This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/7a067c-ea19-405a-8e74-b4a3fc3a01f1/1/MBc-_VmPqpjUtSWOUfs6txbXrHE.mft File: MBc-_VmPqpjUtSWOUfs6txbXrHE.mft (raw, json) Hash identifier: WT5Q/rfO0mYif8c62QTMpWYrbC8YgLaSjMLPbtIhpEU= Subject key identifier: C8:60:28:5B:16:08:6E:76:22:81:F5:CA:85:A6:4E:E9:E0:71:5D:99 Authority key identifier: 30:17:3E:FD:59:8F:AA:98:D4:B5:25:8E:51:FB:3A:B7:16:D7:AC:71 Certificate issuer: /CN=30173efd598faa98d4b5258e51fb3ab716d7ac71 Certificate serial: 019AF1D192DC439EE6E7BB6BF38BD44FFBD5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MBc-_VmPqpjUtSWOUfs6txbXrHE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/7a067c-ea19-405a-8e74-b4a3fc3a01f1/1/MBc-_VmPqpjUtSWOUfs6txbXrHE.mft Manifest number: 160C Signing time: Sat 06 Dec 2025 04:00:34 +0000 Manifest this update: Sat 06 Dec 2025 04:00:34 +0000 Manifest next update: Sun 07 Dec 2025 04:00:34 +0000 Files and hashes: 1: MBc-_VmPqpjUtSWOUfs6txbXrHE.crl (hash: +l3cyTdC5gxFxCFOK/hZgMYoNC+haZTvoNp4h3byFac=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/7a067c-ea19-405a-8e74-b4a3fc3a01f1/1/MBc-_VmPqpjUtSWOUfs6txbXrHE.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/7a067c-ea19-405a-8e74-b4a3fc3a01f1/1/MBc-_VmPqpjUtSWOUfs6txbXrHE.mft rsync://rpki.ripe.net/repository/DEFAULT/MBc-_VmPqpjUtSWOUfs6txbXrHE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:92:dc:43:9e:e6:e7:bb:6b:f3:8b:d4:4f:fb:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30173efd598faa98d4b5258e51fb3ab716d7ac71 Validity Not Before: Dec 6 04:00:34 2025 GMT Not After : Dec 7 04:00:34 2025 GMT Subject: CN=c860285b16086e762281f5ca85a64ee9e0715d99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:44:41:c2:a7:b6:43:94:87:4f:bf:5e:6a:3f: 66:5f:8f:94:d5:e2:f0:fa:14:b3:73:88:bd:7d:4e: 9b:0a:d6:73:1f:da:28:a5:9c:75:8a:98:50:a0:67: 7a:44:8e:c5:53:ff:84:c1:73:1f:82:5e:4a:91:68: ad:44:2a:14:2a:59:19:c9:64:b4:97:af:3c:ff:e9: 47:ab:e4:c6:4d:98:ae:0e:c1:25:f8:61:03:18:ce: 20:f7:14:e1:30:6d:18:6e:90:3b:54:f5:87:60:a3: d6:7d:1e:fa:51:8a:2e:0f:7b:14:1c:75:bd:25:e2: 6a:f0:cc:e2:ec:a4:30:c9:fa:a9:f7:56:89:73:da: 11:ef:82:bd:70:26:c9:48:02:b0:2b:35:40:53:16: b5:0a:5a:3f:23:2d:0b:da:40:e5:6e:ca:b7:45:46: 1a:d3:b2:ea:1c:b8:42:87:a5:d5:99:24:2d:a9:72: fe:ab:92:f0:fd:ff:6f:d2:53:a5:30:8e:c9:93:6a: 31:4e:bc:60:95:55:8b:4e:11:da:2e:59:15:ca:a4: 48:1e:d7:85:0f:78:48:22:1c:fd:26:3f:3e:33:e1: 05:6b:e9:21:73:48:d7:61:89:96:fd:7c:f4:fe:6b: f2:9d:3f:21:35:96:b8:0d:36:30:51:9f:49:3b:02: e1:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:60:28:5B:16:08:6E:76:22:81:F5:CA:85:A6:4E:E9:E0:71:5D:99 X509v3 Authority Key Identifier: