This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.mft File: MBlcO7BQWGtfTlAEEYAHxIs06uU.mft (raw, json) Hash identifier: NaI+V0rd2z030CAJQebFTC8L/Lfs5EVFkgcv2BXDbMs= Subject key identifier: EA:BD:05:B5:B4:DF:B2:D4:A7:BF:F3:5D:BF:DD:9A:DD:D0:34:18:52 Authority key identifier: 30:19:5C:3B:B0:50:58:6B:5F:4E:50:04:11:80:07:C4:8B:34:EA:E5 Certificate issuer: /CN=30195c3bb050586b5f4e5004118007c48b34eae5 Certificate serial: 019AF2AD71A03CE7926718B0AA8A0F6F8B99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MBlcO7BQWGtfTlAEEYAHxIs06uU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 08:00:44 +0000 Manifest this update: Sat 06 Dec 2025 08:00:44 +0000 Manifest next update: Sun 07 Dec 2025 08:00:44 +0000 Files and hashes: 1: FVoKa0hbyicRxj9T5QoKnrF-IQk.roa (hash: PJKMkHGyKfQ7AHpH2DcIDSD5neBvRyes+CMY82lEecA=) 2: MBlcO7BQWGtfTlAEEYAHxIs06uU.crl (hash: VN/RDSOaubhst4RbU0y0IRbBJzrSvjdCAqlsiMGAcUM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.crl rsync://rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.mft rsync://rpki.ripe.net/repository/DEFAULT/MBlcO7BQWGtfTlAEEYAHxIs06uU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:71:a0:3c:e7:92:67:18:b0:aa:8a:0f:6f:8b:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30195c3bb050586b5f4e5004118007c48b34eae5 Validity Not Before: Dec 6 08:00:44 2025 GMT Not After : Dec 7 08:00:44 2025 GMT Subject: CN=eabd05b5b4dfb2d4a7bff35dbfdd9addd0341852 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f6:9d:db:21:de:95:52:7a:27:43:3c:70:0d: 33:5e:d3:e7:f1:2d:80:cd:f4:74:a4:71:2e:90:81: db:bd:36:21:d9:be:9d:73:28:ca:fa:86:93:d4:ba: 8d:34:b1:26:0c:3d:a3:c5:8b:b3:a5:7e:11:c7:6d: a4:68:72:3e:73:5a:2e:b5:a8:54:a9:33:66:33:57: bc:1e:c2:05:27:80:e2:9a:1b:58:0f:a2:10:61:ad: 06:17:56:ec:36:f4:7f:60:87:49:b4:cf:57:19:4e: da:12:9c:72:c6:96:88:bc:cc:df:63:fe:5e:2a:e5: 76:09:6a:e8:8f:a1:0b:9c:48:b9:17:d5:fe:10:d4: 32:4c:34:c6:97:f3:f0:50:e0:11:3c:72:71:06:79: f0:68:ee:e3:f1:60:ba:5e:23:0a:20:4d:60:3f:ab: 44:a4:b1:31:71:1d:21:4a:22:94:cd:53:09:2f:f0: 61:c8:ff:35:c0:82:6f:38:96:79:d3:56:60:4f:9a: 45:31:a1:5b:71:d5:bf:35:f8:cb:b0:34:07:67:59: 94:96:7a:c1:0f:e2:4c:b7:45:fc:50:e0:fc:86:d9: e5:e9:0a:ca:35:4e:32:12:d6:71:46:b8:43:9f:d4: e0:64:4f:c0:22:21:c1:2f:67:dd:88:d5:4e:ff:47: 30:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:BD:05:B5:B4:DF:B2:D4:A7:BF:F3:5D:BF:DD:9A:DD:D0:34:18:52 X509v3 Authority Key Identifier: