This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3d93a5-5fbd-402e-ad87-e986904c8d0c/1/MbtzCxs_U-c6JXQi5bvs5Dtnf-M.mft File: MbtzCxs_U-c6JXQi5bvs5Dtnf-M.mft (raw, json) Hash identifier: MtXgvmzwb7ITadFxvSYPfTCISbXPiXGssOfRbr6pXmI= Subject key identifier: E5:E7:01:6F:E7:D6:DD:F6:A0:9F:E1:FF:6B:5C:FD:3B:43:B2:4F:3E Authority key identifier: 31:BB:73:0B:1B:3F:53:E7:3A:25:74:22:E5:BB:EC:E4:3B:67:7F:E3 Certificate issuer: /CN=31bb730b1b3f53e73a257422e5bbece43b677fe3 Certificate serial: 019AF23F7DE807D31526F5CDC12BE47308C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MbtzCxs_U-c6JXQi5bvs5Dtnf-M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3d93a5-5fbd-402e-ad87-e986904c8d0c/1/MbtzCxs_U-c6JXQi5bvs5Dtnf-M.mft Manifest number: 017C Signing time: Sat 06 Dec 2025 06:00:38 +0000 Manifest this update: Sat 06 Dec 2025 06:00:38 +0000 Manifest next update: Sun 07 Dec 2025 06:00:38 +0000 Files and hashes: 1: MbtzCxs_U-c6JXQi5bvs5Dtnf-M.crl (hash: G0Didcby95akM4mmvGZSydyyHck+/Ho6OmIfXTPvNtk=) 2: R-6gZG6Qkp3ae09ud4PH3JpfB80.roa (hash: BAAGIDlz41luoFtKlUFhcgsonLyEAYtSldgK/GTu16Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3d93a5-5fbd-402e-ad87-e986904c8d0c/1/MbtzCxs_U-c6JXQi5bvs5Dtnf-M.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/3d93a5-5fbd-402e-ad87-e986904c8d0c/1/MbtzCxs_U-c6JXQi5bvs5Dtnf-M.mft rsync://rpki.ripe.net/repository/DEFAULT/MbtzCxs_U-c6JXQi5bvs5Dtnf-M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:7d:e8:07:d3:15:26:f5:cd:c1:2b:e4:73:08:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31bb730b1b3f53e73a257422e5bbece43b677fe3 Validity Not Before: Dec 6 06:00:38 2025 GMT Not After : Dec 7 06:00:38 2025 GMT Subject: CN=e5e7016fe7d6ddf6a09fe1ff6b5cfd3b43b24f3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:48:af:88:f4:35:6d:13:0f:9c:99:71:5d:22: 76:f2:26:63:f2:09:dd:55:07:64:18:2f:07:9f:40: 05:e5:88:53:49:14:13:c7:f8:68:da:db:87:81:3a: 7f:12:8e:f3:05:b6:20:f5:c9:1d:38:cd:5e:0d:bc: 61:c4:74:21:93:39:1e:cf:5f:8e:92:bc:69:29:c1: e6:cb:51:36:57:48:b5:86:f5:a2:02:7e:cc:a0:2b: f9:b5:81:ff:84:c1:17:de:61:a8:44:6e:d1:ca:8a: 5c:d4:2d:6a:ee:bb:8c:33:83:6d:e2:61:1b:92:cf: 1b:41:be:5c:b0:9c:9b:30:c7:a4:1a:61:c2:33:1a: c3:e2:2b:02:c6:bc:b4:63:4e:d4:9a:0c:5d:c3:a3: 4c:42:a9:8d:67:c8:be:b1:d4:68:a0:56:69:95:1e: 5b:ad:29:c7:7b:b2:1b:56:f1:f4:ea:1e:b7:d9:83: f6:bf:4f:c8:06:dd:d1:13:b7:f1:0d:51:aa:2c:7c: 9b:2c:8e:ce:39:1e:35:f9:53:2e:8d:85:06:f6:8f: 30:33:b6:93:26:ed:60:8c:34:79:a4:7a:96:7d:b5: 65:6a:04:d4:15:8f:ce:ac:be:65:31:5b:b0:42:1b: 6f:e4:c1:f8:18:dd:6c:de:cc:07:47:32:97:1d:66: 6f:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:E7:01:6F:E7:D6:DD:F6:A0:9F:E1:FF:6B:5C:FD:3B:43:B2:4F:3E X509v3 Authority Key Identifier: