This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/cf8f99-e581-4f5f-875f-df4e8c7364fe/1/MJbXr7uKXjFaXEiazqfct1qmXQQ.mft File: MJbXr7uKXjFaXEiazqfct1qmXQQ.mft (raw, json) Hash identifier: aNDy6zRZ+wnwi4xaoc/Ax2pv/IBRP1QPp2aTEUOLXzU= Subject key identifier: DB:48:3B:5B:17:F0:A0:CB:7B:F5:86:2B:1B:B9:72:AC:23:38:E8:CB Authority key identifier: 30:96:D7:AF:BB:8A:5E:31:5A:5C:48:9A:CE:A7:DC:B7:5A:A6:5D:04 Certificate issuer: /CN=3096d7afbb8a5e315a5c489acea7dcb75aa65d04 Certificate serial: 019AF50A36D4075CA4E5EE0FD68466E78590 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MJbXr7uKXjFaXEiazqfct1qmXQQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/cf8f99-e581-4f5f-875f-df4e8c7364fe/1/MJbXr7uKXjFaXEiazqfct1qmXQQ.mft Manifest number: 176D Signing time: Sat 06 Dec 2025 19:01:18 +0000 Manifest this update: Sat 06 Dec 2025 19:01:18 +0000 Manifest next update: Sun 07 Dec 2025 19:01:18 +0000 Files and hashes: 1: MJbXr7uKXjFaXEiazqfct1qmXQQ.crl (hash: RNygPm0kWaqzz9mv4bx5raA22ixzwQnZQya5GIij9R0=) 2: a9vur_G-Sv_-WDNvoaN6FO-mp_Q.roa (hash: 5mLv65w3uElW3I7UtSlBFzQFnR6wfzkGH2z+n02Go3s=) 3: ckPg9sFMxT2re8tM8nExJep_9Qs.roa (hash: DU25ajodIpeW2jQoXz2wnkJ8CRhq6NHvl6w7hFsUi60=) 4: yFSjMkcgtQ4jugHf3jpWTH9Nbv0.roa (hash: hqHHntvNx6acptoTgy50EVxfDKrmw52pRvx+yFRJ3nc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/cf8f99-e581-4f5f-875f-df4e8c7364fe/1/MJbXr7uKXjFaXEiazqfct1qmXQQ.crl rsync://rpki.ripe.net/repository/DEFAULT/74/cf8f99-e581-4f5f-875f-df4e8c7364fe/1/MJbXr7uKXjFaXEiazqfct1qmXQQ.mft rsync://rpki.ripe.net/repository/DEFAULT/MJbXr7uKXjFaXEiazqfct1qmXQQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:36:d4:07:5c:a4:e5:ee:0f:d6:84:66:e7:85:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3096d7afbb8a5e315a5c489acea7dcb75aa65d04 Validity Not Before: Dec 6 19:01:18 2025 GMT Not After : Dec 7 19:01:18 2025 GMT Subject: CN=db483b5b17f0a0cb7bf5862b1bb972ac2338e8cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:98:c4:39:ee:63:5f:27:f4:79:d0:d9:e8:74: 14:e0:35:f6:09:a0:57:f1:87:4b:01:5e:f2:8a:6f: 7a:de:2f:a6:91:9f:44:2a:60:f3:01:25:fe:32:37: 4d:b8:d1:11:66:50:e7:8e:e6:26:13:02:7e:60:11: 10:f9:3c:45:ee:20:d7:bc:e5:78:9b:d4:f0:87:19: 69:d3:e3:26:29:eb:1f:ab:0a:67:6e:58:0d:e5:37: 3d:99:ec:c9:ad:87:6e:13:8f:3a:c3:5e:20:8c:2f: 4b:df:e4:48:ab:90:fb:2a:68:47:94:dd:6a:2e:c0: 3b:37:e3:0b:56:c2:ad:86:a8:d9:5e:3e:f7:6f:f6: 5c:63:7f:fd:36:97:a4:c8:4e:de:da:20:70:bc:b3: b6:a0:50:08:cd:18:39:34:bf:37:77:69:44:31:04: 9f:c4:a7:87:5f:f2:8a:00:a5:da:0c:be:95:11:9b: fb:7b:dc:00:32:9e:a8:5b:5d:9c:c7:1f:74:11:5c: db:5a:4f:61:88:2d:29:43:5f:d7:0f:6e:4a:d5:91: 88:36:b2:f0:4c:d8:67:49:90:d9:a6:9b:36:4e:b4: 39:21:c6:cd:6e:62:63:c2:86:b5:ba:cf:90:29:33: e5:24:db:c3:59:91:38:6d:2e:1c:33:92:09:fc:6a: 8b:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:48:3B:5B:17:F0:A0:CB:7B:F5:86:2B:1B:B9:72:AC:23:38:E8:CB X509v3 Authority Key Identifier: keyid:30:96:D7:AF:BB:8A:5E:31:5A:5C:48:9A:CE:A7:DC:B7:5A:A6:5D:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MJbXr7uKXjFaXEiazqfct1qmXQQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/cf8f99-e581-4f5f-875f-df4e8c7364fe/1/MJbXr7uKXjFaXEiazqfct1qmXQQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/cf8f99-e581-4f5f-875f-df4e8c7364fe/1/MJbXr7uKXjFaXEiazqfct1qmXQQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:1a:1b:7f:0c:7f:36:37:87:7a:bf:6d:7f:15:93:ae:f4:b8: 77:c2:0a:f7:74:c5:d0:44:cd:b8:87:09:3b:fd:9f:27:a4:d0: 14:6a:10:a9:c7:8c:8f:f8:7b:c6:24:ed:7d:a1:99:2e:c5:e4: 6b:22:15:4c:70:30:c0:52:43:01:e5:b8:28:b5:55:d4:6a:d3: 19:31:38:8e:58:ea:f5:43:c5:89:d0:85:d6:7f:f0:8b:55:00: 7d:35:fe:91:7e:cc:b4:3b:28:50:f8:c8:39:e9:ee:b0:0a:c2: 8b:81:6a:03:67:79:2f:3f:09:5c:93:ff:38:06:cc:ec:e3:60: b7:c4:80:e4:bb:47:ad:b3:f3:62:3b:fa:fd:4a:07:1e:70:c7: 3d:51:74:c8:09:54:65:ae:e7:e6:b1:c3:56:b7:53:92:d9:e7: 03:0c:b7:66:d2:03:24:9f:16:c8:ac:89:71:d4:1a:48:6a:8d: e5:c1:54:a5:42:ca:29:23:a7:41:3a:a0:3b:69:be:a6:14:c8: b0:a9:fc:33:14:f9:b2:97:b5:6c:68:ed:3b:ed:5a:e2:7b:ed: 4b:3f:26:58:98:48:5a:ce:58:86:fc:ca:18:06:a6:b1:8b:c6: 5e:04:8e:d7:2d:f1:f6:49:c7:57:e2:24:62:55:65:df:ae:9a: 42:97:28:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CjbUB1yk5e4P1oRm54WQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwOTZkN2FmYmI4YTVlMzE1YTVjNDg5YWNlYTdkY2I3NWFh NjVkMDQwHhcNMjUxMjA2MTkwMTE4WhcNMjUxMjA3MTkwMTE4WjAzMTEwLwYDVQQD EyhkYjQ4M2I1YjE3ZjBhMGNiN2JmNTg2MmIxYmI5NzJhYzIzMzhlOGNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJjEOe5jXyf0edDZ6HQU4DX2CaBX 8YdLAV7yim963i+mkZ9EKmDzASX+MjdNuNERZlDnjuYmEwJ+YBEQ+TxF7iDXvOV4 m9Twhxlp0+MmKesfqwpnblgN5Tc9mezJrYduE486w14gjC9L3+RIq5D7KmhHlN1q LsA7N+MLVsKthqjZXj73b/ZcY3/9NpekyE7e2iBwvLO2oFAIzRg5NL83d2lEMQSf xKeHX/KKAKXaDL6VEZv7e9wAMp6oW12cxx90EVzbWk9hiC0pQ1/XD25K1ZGINrLw TNhnSZDZpps2TrQ5IcbNbmJjwoa1us+QKTPlJNvDWZE4bS4cM5IJ/GqLcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNtIO1sX8KDLe/WGKxu5cqwjOOjLMB8GA1UdIwQY MBaAFDCW16+7il4xWlxIms6n3Ldapl0EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUpiWHI3dUtYakZhWEVpYXpxZmN0MXFtWFFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9jZjhmOTktZTU4MS00ZjVmLTg3NWYt ZGY0ZThjNzM2NGZlLzEvTUpiWHI3dUtYakZhWEVpYXpxZmN0MXFtWFFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC9jZjhmOTktZTU4MS00ZjVmLTg3NWYtZGY0ZThjNzM2NGZl LzEvTUpiWHI3dUtYakZhWEVpYXpxZmN0MXFtWFFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASxobfwx/ NjeHer9tfxWTrvS4d8IK93TF0ETNuIcJO/2fJ6TQFGoQqceMj/h7xiTtfaGZLsXk ayIVTHAwwFJDAeW4KLVV1GrTGTE4jljq9UPFidCF1n/wi1UAfTX+kX7MtDsoUPjI OenusArCi4FqA2d5Lz8JXJP/OAbM7ONgt8SA5LtHrbPzYjv6/UoHHnDHPVF0yAlU Za7n5rHDVrdTktnnAwy3ZtIDJJ8WyKyJcdQaSGqN5cFUpULKKSOnQTqgO2m+phTI sKn8MxT5spe1bGjtO+1a4nvtSz8mWJhIWs5YhvzKGAamsYvGXgSO1y3x9knHV+Ik YlVl366aQpco5A== -----END CERTIFICATE-----Generated at Sun Dec 7 03:07:35 2025 by rpki-client