This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft File: MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft (raw, json) Hash identifier: GLdktDW5yA7Flr4Wgh7gGDSd2f//3NeydY09eKzDbxc= Subject key identifier: BB:D0:D9:D1:C3:BA:FF:75:13:94:82:38:D0:27:AD:70:AA:88:2A:13 Authority key identifier: 31:B0:F6:4C:69:D3:30:B6:6E:BC:D0:3A:9B:F0:FD:C1:9F:31:47:D8 Certificate issuer: /CN=31b0f64c69d330b66ebcd03a9bf0fdc19f3147d8 Certificate serial: 019B59AC7D8EF9A045EAE36E5B8977A758B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft Manifest number: 14C9 Signing time: Fri 26 Dec 2025 08:00:35 +0000 Manifest this update: Fri 26 Dec 2025 08:00:35 +0000 Manifest next update: Sat 27 Dec 2025 08:00:35 +0000 Files and hashes: 1: 6WAg8JrDfDvaRdqnJoreTiAMqjo.roa (hash: UPvZw2SufTUPSG/smPYEJeeJol9ZJRChCX3XNigGkpQ=) 2: MbD2TGnTMLZuvNA6m_D9wZ8xR9g.crl (hash: WAm6QbvubG0wRL+jyhIs275VBrqR/ii5lOC3nh1fDWU=) 3: sv4EXNYI7McAyTz9VxEmavOg_ZI.roa (hash: pthqg1S6F7UF6pnwC1X+wqv/djtBaR5pS3UCBYsUWnw=) 4: vFLgCTe-UJbqLfUe3y5RaRMMkfQ.roa (hash: IEG6zoQ0fCsuLu4vs2hhEQUL3h31kYLoRcvO00kJOpM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft rsync://rpki.ripe.net/repository/DEFAULT/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ac:7d:8e:f9:a0:45:ea:e3:6e:5b:89:77:a7:58:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31b0f64c69d330b66ebcd03a9bf0fdc19f3147d8 Validity Not Before: Dec 26 08:00:35 2025 GMT Not After : Dec 27 08:00:35 2025 GMT Subject: CN=bbd0d9d1c3baff7513948238d027ad70aa882a13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:6f:8f:7b:de:ab:f4:87:82:1d:14:75:65:6d: 97:55:7b:ab:6f:6a:0b:75:a5:7d:6e:13:63:06:e1: 0b:0c:2f:e0:8b:c0:dc:9c:40:a8:ff:49:0d:45:42: b8:cd:ef:9e:90:a3:cf:c1:28:d5:cd:0b:1e:34:c6: 6d:52:90:2c:1f:89:90:74:0f:19:5e:ed:e8:38:b9: cb:d5:b7:7f:99:ee:80:aa:bd:80:a5:4d:98:df:bb: 99:39:b1:13:7b:00:aa:ac:47:e3:93:7a:ce:fc:96: f5:7d:30:e2:f0:fb:98:da:f2:cf:9b:17:27:fe:6f: 7d:8b:b5:b8:e1:bd:85:0e:c2:1c:c6:2f:bf:0e:45: 2f:53:78:37:4e:3a:e2:e5:65:f4:8c:4b:de:fa:c3: 74:49:9f:f1:14:a1:ec:1e:9a:f6:1b:9b:c5:b4:29: 0a:c4:4d:81:dd:a8:b1:b1:94:e0:01:22:df:b5:79: 07:e5:3e:f8:21:e7:be:93:1f:49:b6:96:96:0b:51: 77:27:2f:ec:eb:1b:32:43:83:71:5f:43:17:79:4e: b7:04:a1:bd:18:1b:42:62:6f:fa:c5:b0:d2:d1:c7: 2d:62:b1:91:01:7a:d5:ca:f1:c1:d3:91:08:51:92: e1:1f:49:b9:b9:71:7c:b5:d1:cc:e4:65:ce:7e:0d: ad:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:D0:D9:D1:C3:BA:FF:75:13:94:82:38:D0:27:AD:70:AA:88:2A:13 X509v3 Authority Key Identifier: keyid:31:B0:F6:4C:69:D3:30:B6:6E:BC:D0:3A:9B:F0:FD:C1:9F:31:47:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:06:f2:ab:6c:87:f6:ec:eb:79:58:04:09:bc:4c:a2:0b:3d: 48:26:2e:bd:51:35:cb:49:e9:2b:40:e0:82:05:b3:7f:99:a6: d3:29:cf:10:ec:3b:59:47:10:3d:37:99:f2:a7:01:e7:49:ef: 2c:ce:fb:92:5e:47:4a:3e:96:51:2e:9f:73:55:68:80:49:ae: e4:52:73:e1:ba:68:08:97:b3:2d:a1:7b:c1:48:16:a0:6f:2d: 95:65:4f:ea:db:50:2c:b6:ad:d8:1e:48:8c:ad:73:71:22:88: 7d:62:39:9b:76:8a:77:fc:a2:fc:af:a3:7e:a4:7d:24:c7:a0: e2:dc:9e:9d:e1:b3:e3:23:2e:a6:00:4f:33:29:f5:c6:61:f0: b1:e4:b0:52:e0:39:44:4d:86:de:2d:40:09:19:2c:79:9f:1c: 76:9c:70:04:19:41:e0:00:f6:3d:ac:f3:98:a2:9c:9d:79:6f: aa:41:ed:cc:c5:bd:1a:da:f5:a3:05:17:5c:bf:ba:0a:66:5d: a3:e4:40:19:0c:09:5a:a8:4a:96:9c:d9:26:6d:7c:76:0e:b1: 51:9b:9e:b3:a7:3c:70:5d:68:52:d8:10:f7:8e:4a:35:90:b6: c4:0d:cf:0f:33:49:3d:ec:18:3c:61:cf:b2:05:25:eb:af:0e: e1:40:84:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrH2O+aBF6uNuW4l3p1i0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxYjBmNjRjNjlkMzMwYjY2ZWJjZDAzYTliZjBmZGMxOWYz MTQ3ZDgwHhcNMjUxMjI2MDgwMDM1WhcNMjUxMjI3MDgwMDM1WjAzMTEwLwYDVQQD EyhiYmQwZDlkMWMzYmFmZjc1MTM5NDgyMzhkMDI3YWQ3MGFhODgyYTEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtm+Pe96r9IeCHRR1ZW2XVXurb2oL daV9bhNjBuELDC/gi8DcnECo/0kNRUK4ze+ekKPPwSjVzQseNMZtUpAsH4mQdA8Z Xu3oOLnL1bd/me6Aqr2ApU2Y37uZObETewCqrEfjk3rO/Jb1fTDi8PuY2vLPmxcn /m99i7W44b2FDsIcxi+/DkUvU3g3Tjri5WX0jEve+sN0SZ/xFKHsHpr2G5vFtCkK xE2B3aixsZTgASLftXkH5T74Iee+kx9JtpaWC1F3Jy/s6xsyQ4NxX0MXeU63BKG9 GBtCYm/6xbDS0cctYrGRAXrVyvHB05EIUZLhH0m5uXF8tdHM5GXOfg2tHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLvQ2dHDuv91E5SCONAnrXCqiCoTMB8GA1UdIwQY MBaAFDGw9kxp0zC2brzQOpvw/cGfMUfYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWJEMlRHblRNTFp1dk5BNm1fRDl3Wjh4UjlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8yZmI0NzMtOGU2Yi00ZjBkLWFkMzAt ZDQ5MzQ0OTNhNjc5LzEvTWJEMlRHblRNTFp1dk5BNm1fRDl3Wjh4UjlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8yZmI0NzMtOGU2Yi00ZjBkLWFkMzAtZDQ5MzQ0OTNhNjc5 LzEvTWJEMlRHblRNTFp1dk5BNm1fRDl3Wjh4UjlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFwbyq2yH 9uzreVgECbxMogs9SCYuvVE1y0npK0DgggWzf5mm0ynPEOw7WUcQPTeZ8qcB50nv LM77kl5HSj6WUS6fc1VogEmu5FJz4bpoCJezLaF7wUgWoG8tlWVP6ttQLLat2B5I jK1zcSKIfWI5m3aKd/yi/K+jfqR9JMeg4tyeneGz4yMupgBPMyn1xmHwseSwUuA5 RE2G3i1ACRkseZ8cdpxwBBlB4AD2PazzmKKcnXlvqkHtzMW9Gtr1owUXXL+6CmZd o+RAGQwJWqhKlpzZJm18dg6xUZues6c8cF1oUtgQ945KNZC2xA3PDzNJPewYPGHP sgUl668O4UCEEw== -----END CERTIFICATE-----Generated at Fri Dec 26 15:56:19 2025 by rpki-client