keyid:30:17:3E:FD:59:8F:AA:98:D4:B5:25:8E:51:FB:3A:B7:16:D7:AC:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBc-_VmPqpjUtSWOUfs6txbXrHE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/7a067c-ea19-405a-8e74-b4a3fc3a01f1/1/MBc-_VmPqpjUtSWOUfs6txbXrHE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/7a067c-ea19-405a-8e74-b4a3fc3a01f1/1/MBc-_VmPqpjUtSWOUfs6txbXrHE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:d1:6b:e1:ee:64:39:ed:02:8d:ea:fd:69:32:4a:8a:88:e3: 4b:d1:7c:23:ea:7f:3e:45:6f:6c:51:c7:56:cb:15:c0:ed:ff: fc:9b:dc:72:7b:1d:46:ff:66:e8:cd:3e:ec:56:a7:66:19:54: 26:d0:e4:93:22:dc:cd:56:ee:17:7b:3e:1b:ef:74:26:f2:74: 9e:9f:0f:a3:ae:25:a1:b7:6b:f9:a8:9c:cc:69:e6:c6:a1:c9: 8d:13:33:7e:14:07:2f:07:f6:1f:d6:5a:9f:17:44:7d:68:e2: 2f:81:68:f4:cc:83:c8:5b:f0:51:ef:10:45:31:e2:7d:24:8e: 61:48:e8:df:62:6e:07:cd:c4:ba:3c:62:62:92:0d:d2:83:2a: 56:e1:7b:9a:20:ef:bc:db:70:94:0b:15:17:aa:e7:33:9e:41: 72:e9:76:ac:24:53:3a:aa:61:59:31:8e:b7:bb:99:0d:20:4a: c6:0f:43:e9:ee:dc:d7:ff:7e:18:38:86:df:c7:59:24:07:f5: 7a:b3:2d:af:cd:31:7a:ec:bb:d7:c3:e5:88:6f:1e:19:e4:49: fe:09:c9:3e:84:02:1c:90:4a:24:79:d5:64:43:cc:88:49:84: 39:2e:24:5d:93:1f:0b:af:6b:8a:2f:fa:64:e1:69:19:42:27: 72:4f:97:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0ZLcQ57m57tr84vUT/vVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwMTczZWZkNTk4ZmFhOThkNGI1MjU4ZTUxZmIzYWI3MTZk N2FjNzEwHhcNMjUxMjA2MDQwMDM0WhcNMjUxMjA3MDQwMDM0WjAzMTEwLwYDVQQD EyhjODYwMjg1YjE2MDg2ZTc2MjI4MWY1Y2E4NWE2NGVlOWUwNzE1ZDk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyERBwqe2Q5SHT79eaj9mX4+U1eLw +hSzc4i9fU6bCtZzH9oopZx1iphQoGd6RI7FU/+EwXMfgl5KkWitRCoUKlkZyWS0 l688/+lHq+TGTZiuDsEl+GEDGM4g9xThMG0YbpA7VPWHYKPWfR76UYouD3sUHHW9 JeJq8Mzi7KQwyfqp91aJc9oR74K9cCbJSAKwKzVAUxa1Clo/Iy0L2kDlbsq3RUYa 07LqHLhCh6XVmSQtqXL+q5Lw/f9v0lOlMI7Jk2oxTrxglVWLThHaLlkVyqRIHteF D3hIIhz9Jj8+M+EFa+khc0jXYYmW/Xz0/mvynT8hNZa4DTYwUZ9JOwLhKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMhgKFsWCG52IoH1yoWmTungcV2ZMB8GA1UdIwQY MBaAFDAXPv1Zj6qY1LUljlH7OrcW16xxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUJjLV9WbVBxcGpVdFNXT1VmczZ0eGJYckhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC83YTA2N2MtZWExOS00MDVhLThlNzQt YjRhM2ZjM2EwMWYxLzEvTUJjLV9WbVBxcGpVdFNXT1VmczZ0eGJYckhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC83YTA2N2MtZWExOS00MDVhLThlNzQtYjRhM2ZjM2EwMWYx LzEvTUJjLV9WbVBxcGpVdFNXT1VmczZ0eGJYckhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARdFr4e5k Oe0Cjer9aTJKiojjS9F8I+p/PkVvbFHHVssVwO3//JvccnsdRv9m6M0+7FanZhlU JtDkkyLczVbuF3s+G+90JvJ0np8Po64lobdr+aiczGnmxqHJjRMzfhQHLwf2H9Za nxdEfWjiL4Fo9MyDyFvwUe8QRTHifSSOYUjo32JuB83EujxiYpIN0oMqVuF7miDv vNtwlAsVF6rnM55Bcul2rCRTOqphWTGOt7uZDSBKxg9D6e7c1/9+GDiG38dZJAf1 erMtr80xeuy718PliG8eGeRJ/gnJPoQCHJBKJHnVZEPMiEmEOS4kXZMfC69rii/6 ZOFpGUInck+XHw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:41:49 2025 by rpki-client