This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.mft File: MXuBR1A-oZ9YHKANKNvuXljLj0g.mft (raw, json) Hash identifier: OVlaf5SXzGhBXN4TzY7vWl4dp26H609Sonfec8u0B9Q= Subject key identifier: 98:32:BE:9C:5E:FB:7C:AC:8D:09:CB:F8:67:D4:12:49:69:90:25:88 Authority key identifier: 31:7B:81:47:50:3E:A1:9F:58:1C:A0:0D:28:DB:EE:5E:58:CB:8F:48 Certificate issuer: /CN=317b8147503ea19f581ca00d28dbee5e58cb8f48 Certificate serial: 019B0FA541A143B9BBAF9815214FB1E98574 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MXuBR1A-oZ9YHKANKNvuXljLj0g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.mft Manifest number: 1771 Signing time: Thu 11 Dec 2025 23:00:46 +0000 Manifest this update: Thu 11 Dec 2025 23:00:46 +0000 Manifest next update: Fri 12 Dec 2025 23:00:46 +0000 Files and hashes: 1: MXuBR1A-oZ9YHKANKNvuXljLj0g.crl (hash: qHpHpW2psaX0xGS+N2l8hZR8BMT46WqtxOyr/Yrjtwk=) 2: Xvq5E9FjSgetaXURRKNVucLHpJA.roa (hash: Q0VYCtfy8botfioT4TVhD+jb4Ht709fLdZsnE/9HQwY=) 3: ZthEX-bem71wxx1bLgVPG5w9ZTc.roa (hash: T1Z1de8P32daOdZ6/2GmlJdKCTcAVlmu6uwlpR9ZYC8=) 4: cpm1MJFdWjEQeCJ1LBHfzw5iKXY.roa (hash: gbGURzXBFbe9SdreBkh+gl3ChVchhLD0ie8p4XE7DdU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.mft rsync://rpki.ripe.net/repository/DEFAULT/MXuBR1A-oZ9YHKANKNvuXljLj0g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:a5:41:a1:43:b9:bb:af:98:15:21:4f:b1:e9:85:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=317b8147503ea19f581ca00d28dbee5e58cb8f48 Validity Not Before: Dec 11 23:00:46 2025 GMT Not After : Dec 12 23:00:46 2025 GMT Subject: CN=9832be9c5efb7cac8d09cbf867d4124969902588 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:5d:91:3c:94:57:35:16:9f:d1:d7:1c:ed:1d: bf:ea:68:b6:ac:6e:04:e6:5d:a3:03:d4:89:38:47: 1a:34:cb:6f:ed:7c:6b:2a:f8:e8:fd:3a:92:1b:cd: ab:98:30:4c:bc:a1:f5:fe:48:88:b7:8d:d6:f7:bf: f2:63:7e:0f:f3:fc:2f:0e:9a:f9:6d:a0:f9:61:34: be:d3:32:ff:76:22:f0:cd:d6:bb:a5:4e:14:d8:de: bf:ca:06:72:8c:ee:8b:b3:41:34:47:c9:f6:79:7e: 11:69:06:8f:e0:38:d0:4b:81:9d:a7:e1:1e:ac:bb: d8:43:f8:a3:a8:94:62:d6:ee:a2:5b:3d:0a:69:88: e1:4b:93:35:de:f1:3b:63:77:d3:ef:cd:b5:09:a0: c5:0a:6d:a8:90:29:25:4f:66:9b:dc:80:9e:92:cc: ba:44:91:ad:02:58:f9:d3:bf:ce:56:a6:08:2e:a6: d0:2a:f9:d6:68:e1:6a:6a:91:e8:88:f3:d0:c0:bb: 52:41:cb:3e:f3:77:96:3c:32:9c:ce:e4:fb:b1:d4: a3:a4:b1:04:09:30:69:a2:0c:04:61:bf:e7:f9:eb: e7:a7:46:78:b2:25:0b:9b:0c:d6:62:4e:66:57:f4: aa:3e:57:bd:c3:dc:09:65:14:9f:af:a6:bd:d4:03: 6b:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:32:BE:9C:5E:FB:7C:AC:8D:09:CB:F8:67:D4:12:49:69:90:25:88 X509v3 Authority Key Identifier: keyid:31:7B:81:47:50:3E:A1:9F:58:1C:A0:0D:28:DB:EE:5E:58:CB:8F:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MXuBR1A-oZ9YHKANKNvuXljLj0g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:43:90:8c:31:72:0f:49:7a:20:05:74:c2:13:48:2f:49:70: d2:fb:4f:65:c1:90:c7:97:50:96:54:8e:db:5d:f4:49:7e:61: 92:b7:bf:88:32:e9:e8:21:b6:66:c3:ef:95:37:95:48:77:c8: 0b:90:98:51:58:60:6a:b9:fb:51:87:7e:3f:2c:3b:09:92:ce: f5:93:cc:24:ba:a1:65:58:66:e9:59:78:1f:ca:15:8a:01:32: 2a:40:8b:70:fe:95:42:49:e2:dc:77:6b:aa:57:c7:aa:6e:f7: 3f:e8:5f:88:f4:64:1e:e6:88:f7:ac:a9:63:8b:dc:55:e8:6d: 35:36:18:da:69:d5:ce:cd:45:0c:4b:66:8c:20:09:b6:43:6e: 37:85:c9:25:4a:4f:13:ae:46:6d:ae:16:51:73:bd:0a:f8:99: b7:f9:5f:b8:f0:f5:eb:26:55:7e:06:d3:61:32:49:fe:71:a7: 16:82:79:a8:42:be:69:27:b6:78:00:60:b0:20:db:c9:b2:b6: 54:49:7e:01:3b:6b:76:e1:34:b2:95:7b:0a:68:d6:81:43:a4: cf:48:00:2e:47:9d:8e:24:80:51:a9:14:30:69:57:55:bf:b0: bd:f0:31:41:ac:82:05:d0:64:28:74:fb:cf:51:4f:13:5e:18: f7:01:a3:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPpUGhQ7m7r5gVIU+x6YV0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxN2I4MTQ3NTAzZWExOWY1ODFjYTAwZDI4ZGJlZTVlNThj YjhmNDgwHhcNMjUxMjExMjMwMDQ2WhcNMjUxMjEyMjMwMDQ2WjAzMTEwLwYDVQQD Eyg5ODMyYmU5YzVlZmI3Y2FjOGQwOWNiZjg2N2Q0MTI0OTY5OTAyNTg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiF2RPJRXNRaf0dcc7R2/6mi2rG4E 5l2jA9SJOEcaNMtv7XxrKvjo/TqSG82rmDBMvKH1/kiIt43W97/yY34P8/wvDpr5 baD5YTS+0zL/diLwzda7pU4U2N6/ygZyjO6Ls0E0R8n2eX4RaQaP4DjQS4Gdp+Ee rLvYQ/ijqJRi1u6iWz0KaYjhS5M13vE7Y3fT7821CaDFCm2okCklT2ab3ICeksy6 RJGtAlj507/OVqYILqbQKvnWaOFqapHoiPPQwLtSQcs+83eWPDKczuT7sdSjpLEE CTBpogwEYb/n+evnp0Z4siULmwzWYk5mV/SqPle9w9wJZRSfr6a91ANr7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJgyvpxe+3ysjQnL+GfUEklpkCWIMB8GA1UdIwQY MBaAFDF7gUdQPqGfWBygDSjb7l5Yy49IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVh1QlIxQS1vWjlZSEtBTktOdnVYbGpMajBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8yZTRlNTQtMDU0OC00ZDBjLTkzZjEt NzU0NjFhYmJiNWE0LzEvTVh1QlIxQS1vWjlZSEtBTktOdnVYbGpMajBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS8yZTRlNTQtMDU0OC00ZDBjLTkzZjEtNzU0NjFhYmJiNWE0 LzEvTVh1QlIxQS1vWjlZSEtBTktOdnVYbGpMajBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMEOQjDFy D0l6IAV0whNIL0lw0vtPZcGQx5dQllSO2130SX5hkre/iDLp6CG2ZsPvlTeVSHfI C5CYUVhgarn7UYd+Pyw7CZLO9ZPMJLqhZVhm6Vl4H8oVigEyKkCLcP6VQkni3Hdr qlfHqm73P+hfiPRkHuaI96ypY4vcVehtNTYY2mnVzs1FDEtmjCAJtkNuN4XJJUpP E65Gba4WUXO9CviZt/lfuPD16yZVfgbTYTJJ/nGnFoJ5qEK+aSe2eABgsCDbybK2 VEl+ATtrduE0spV7CmjWgUOkz0gALkedjiSAUakUMGlXVb+wvfAxQayCBdBkKHT7 z1FPE14Y9wGjKQ== -----END CERTIFICATE-----Generated at Fri Dec 12 02:47:09 2025 by rpki-client