This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3d93a5-5fbd-402e-ad87-e986904c8d0c/1/MbtzCxs_U-c6JXQi5bvs5Dtnf-M.mft File: MbtzCxs_U-c6JXQi5bvs5Dtnf-M.mft (raw, json) Hash identifier: on0EmvhGxHoDYyrNyLaJxZUfqNCR030E80yaJzgnbGU= Subject key identifier: 3A:0F:5A:44:DA:96:9D:00:F9:D3:85:56:95:A1:F1:4A:FF:DD:C2:F6 Authority key identifier: 31:BB:73:0B:1B:3F:53:E7:3A:25:74:22:E5:BB:EC:E4:3B:67:7F:E3 Certificate issuer: /CN=31bb730b1b3f53e73a257422e5bbece43b677fe3 Certificate serial: 019B2287546C56AC42C5617525198D7D3D20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MbtzCxs_U-c6JXQi5bvs5Dtnf-M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3d93a5-5fbd-402e-ad87-e986904c8d0c/1/MbtzCxs_U-c6JXQi5bvs5Dtnf-M.mft Manifest number: 0195 Signing time: Mon 15 Dec 2025 15:00:52 +0000 Manifest this update: Mon 15 Dec 2025 15:00:52 +0000 Manifest next update: Tue 16 Dec 2025 15:00:52 +0000 Files and hashes: 1: MbtzCxs_U-c6JXQi5bvs5Dtnf-M.crl (hash: VH/T4lXRGaExehsmgv79pEzuedPLPAvBNvvmp65mDuU=) 2: R-6gZG6Qkp3ae09ud4PH3JpfB80.roa (hash: BAAGIDlz41luoFtKlUFhcgsonLyEAYtSldgK/GTu16Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3d93a5-5fbd-402e-ad87-e986904c8d0c/1/MbtzCxs_U-c6JXQi5bvs5Dtnf-M.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/3d93a5-5fbd-402e-ad87-e986904c8d0c/1/MbtzCxs_U-c6JXQi5bvs5Dtnf-M.mft rsync://rpki.ripe.net/repository/DEFAULT/MbtzCxs_U-c6JXQi5bvs5Dtnf-M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:87:54:6c:56:ac:42:c5:61:75:25:19:8d:7d:3d:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31bb730b1b3f53e73a257422e5bbece43b677fe3 Validity Not Before: Dec 15 15:00:52 2025 GMT Not After : Dec 16 15:00:52 2025 GMT Subject: CN=3a0f5a44da969d00f9d3855695a1f14affddc2f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d1:1a:20:00:c3:29:b8:fb:3f:6c:18:0e:8d: d3:be:07:80:0b:18:8a:fb:e3:c7:a7:04:0b:14:6b: 50:ab:e2:e5:19:42:9e:fe:44:b1:58:e9:40:ee:69: 30:da:19:72:d2:f5:ad:d2:2e:5e:4a:5b:ce:da:54: 95:50:59:68:6a:cc:c4:bc:4f:8e:91:4a:e0:ae:fc: a7:ed:f0:21:79:d6:19:db:e4:73:ce:d3:6d:80:88: 52:28:a3:5a:b5:29:c5:e2:80:f6:39:96:5c:69:8f: c5:6a:31:ec:bc:4f:3a:f5:48:e0:0e:f4:20:d0:a1: e2:26:2e:e4:47:68:6a:2b:50:d3:63:48:81:9b:3d: 7f:81:f6:eb:ec:55:b9:40:6a:a6:c0:e9:29:58:69: e1:c8:dd:3e:fc:c2:04:ac:cf:b6:d7:49:5d:56:a0: 08:6c:8d:58:9f:55:3c:d8:e6:c2:66:7d:57:52:e2: ce:23:08:5c:10:d5:7f:e7:40:95:e5:ba:9f:c3:27: 81:2a:b2:73:33:bf:62:ca:55:44:71:e3:35:fe:2e: 97:87:21:c7:86:64:11:e3:f1:f8:8a:a7:16:1c:cd: fd:90:27:18:04:da:b0:03:3f:14:13:59:ac:81:66: 9e:54:8d:88:13:b7:a3:cf:60:6a:68:b7:12:84:2b: 5f:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:0F:5A:44:DA:96:9D:00:F9:D3:85:56:95:A1:F1:4A:FF:DD:C2:F6 X509v3 Authority Key Identifier: keyid:31:BB:73:0B:1B:3F:53:E7:3A:25:74:22:E5:BB:EC:E4:3B:67:7F:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MbtzCxs_U-c6JXQi5bvs5Dtnf-M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3d93a5-5fbd-402e-ad87-e986904c8d0c/1/MbtzCxs_U-c6JXQi5bvs5Dtnf-M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3d93a5-5fbd-402e-ad87-e986904c8d0c/1/MbtzCxs_U-c6JXQi5bvs5Dtnf-M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:17:37:14:21:7f:f0:91:91:c3:dc:98:01:fa:d2:6a:8a:e2: 39:d7:4b:9b:44:72:e4:47:a4:99:73:d2:8a:75:5c:1d:31:f3: b7:51:4e:db:7b:92:c4:69:b5:27:49:26:2a:92:18:34:d5:66: cd:b2:fb:a3:fa:a5:4e:a1:23:56:f2:3f:39:c4:49:3a:34:63: de:66:86:89:a1:4c:33:68:45:6a:ef:f1:e1:33:47:c0:67:92: a1:0b:f8:b0:fb:ff:6e:62:4d:93:49:c9:6e:87:f2:66:96:53: b5:6e:7d:51:91:d5:48:d9:79:08:84:3f:fa:e3:70:28:f9:e1: 18:dc:de:79:ea:af:19:bb:41:60:3d:ef:86:71:82:e7:8e:f6: fd:c5:33:4e:42:d7:c8:61:e0:dc:59:ae:16:a7:0f:8e:c2:ee: 2b:f6:eb:83:0c:61:16:31:29:12:78:5d:0b:26:95:5a:13:8a: 73:09:1e:62:f5:e6:49:13:4d:a6:25:af:00:39:10:73:9c:99: 83:30:e3:37:d2:33:f5:56:67:f3:24:78:90:5a:6b:1f:a2:3b: ae:41:4a:73:1e:78:b3:2f:03:6f:f2:88:6d:d0:0e:7f:5d:23: d2:ad:ce:b6:02:14:ac:7f:c4:e5:84:f3:f2:a9:3f:1b:ba:a3: a4:3a:c1:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsih1RsVqxCxWF1JRmNfT0gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxYmI3MzBiMWIzZjUzZTczYTI1NzQyMmU1YmJlY2U0M2I2 NzdmZTMwHhcNMjUxMjE1MTUwMDUyWhcNMjUxMjE2MTUwMDUyWjAzMTEwLwYDVQQD EygzYTBmNWE0NGRhOTY5ZDAwZjlkMzg1NTY5NWExZjE0YWZmZGRjMmY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNEaIADDKbj7P2wYDo3TvgeACxiK ++PHpwQLFGtQq+LlGUKe/kSxWOlA7mkw2hly0vWt0i5eSlvO2lSVUFloaszEvE+O kUrgrvyn7fAhedYZ2+RzztNtgIhSKKNatSnF4oD2OZZcaY/FajHsvE869UjgDvQg 0KHiJi7kR2hqK1DTY0iBmz1/gfbr7FW5QGqmwOkpWGnhyN0+/MIErM+210ldVqAI bI1Yn1U82ObCZn1XUuLOIwhcENV/50CV5bqfwyeBKrJzM79iylVEceM1/i6XhyHH hmQR4/H4iqcWHM39kCcYBNqwAz8UE1msgWaeVI2IE7ejz2BqaLcShCtfTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDoPWkTalp0A+dOFVpWh8Ur/3cL2MB8GA1UdIwQY MBaAFDG7cwsbP1PnOiV0IuW77OQ7Z3/jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWJ0ekN4c19VLWM2SlhRaTVidnM1RHRuZi1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zZDkzYTUtNWZiZC00MDJlLWFkODct ZTk4NjkwNGM4ZDBjLzEvTWJ0ekN4c19VLWM2SlhRaTVidnM1RHRuZi1NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8zZDkzYTUtNWZiZC00MDJlLWFkODctZTk4NjkwNGM4ZDBj LzEvTWJ0ekN4c19VLWM2SlhRaTVidnM1RHRuZi1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQBc3FCF/ 8JGRw9yYAfrSaoriOddLm0Ry5EekmXPSinVcHTHzt1FO23uSxGm1J0kmKpIYNNVm zbL7o/qlTqEjVvI/OcRJOjRj3maGiaFMM2hFau/x4TNHwGeSoQv4sPv/bmJNk0nJ bofyZpZTtW59UZHVSNl5CIQ/+uNwKPnhGNzeeeqvGbtBYD3vhnGC5472/cUzTkLX yGHg3FmuFqcPjsLuK/brgwxhFjEpEnhdCyaVWhOKcwkeYvXmSRNNpiWvADkQc5yZ gzDjN9Iz9VZn8yR4kFprH6I7rkFKcx54sy8Db/KIbdAOf10j0q3OtgIUrH/E5YTz 8qk/G7qjpDrBZQ== -----END CERTIFICATE-----Generated at Mon Dec 15 21:39:09 2025 by rpki-client