This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft File: mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft (raw, json) Hash identifier: /w9g7yIGR77iP17mmbOjG1eCFvG5cuM4dYPX31FcLqY= Subject key identifier: DE:8B:2D:90:FD:8F:56:89:52:9D:B8:A7:B6:FF:E4:C7:B8:F4:6F:F8 Authority key identifier: 9A:B6:E9:B9:33:BD:0C:C9:0C:59:92:44:6F:8A:C8:47:26:91:6B:1A Certificate issuer: /CN=9ab6e9b933bd0cc90c5992446f8ac84726916b1a Certificate serial: 019B0F6E24CCF545DAD18B49F941DE8E4ACD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mrbpuTO9DMkMWZJEb4rIRyaRaxo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft Manifest number: 0D9E Signing time: Thu 11 Dec 2025 22:00:35 +0000 Manifest this update: Thu 11 Dec 2025 22:00:35 +0000 Manifest next update: Fri 12 Dec 2025 22:00:35 +0000 Files and hashes: 1: bm8ink1EnYeZoE7eF0O4NwMqDE8.roa (hash: ybm88hkKSlN5zUNNYgkBe2I5P6bnL+MMj8/tMIJfo60=) 2: mrbpuTO9DMkMWZJEb4rIRyaRaxo.crl (hash: 2i5hKzi3lwwAXvXvwviuBU4o47RfX6tBPOklcVOO4kU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.crl rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft rsync://rpki.ripe.net/repository/DEFAULT/mrbpuTO9DMkMWZJEb4rIRyaRaxo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:6e:24:cc:f5:45:da:d1:8b:49:f9:41:de:8e:4a:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab6e9b933bd0cc90c5992446f8ac84726916b1a Validity Not Before: Dec 11 22:00:35 2025 GMT Not After : Dec 12 22:00:35 2025 GMT Subject: CN=de8b2d90fd8f5689529db8a7b6ffe4c7b8f46ff8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:c9:fc:8c:84:61:9c:21:f1:8c:11:2c:1a:1d: 03:d0:a9:e4:be:c6:f0:b2:14:00:47:e4:52:54:b3: 71:9c:66:99:77:b1:4c:dd:7f:93:4e:0e:08:0f:19: 38:7a:f5:bc:7f:4a:15:7e:cd:ae:2a:9e:be:cc:68: 52:2c:1a:21:fc:6b:47:04:bf:90:2a:41:9c:6c:57: 48:1b:f4:12:6d:cb:a4:3f:d5:de:49:0e:92:35:ee: 6f:a6:22:3c:cd:44:4b:65:9f:5e:56:70:e2:26:1d: 68:98:47:af:b1:73:dd:57:12:da:08:b5:40:77:a4: d0:f3:1d:a0:58:c6:a3:3a:8e:cf:db:f6:f4:b2:3b: 94:8f:96:79:80:b7:23:8c:ee:92:7a:01:69:b1:b0: ef:d0:98:2b:37:8d:dc:27:55:f1:78:f9:4b:f7:cc: 81:74:66:12:6c:c0:21:99:ee:de:51:75:a2:6b:02: e1:b1:a2:d4:8f:db:aa:c7:e2:d7:16:a5:a7:bd:70: af:77:72:39:7c:75:7e:11:8b:d7:de:f4:6a:af:26: 18:fb:eb:dc:85:b2:91:a1:9f:a7:19:a9:26:b4:ad: ce:d7:86:1c:ab:75:bb:a6:e1:e5:d2:37:4d:98:09: 32:3f:f7:65:06:6e:f0:08:ff:55:c8:fe:48:bb:06: 74:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:8B:2D:90:FD:8F:56:89:52:9D:B8:A7:B6:FF:E4:C7:B8:F4:6F:F8 X509v3 Authority Key Identifier: keyid:9A:B6:E9:B9:33:BD:0C:C9:0C:59:92:44:6F:8A:C8:47:26:91:6B:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mrbpuTO9DMkMWZJEb4rIRyaRaxo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:f0:77:8b:3d:10:db:c1:0b:2a:1a:a4:f0:27:8d:e2:d8:79: c4:15:35:a1:36:83:82:89:b4:9d:e5:51:2a:b7:c0:fa:d7:3c: b9:16:da:6c:dd:97:a3:34:5d:ba:80:23:65:ca:78:09:c6:99: d4:f5:7f:ab:98:84:c2:eb:93:f1:a4:ef:1b:17:69:7d:83:82: 4e:2e:63:1c:bd:43:c3:7f:b7:ba:59:61:d2:d8:4b:ae:a9:d5: d7:eb:45:21:40:17:97:7b:2b:59:bd:89:3f:a9:4f:17:ff:93: a7:2a:b4:92:78:8b:9d:dc:fe:5f:bf:76:68:da:c5:08:28:da: 73:50:5d:1f:c3:66:50:44:f1:10:31:07:9b:42:4c:95:23:30: cb:56:18:bb:d9:f8:11:67:c5:92:a7:03:fb:31:38:c1:7c:6d: 02:fb:7b:f4:4b:31:a5:a6:d2:26:81:a8:25:eb:9d:a1:30:90: f6:0e:0e:ef:95:57:83:12:81:a4:64:87:ce:6e:e6:e9:a6:13: 09:86:88:e4:39:39:72:61:58:9b:19:e5:9a:f3:d4:ae:55:a5: 07:7a:f7:25:13:6f:1a:4d:01:cc:41:52:04:0a:49:3d:6e:57: 71:35:39:79:94:30:57:4a:66:da:b4:41:e3:9c:bb:18:4a:1a: bf:ee:f6:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPbiTM9UXa0YtJ+UHejkrNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhYjZlOWI5MzNiZDBjYzkwYzU5OTI0NDZmOGFjODQ3MjY5 MTZiMWEwHhcNMjUxMjExMjIwMDM1WhcNMjUxMjEyMjIwMDM1WjAzMTEwLwYDVQQD EyhkZThiMmQ5MGZkOGY1Njg5NTI5ZGI4YTdiNmZmZTRjN2I4ZjQ2ZmY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA18n8jIRhnCHxjBEsGh0D0Knkvsbw shQAR+RSVLNxnGaZd7FM3X+TTg4IDxk4evW8f0oVfs2uKp6+zGhSLBoh/GtHBL+Q KkGcbFdIG/QSbcukP9XeSQ6SNe5vpiI8zURLZZ9eVnDiJh1omEevsXPdVxLaCLVA d6TQ8x2gWMajOo7P2/b0sjuUj5Z5gLcjjO6SegFpsbDv0JgrN43cJ1XxePlL98yB dGYSbMAhme7eUXWiawLhsaLUj9uqx+LXFqWnvXCvd3I5fHV+EYvX3vRqryYY++vc hbKRoZ+nGakmtK3O14Ycq3W7puHl0jdNmAkyP/dlBm7wCP9VyP5IuwZ0iQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN6LLZD9j1aJUp24p7b/5Me49G/4MB8GA1UdIwQY MBaAFJq26bkzvQzJDFmSRG+KyEcmkWsaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXJicHVUTzlETWtNV1pKRWI0cklSeWFSYXhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9hNDQ0N2MtNGNmMi00MWNhLTg4NTEt NDFhY2UxOTU4MDNhLzEvbXJicHVUTzlETWtNV1pKRWI0cklSeWFSYXhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi9hNDQ0N2MtNGNmMi00MWNhLTg4NTEtNDFhY2UxOTU4MDNh LzEvbXJicHVUTzlETWtNV1pKRWI0cklSeWFSYXhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASfB3iz0Q 28ELKhqk8CeN4th5xBU1oTaDgom0neVRKrfA+tc8uRbabN2XozRduoAjZcp4CcaZ 1PV/q5iEwuuT8aTvGxdpfYOCTi5jHL1Dw3+3ullh0thLrqnV1+tFIUAXl3srWb2J P6lPF/+Tpyq0kniLndz+X792aNrFCCjac1BdH8NmUETxEDEHm0JMlSMwy1YYu9n4 EWfFkqcD+zE4wXxtAvt79EsxpabSJoGoJeudoTCQ9g4O75VXgxKBpGSHzm7m6aYT CYaI5Dk5cmFYmxnlmvPUrlWlB3r3JRNvGk0BzEFSBApJPW5XcTU5eZQwV0pm2rRB 45y7GEoav+72fA== -----END CERTIFICATE-----Generated at Fri Dec 12 00:09:19 2025 by rpki-client