This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/ccdc8f-285d-43b6-8def-4b39fcabc371/1/MBYKH8YoL1eCp6in6g7SBrlEQSM.mft File: MBYKH8YoL1eCp6in6g7SBrlEQSM.mft (raw, json) Hash identifier: 53VwW7uEd8vYQlyOoHXrHA7sBeT9UQ57sDOukL6YsJ0= Subject key identifier: 45:78:E8:62:FE:F1:57:AB:8D:86:AA:A9:8B:FC:A4:A7:2F:E7:3D:3C Authority key identifier: 30:16:0A:1F:C6:28:2F:57:82:A7:A8:A7:EA:0E:D2:06:B9:44:41:23 Certificate issuer: /CN=30160a1fc6282f5782a7a8a7ea0ed206b9444123 Certificate serial: 019AF3897B863739ED6F721AC12EA8B9A3FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MBYKH8YoL1eCp6in6g7SBrlEQSM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/ccdc8f-285d-43b6-8def-4b39fcabc371/1/MBYKH8YoL1eCp6in6g7SBrlEQSM.mft Manifest number: 06B2 Signing time: Sat 06 Dec 2025 12:01:04 +0000 Manifest this update: Sat 06 Dec 2025 12:01:04 +0000 Manifest next update: Sun 07 Dec 2025 12:01:04 +0000 Files and hashes: 1: HB4IhdwJTMbxhpvjbt56qq4pRj4.roa (hash: 9DEHc5XR7sLsTAJDe4PK9ikNGkjNKZGV2LC/PP63QHo=) 2: LyL-vHk5nmQH5BUFL_MLxK_-CMg.roa (hash: x/LQ85Ba6X1diSN88n/xPeBpJxAdwtrVHussR4Eyk+s=) 3: MBYKH8YoL1eCp6in6g7SBrlEQSM.crl (hash: 3wy2wg1HwSoll+SdegVffPjJg/DXfYFMTs9dMPg4HEs=) 4: VAFUCoUK_BVxyNjCRQWaoFAcB9M.roa (hash: vDTV3bo0aODJvLN0QwS2mzTjLvwXVgvjezjkUwqmkNs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/ccdc8f-285d-43b6-8def-4b39fcabc371/1/MBYKH8YoL1eCp6in6g7SBrlEQSM.crl rsync://rpki.ripe.net/repository/DEFAULT/76/ccdc8f-285d-43b6-8def-4b39fcabc371/1/MBYKH8YoL1eCp6in6g7SBrlEQSM.mft rsync://rpki.ripe.net/repository/DEFAULT/MBYKH8YoL1eCp6in6g7SBrlEQSM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:7b:86:37:39:ed:6f:72:1a:c1:2e:a8:b9:a3:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30160a1fc6282f5782a7a8a7ea0ed206b9444123 Validity Not Before: Dec 6 12:01:04 2025 GMT Not After : Dec 7 12:01:04 2025 GMT Subject: CN=4578e862fef157ab8d86aaa98bfca4a72fe73d3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:66:82:c8:e5:74:0f:16:60:5c:e1:21:15:38: c2:b4:c6:f3:8b:fd:fe:e1:c2:e1:a3:2d:8c:b4:22: 15:0d:30:5d:e4:da:a0:43:e9:c9:39:b9:90:b7:f3: 11:34:b5:88:2f:bd:62:b4:7b:cd:28:fa:0c:e4:6e: 4e:b6:2c:9f:84:82:c5:7e:f4:ec:56:16:82:35:4a: 3c:45:b0:41:ad:35:c2:ee:cf:6f:50:c2:c5:d8:d8: d7:3f:81:96:14:33:e1:87:81:80:42:d6:89:04:0b: 41:13:2c:d2:b0:3e:aa:bc:68:34:3d:43:7b:53:79: 5e:5b:31:0d:8b:3e:44:d6:34:87:7d:5f:da:e2:77: c6:7e:76:0c:b1:00:f2:91:39:6c:1a:98:d2:3b:7a: c9:bd:f7:e2:90:eb:88:6d:32:7b:a1:f4:13:99:dc: 67:63:d5:81:85:72:62:d4:5f:2d:e5:ac:af:36:a1: 42:9d:ce:51:b9:6e:25:9e:83:51:08:aa:63:c3:44: 2e:e5:b5:dc:3b:26:69:ad:4b:eb:a6:e3:95:1f:dd: 7d:f8:a5:76:14:bb:28:94:b7:02:46:f2:2b:c8:80: ea:17:0d:88:c1:57:0e:fa:5a:e7:ea:da:1a:dc:25: 93:0f:4a:b9:63:06:79:14:e3:c6:1b:81:38:7e:96: ab:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:78:E8:62:FE:F1:57:AB:8D:86:AA:A9:8B:FC:A4:A7:2F:E7:3D:3C X509v3 Authority Key Identifier: keyid:30:16:0A:1F:C6:28:2F:57:82:A7:A8:A7:EA:0E:D2:06:B9:44:41:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBYKH8YoL1eCp6in6g7SBrlEQSM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/ccdc8f-285d-43b6-8def-4b39fcabc371/1/MBYKH8YoL1eCp6in6g7SBrlEQSM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/ccdc8f-285d-43b6-8def-4b39fcabc371/1/MBYKH8YoL1eCp6in6g7SBrlEQSM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:94:57:e7:91:21:e8:e9:68:3e:4a:3c:e2:f7:52:7b:9c:5b: 06:6a:8b:33:d7:db:ff:9f:77:0c:cd:47:57:37:6e:a2:26:56: d9:a3:cf:4d:fb:86:c8:d7:49:55:29:5a:93:b8:ef:58:7d:76: 10:b8:75:ee:c1:d1:75:71:b7:66:c2:73:1a:88:c0:2b:e4:34: b1:ae:9e:ce:39:a7:3a:91:67:a8:33:c2:e8:66:cd:82:3a:be: ca:b7:84:2c:24:20:73:f1:64:27:e7:28:63:24:a4:ae:70:81: 94:0d:1a:03:bf:49:2f:27:0f:3a:c7:fc:2c:69:97:61:5e:4e: c4:fa:7a:34:bf:34:87:d3:78:e3:df:78:1c:5d:0e:34:6b:4f: 76:2a:db:0e:0c:43:ad:da:ad:b0:28:02:e7:36:23:48:60:1f: f9:60:37:bc:2f:99:11:f3:35:82:23:fa:e6:2b:73:f8:5b:e6: 47:72:97:1c:95:cb:3a:b3:df:47:97:b6:af:23:e8:8e:5d:e0: 33:96:c2:e6:18:88:94:b3:53:e1:c2:a7:29:39:60:38:8b:5c: 65:fa:90:62:f0:a6:ac:35:0f:20:93:45:81:ff:a3:af:90:a2: 7d:4c:d7:c4:a7:77:fa:63:01:53:19:5c:17:9d:79:ee:ca:0f: 98:df:33:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziXuGNzntb3IawS6ouaP9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwMTYwYTFmYzYyODJmNTc4MmE3YThhN2VhMGVkMjA2Yjk0 NDQxMjMwHhcNMjUxMjA2MTIwMTA0WhcNMjUxMjA3MTIwMTA0WjAzMTEwLwYDVQQD Eyg0NTc4ZTg2MmZlZjE1N2FiOGQ4NmFhYTk4YmZjYTRhNzJmZTczZDNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmaCyOV0DxZgXOEhFTjCtMbzi/3+ 4cLhoy2MtCIVDTBd5NqgQ+nJObmQt/MRNLWIL71itHvNKPoM5G5OtiyfhILFfvTs VhaCNUo8RbBBrTXC7s9vUMLF2NjXP4GWFDPhh4GAQtaJBAtBEyzSsD6qvGg0PUN7 U3leWzENiz5E1jSHfV/a4nfGfnYMsQDykTlsGpjSO3rJvffikOuIbTJ7ofQTmdxn Y9WBhXJi1F8t5ayvNqFCnc5RuW4lnoNRCKpjw0Qu5bXcOyZprUvrpuOVH919+KV2 FLsolLcCRvIryIDqFw2IwVcO+lrn6toa3CWTD0q5YwZ5FOPGG4E4fparuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEV46GL+8VerjYaqqYv8pKcv5z08MB8GA1UdIwQY MBaAFDAWCh/GKC9Xgqeop+oO0ga5REEjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUJZS0g4WW9MMWVDcDZpbjZnN1NCcmxFUVNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni9jY2RjOGYtMjg1ZC00M2I2LThkZWYt NGIzOWZjYWJjMzcxLzEvTUJZS0g4WW9MMWVDcDZpbjZnN1NCcmxFUVNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni9jY2RjOGYtMjg1ZC00M2I2LThkZWYtNGIzOWZjYWJjMzcx LzEvTUJZS0g4WW9MMWVDcDZpbjZnN1NCcmxFUVNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ5RX55Eh 6OloPko84vdSe5xbBmqLM9fb/593DM1HVzduoiZW2aPPTfuGyNdJVSlak7jvWH12 ELh17sHRdXG3ZsJzGojAK+Q0sa6ezjmnOpFnqDPC6GbNgjq+yreELCQgc/FkJ+co YySkrnCBlA0aA79JLycPOsf8LGmXYV5OxPp6NL80h9N44994HF0ONGtPdirbDgxD rdqtsCgC5zYjSGAf+WA3vC+ZEfM1giP65itz+FvmR3KXHJXLOrPfR5e2ryPojl3g M5bC5hiIlLNT4cKnKTlgOItcZfqQYvCmrDUPIJNFgf+jr5CifUzXxKd3+mMBUxlc F5157soPmN8zKw== -----END CERTIFICATE-----Generated at Sat Dec 6 16:58:04 2025 by rpki-client