This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft File: mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft (raw, json) Hash identifier: bp8iauKSDwW4cqwApjYXhNRrQ1gTja956WUs+zr6Mhw= Subject key identifier: BD:51:B5:00:CE:74:B3:3A:5B:DC:25:53:31:B1:F3:CF:DC:B2:46:53 Authority key identifier: 9A:B6:E9:B9:33:BD:0C:C9:0C:59:92:44:6F:8A:C8:47:26:91:6B:1A Certificate issuer: /CN=9ab6e9b933bd0cc90c5992446f8ac84726916b1a Certificate serial: 019B341F8BFDECD3D8C50F466A3978FEB2D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mrbpuTO9DMkMWZJEb4rIRyaRaxo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft Manifest number: 0DB1 Signing time: Fri 19 Dec 2025 01:00:41 +0000 Manifest this update: Fri 19 Dec 2025 01:00:41 +0000 Manifest next update: Sat 20 Dec 2025 01:00:41 +0000 Files and hashes: 1: bm8ink1EnYeZoE7eF0O4NwMqDE8.roa (hash: ybm88hkKSlN5zUNNYgkBe2I5P6bnL+MMj8/tMIJfo60=) 2: mrbpuTO9DMkMWZJEb4rIRyaRaxo.crl (hash: 0WWPNkFG0KFgIo+pprIgTPbpHJSiQ2U3FHXdr0FkGD0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.crl rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft rsync://rpki.ripe.net/repository/DEFAULT/mrbpuTO9DMkMWZJEb4rIRyaRaxo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:1f:8b:fd:ec:d3:d8:c5:0f:46:6a:39:78:fe:b2:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab6e9b933bd0cc90c5992446f8ac84726916b1a Validity Not Before: Dec 19 01:00:41 2025 GMT Not After : Dec 20 01:00:41 2025 GMT Subject: CN=bd51b500ce74b33a5bdc255331b1f3cfdcb24653 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f5:bf:0d:45:74:3e:1a:a7:3d:5c:f1:76:f8: 84:74:8e:ea:6c:6c:ac:33:d3:84:13:73:2c:05:07: 81:59:a7:4a:10:e5:3f:e9:c3:c4:a0:d4:0b:98:3a: b0:e1:39:92:95:69:96:61:23:29:a9:f0:64:6b:55: 0c:58:0a:9b:1f:b0:51:4b:85:33:33:41:3c:e6:ee: 08:6b:eb:dc:28:9b:e0:d0:0e:94:5d:06:d5:33:ee: 46:01:30:ca:5e:1b:7e:d7:98:9b:f1:16:66:ce:2f: f6:22:97:53:b1:91:64:6d:39:76:69:e3:1a:8f:ef: a0:7c:aa:c5:b4:bf:48:91:6f:45:b0:8e:31:fc:fc: d6:20:01:40:13:7a:15:f5:60:e7:7e:6a:a7:95:37: 34:a2:c4:1c:24:8a:ba:1d:a5:b6:79:31:3c:8e:8f: 4f:70:71:b6:19:16:ab:15:8f:d3:b3:3c:ea:91:77: 2f:b8:b5:0e:94:f5:78:cf:f6:c0:ac:62:01:b1:b2: c8:3b:2f:30:e5:da:33:e5:4d:72:db:70:c8:ca:6d: 7d:31:19:f5:5b:a5:29:ce:d4:26:e9:2a:72:69:43: b0:25:ef:00:fa:35:a2:6d:2c:a5:9f:26:4c:c2:ac: 16:1c:dd:37:91:e8:94:eb:9d:53:63:a2:49:61:1a: 51:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:51:B5:00:CE:74:B3:3A:5B:DC:25:53:31:B1:F3:CF:DC:B2:46:53 X509v3 Authority Key Identifier: