This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.mft File: MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.mft (raw, json) Hash identifier: EcQlwMoYqMcMTkswOnanaMjjvLe7MsxXvlLjgqbdOGk= Subject key identifier: A1:29:74:64:01:E7:F5:A8:3D:C6:35:83:44:A6:D8:DF:9C:C3:F6:02 Authority key identifier: 30:14:B8:C7:F5:09:E1:00:51:B0:CD:29:FD:8D:69:F2:85:50:8D:87 Certificate issuer: /CN=3014b8c7f509e10051b0cd29fd8d69f285508d87 Certificate serial: 019AF276FBB18B80B60C0C5B45FBEE0E2C74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.mft Manifest number: 1465 Signing time: Sat 06 Dec 2025 07:01:15 +0000 Manifest this update: Sat 06 Dec 2025 07:01:15 +0000 Manifest next update: Sun 07 Dec 2025 07:01:15 +0000 Files and hashes: 1: MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.crl (hash: DoqgCvJhxiHh6qtLVHJ9JqX+lT6UWIQrsly2m1J8r4s=) 2: Xd6umzoHHdEiQVdMV3BPecnkdkk.roa (hash: lBwKPo2uZQdPejEMFQzj+SxghwJ68Haky7eMmtLDiQQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.crl rsync://rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.mft rsync://rpki.ripe.net/repository/DEFAULT/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:fb:b1:8b:80:b6:0c:0c:5b:45:fb:ee:0e:2c:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3014b8c7f509e10051b0cd29fd8d69f285508d87 Validity Not Before: Dec 6 07:01:15 2025 GMT Not After : Dec 7 07:01:15 2025 GMT Subject: CN=a129746401e7f5a83dc6358344a6d8df9cc3f602 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:a0:b9:7f:46:a4:5e:e9:fc:96:eb:b0:53:71: b9:38:fc:ae:bc:eb:5f:d2:97:30:4d:15:38:15:b7: f4:31:a2:75:ae:ed:a4:d4:bf:59:2d:60:3e:27:d2: dc:0b:bd:30:7d:ef:b2:2c:00:3c:75:6c:69:90:d0: 3c:a4:55:d4:28:c7:4c:63:51:3a:4c:09:1d:7e:c1: ed:85:be:ce:db:b3:e4:05:17:2f:3d:ec:2e:a7:e1: df:51:de:52:c5:f8:f4:21:25:c3:36:dd:96:d4:23: 38:3b:70:70:d1:5d:f7:dd:55:f4:fe:c7:47:38:78: 4b:68:64:85:a6:b7:03:9d:e1:ab:ac:a5:9c:5e:48: 32:6b:1c:7e:b4:75:42:80:2b:43:63:ac:1c:43:0e: b1:c2:9a:b0:bc:d4:39:7c:9f:2f:e5:67:6a:99:74: a2:1a:fe:1b:a3:76:e4:2f:97:07:f2:40:e8:7d:8a: 94:61:82:75:bd:5c:a1:1d:38:0b:80:3c:38:62:23: 6f:5a:8e:d6:b5:e8:18:2c:90:8d:b6:e9:3c:28:43: c7:30:f5:d0:68:b7:dd:d2:83:6e:a0:67:52:3f:c4: b9:a6:ee:7f:dc:57:04:95:78:b6:b2:27:ac:d9:51: 6e:bf:86:57:05:82:5c:97:52:4d:19:ae:ba:ba:3c: d0:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:29:74:64:01:E7:F5:A8:3D:C6:35:83:44:A6:D8:DF:9C:C3:F6:02 X509v3 Authority Key Identifier: keyid:30:14:B8:C7:F5:09:E1:00:51:B0:CD:29:FD:8D:69:F2:85:50:8D:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:84:72:50:c4:aa:2e:91:87:d5:95:83:03:00:42:ae:52:02: 94:4b:83:78:75:eb:f4:d7:4e:65:79:80:c8:8e:42:65:8e:26: 82:f0:82:be:9c:27:43:15:d2:a2:d8:24:77:ba:58:4f:22:23: 69:bb:28:21:92:ca:40:8c:9f:5f:1a:3c:74:0c:86:7b:c4:d3: bf:91:71:97:ad:2e:bb:a2:e2:34:d0:6b:5c:ac:fe:2d:cc:a8: fd:0d:07:16:4f:91:c6:de:78:68:0c:45:5f:f5:5f:51:06:00: 22:8a:7a:97:87:4e:a6:f1:c9:81:ad:b9:aa:2a:b1:bb:33:bc: 71:7f:81:c3:5d:a7:1b:c6:79:5d:c1:cd:f2:75:a9:bf:da:c2: 5f:3b:f3:6e:06:35:5e:e7:ee:19:7a:11:40:a8:27:2c:da:1d: 8c:e1:f7:2b:c8:ae:92:b6:b1:17:b4:ee:70:e1:38:8a:a2:80: 05:bf:bf:b6:fb:dc:90:5f:4d:63:ab:be:0e:88:48:f3:b4:00: 4f:bf:e0:4f:6b:d7:a6:9e:cc:6e:e7:e7:73:b7:61:ab:d0:f6: 5c:9d:25:76:51:0d:9b:8e:c1:df:72:bc:26:d2:37:d1:fc:2c: f4:2d:25:b5:84:09:de:8d:73:32:ab:70:ca:9f:9e:74:29:2f: ec:bc:f3:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydvuxi4C2DAxbRfvuDix0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwMTRiOGM3ZjUwOWUxMDA1MWIwY2QyOWZkOGQ2OWYyODU1 MDhkODcwHhcNMjUxMjA2MDcwMTE1WhcNMjUxMjA3MDcwMTE1WjAzMTEwLwYDVQQD EyhhMTI5NzQ2NDAxZTdmNWE4M2RjNjM1ODM0NGE2ZDhkZjljYzNmNjAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6qC5f0akXun8luuwU3G5OPyuvOtf 0pcwTRU4Fbf0MaJ1ru2k1L9ZLWA+J9LcC70wfe+yLAA8dWxpkNA8pFXUKMdMY1E6 TAkdfsHthb7O27PkBRcvPewup+HfUd5Sxfj0ISXDNt2W1CM4O3Bw0V333VX0/sdH OHhLaGSFprcDneGrrKWcXkgyaxx+tHVCgCtDY6wcQw6xwpqwvNQ5fJ8v5WdqmXSi Gv4bo3bkL5cH8kDofYqUYYJ1vVyhHTgLgDw4YiNvWo7WtegYLJCNtuk8KEPHMPXQ aLfd0oNuoGdSP8S5pu5/3FcElXi2sies2VFuv4ZXBYJcl1JNGa66ujzQ3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKEpdGQB5/WoPcY1g0Sm2N+cw/YCMB8GA1UdIwQY MBaAFDAUuMf1CeEAUbDNKf2NafKFUI2HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUJTNHhfVUo0UUJSc00wcF9ZMXA4b1ZRalljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni84Yzc5MzUtMmVkYS00M2FjLThkMGYt Nzk5NTI1YmU3MjE1LzEvTUJTNHhfVUo0UUJSc00wcF9ZMXA4b1ZRalljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni84Yzc5MzUtMmVkYS00M2FjLThkMGYtNzk5NTI1YmU3MjE1 LzEvTUJTNHhfVUo0UUJSc00wcF9ZMXA4b1ZRalljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk4RyUMSq LpGH1ZWDAwBCrlIClEuDeHXr9NdOZXmAyI5CZY4mgvCCvpwnQxXSotgkd7pYTyIj absoIZLKQIyfXxo8dAyGe8TTv5Fxl60uu6LiNNBrXKz+Lcyo/Q0HFk+Rxt54aAxF X/VfUQYAIop6l4dOpvHJga25qiqxuzO8cX+Bw12nG8Z5XcHN8nWpv9rCXzvzbgY1 XufuGXoRQKgnLNodjOH3K8iukraxF7TucOE4iqKABb+/tvvckF9NY6u+DohI87QA T7/gT2vXpp7Mbufnc7dhq9D2XJ0ldlENm47B33K8JtI30fws9C0ltYQJ3o1zMqtw yp+edCkv7LzzdQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:31:02 2025 by rpki-client