This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft File: MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft (raw, json) Hash identifier: QrGFNMzxVBt6MXfodDtcpZe313BtjbmlR/jgSqdWt+U= Subject key identifier: 5D:C7:67:54:E9:90:C7:E9:23:EA:C9:EA:E4:BC:09:5A:80:5D:EC:92 Authority key identifier: 30:16:B1:0D:0A:C2:18:01:7C:74:93:94:E4:F2:51:9C:F2:C0:51:4E Certificate issuer: /CN=3016b10d0ac218017c749394e4f2519cf2c0514e Certificate serial: 019AF23F70C8ED6DB9747601ECB3E6EABAB0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MBaxDQrCGAF8dJOU5PJRnPLAUU4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 06:00:35 +0000 Manifest this update: Sat 06 Dec 2025 06:00:35 +0000 Manifest next update: Sun 07 Dec 2025 06:00:35 +0000 Files and hashes: 1: HlO9ZQi1YEqVxRv4xtahO5YLBGA.roa (hash: aJ2b3cCx1ndyavIj0cgELjQKu/oO/oTwQkl8MyIO1oI=) 2: MBaxDQrCGAF8dJOU5PJRnPLAUU4.crl (hash: IIh5x+AaQCi7CqSFA04RI0o4+4jVs/Zyl/oA5Zw9wpE=) 3: SnB27P4aE00JP6FbecTTod9K1rk.roa (hash: 5E+ZR3tJKvaUJ0xYE7TDulpUYo4F5Unw9Ys//QosG5Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft rsync://rpki.ripe.net/repository/DEFAULT/MBaxDQrCGAF8dJOU5PJRnPLAUU4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:70:c8:ed:6d:b9:74:76:01:ec:b3:e6:ea:ba:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3016b10d0ac218017c749394e4f2519cf2c0514e Validity Not Before: Dec 6 06:00:35 2025 GMT Not After : Dec 7 06:00:35 2025 GMT Subject: CN=5dc76754e990c7e923eac9eae4bc095a805dec92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:4c:b3:9d:c0:65:88:2f:0a:19:08:fc:3b:e2: 86:e1:c5:bc:a3:70:f9:51:04:62:51:a4:92:fa:ee: 1e:51:c8:39:ac:46:43:74:fc:ef:b2:bc:ba:59:32: f6:d0:d1:0a:9e:9c:d4:f0:27:4c:8b:57:72:56:8f: 95:7e:35:bf:6f:68:8f:ce:9a:3d:25:28:55:06:00: 6b:cb:7b:4f:b9:2b:10:69:e1:ba:37:2b:e6:98:34: 68:9f:1e:bc:f9:02:8c:69:88:ba:b4:ef:59:e7:05: f1:60:77:a5:0c:38:b2:6e:01:c6:df:02:9d:6e:56: c9:cc:e3:ab:65:4f:81:4f:90:9f:72:f7:e4:0a:3c: 62:77:fc:6d:20:52:02:83:19:87:d4:e0:82:5b:a3: 7a:da:3f:98:de:d2:88:f6:c2:77:02:a2:91:06:44: 00:1d:d6:71:ff:fc:3e:bd:a8:19:61:ae:61:6f:64: 4f:f1:85:59:57:33:67:99:10:77:7c:f5:a8:8a:40: 7a:95:b7:54:23:05:93:80:4f:9b:ea:54:fe:6d:7c: 59:51:be:31:8e:80:53:32:4e:44:66:bc:07:b2:61: 0a:d9:8f:6e:04:7d:12:18:aa:d7:a9:a9:2e:05:fd: 55:55:8e:95:72:0c:04:25:db:72:e8:a6:53:4e:71: 81:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:C7:67:54:E9:90:C7:E9:23:EA:C9:EA:E4:BC:09:5A:80:5D:EC:92 X509v3 Authority Key Identifier: keyid:30:16:B1:0D:0A:C2:18:01:7C:74:93:94:E4:F2:51:9C:F2:C0:51:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBaxDQrCGAF8dJOU5PJRnPLAUU4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:b2:92:77:31:2c:28:a1:9e:d4:b9:7d:f0:1b:d3:4c:fc:24: d4:ae:be:08:12:30:ed:e8:6f:39:59:39:de:a8:43:94:15:97: 1b:6f:07:bb:df:52:7b:d9:f0:b2:25:25:c5:8e:ef:94:5f:da: fa:26:33:b9:48:05:1a:55:83:f7:5f:2e:19:7a:75:f8:5d:14: c0:e9:9a:4f:f4:5b:68:ab:3b:01:c3:6c:15:d0:e8:f5:e5:80: d1:73:94:8f:af:b5:f1:6f:1d:7c:95:d4:56:1b:29:45:ed:0a: fd:f0:bc:8b:3c:49:e2:59:2a:7a:57:4f:8c:49:4c:64:d0:60: 93:76:fc:e9:6f:a8:46:4a:a2:61:57:59:34:75:38:71:b6:ac: b5:57:85:11:50:f6:39:32:10:e5:05:c3:7e:6f:5d:39:92:4d: 27:8e:38:a5:31:df:71:f1:4d:49:3b:2d:ef:39:d1:a8:c0:8f: 18:65:e1:98:b2:7d:67:32:6d:ec:cd:36:2c:93:2f:d0:78:b6: 2e:04:ca:8b:08:34:cf:30:da:ac:26:7a:ca:6a:90:33:01:96: 13:2d:2c:fd:b8:f2:6e:5a:fa:7c:4d:f3:52:a4:68:a2:1e:19: 69:06:a9:d9:d7:0f:33:df:2f:95:6d:8d:fb:ac:34:9c:07:6d: 09:16:a8:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP3DI7W25dHYB7LPm6rqwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwMTZiMTBkMGFjMjE4MDE3Yzc0OTM5NGU0ZjI1MTljZjJj MDUxNGUwHhcNMjUxMjA2MDYwMDM1WhcNMjUxMjA3MDYwMDM1WjAzMTEwLwYDVQQD Eyg1ZGM3Njc1NGU5OTBjN2U5MjNlYWM5ZWFlNGJjMDk1YTgwNWRlYzkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkyzncBliC8KGQj8O+KG4cW8o3D5 UQRiUaSS+u4eUcg5rEZDdPzvsry6WTL20NEKnpzU8CdMi1dyVo+VfjW/b2iPzpo9 JShVBgBry3tPuSsQaeG6NyvmmDRonx68+QKMaYi6tO9Z5wXxYHelDDiybgHG3wKd blbJzOOrZU+BT5CfcvfkCjxid/xtIFICgxmH1OCCW6N62j+Y3tKI9sJ3AqKRBkQA HdZx//w+vagZYa5hb2RP8YVZVzNnmRB3fPWoikB6lbdUIwWTgE+b6lT+bXxZUb4x joBTMk5EZrwHsmEK2Y9uBH0SGKrXqakuBf1VVY6VcgwEJdty6KZTTnGBEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF3HZ1TpkMfpI+rJ6uS8CVqAXeySMB8GA1UdIwQY MBaAFDAWsQ0KwhgBfHSTlOTyUZzywFFOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUJheERRckNHQUY4ZEpPVTVQSlJuUExBVVU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8zZWI2NGEtZTZkZS00NWY1LWI2OGMt NjkzNjc2MmQyZmNlLzEvTUJheERRckNHQUY4ZEpPVTVQSlJuUExBVVU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS8zZWI2NGEtZTZkZS00NWY1LWI2OGMtNjkzNjc2MmQyZmNl LzEvTUJheERRckNHQUY4ZEpPVTVQSlJuUExBVVU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh7KSdzEs KKGe1Ll98BvTTPwk1K6+CBIw7ehvOVk53qhDlBWXG28Hu99Se9nwsiUlxY7vlF/a +iYzuUgFGlWD918uGXp1+F0UwOmaT/RbaKs7AcNsFdDo9eWA0XOUj6+18W8dfJXU VhspRe0K/fC8izxJ4lkqeldPjElMZNBgk3b86W+oRkqiYVdZNHU4cbastVeFEVD2 OTIQ5QXDfm9dOZJNJ444pTHfcfFNSTst7znRqMCPGGXhmLJ9ZzJt7M02LJMv0Hi2 LgTKiwg0zzDarCZ6ymqQMwGWEy0s/bjyblr6fE3zUqRooh4ZaQap2dcPM98vlW2N +6w0nAdtCRaoeg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:59:55 2025 by rpki-client