4:62:59: 95:7d:ec:65:16:4e:9b:4f:dc:af:bd:77:b9:76:f4: bf:c8:5f:92:25:cb:67:89:cd:10:67:40:88:36:b6: 0b:91:d5:df:d2:cb:31:4b:cc:57:b7:dc:61:f4:22: 61:23:e2:9f:89:12:f1:37:04:9a:70:85:25:ae:1f: 3b:b5:7a:b6:00:47:da:74:68:6d:b4:7a:d2:bb:5d: 6f:4f:72:f3:c5:d3:a2:60:f3:bb:c4:e0:7c:a0:5c: 17:93:d5:c3:48:2a:a2:f4:78:db:25:ea:a7:9d:31: be:a7:82:91:e5:f6:d7:a6:0e:d1:52:81:76:c9:35: 95:04:33:15:16:f7:3a:b6:4d:af:0f:ff:b6:6f:73: 8d:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:A6:A8:49:F4:20:87:F9:4F:7E:B0:36:EB:38:40:6F:D7:51:52:B3 X509v3 Authority Key Identifier: keyid:31:BF:42:CB:33:24:B3:8B:6B:87:8B:7C:D5:6F:69:93:6E:B7:C3:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mb9CyzMks4trh4t81W9pk263w9M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/ba68bd-93a8-47d3-9c48-491cb485432d/1/Mb9CyzMks4trh4t81W9pk263w9M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/ba68bd-93a8-47d3-9c48-491cb485432d/1/Mb9CyzMks4trh4t81W9pk263w9M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:b7:81:45:15:48:4c:35:c1:32:31:7a:6f:01:9a:47:9e:37: e6:5f:7b:5d:d6:8b:08:e0:f0:e8:47:26:94:07:43:1b:de:04: be:5d:bb:38:97:76:87:1e:df:c4:f3:c1:91:de:9b:b9:32:ee: fd:e2:50:65:dc:47:c4:2b:f8:eb:3e:a3:74:ee:ae:d9:70:78: aa:71:84:3c:ab:0f:cc:49:43:7b:71:bc:df:be:37:77:00:7c: 0e:53:15:3c:e9:50:52:77:68:7a:ab:9b:d2:fb:95:e9:8d:f6: ec:9e:cf:7e:02:26:cd:47:05:e4:26:46:68:bb:d9:fe:a4:af: 41:20:8e:79:fa:f6:24:9e:90:48:2f:c9:7d:b7:d0:dc:52:71: 35:21:17:fe:a0:0e:88:4d:6b:66:70:d8:21:c1:0f:39:13:0c: 1f:f3:1d:08:64:bf:85:1b:a5:15:2c:3d:e1:bc:32:72:5b:bb: f7:80:4d:33:49:ef:89:96:f4:d2:ee:05:9b:c7:89:48:94:da: fd:c7:93:f0:ea:90:96:ef:b7:78:3d:ee:d0:d6:ec:97:6e:97: c4:53:7c:48:84:9d:ce:39:72:74:18:33:81:30:8b:55:6c:a2: 37:e9:7a:e4:45:e5:10:36:27:9c:25:13:bd:50:43:5d:e6:ab: d5:b9:48:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQ4OebxCbQC50DOEc7f5/EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxYmY0MmNiMzMyNGIzOGI2Yjg3OGI3Y2Q1NmY2OTkzNmVi N2MzZDMwHhcNMjUxMjI0MTUwMTE1WhcNMjUxMjI1MTUwMTE1WjAzMTEwLwYDVQQD EygxNWE2YTg0OWY0MjA4N2Y5NGY3ZWIwMzZlYjM4NDA2ZmQ3NTE1MmIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyOt8cT9NCqJsnQlYVI4ya5dF1Gw B0p1sxkbn91KyU/3J2noxjPQ/FlrH659/Nndo4gLuBEleFB41n+mVRu7mcAM8N/o SvFxi6l+hAOrVcE8qaAL/1u0U3e7PtRxvdF6sB/7T7UtNxeD1LbXtRLxGciEHW/0 YlmVfexlFk6bT9yvvXe5dvS/yF+SJctnic0QZ0CINrYLkdXf0ssxS8xXt9xh9CJh I+KfiRLxNwSacIUlrh87tXq2AEfadGhttHrSu11vT3LzxdOiYPO7xOB8oFwXk9XD SCqi9HjbJeqnnTG+p4KR5fbXpg7RUoF2yTWVBDMVFvc6tk2vD/+2b3ONrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBWmqEn0IIf5T36wNus4QG/XUVKzMB8GA1UdIwQY MBaAFDG/QsszJLOLa4eLfNVvaZNut8PTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWI5Q3l6TWtzNHRyaDR0ODFXOXBrMjYzdzlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9iYTY4YmQtOTNhOC00N2QzLTljNDgt NDkxY2I0ODU0MzJkLzEvTWI5Q3l6TWtzNHRyaDR0ODFXOXBrMjYzdzlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC9iYTY4YmQtOTNhOC00N2QzLTljNDgtNDkxY2I0ODU0MzJk LzEvTWI5Q3l6TWtzNHRyaDR0ODFXOXBrMjYzdzlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGreBRRVI TDXBMjF6bwGaR5435l97XdaLCODw6EcmlAdDG94Evl27OJd2hx7fxPPBkd6buTLu /eJQZdxHxCv46z6jdO6u2XB4qnGEPKsPzElDe3G83743dwB8DlMVPOlQUndoequb 0vuV6Y327J7PfgImzUcF5CZGaLvZ/qSvQSCOefr2JJ6QSC/JfbfQ3FJxNSEX/qAO iE1rZnDYIcEPORMMH/MdCGS/hRulFSw94bwyclu794BNM0nviZb00u4Fm8eJSJTa /ceT8OqQlu+3eD3u0Nbsl26XxFN8SISdzjlydBgzgTCLVWyiN+l65EXlEDYnnCUT vVBDXear1blIBg== -----END CERTIFICATE-----Generated at Wed Dec 24 18:07:16 2025 by rpki-client