This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft File: mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft (raw, json) Hash identifier: i+J0qYbqXSkaijTOKe8/dSyLnZJ3uhej60KcH1yFZUM= Subject key identifier: D1:E6:C4:56:F0:C8:B6:31:2B:72:D3:57:C9:C6:96:B0:64:0E:B6:DC Authority key identifier: 9A:B6:E9:B9:33:BD:0C:C9:0C:59:92:44:6F:8A:C8:47:26:91:6B:1A Certificate issuer: /CN=9ab6e9b933bd0cc90c5992446f8ac84726916b1a Certificate serial: 019AF6533B58CD141A12A70E23F51601E6C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mrbpuTO9DMkMWZJEb4rIRyaRaxo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft Manifest number: 0D91 Signing time: Sun 07 Dec 2025 01:00:40 +0000 Manifest this update: Sun 07 Dec 2025 01:00:40 +0000 Manifest next update: Mon 08 Dec 2025 01:00:40 +0000 Files and hashes: 1: bm8ink1EnYeZoE7eF0O4NwMqDE8.roa (hash: ybm88hkKSlN5zUNNYgkBe2I5P6bnL+MMj8/tMIJfo60=) 2: mrbpuTO9DMkMWZJEb4rIRyaRaxo.crl (hash: HvoIHVpDgfm6Dc1W86zIrnYByqVRKb6T+829Pr3ueLM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.crl rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft rsync://rpki.ripe.net/repository/DEFAULT/mrbpuTO9DMkMWZJEb4rIRyaRaxo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:53:3b:58:cd:14:1a:12:a7:0e:23:f5:16:01:e6:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab6e9b933bd0cc90c5992446f8ac84726916b1a Validity Not Before: Dec 7 01:00:40 2025 GMT Not After : Dec 8 01:00:40 2025 GMT Subject: CN=d1e6c456f0c8b6312b72d357c9c696b0640eb6dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b8:55:cc:d6:be:33:fc:8a:f8:28:a1:f0:82: 74:c6:4b:18:d3:95:4c:8d:cb:39:d8:27:0a:a0:e1: d7:9a:aa:e4:e6:f1:d7:57:29:9b:70:05:22:ed:0e: 63:7c:95:a2:25:93:71:9e:f4:ab:29:b3:67:6c:c5: 84:f5:60:bd:12:55:d0:1b:cc:d1:71:87:9d:07:58: 8f:34:90:fe:2e:d8:34:cd:8b:f0:d4:22:ef:c3:6a: 99:2e:59:a8:f6:d8:d4:39:e1:77:75:c2:34:fa:a0: 39:4c:e5:36:86:60:a6:63:08:fa:01:ad:1c:cc:75: 0b:7a:d3:77:6e:7f:ee:a8:86:9f:17:67:36:0b:9f: 50:23:7d:de:72:a7:22:6b:59:ea:07:f5:3d:9a:e7: 0c:c7:6f:3f:60:d8:e4:55:cb:ae:c7:61:6a:4e:d0: 66:30:ec:63:63:c3:3d:4a:89:39:fc:1a:32:be:30: f3:0d:6d:bd:2b:8b:b5:ba:9c:e0:e3:10:8d:20:4a: 35:3c:35:70:d1:37:db:ec:a9:cd:b9:f5:90:cb:cd: a6:e7:ef:38:46:28:b6:67:ef:f3:88:2a:f5:f5:59: 45:ae:68:cb:a4:28:fd:36:e0:d7:2a:b5:a3:78:0a: ff:e6:72:9e:1a:8a:bb:25:a0:e1:6b:3b:c9:e0:bc: 39:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:E6:C4:56:F0:C8:B6:31:2B:72:D3:57:C9:C6:96:B0:64:0E:B6:DC X509v3 Authority Key Identifier: