This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/ecbe01-18ab-4fbd-9dc3-bcd52da15644/1/MbXwrK42UqU8caB0ojR6tvF_0_g.mft File: MbXwrK42UqU8caB0ojR6tvF_0_g.mft (raw, json) Hash identifier: 9osirrFmPzjjG4DBx0svLf5ioxdEBnN5sahah5+/4VU= Subject key identifier: FE:32:DC:3B:2C:1F:D5:55:1B:A9:76:B7:E2:5B:F5:9B:12:71:54:8C Authority key identifier: 31:B5:F0:AC:AE:36:52:A5:3C:71:A0:74:A2:34:7A:B6:F1:7F:D3:F8 Certificate issuer: /CN=31b5f0acae3652a53c71a074a2347ab6f17fd3f8 Certificate serial: 019AF3F7FB68C054F5FAC3ADC6B1A99705AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MbXwrK42UqU8caB0ojR6tvF_0_g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/ecbe01-18ab-4fbd-9dc3-bcd52da15644/1/MbXwrK42UqU8caB0ojR6tvF_0_g.mft Manifest number: 16EE Signing time: Sat 06 Dec 2025 14:01:46 +0000 Manifest this update: Sat 06 Dec 2025 14:01:46 +0000 Manifest next update: Sun 07 Dec 2025 14:01:46 +0000 Files and hashes: 1: KlCag1k38E35giK2RwCL86wfRww.roa (hash: 3A8pcHf0/9mVDJ/I9xf+96E0LjYi6EEs2LRUfPZpiNc=) 2: MbXwrK42UqU8caB0ojR6tvF_0_g.crl (hash: XWo4iK+q5ZKjLSzIxL6fYMnX/6RCI0smHtEO/6pXKrE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/ecbe01-18ab-4fbd-9dc3-bcd52da15644/1/MbXwrK42UqU8caB0ojR6tvF_0_g.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/ecbe01-18ab-4fbd-9dc3-bcd52da15644/1/MbXwrK42UqU8caB0ojR6tvF_0_g.mft rsync://rpki.ripe.net/repository/DEFAULT/MbXwrK42UqU8caB0ojR6tvF_0_g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:fb:68:c0:54:f5:fa:c3:ad:c6:b1:a9:97:05:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31b5f0acae3652a53c71a074a2347ab6f17fd3f8 Validity Not Before: Dec 6 14:01:46 2025 GMT Not After : Dec 7 14:01:46 2025 GMT Subject: CN=fe32dc3b2c1fd5551ba976b7e25bf59b1271548c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:13:28:96:1e:e4:c0:12:61:9a:aa:23:26:22: c0:cc:87:18:53:4d:73:e4:42:80:d5:84:d4:b1:4a: d8:27:8c:5b:d5:f4:a7:7a:93:12:0c:3c:06:7d:9d: be:32:65:e8:64:48:05:35:b7:0c:c8:b4:38:fd:b4: 40:a1:a2:ba:ce:a7:15:60:4d:77:b3:c8:82:3f:3c: 7b:35:6f:c9:b3:f8:f0:c7:0b:ce:d0:50:96:4b:fc: 11:01:cb:46:56:84:6a:ed:35:ac:6b:f6:e4:1b:a1: 99:19:2e:c6:8e:8e:63:12:08:e4:91:20:cc:76:e0: 3a:f0:c9:80:ab:c0:e9:84:87:09:1f:c6:0f:33:57: 06:4b:a7:b4:72:c4:92:0b:9a:b0:8a:7e:9f:7c:90: b7:de:c7:0e:35:b7:b9:36:8f:6c:35:99:c6:c8:e6: 8e:c2:32:54:e7:e8:42:e5:22:7f:c1:5f:f4:b6:9e: f1:5c:6b:82:0e:05:06:d9:3b:c0:f3:42:c8:f2:6e: 14:d5:e6:30:6e:18:fa:60:ef:31:9e:e5:b5:f0:44: dd:8b:ba:25:08:8c:20:ec:af:ea:24:17:4e:70:5d: 86:ec:7b:50:53:3b:36:97:10:7f:8b:62:f7:7f:1f: be:0a:e9:c5:54:55:54:20:d9:6e:6b:a6:0a:d0:a4: c8:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:32:DC:3B:2C:1F:D5:55:1B:A9:76:B7:E2:5B:F5:9B:12:71:54:8C X509v3 Authority Key Identifier: keyid:31:B5:F0:AC:AE:36:52:A5:3C:71:A0:74:A2:34:7A:B6:F1:7F:D3:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MbXwrK42UqU8caB0ojR6tvF_0_g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ecbe01-18ab-4fbd-9dc3-bcd52da15644/1/MbXwrK42UqU8caB0ojR6tvF_0_g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ecbe01-18ab-4fbd-9dc3-bcd52da15644/1/MbXwrK42UqU8caB0ojR6tvF_0_g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:c8:19:b9:e8:f6:57:4e:4f:bc:5d:8d:21:c6:9a:ca:bd:48: 36:6a:01:62:23:50:15:e1:06:c7:3a:db:18:2c:bb:d4:b0:d1: 23:26:0b:bb:c7:79:59:a1:cf:02:5f:c7:13:70:c0:d4:69:40: fa:ee:b5:61:1e:9a:c6:d5:41:51:b8:fa:e9:78:aa:4b:73:83: 75:19:18:53:f4:f8:c2:42:5a:f2:78:83:6c:f9:a8:2c:4e:af: bd:52:05:24:cb:fe:1e:18:be:0a:65:bb:99:7e:42:29:f4:f9: 49:8e:76:e6:18:de:4d:18:74:c8:89:ae:91:c7:6a:6b:cf:18: a5:7b:b4:0a:e8:c3:c4:83:17:f4:8b:00:2f:87:1a:d1:85:29: 8b:9c:7b:9b:af:6a:3b:27:e2:0f:ca:95:87:22:22:21:99:92: a1:87:f1:7d:21:3c:42:27:d7:a5:56:8a:07:c2:1b:00:fb:5c: 66:09:e3:92:a5:09:92:ca:86:ca:6c:bb:75:f2:ba:e5:d8:7d: 08:cb:d6:c5:25:92:e3:e8:c7:f7:ac:43:f4:ef:c3:ff:09:09: 29:6c:06:8e:69:eb:7e:3a:99:ed:7a:fb:bb:fd:88:64:18:ff: 35:2e:98:45:70:be:d7:33:49:01:bc:9c:b4:94:e7:7b:f6:e2: 14:62:be:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz9/towFT1+sOtxrGplwWtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxYjVmMGFjYWUzNjUyYTUzYzcxYTA3NGEyMzQ3YWI2ZjE3 ZmQzZjgwHhcNMjUxMjA2MTQwMTQ2WhcNMjUxMjA3MTQwMTQ2WjAzMTEwLwYDVQQD EyhmZTMyZGMzYjJjMWZkNTU1MWJhOTc2YjdlMjViZjU5YjEyNzE1NDhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhMolh7kwBJhmqojJiLAzIcYU01z 5EKA1YTUsUrYJ4xb1fSnepMSDDwGfZ2+MmXoZEgFNbcMyLQ4/bRAoaK6zqcVYE13 s8iCPzx7NW/Js/jwxwvO0FCWS/wRActGVoRq7TWsa/bkG6GZGS7Gjo5jEgjkkSDM duA68MmAq8DphIcJH8YPM1cGS6e0csSSC5qwin6ffJC33scONbe5No9sNZnGyOaO wjJU5+hC5SJ/wV/0tp7xXGuCDgUG2TvA80LI8m4U1eYwbhj6YO8xnuW18ETdi7ol CIwg7K/qJBdOcF2G7HtQUzs2lxB/i2L3fx++CunFVFVUINlua6YK0KTIHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP4y3DssH9VVG6l2t+Jb9ZsScVSMMB8GA1UdIwQY MBaAFDG18KyuNlKlPHGgdKI0erbxf9P4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWJYd3JLNDJVcVU4Y2FCMG9qUjZ0dkZfMF9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9lY2JlMDEtMThhYi00ZmJkLTlkYzMt YmNkNTJkYTE1NjQ0LzEvTWJYd3JLNDJVcVU4Y2FCMG9qUjZ0dkZfMF9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi9lY2JlMDEtMThhYi00ZmJkLTlkYzMtYmNkNTJkYTE1NjQ0 LzEvTWJYd3JLNDJVcVU4Y2FCMG9qUjZ0dkZfMF9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALcgZuej2 V05PvF2NIcaayr1INmoBYiNQFeEGxzrbGCy71LDRIyYLu8d5WaHPAl/HE3DA1GlA +u61YR6axtVBUbj66XiqS3ODdRkYU/T4wkJa8niDbPmoLE6vvVIFJMv+Hhi+CmW7 mX5CKfT5SY525hjeTRh0yImukcdqa88YpXu0CujDxIMX9IsAL4ca0YUpi5x7m69q OyfiD8qVhyIiIZmSoYfxfSE8QifXpVaKB8IbAPtcZgnjkqUJksqGymy7dfK65dh9 CMvWxSWS4+jH96xD9O/D/wkJKWwGjmnrfjqZ7Xr7u/2IZBj/NS6YRXC+1zNJAbyc tJTne/biFGK+CA== -----END CERTIFICATE-----Generated at Sat Dec 6 20:03:38 2025 by rpki-client