keyid:30:19:5C:3B:B0:50:58:6B:5F:4E:50:04:11:80:07:C4:8B:34:EA:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBlcO7BQWGtfTlAEEYAHxIs06uU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:b3:ff:63:5a:6b:a7:31:08:f2:89:8d:e0:ee:b3:db:1c:54: 32:a8:61:70:7c:92:57:07:63:80:47:ac:74:22:af:4b:48:9b: 58:e7:e4:84:ca:01:ae:94:95:e6:c5:59:58:d5:cf:7f:6c:29: 5b:8b:c8:a6:94:1a:09:17:e9:af:2c:86:c2:5f:14:81:48:40: 65:c4:c8:fb:46:ed:2f:cd:13:c0:2d:e1:b6:a6:5b:d8:fb:78: a5:65:6a:8b:5e:0e:8c:10:49:c3:5a:0a:aa:aa:95:85:c5:70: 35:e4:83:ab:04:8f:f9:08:67:83:71:98:c5:d9:f8:98:45:c5: 6d:3a:3d:23:c5:46:17:1a:3b:4d:1a:ac:bc:b7:f8:e1:0f:6d: e5:6e:b3:0a:15:88:7c:39:0a:50:16:d0:49:f0:4f:75:30:48: d3:05:45:82:fd:0e:50:3b:bf:ba:39:51:7c:8e:00:ed:1f:f2: 94:d3:4d:93:20:5b:8f:04:da:c2:34:5f:cb:0b:d4:d7:a2:ac: 98:30:cb:7f:e9:e5:1d:08:a2:ea:95:f3:d4:a0:e0:e9:22:76: 88:d2:fa:5e:d9:74:59:32:31:61:03:be:b1:97:16:28:d9:30: e5:c8:43:15:1e:5d:20:3c:36:a7:f7:a7:60:bf:ce:f4:c1:a8: dd:3b:73:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrXGgPOeSZxiwqooPb4uZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwMTk1YzNiYjA1MDU4NmI1ZjRlNTAwNDExODAwN2M0OGIz NGVhZTUwHhcNMjUxMjA2MDgwMDQ0WhcNMjUxMjA3MDgwMDQ0WjAzMTEwLwYDVQQD EyhlYWJkMDViNWI0ZGZiMmQ0YTdiZmYzNWRiZmRkOWFkZGQwMzQxODUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPad2yHelVJ6J0M8cA0zXtPn8S2A zfR0pHEukIHbvTYh2b6dcyjK+oaT1LqNNLEmDD2jxYuzpX4Rx22kaHI+c1outahU qTNmM1e8HsIFJ4DimhtYD6IQYa0GF1bsNvR/YIdJtM9XGU7aEpxyxpaIvMzfY/5e KuV2CWroj6ELnEi5F9X+ENQyTDTGl/PwUOARPHJxBnnwaO7j8WC6XiMKIE1gP6tE pLExcR0hSiKUzVMJL/BhyP81wIJvOJZ501ZgT5pFMaFbcdW/NfjLsDQHZ1mUlnrB D+JMt0X8UOD8htnl6QrKNU4yEtZxRrhDn9TgZE/AIiHBL2fdiNVO/0cwnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOq9BbW037LUp7/zXb/dmt3QNBhSMB8GA1UdIwQY MBaAFDAZXDuwUFhrX05QBBGAB8SLNOrlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUJsY083QlFXR3RmVGxBRUVZQUh4SXMwNnVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9jNzYyNzUtZDhkYS00NTIzLTgzYWQt YjQyMWMzOGIyZjdmLzEvTUJsY083QlFXR3RmVGxBRUVZQUh4SXMwNnVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9jNzYyNzUtZDhkYS00NTIzLTgzYWQtYjQyMWMzOGIyZjdm LzEvTUJsY083QlFXR3RmVGxBRUVZQUh4SXMwNnVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAarP/Y1pr pzEI8omN4O6z2xxUMqhhcHySVwdjgEesdCKvS0ibWOfkhMoBrpSV5sVZWNXPf2wp W4vIppQaCRfpryyGwl8UgUhAZcTI+0btL80TwC3htqZb2Pt4pWVqi14OjBBJw1oK qqqVhcVwNeSDqwSP+Qhng3GYxdn4mEXFbTo9I8VGFxo7TRqsvLf44Q9t5W6zChWI fDkKUBbQSfBPdTBI0wVFgv0OUDu/ujlRfI4A7R/ylNNNkyBbjwTawjRfywvU16Ks mDDLf+nlHQii6pXz1KDg6SJ2iNL6Xtl0WTIxYQO+sZcWKNkw5chDFR5dIDw2p/en YL/O9MGo3TtzXQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:32:32 2025 by rpki-client