This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.mft File: MXuBR1A-oZ9YHKANKNvuXljLj0g.mft (raw, json) Hash identifier: CtA90KeqVC8/85FxbrmcUogaoGfrrtPxN5WgpFXNCN4= Subject key identifier: B5:3E:BC:65:F6:C9:1C:4F:53:2C:B4:78:40:C5:25:CF:A0:8A:ED:6A Authority key identifier: 31:7B:81:47:50:3E:A1:9F:58:1C:A0:0D:28:DB:EE:5E:58:CB:8F:48 Certificate issuer: /CN=317b8147503ea19f581ca00d28dbee5e58cb8f48 Certificate serial: 019AF49C4DDD91AF5724D8ADFED503ED2E04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MXuBR1A-oZ9YHKANKNvuXljLj0g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 17:01:15 +0000 Manifest this update: Sat 06 Dec 2025 17:01:15 +0000 Manifest next update: Sun 07 Dec 2025 17:01:15 +0000 Files and hashes: 1: MXuBR1A-oZ9YHKANKNvuXljLj0g.crl (hash: 054JipFjfx3V77OK3faLDwQ8ec4KHe2U6UQi7DVs/os=) 2: Xvq5E9FjSgetaXURRKNVucLHpJA.roa (hash: Q0VYCtfy8botfioT4TVhD+jb4Ht709fLdZsnE/9HQwY=) 3: ZthEX-bem71wxx1bLgVPG5w9ZTc.roa (hash: T1Z1de8P32daOdZ6/2GmlJdKCTcAVlmu6uwlpR9ZYC8=) 4: cpm1MJFdWjEQeCJ1LBHfzw5iKXY.roa (hash: gbGURzXBFbe9SdreBkh+gl3ChVchhLD0ie8p4XE7DdU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.mft rsync://rpki.ripe.net/repository/DEFAULT/MXuBR1A-oZ9YHKANKNvuXljLj0g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 17:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:4d:dd:91:af:57:24:d8:ad:fe:d5:03:ed:2e:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=317b8147503ea19f581ca00d28dbee5e58cb8f48 Validity Not Before: Dec 6 17:01:15 2025 GMT Not After : Dec 7 17:01:15 2025 GMT Subject: CN=b53ebc65f6c91c4f532cb47840c525cfa08aed6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:cb:18:63:6e:b8:6f:cb:3f:66:1a:d8:55:6d: e1:4a:ca:72:f3:15:cd:2d:56:3e:f2:5a:a7:e0:5c: 9a:66:07:98:41:fb:71:d5:88:82:5a:fa:30:2f:01: 0e:6a:7d:e2:4d:c7:39:5e:86:9a:9d:e0:9b:36:4e: 2a:13:74:29:6c:1f:1a:bb:f2:c6:97:b1:af:89:84: 43:4c:08:56:45:38:bf:1d:89:a7:14:fb:9c:86:9c: b0:03:98:5a:0f:13:4a:b3:33:a8:e9:6b:85:18:c1: 9c:b1:6a:da:22:ef:86:2d:f4:18:97:c8:bd:43:49: 11:f5:27:8e:e4:9c:a2:e9:d2:9c:dd:62:48:83:29: 88:e8:c2:62:ec:41:4f:23:31:1a:a7:07:28:a6:11: 86:20:98:f6:4e:13:2d:4b:9d:8b:cb:45:20:47:b1: 00:59:58:a0:65:46:bb:ae:7e:85:ed:40:f7:ef:9f: 84:ac:bc:c6:60:53:ed:5e:d3:c1:00:40:35:d2:d5: 7d:22:f8:19:9c:f4:8a:ba:8c:cb:95:19:24:b1:39: dc:b9:28:df:fe:b7:e4:03:65:c4:cc:84:cc:2a:d4: 45:5e:f3:12:39:7c:55:93:96:c1:f9:95:1d:e5:a8: 50:50:b4:4c:82:b7:3c:b3:e9:37:44:73:7d:54:dc: c1:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:3E:BC:65:F6:C9:1C:4F:53:2C:B4:78:40:C5:25:CF:A0:8A:ED:6A X509v3 Authority Key Identifier: