This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/8b060c-17c1-4d9a-851e-b47e0417397d/1/mxNLbpAkBkuQVyg0ib8sQ29Adeg.mft File: mxNLbpAkBkuQVyg0ib8sQ29Adeg.mft (raw, json) Hash identifier: EkRD1s82xsyf0unRBS9nvUlcX1tYF0N+Es9/i/I8eGY= Subject key identifier: 9F:BD:85:BD:A1:8C:CE:CB:C7:D4:F2:B6:1B:F9:D8:36:49:4F:DD:82 Authority key identifier: 9B:13:4B:6E:90:24:06:4B:90:57:28:34:89:BF:2C:43:6F:40:75:E8 Certificate issuer: /CN=9b134b6e9024064b9057283489bf2c436f4075e8 Certificate serial: 019AF12D87FDA16BE2EE1555858B04E310DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mxNLbpAkBkuQVyg0ib8sQ29Adeg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/8b060c-17c1-4d9a-851e-b47e0417397d/1/mxNLbpAkBkuQVyg0ib8sQ29Adeg.mft Manifest number: 08BC Signing time: Sat 06 Dec 2025 01:01:24 +0000 Manifest this update: Sat 06 Dec 2025 01:01:24 +0000 Manifest next update: Sun 07 Dec 2025 01:01:24 +0000 Files and hashes: 1: mxNLbpAkBkuQVyg0ib8sQ29Adeg.crl (hash: ksfVIuuY/moxfnV2epIaYGwDZ5Hp5ZQFnat3N1ybA7k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/8b060c-17c1-4d9a-851e-b47e0417397d/1/mxNLbpAkBkuQVyg0ib8sQ29Adeg.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/8b060c-17c1-4d9a-851e-b47e0417397d/1/mxNLbpAkBkuQVyg0ib8sQ29Adeg.mft rsync://rpki.ripe.net/repository/DEFAULT/mxNLbpAkBkuQVyg0ib8sQ29Adeg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:87:fd:a1:6b:e2:ee:15:55:85:8b:04:e3:10:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b134b6e9024064b9057283489bf2c436f4075e8 Validity Not Before: Dec 6 01:01:24 2025 GMT Not After : Dec 7 01:01:24 2025 GMT Subject: CN=9fbd85bda18ccecbc7d4f2b61bf9d836494fdd82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ed:ea:19:0b:d0:72:89:bd:da:b0:9c:5f:d6: ce:47:f6:f4:36:5e:ba:b9:4a:6a:84:9f:5d:a3:da: 09:39:72:b2:6c:cd:b5:d1:3e:b5:88:fc:12:c4:86: 50:96:29:6f:f2:2a:cf:97:61:62:1c:8f:61:9a:11: ec:20:d1:c5:12:1f:4b:7e:f6:07:2b:cc:eb:a1:c3: 8e:15:38:b3:cb:89:39:d1:9a:ca:14:34:21:30:82: 64:71:48:da:9d:93:22:be:8b:6e:77:aa:fa:e0:f1: c4:9a:97:62:15:aa:f8:de:20:7b:6d:3a:9e:76:fd: 5a:0a:46:8f:5f:d6:d7:54:15:09:7f:d7:58:db:39: e0:72:90:9f:f0:be:9f:7e:3d:9c:a9:69:99:8e:92: 25:f5:1b:fc:32:55:6d:25:06:38:d3:83:93:46:3f: d4:22:f3:e2:f0:57:f1:f4:e9:ec:6c:ea:c3:03:05: f9:6b:af:ab:b3:60:93:0a:d5:4d:de:10:2c:cf:26: 7e:11:7e:aa:bf:06:b2:49:6f:33:97:d9:e8:cf:8f: da:dd:ff:c0:b6:c0:28:ec:c0:b3:a3:2b:fc:49:ec: db:5a:16:63:c5:6c:83:40:d4:c2:7f:20:2f:d0:66: d9:38:ff:e1:c6:eb:69:d7:9c:15:39:8e:5d:92:e3: fa:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:BD:85:BD:A1:8C:CE:CB:C7:D4:F2:B6:1B:F9:D8:36:49:4F:DD:82 X509v3 Authority Key Identifier: keyid:9B:13:4B:6E:90:24:06:4B:90:57:28:34:89:BF:2C:43:6F:40:75:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mxNLbpAkBkuQVyg0ib8sQ29Adeg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8b060c-17c1-4d9a-851e-b47e0417397d/1/mxNLbpAkBkuQVyg0ib8sQ29Adeg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8b060c-17c1-4d9a-851e-b47e0417397d/1/mxNLbpAkBkuQVyg0ib8sQ29Adeg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:69:0c:5f:d5:56:1e:3d:86:89:20:cc:a3:24:81:d5:b9:cf: d3:f0:82:ee:d6:0b:b1:63:ce:ab:b4:37:fb:74:d9:d4:13:5f: 81:13:da:e1:0d:cb:66:d2:58:ff:c0:51:28:1c:f3:26:51:e9: f9:27:0e:cd:7c:64:e9:10:37:13:aa:f9:31:2d:03:38:84:fa: f1:34:38:ac:eb:70:fa:a3:47:1e:94:9b:d0:c3:9b:e4:c1:d4: f2:68:2e:6a:03:35:86:1b:bd:1d:72:d8:26:76:8a:d7:2b:ae: 57:2d:c1:a0:5e:50:a8:8d:56:6e:9c:07:e7:e0:3e:78:04:2e: 7d:9f:25:df:bd:41:a3:2b:4c:3e:d1:14:c0:87:b4:3c:1d:1a: 94:51:71:71:c8:cb:b0:4d:00:a1:84:28:c0:38:80:24:d6:40: 64:35:98:35:b6:a2:e5:35:38:2e:27:dd:e8:8f:90:61:be:b3: ef:dd:b8:5f:0f:f3:71:3a:b9:2e:02:6c:7f:c0:59:7a:97:46: 02:7f:88:75:c6:45:95:dc:e3:d0:e6:75:c8:53:0d:06:60:2a: b1:94:86:c4:e1:04:94:40:72:f3:75:22:f6:b6:82:ec:24:9c: e7:cf:fe:20:9d:5c:74:b9:52:de:f8:d2:c8:e3:8e:00:f0:8b: 30:2a:cb:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLYf9oWvi7hVVhYsE4xDaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliMTM0YjZlOTAyNDA2NGI5MDU3MjgzNDg5YmYyYzQzNmY0 MDc1ZTgwHhcNMjUxMjA2MDEwMTI0WhcNMjUxMjA3MDEwMTI0WjAzMTEwLwYDVQQD Eyg5ZmJkODViZGExOGNjZWNiYzdkNGYyYjYxYmY5ZDgzNjQ5NGZkZDgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0e3qGQvQcom92rCcX9bOR/b0Nl66 uUpqhJ9do9oJOXKybM210T61iPwSxIZQlilv8irPl2FiHI9hmhHsINHFEh9LfvYH K8zrocOOFTizy4k50ZrKFDQhMIJkcUjanZMivotud6r64PHEmpdiFar43iB7bTqe dv1aCkaPX9bXVBUJf9dY2zngcpCf8L6ffj2cqWmZjpIl9Rv8MlVtJQY404OTRj/U IvPi8Ffx9OnsbOrDAwX5a6+rs2CTCtVN3hAszyZ+EX6qvwaySW8zl9noz4/a3f/A tsAo7MCzoyv8SezbWhZjxWyDQNTCfyAv0GbZOP/hxutp15wVOY5dkuP6AwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ+9hb2hjM7Lx9Tythv52DZJT92CMB8GA1UdIwQY MBaAFJsTS26QJAZLkFcoNIm/LENvQHXoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXhOTGJwQWtCa3VRVnlnMGliOHNRMjlBZGVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi84YjA2MGMtMTdjMS00ZDlhLTg1MWUt YjQ3ZTA0MTczOTdkLzEvbXhOTGJwQWtCa3VRVnlnMGliOHNRMjlBZGVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi84YjA2MGMtMTdjMS00ZDlhLTg1MWUtYjQ3ZTA0MTczOTdk LzEvbXhOTGJwQWtCa3VRVnlnMGliOHNRMjlBZGVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjWkMX9VW Hj2GiSDMoySB1bnP0/CC7tYLsWPOq7Q3+3TZ1BNfgRPa4Q3LZtJY/8BRKBzzJlHp +ScOzXxk6RA3E6r5MS0DOIT68TQ4rOtw+qNHHpSb0MOb5MHU8mguagM1hhu9HXLY JnaK1yuuVy3BoF5QqI1WbpwH5+A+eAQufZ8l371BoytMPtEUwIe0PB0alFFxccjL sE0AoYQowDiAJNZAZDWYNbai5TU4Lifd6I+QYb6z7924Xw/zcTq5LgJsf8BZepdG An+IdcZFldzj0OZ1yFMNBmAqsZSGxOEElEBy83Ui9raC7CSc58/+IJ1cdLlS3vjS yOOOAPCLMCrLRw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:10:41 2025 by rpki-client