This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.mft File: MBpkhyXuJqRgy5scvNnJyDLESa8.mft (raw, json) Hash identifier: dV5bMdCKb5dMQoTUknNrzcK4rNWHLXr6NK5OoI+IKKY= Subject key identifier: E7:91:36:77:DF:E5:58:27:2B:3C:66:97:19:FC:25:BD:21:F7:F0:6D Authority key identifier: 30:1A:64:87:25:EE:26:A4:60:CB:9B:1C:BC:D9:C9:C8:32:C4:49:AF Certificate issuer: /CN=301a648725ee26a460cb9b1cbcd9c9c832c449af Certificate serial: 019AF12CFA62187E7DF121C9C49D51A3E335 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MBpkhyXuJqRgy5scvNnJyDLESa8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.mft Manifest number: 0D7E Signing time: Sat 06 Dec 2025 01:00:47 +0000 Manifest this update: Sat 06 Dec 2025 01:00:47 +0000 Manifest next update: Sun 07 Dec 2025 01:00:47 +0000 Files and hashes: 1: 8q_1sdbmWayLtmP8mTZB8kLpDTw.roa (hash: uQTkc3VWGLAWZhJNFH53PtzgfyjjEyHOxqo6DRrQtqk=) 2: MBpkhyXuJqRgy5scvNnJyDLESa8.crl (hash: gD1AbiyART1tmzNVFtpr65kT5o5K0Bsnrf9WP2Bhqm8=) 3: YAbDv-nvwGeHChb6zA0HOhLQzuU.roa (hash: VK3+gni3RnR7xKTmJLnlw17ysmyb1yYsUhENUHdwkVo=) 4: tu5XYH6b7aUk4QwLTx8RlrN8pdA.roa (hash: UdM+cRgEm1VOucuDuMrXqMuyPx7BCYacYlYJHHlKn/k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.mft rsync://rpki.ripe.net/repository/DEFAULT/MBpkhyXuJqRgy5scvNnJyDLESa8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:fa:62:18:7e:7d:f1:21:c9:c4:9d:51:a3:e3:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=301a648725ee26a460cb9b1cbcd9c9c832c449af Validity Not Before: Dec 6 01:00:47 2025 GMT Not After : Dec 7 01:00:47 2025 GMT Subject: CN=e7913677dfe558272b3c669719fc25bd21f7f06d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:fc:56:38:c8:40:c9:d4:f2:9b:8c:c7:88:27: 23:a0:60:47:19:c5:5c:f9:98:f6:37:36:b9:c8:7a: b1:cf:2a:6c:11:76:37:21:54:f7:a0:4e:f9:a7:41: 69:76:55:4b:60:b9:40:fb:28:4c:03:9e:b6:ac:0c: 6a:03:e7:9f:fd:4d:7a:6a:57:66:6a:73:60:c2:a3: af:8b:52:1e:b4:54:91:5b:61:e9:da:1d:2b:bd:5d: d0:21:e5:83:75:a0:84:da:a8:6e:3b:ea:68:b8:49: 04:d1:f2:bf:3f:74:a9:d2:c2:75:d0:de:cd:87:fe: ea:0b:49:80:df:8a:e5:3d:c6:46:27:f9:57:20:fa: 36:53:b7:25:33:4e:b3:21:b1:40:86:8f:21:72:9b: 49:1c:86:ee:23:41:ac:c1:6c:ac:41:de:21:45:fb: ef:98:c8:4d:3f:8d:2d:32:8e:99:73:fc:b3:30:8d: 23:85:8b:ce:ad:a4:e1:ad:bf:ee:20:9b:8a:33:fe: 9b:e2:07:95:f6:0d:04:43:0b:f3:74:c0:d4:f0:f8: da:71:c5:e7:09:f0:8b:ad:16:cc:c7:44:4e:dc:b9: 5c:ba:ad:44:ce:ee:a7:fc:40:65:8a:12:9f:99:0e: e5:70:48:fd:99:57:6b:33:03:bc:45:6d:2e:08:14: 87:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:91:36:77:DF:E5:58:27:2B:3C:66:97:19:FC:25:BD:21:F7:F0:6D X509v3 Authority Key Identifier: keyid:30:1A:64:87:25:EE:26:A4:60:CB:9B:1C:BC:D9:C9:C8:32:C4:49:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBpkhyXuJqRgy5scvNnJyDLESa8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:4a:e7:9c:a4:63:c5:e4:de:d0:30:1e:e4:52:7e:57:4d:4f: 44:23:47:b0:46:6f:90:c7:02:a6:de:ed:85:31:16:c9:b8:5a: f7:f5:c0:d1:c6:6f:d1:a5:bf:2f:49:f7:5a:1f:59:c9:4a:86: 6f:64:61:f3:d6:bd:57:70:fe:dd:40:d9:07:a3:6e:5f:76:5b: 35:ad:df:18:a2:86:e3:0e:ba:84:c9:b9:f7:31:92:2c:ca:41: cd:d7:43:cf:b9:74:43:96:d7:af:ba:b7:01:db:85:0b:38:65: 9a:1c:68:49:97:d4:e2:22:a6:68:e9:26:e2:57:28:73:5f:08: f9:d7:2a:f9:c3:2e:33:c6:77:78:75:76:01:c3:a6:64:ec:44: 55:c5:a6:95:41:59:9d:dd:f2:6f:a4:07:e8:a7:fb:f7:f7:c9: f0:0b:d0:c4:de:34:1f:e3:e3:d5:ff:2a:09:28:0e:64:36:bf: 88:5f:f0:aa:33:3b:28:61:ea:93:c4:f7:72:da:bd:16:ae:00: 75:1d:f9:83:34:ef:e7:8d:8c:83:db:cf:8e:77:d0:d8:3f:a1: 6a:6e:b3:19:2f:a9:18:9c:bc:de:9e:28:d3:ae:46:8a:95:1e: 29:ee:ac:45:83:1d:69:5c:8a:cc:8e:b4:ad:3c:ca:a4:2c:26: 3d:bd:12:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLPpiGH598SHJxJ1Ro+M1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwMWE2NDg3MjVlZTI2YTQ2MGNiOWIxY2JjZDljOWM4MzJj NDQ5YWYwHhcNMjUxMjA2MDEwMDQ3WhcNMjUxMjA3MDEwMDQ3WjAzMTEwLwYDVQQD EyhlNzkxMzY3N2RmZTU1ODI3MmIzYzY2OTcxOWZjMjViZDIxZjdmMDZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/xWOMhAydTym4zHiCcjoGBHGcVc +Zj2Nza5yHqxzypsEXY3IVT3oE75p0FpdlVLYLlA+yhMA562rAxqA+ef/U16aldm anNgwqOvi1IetFSRW2Hp2h0rvV3QIeWDdaCE2qhuO+pouEkE0fK/P3Sp0sJ10N7N h/7qC0mA34rlPcZGJ/lXIPo2U7clM06zIbFAho8hcptJHIbuI0GswWysQd4hRfvv mMhNP40tMo6Zc/yzMI0jhYvOraThrb/uIJuKM/6b4geV9g0EQwvzdMDU8PjaccXn CfCLrRbMx0RO3Llcuq1Ezu6n/EBlihKfmQ7lcEj9mVdrMwO8RW0uCBSHPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOeRNnff5VgnKzxmlxn8Jb0h9/BtMB8GA1UdIwQY MBaAFDAaZIcl7iakYMubHLzZycgyxEmvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUJwa2h5WHVKcVJneTVzY3ZObkp5RExFU2E4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS8wMjRmMGYtMjBjNS00ODI4LWIzMzIt YTViMmQwOWUwNWNmLzEvTUJwa2h5WHVKcVJneTVzY3ZObkp5RExFU2E4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS8wMjRmMGYtMjBjNS00ODI4LWIzMzItYTViMmQwOWUwNWNm LzEvTUJwa2h5WHVKcVJneTVzY3ZObkp5RExFU2E4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArkrnnKRj xeTe0DAe5FJ+V01PRCNHsEZvkMcCpt7thTEWybha9/XA0cZv0aW/L0n3Wh9ZyUqG b2Rh89a9V3D+3UDZB6NuX3ZbNa3fGKKG4w66hMm59zGSLMpBzddDz7l0Q5bXr7q3 AduFCzhlmhxoSZfU4iKmaOkm4lcoc18I+dcq+cMuM8Z3eHV2AcOmZOxEVcWmlUFZ nd3yb6QH6Kf79/fJ8AvQxN40H+Pj1f8qCSgOZDa/iF/wqjM7KGHqk8T3ctq9Fq4A dR35gzTv542Mg9vPjnfQ2D+ham6zGS+pGJy83p4o065GipUeKe6sRYMdaVyKzI60 rTzKpCwmPb0S9A== -----END CERTIFICATE-----Generated at Sat Dec 6 07:19:58 2025 by rpki-client