keyid:31:BB:73:0B:1B:3F:53:E7:3A:25:74:22:E5:BB:EC:E4:3B:67:7F:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MbtzCxs_U-c6JXQi5bvs5Dtnf-M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3d93a5-5fbd-402e-ad87-e986904c8d0c/1/MbtzCxs_U-c6JXQi5bvs5Dtnf-M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3d93a5-5fbd-402e-ad87-e986904c8d0c/1/MbtzCxs_U-c6JXQi5bvs5Dtnf-M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:7a:8b:53:f3:35:52:ac:e8:58:33:ba:05:ae:45:34:9f:31: 14:e2:7a:20:c5:7b:03:ca:68:ff:e3:1c:46:23:c3:ed:b0:2b: a3:1c:8d:a8:ae:d4:d7:48:01:fa:2b:71:c0:30:3a:5a:e5:7d: 2a:4a:57:3b:c3:1f:84:7c:0d:f0:cf:72:dc:a0:6e:19:ea:2b: b1:dc:85:f4:49:14:8f:b3:d9:fe:73:cb:69:40:12:77:a9:60: 8d:c4:48:d5:ff:35:5b:b2:69:51:12:f7:ad:91:fa:a4:2c:7b: 25:56:25:31:fb:b9:0b:02:93:bb:06:48:9e:7c:fd:f7:d2:53: f0:0b:90:f5:2c:33:3c:1b:24:96:3c:cf:68:45:9e:04:4c:fd: 62:7b:66:9a:57:40:97:b5:e3:46:e7:3f:07:7f:d9:d7:7b:a2: 21:87:e7:37:9a:71:44:f7:6f:8f:22:02:75:9c:5f:1b:fd:28: 58:19:5f:21:f5:f1:64:2d:94:58:c0:fb:04:ef:b4:89:c6:d3: 63:54:d3:86:2f:65:fd:c5:3a:6f:c7:be:6e:54:7e:f4:78:7a: 1e:47:2e:a0:16:d4:d3:0c:71:0b:7b:ad:bf:27:a1:7f:1a:d0: eb:7e:e0:03:fe:a2:34:50:75:5e:18:75:94:bd:31:ec:53:23: b6:63:89:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP33oB9MVJvXNwSvkcwjIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxYmI3MzBiMWIzZjUzZTczYTI1NzQyMmU1YmJlY2U0M2I2 NzdmZTMwHhcNMjUxMjA2MDYwMDM4WhcNMjUxMjA3MDYwMDM4WjAzMTEwLwYDVQQD EyhlNWU3MDE2ZmU3ZDZkZGY2YTA5ZmUxZmY2YjVjZmQzYjQzYjI0ZjNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA30iviPQ1bRMPnJlxXSJ28iZj8gnd VQdkGC8Hn0AF5YhTSRQTx/ho2tuHgTp/Eo7zBbYg9ckdOM1eDbxhxHQhkzkez1+O krxpKcHmy1E2V0i1hvWiAn7MoCv5tYH/hMEX3mGoRG7Ryopc1C1q7ruMM4Nt4mEb ks8bQb5csJybMMekGmHCMxrD4isCxry0Y07Umgxdw6NMQqmNZ8i+sdRooFZplR5b rSnHe7IbVvH06h632YP2v0/IBt3RE7fxDVGqLHybLI7OOR41+VMujYUG9o8wM7aT Ju1gjDR5pHqWfbVlagTUFY/OrL5lMVuwQhtv5MH4GN1s3swHRzKXHWZvLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOXnAW/n1t32oJ/h/2tc/TtDsk8+MB8GA1UdIwQY MBaAFDG7cwsbP1PnOiV0IuW77OQ7Z3/jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWJ0ekN4c19VLWM2SlhRaTVidnM1RHRuZi1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zZDkzYTUtNWZiZC00MDJlLWFkODct ZTk4NjkwNGM4ZDBjLzEvTWJ0ekN4c19VLWM2SlhRaTVidnM1RHRuZi1NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8zZDkzYTUtNWZiZC00MDJlLWFkODctZTk4NjkwNGM4ZDBj LzEvTWJ0ekN4c19VLWM2SlhRaTVidnM1RHRuZi1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYnqLU/M1 UqzoWDO6Ba5FNJ8xFOJ6IMV7A8po/+McRiPD7bAroxyNqK7U10gB+itxwDA6WuV9 KkpXO8MfhHwN8M9y3KBuGeorsdyF9EkUj7PZ/nPLaUASd6lgjcRI1f81W7JpURL3 rZH6pCx7JVYlMfu5CwKTuwZInnz999JT8AuQ9SwzPBskljzPaEWeBEz9YntmmldA l7XjRuc/B3/Z13uiIYfnN5pxRPdvjyICdZxfG/0oWBlfIfXxZC2UWMD7BO+0icbT Y1TThi9l/cU6b8e+blR+9Hh6HkcuoBbU0wxxC3utvyehfxrQ637gA/6iNFB1Xhh1 lL0x7FMjtmOJIw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:01:42 2025 by rpki-client