This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.mft File: MXuBR1A-oZ9YHKANKNvuXljLj0g.mft (raw, json) Hash identifier: a4WMrg3dxERa9ficl/SGYXD/PbE6dLJtMmibk/PZzxw= Subject key identifier: EB:A4:A5:8C:09:CA:23:81:72:18:76:D7:00:96:7D:8C:6D:FE:2B:5D Authority key identifier: 31:7B:81:47:50:3E:A1:9F:58:1C:A0:0D:28:DB:EE:5E:58:CB:8F:48 Certificate issuer: /CN=317b8147503ea19f581ca00d28dbee5e58cb8f48 Certificate serial: 019B43C9E48F8D95AA6BD42110A0EED43102 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MXuBR1A-oZ9YHKANKNvuXljLj0g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.mft Manifest number: 178C Signing time: Mon 22 Dec 2025 02:01:03 +0000 Manifest this update: Mon 22 Dec 2025 02:01:03 +0000 Manifest next update: Tue 23 Dec 2025 02:01:03 +0000 Files and hashes: 1: MXuBR1A-oZ9YHKANKNvuXljLj0g.crl (hash: oWt9WKZfeQNUvGaVjZoZdLbUACzRIn/enB4LqdhqtYQ=) 2: Xvq5E9FjSgetaXURRKNVucLHpJA.roa (hash: Q0VYCtfy8botfioT4TVhD+jb4Ht709fLdZsnE/9HQwY=) 3: ZthEX-bem71wxx1bLgVPG5w9ZTc.roa (hash: T1Z1de8P32daOdZ6/2GmlJdKCTcAVlmu6uwlpR9ZYC8=) 4: cpm1MJFdWjEQeCJ1LBHfzw5iKXY.roa (hash: gbGURzXBFbe9SdreBkh+gl3ChVchhLD0ie8p4XE7DdU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.mft rsync://rpki.ripe.net/repository/DEFAULT/MXuBR1A-oZ9YHKANKNvuXljLj0g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:c9:e4:8f:8d:95:aa:6b:d4:21:10:a0:ee:d4:31:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=317b8147503ea19f581ca00d28dbee5e58cb8f48 Validity Not Before: Dec 22 02:01:03 2025 GMT Not After : Dec 23 02:01:03 2025 GMT Subject: CN=eba4a58c09ca2381721876d700967d8c6dfe2b5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b6:65:d6:f4:72:b2:62:d4:b6:30:a4:5f:fa: a0:3c:80:e4:4c:5b:fb:0e:ac:19:f1:38:68:1e:44: 28:dc:56:bb:52:a9:66:50:49:de:41:a5:5e:c2:07: 4e:27:f7:8c:b0:b1:14:5f:4c:f7:98:f2:26:90:ba: 55:10:b3:b2:78:9e:0b:80:85:7b:21:ac:4d:c6:f1: 47:2f:0e:b9:e8:d3:89:46:c0:95:5e:af:4b:d9:9b: c0:1a:9c:b1:1a:e2:ff:ad:ee:b9:dd:b4:5d:59:b9: 60:b7:7d:46:57:56:86:c3:4e:1d:6f:15:5e:fd:14: d8:fa:66:3f:68:67:82:4d:10:4a:a1:f4:db:35:6f: 7c:23:8a:7a:97:91:4b:81:59:31:9f:63:13:db:a2: bd:19:aa:ba:60:89:32:e1:ae:a7:1d:a0:46:79:90: 41:b4:39:87:b2:df:64:fd:2f:fc:da:b8:4e:3c:a1: 66:27:0f:f4:f4:5b:db:de:bd:70:28:35:ba:18:8e: 3c:24:d7:94:71:69:11:a4:31:f8:5f:9a:7a:97:c5: 34:ba:cf:fe:59:6e:fe:a7:aa:65:00:8a:cb:d7:35: a1:af:51:06:4c:56:af:ae:31:4c:3a:4a:bf:bc:e4: de:66:ee:11:21:eb:13:bb:24:81:d3:56:25:82:2f: 8c:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:A4:A5:8C:09:CA:23:81:72:18:76:D7:00:96:7D:8C:6D:FE:2B:5D X509v3 Authority Key Identifier: keyid:31:7B:81:47:50:3E:A1:9F:58:1C:A0:0D:28:DB:EE:5E:58:CB:8F:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MXuBR1A-oZ9YHKANKNvuXljLj0g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:5a:7b:bf:e9:e6:68:ca:1c:ac:69:d3:c9:80:2e:3e:2a:41: 83:30:05:56:69:b5:c8:ef:26:e6:d6:d8:df:b4:d7:66:db:37: 8b:da:64:d3:bf:b7:5f:ae:a0:1a:c9:5d:c4:c9:b4:15:29:a7: fa:18:54:34:4d:e1:64:7f:24:ea:72:a6:d8:9e:68:b0:13:ba: 55:6a:10:a4:32:d7:fe:eb:97:05:ef:20:72:0a:52:42:31:18: 39:29:67:55:c2:61:af:40:01:be:1e:00:54:a3:7b:6a:9c:12: 09:11:cc:b2:24:f5:61:1b:a6:dd:5f:86:89:37:0c:3d:e2:87: 28:29:24:65:12:1f:5b:c5:5e:26:34:c8:f9:be:a1:05:4a:e7: e0:56:93:ef:da:c7:85:76:19:0c:9b:17:bb:32:d4:ec:9f:10: 84:84:2b:f0:33:62:53:d2:1e:8b:0a:dc:1d:53:fe:ae:76:f8: 7b:3d:66:83:4f:23:18:42:2b:54:71:74:db:7c:be:92:98:df: 01:5f:53:74:4b:5a:4f:86:fa:34:af:b3:ec:ab:6d:3a:8a:03: e1:03:13:cd:69:e4:b7:f6:2d:df:01:43:55:f7:07:a2:e0:05: 51:a6:16:1f:32:70:f8:94:32:a3:e1:b5:e0:bf:a6:96:db:e9: 3b:56:6b:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDyeSPjZWqa9QhEKDu1DECMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxN2I4MTQ3NTAzZWExOWY1ODFjYTAwZDI4ZGJlZTVlNThj YjhmNDgwHhcNMjUxMjIyMDIwMTAzWhcNMjUxMjIzMDIwMTAzWjAzMTEwLwYDVQQD EyhlYmE0YTU4YzA5Y2EyMzgxNzIxODc2ZDcwMDk2N2Q4YzZkZmUyYjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrZl1vRysmLUtjCkX/qgPIDkTFv7 DqwZ8ThoHkQo3Fa7UqlmUEneQaVewgdOJ/eMsLEUX0z3mPImkLpVELOyeJ4LgIV7 IaxNxvFHLw656NOJRsCVXq9L2ZvAGpyxGuL/re653bRdWblgt31GV1aGw04dbxVe /RTY+mY/aGeCTRBKofTbNW98I4p6l5FLgVkxn2MT26K9Gaq6YIky4a6nHaBGeZBB tDmHst9k/S/82rhOPKFmJw/09Fvb3r1wKDW6GI48JNeUcWkRpDH4X5p6l8U0us/+ WW7+p6plAIrL1zWhr1EGTFavrjFMOkq/vOTeZu4RIesTuySB01Ylgi+McwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOukpYwJyiOBchh21wCWfYxt/itdMB8GA1UdIwQY MBaAFDF7gUdQPqGfWBygDSjb7l5Yy49IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVh1QlIxQS1vWjlZSEtBTktOdnVYbGpMajBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8yZTRlNTQtMDU0OC00ZDBjLTkzZjEt NzU0NjFhYmJiNWE0LzEvTVh1QlIxQS1vWjlZSEtBTktOdnVYbGpMajBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS8yZTRlNTQtMDU0OC00ZDBjLTkzZjEtNzU0NjFhYmJiNWE0 LzEvTVh1QlIxQS1vWjlZSEtBTktOdnVYbGpMajBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjFp7v+nm aMocrGnTyYAuPipBgzAFVmm1yO8m5tbY37TXZts3i9pk07+3X66gGsldxMm0FSmn +hhUNE3hZH8k6nKm2J5osBO6VWoQpDLX/uuXBe8gcgpSQjEYOSlnVcJhr0ABvh4A VKN7apwSCRHMsiT1YRum3V+GiTcMPeKHKCkkZRIfW8VeJjTI+b6hBUrn4FaT79rH hXYZDJsXuzLU7J8QhIQr8DNiU9IeiwrcHVP+rnb4ez1mg08jGEIrVHF023y+kpjf AV9TdEtaT4b6NK+z7KttOooD4QMTzWnkt/Yt3wFDVfcHouAFUaYWHzJw+JQyo+G1 4L+mltvpO1ZrFg== -----END CERTIFICATE-----Generated at Mon Dec 22 04:20:03 2025 by rpki-client