This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.mft File: MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.mft (raw, json) Hash identifier: n07tas03pRlH3UC1nEp6FqOrdlLQYQ8H/5KSHeaI8fw= Subject key identifier: B5:82:DD:8D:5A:34:6A:3A:0F:1E:B2:EA:A9:EE:26:59:1C:01:B7:C8 Authority key identifier: 30:14:B8:C7:F5:09:E1:00:51:B0:CD:29:FD:8D:69:F2:85:50:8D:87 Certificate issuer: /CN=3014b8c7f509e10051b0cd29fd8d69f285508d87 Certificate serial: 019B5ABF9D35845064E1EC73F93EFB3E1E37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.mft Manifest number: 149B Signing time: Fri 26 Dec 2025 13:01:05 +0000 Manifest this update: Fri 26 Dec 2025 13:01:05 +0000 Manifest next update: Sat 27 Dec 2025 13:01:05 +0000 Files and hashes: 1: MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.crl (hash: 5N/x09v5w48O4NHWUqYl9bEHwWSBJEpMFqo9cOXv+04=) 2: Xd6umzoHHdEiQVdMV3BPecnkdkk.roa (hash: lBwKPo2uZQdPejEMFQzj+SxghwJ68Haky7eMmtLDiQQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.crl rsync://rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.mft rsync://rpki.ripe.net/repository/DEFAULT/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:9d:35:84:50:64:e1:ec:73:f9:3e:fb:3e:1e:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3014b8c7f509e10051b0cd29fd8d69f285508d87 Validity Not Before: Dec 26 13:01:05 2025 GMT Not After : Dec 27 13:01:05 2025 GMT Subject: CN=b582dd8d5a346a3a0f1eb2eaa9ee26591c01b7c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:5e:2f:33:c0:99:ae:8b:c0:b3:29:57:78:e4: d6:91:8d:ff:4c:9a:8c:8f:19:90:ff:1c:76:2e:55: da:81:df:8b:cb:34:14:c9:b5:19:dd:e6:60:0b:d7: bb:9b:e5:da:b9:83:29:69:a8:5f:4a:da:a8:55:ef: a6:40:30:18:27:15:11:b1:d2:e3:68:2f:98:1b:d8: 3a:36:db:fe:cc:f9:ab:9d:87:34:90:d0:80:c2:10: 13:44:ab:ca:7c:a0:4b:4f:ef:e9:31:4b:cb:12:10: 81:3e:e2:cd:04:b2:9a:10:bd:de:40:9a:69:8d:17: 30:f2:00:1a:ea:0a:f1:51:92:79:34:aa:4c:56:88: ba:3c:3d:4b:d2:f2:6b:d9:1a:14:ea:aa:90:d2:aa: 7e:10:f9:31:44:28:05:fe:fe:a7:7e:f4:8e:64:6a: 8f:34:23:50:87:8c:a5:c2:64:af:d9:e3:78:06:71: e3:d1:a6:e4:9e:68:dd:05:87:e2:52:96:6f:07:18: d6:d6:a5:cf:89:f8:16:ed:86:06:20:e1:cb:01:4c: 9a:42:bf:4f:a7:b0:73:d8:6b:b3:d2:ff:76:a6:63: 76:1b:75:92:af:97:8f:1b:ce:53:f7:fb:22:71:cd: 10:ef:7e:e3:d5:3a:1f:00:89:23:f6:20:c6:38:89: b4:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:82:DD:8D:5A:34:6A:3A:0F:1E:B2:EA:A9:EE:26:59:1C:01:B7:C8 X509v3 Authority Key Identifier: keyid:30:14:B8:C7:F5:09:E1:00:51:B0:CD:29:FD:8D:69:F2:85:50:8D:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:6a:ee:17:e2:7f:d5:a4:a4:4f:f0:d2:85:f9:86:4d:49:10: 21:5a:da:8d:b6:2d:c2:95:88:9c:8f:26:1e:cf:fa:a7:90:37: 03:37:1e:f2:eb:34:26:e6:90:11:1b:33:bf:f5:48:99:19:5b: b6:27:cc:0e:20:55:50:2a:da:b2:25:01:cb:de:b6:5e:37:5a: 91:e0:84:02:1e:19:fc:e6:fe:c4:4f:22:27:e1:90:66:eb:4e: 6e:77:03:5c:d8:48:8f:09:b8:a0:40:d1:80:e9:8f:b1:f1:9a: 36:09:b6:eb:0a:c4:46:17:ad:ad:90:1a:f9:95:cf:1f:f9:64: 32:0e:dd:83:26:59:ae:77:76:e3:14:07:99:da:49:35:57:64: 0e:46:58:e7:62:5d:32:96:60:30:a4:28:17:2c:d7:75:ba:9f: 3d:3c:09:b0:f2:69:cd:66:19:ce:02:3d:0b:dc:04:7c:ea:1a: 00:f7:1e:53:4d:c8:89:13:27:c8:21:71:fb:77:cc:e3:3b:91: 0d:78:77:1b:51:68:91:29:9c:c8:70:dd:0c:78:ae:f2:4d:a4: 06:b2:c5:f7:20:ca:80:8e:a3:99:12:27:67:27:29:b0:c4:2b: da:34:47:9a:a2:1a:d8:22:24:2b:66:0f:e4:51:4b:96:9f:11: a6:e5:8c:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtav501hFBk4exz+T77Ph43MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwMTRiOGM3ZjUwOWUxMDA1MWIwY2QyOWZkOGQ2OWYyODU1 MDhkODcwHhcNMjUxMjI2MTMwMTA1WhcNMjUxMjI3MTMwMTA1WjAzMTEwLwYDVQQD EyhiNTgyZGQ4ZDVhMzQ2YTNhMGYxZWIyZWFhOWVlMjY1OTFjMDFiN2M4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyV4vM8CZrovAsylXeOTWkY3/TJqM jxmQ/xx2LlXagd+LyzQUybUZ3eZgC9e7m+XauYMpaahfStqoVe+mQDAYJxURsdLj aC+YG9g6Ntv+zPmrnYc0kNCAwhATRKvKfKBLT+/pMUvLEhCBPuLNBLKaEL3eQJpp jRcw8gAa6grxUZJ5NKpMVoi6PD1L0vJr2RoU6qqQ0qp+EPkxRCgF/v6nfvSOZGqP NCNQh4ylwmSv2eN4BnHj0abknmjdBYfiUpZvBxjW1qXPifgW7YYGIOHLAUyaQr9P p7Bz2Guz0v92pmN2G3WSr5ePG85T9/sicc0Q737j1TofAIkj9iDGOIm0pQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLWC3Y1aNGo6Dx6y6qnuJlkcAbfIMB8GA1UdIwQY MBaAFDAUuMf1CeEAUbDNKf2NafKFUI2HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUJTNHhfVUo0UUJSc00wcF9ZMXA4b1ZRalljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni84Yzc5MzUtMmVkYS00M2FjLThkMGYt Nzk5NTI1YmU3MjE1LzEvTUJTNHhfVUo0UUJSc00wcF9ZMXA4b1ZRalljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni84Yzc5MzUtMmVkYS00M2FjLThkMGYtNzk5NTI1YmU3MjE1 LzEvTUJTNHhfVUo0UUJSc00wcF9ZMXA4b1ZRalljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEmruF+J/ 1aSkT/DShfmGTUkQIVrajbYtwpWInI8mHs/6p5A3Azce8us0JuaQERszv/VImRlb tifMDiBVUCrasiUBy962XjdakeCEAh4Z/Ob+xE8iJ+GQZutObncDXNhIjwm4oEDR gOmPsfGaNgm26wrERhetrZAa+ZXPH/lkMg7dgyZZrnd24xQHmdpJNVdkDkZY52Jd MpZgMKQoFyzXdbqfPTwJsPJpzWYZzgI9C9wEfOoaAPceU03IiRMnyCFx+3fM4zuR DXh3G1FokSmcyHDdDHiu8k2kBrLF9yDKgI6jmRInZycpsMQr2jRHmqIa2CIkK2YP 5FFLlp8RpuWMBw== -----END CERTIFICATE-----Generated at Fri Dec 26 16:03:56 2025 by rpki-client