keyid:9A:B6:E9:B9:33:BD:0C:C9:0C:59:92:44:6F:8A:C8:47:26:91:6B:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mrbpuTO9DMkMWZJEb4rIRyaRaxo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:7d:3c:14:a2:40:05:4d:b6:75:59:66:6b:c2:b0:c1:4a:92: 48:4c:24:d5:cf:2d:7b:f3:79:2b:19:d4:35:bd:9d:d4:28:42: 66:dc:5b:65:67:0a:d0:4d:b7:a0:f8:ea:90:16:69:43:a9:e1: 5c:d0:01:bd:80:9a:5c:bb:8f:8e:65:4f:01:29:61:28:bf:0d: f6:f6:e4:c9:a1:fd:01:e4:2e:64:3f:87:b3:33:b9:40:77:36: ac:fe:a8:27:ef:1d:ff:25:09:8f:09:3d:3d:91:26:59:d4:ad: 9c:9f:59:b4:e1:8f:01:31:d7:c7:23:ef:22:ee:15:21:8a:0c: a5:f4:ad:f9:4c:08:99:e3:52:4f:52:62:fe:6a:19:7d:04:57: fb:01:04:40:17:8f:16:2c:05:48:78:73:07:77:75:12:83:9f: c5:a1:cb:08:a3:19:05:d5:6e:f4:54:ea:ee:45:d1:05:08:9d: d1:1e:8f:fa:37:cd:4e:48:3d:a4:6b:fd:9e:ac:e6:27:48:98: a5:59:a4:ec:57:8e:44:b7:19:59:98:c4:00:41:f3:41:9e:12: a8:df:5f:b3:f9:bd:fa:cf:d2:fa:7d:5c:12:ef:14:be:0d:60: 15:13:4c:a8:40:05:b9:e8:f7:0c:6e:0b:69:90:59:05:80:de: 74:18:58:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0H4v97NPYxQ9Gajl4/rLYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhYjZlOWI5MzNiZDBjYzkwYzU5OTI0NDZmOGFjODQ3MjY5 MTZiMWEwHhcNMjUxMjE5MDEwMDQxWhcNMjUxMjIwMDEwMDQxWjAzMTEwLwYDVQQD EyhiZDUxYjUwMGNlNzRiMzNhNWJkYzI1NTMzMWIxZjNjZmRjYjI0NjUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfW/DUV0PhqnPVzxdviEdI7qbGys M9OEE3MsBQeBWadKEOU/6cPEoNQLmDqw4TmSlWmWYSMpqfBka1UMWAqbH7BRS4Uz M0E85u4Ia+vcKJvg0A6UXQbVM+5GATDKXht+15ib8RZmzi/2IpdTsZFkbTl2aeMa j++gfKrFtL9IkW9FsI4x/PzWIAFAE3oV9WDnfmqnlTc0osQcJIq6HaW2eTE8jo9P cHG2GRarFY/TszzqkXcvuLUOlPV4z/bArGIBsbLIOy8w5doz5U1y23DIym19MRn1 W6UpztQm6SpyaUOwJe8A+jWibSylnyZMwqwWHN03keiU651TY6JJYRpRWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL1RtQDOdLM6W9wlUzGx88/cskZTMB8GA1UdIwQY MBaAFJq26bkzvQzJDFmSRG+KyEcmkWsaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXJicHVUTzlETWtNV1pKRWI0cklSeWFSYXhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9hNDQ0N2MtNGNmMi00MWNhLTg4NTEt NDFhY2UxOTU4MDNhLzEvbXJicHVUTzlETWtNV1pKRWI0cklSeWFSYXhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi9hNDQ0N2MtNGNmMi00MWNhLTg4NTEtNDFhY2UxOTU4MDNh LzEvbXJicHVUTzlETWtNV1pKRWI0cklSeWFSYXhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATX08FKJA BU22dVlma8KwwUqSSEwk1c8te/N5KxnUNb2d1ChCZtxbZWcK0E23oPjqkBZpQ6nh XNABvYCaXLuPjmVPASlhKL8N9vbkyaH9AeQuZD+HszO5QHc2rP6oJ+8d/yUJjwk9 PZEmWdStnJ9ZtOGPATHXxyPvIu4VIYoMpfSt+UwImeNST1Ji/moZfQRX+wEEQBeP FiwFSHhzB3d1EoOfxaHLCKMZBdVu9FTq7kXRBQid0R6P+jfNTkg9pGv9nqzmJ0iY pVmk7FeORLcZWZjEAEHzQZ4SqN9fs/m9+s/S+n1cEu8Uvg1gFRNMqEAFuej3DG4L aZBZBYDedBhYqg== -----END CERTIFICATE-----Generated at Fri Dec 19 06:20:18 2025 by rpki-client