keyid:9A:B6:E9:B9:33:BD:0C:C9:0C:59:92:44:6F:8A:C8:47:26:91:6B:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mrbpuTO9DMkMWZJEb4rIRyaRaxo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:76:19:61:44:6b:b7:f8:c6:c5:c8:55:ef:e6:d9:91:c9:fe: ef:14:72:76:65:af:98:59:d0:1c:8a:6f:a6:70:56:6d:55:57: 24:e3:c4:b7:cf:1e:3e:13:fe:e9:d2:97:f8:ee:fb:35:09:01: 86:c0:be:df:0f:49:22:62:af:47:9b:41:c3:9f:6c:74:52:5f: bf:1b:80:08:d2:03:88:7c:07:94:b4:ad:3c:0a:a9:1f:a9:46: 58:b0:0a:c5:e9:82:4e:8f:54:e0:9a:77:d2:07:1c:e2:8a:a9: 13:a6:b1:e3:94:5a:b6:89:a5:1b:2a:c0:af:ef:e0:09:b7:1a: 62:49:b4:c8:44:6a:2f:87:ce:b2:37:45:f4:fb:fe:89:18:fc: 99:3b:b0:56:a4:3b:35:ba:65:11:cf:f4:2d:57:98:41:ac:09: 5b:6d:b3:54:fb:aa:52:6d:ba:85:d0:94:e8:1f:84:0d:28:72: 81:fa:09:39:9b:ca:05:16:dc:97:bd:0d:78:49:3a:93:59:82: 69:6e:a7:9a:39:b3:0e:20:e9:a6:fe:2e:54:06:10:76:84:68: ae:dc:09:4a:3f:09:cb:17:1d:20:6d:98:5e:02:5b:65:65:fa: 9c:6a:6f:c8:01:88:b0:5d:90:d0:f2:ef:4b:85:a9:f3:85:6b: c4:50:02:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2UztYzRQaEqcOI/UWAebIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhYjZlOWI5MzNiZDBjYzkwYzU5OTI0NDZmOGFjODQ3MjY5 MTZiMWEwHhcNMjUxMjA3MDEwMDQwWhcNMjUxMjA4MDEwMDQwWjAzMTEwLwYDVQQD EyhkMWU2YzQ1NmYwYzhiNjMxMmI3MmQzNTdjOWM2OTZiMDY0MGViNmRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7hVzNa+M/yK+Cih8IJ0xksY05VM jcs52CcKoOHXmqrk5vHXVymbcAUi7Q5jfJWiJZNxnvSrKbNnbMWE9WC9ElXQG8zR cYedB1iPNJD+Ltg0zYvw1CLvw2qZLlmo9tjUOeF3dcI0+qA5TOU2hmCmYwj6Aa0c zHULetN3bn/uqIafF2c2C59QI33ecqcia1nqB/U9mucMx28/YNjkVcuux2FqTtBm MOxjY8M9Sok5/BoyvjDzDW29K4u1upzg4xCNIEo1PDVw0Tfb7KnNufWQy82m5+84 Rii2Z+/ziCr19VlFrmjLpCj9NuDXKrWjeAr/5nKeGoq7JaDhazvJ4Lw5hwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNHmxFbwyLYxK3LTV8nGlrBkDrbcMB8GA1UdIwQY MBaAFJq26bkzvQzJDFmSRG+KyEcmkWsaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXJicHVUTzlETWtNV1pKRWI0cklSeWFSYXhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9hNDQ0N2MtNGNmMi00MWNhLTg4NTEt NDFhY2UxOTU4MDNhLzEvbXJicHVUTzlETWtNV1pKRWI0cklSeWFSYXhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi9hNDQ0N2MtNGNmMi00MWNhLTg4NTEtNDFhY2UxOTU4MDNh LzEvbXJicHVUTzlETWtNV1pKRWI0cklSeWFSYXhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKXYZYURr t/jGxchV7+bZkcn+7xRydmWvmFnQHIpvpnBWbVVXJOPEt88ePhP+6dKX+O77NQkB hsC+3w9JImKvR5tBw59sdFJfvxuACNIDiHwHlLStPAqpH6lGWLAKxemCTo9U4Jp3 0gcc4oqpE6ax45RatomlGyrAr+/gCbcaYkm0yERqL4fOsjdF9Pv+iRj8mTuwVqQ7 NbplEc/0LVeYQawJW22zVPuqUm26hdCU6B+EDShygfoJOZvKBRbcl70NeEk6k1mC aW6nmjmzDiDppv4uVAYQdoRortwJSj8JyxcdIG2YXgJbZWX6nGpvyAGIsF2Q0PLv S4Wp84VrxFACuA== -----END CERTIFICATE-----Generated at Sun Dec 7 04:57:42 2025 by rpki-client