keyid:31:7B:81:47:50:3E:A1:9F:58:1C:A0:0D:28:DB:EE:5E:58:CB:8F:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MXuBR1A-oZ9YHKANKNvuXljLj0g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:01:31:fa:c8:42:ff:ab:95:9c:5e:df:18:88:e8:35:4b:e0: 7d:fb:d5:15:68:17:ba:f1:b7:ca:fc:81:0f:17:09:8a:1c:b1: 89:b8:19:95:53:a8:dc:db:98:fa:c4:b3:0f:a6:e5:3f:e2:83: 5a:79:77:a4:8c:09:ce:a7:73:47:b0:b5:c9:9c:e5:44:f0:2b: 31:2c:50:9e:0c:12:c8:d5:7a:57:ce:f2:cf:ad:b2:01:c7:15: c9:56:aa:70:b1:ee:18:30:90:cf:d0:1c:b9:7d:d6:32:64:08: 2d:fa:78:73:e1:4e:6c:86:ad:11:fe:39:9c:67:eb:f8:3f:b9: 48:97:33:81:73:34:d5:fd:07:eb:25:71:ce:82:8c:7a:fe:06: b5:3e:8a:74:be:be:75:df:9d:90:6c:f9:42:8d:e4:55:a4:92: 67:73:ad:42:9b:26:40:f0:33:b2:db:65:71:fe:3c:9c:eb:72: bb:97:bc:3c:2c:db:f4:4a:8e:53:a2:77:48:14:d0:97:d6:49: 65:5d:20:06:14:4b:4c:d7:71:2d:10:a5:fb:d4:2b:90:71:e4: 70:24:f5:c8:f9:cc:31:12:c6:99:16:70:ad:8d:1c:d7:8b:a6: 62:f2:16:1d:a7:3b:8c:ac:68:a2:1a:e6:7f:d0:d1:a3:b6:48: fa:f2:49:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0nE3dka9XJNit/tUD7S4EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxN2I4MTQ3NTAzZWExOWY1ODFjYTAwZDI4ZGJlZTVlNThj YjhmNDgwHhcNMjUxMjA2MTcwMTE1WhcNMjUxMjA3MTcwMTE1WjAzMTEwLwYDVQQD EyhiNTNlYmM2NWY2YzkxYzRmNTMyY2I0Nzg0MGM1MjVjZmEwOGFlZDZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0MsYY264b8s/ZhrYVW3hSspy8xXN LVY+8lqn4FyaZgeYQftx1YiCWvowLwEOan3iTcc5XoaaneCbNk4qE3QpbB8au/LG l7GviYRDTAhWRTi/HYmnFPuchpywA5haDxNKszOo6WuFGMGcsWraIu+GLfQYl8i9 Q0kR9SeO5Jyi6dKc3WJIgymI6MJi7EFPIzEapwcophGGIJj2ThMtS52Ly0UgR7EA WVigZUa7rn6F7UD375+ErLzGYFPtXtPBAEA10tV9IvgZnPSKuozLlRkksTncuSjf /rfkA2XEzITMKtRFXvMSOXxVk5bB+ZUd5ahQULRMgrc8s+k3RHN9VNzBAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLU+vGX2yRxPUyy0eEDFJc+giu1qMB8GA1UdIwQY MBaAFDF7gUdQPqGfWBygDSjb7l5Yy49IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVh1QlIxQS1vWjlZSEtBTktOdnVYbGpMajBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8yZTRlNTQtMDU0OC00ZDBjLTkzZjEt NzU0NjFhYmJiNWE0LzEvTVh1QlIxQS1vWjlZSEtBTktOdnVYbGpMajBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS8yZTRlNTQtMDU0OC00ZDBjLTkzZjEtNzU0NjFhYmJiNWE0 LzEvTVh1QlIxQS1vWjlZSEtBTktOdnVYbGpMajBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWwEx+shC /6uVnF7fGIjoNUvgffvVFWgXuvG3yvyBDxcJihyxibgZlVOo3NuY+sSzD6blP+KD Wnl3pIwJzqdzR7C1yZzlRPArMSxQngwSyNV6V87yz62yAccVyVaqcLHuGDCQz9Ac uX3WMmQILfp4c+FObIatEf45nGfr+D+5SJczgXM01f0H6yVxzoKMev4GtT6KdL6+ dd+dkGz5Qo3kVaSSZ3OtQpsmQPAzsttlcf48nOtyu5e8PCzb9EqOU6J3SBTQl9ZJ ZV0gBhRLTNdxLRCl+9QrkHHkcCT1yPnMMRLGmRZwrY0c14umYvIWHac7jKxoohrm f9DRo7ZI+vJJ7w== -----END CERTIFICATE-----Generated at Sun Dec 7 03:26:20 2025 by rpki-client