This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/9fd57c-90ef-44b0-93e4-fe5aed59a7d9/1/MTzbxLTeVJXuYTF9LnN8LD9_g7o.mft File: MTzbxLTeVJXuYTF9LnN8LD9_g7o.mft (raw, json) Hash identifier: /mhKEsrP445RM0eKmyrYV4bxpU6V5uk0aDkHpgd/yHg= Subject key identifier: C3:88:9D:01:65:57:E9:EA:C8:9F:FA:01:74:4C:16:F0:9F:E9:39:EF Authority key identifier: 31:3C:DB:C4:B4:DE:54:95:EE:61:31:7D:2E:73:7C:2C:3F:7F:83:BA Certificate issuer: /CN=313cdbc4b4de5495ee61317d2e737c2c3f7f83ba Certificate serial: 019B5A51C2C7A1CF60940FDDEBEEE389839A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MTzbxLTeVJXuYTF9LnN8LD9_g7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/9fd57c-90ef-44b0-93e4-fe5aed59a7d9/1/MTzbxLTeVJXuYTF9LnN8LD9_g7o.mft Manifest number: 179A Signing time: Fri 26 Dec 2025 11:01:06 +0000 Manifest this update: Fri 26 Dec 2025 11:01:06 +0000 Manifest next update: Sat 27 Dec 2025 11:01:06 +0000 Files and hashes: 1: MTzbxLTeVJXuYTF9LnN8LD9_g7o.crl (hash: BIvpSOQusGDUUpjwwKJvGGRn262ttFc2BjOgrMzze80=) 2: obw4nOA7tbdHTmeG8UDdlnqVl2Y.roa (hash: irTwgjfFzy8NnkY/EBFl3pB1GcEZSVUg+iwZc/3vTSw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/9fd57c-90ef-44b0-93e4-fe5aed59a7d9/1/MTzbxLTeVJXuYTF9LnN8LD9_g7o.crl rsync://rpki.ripe.net/repository/DEFAULT/57/9fd57c-90ef-44b0-93e4-fe5aed59a7d9/1/MTzbxLTeVJXuYTF9LnN8LD9_g7o.mft rsync://rpki.ripe.net/repository/DEFAULT/MTzbxLTeVJXuYTF9LnN8LD9_g7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:c2:c7:a1:cf:60:94:0f:dd:eb:ee:e3:89:83:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=313cdbc4b4de5495ee61317d2e737c2c3f7f83ba Validity Not Before: Dec 26 11:01:06 2025 GMT Not After : Dec 27 11:01:06 2025 GMT Subject: CN=c3889d016557e9eac89ffa01744c16f09fe939ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:fc:72:6d:cc:6f:23:8d:c4:94:2a:a3:a8:5a: 8d:26:b6:9c:d8:5e:b7:82:07:63:78:aa:2a:29:eb: f8:a4:ea:d9:cb:18:4e:e3:3a:d9:b1:f9:60:f3:e9: 9e:e4:ab:3a:7a:53:c6:72:a5:ca:71:02:69:4e:4f: c0:df:df:c3:78:4d:1a:0a:4d:ec:df:92:25:4d:9e: 3a:c4:83:a7:ff:f0:88:0a:ff:f4:73:75:73:3d:29: 2f:39:7b:33:5b:8f:a2:82:05:94:3e:73:6c:44:c3: e5:41:39:2f:a5:15:4f:fe:7f:ea:b5:57:6a:62:43: 1c:05:0d:60:08:ce:59:11:80:16:ee:ec:a4:9d:0e: 16:dd:33:3f:fc:22:2e:a9:21:33:9a:2f:05:d9:4e: 44:ed:62:42:8e:24:59:93:2f:ad:3d:cc:c3:18:b3: e4:8f:37:2f:3e:fa:0a:56:3f:e1:78:32:31:b5:f1: 65:9c:0c:d2:a7:16:fc:6a:31:38:ac:c1:d2:02:b9: ea:cb:8c:d5:0e:87:f9:d5:d8:e5:62:d9:64:36:14: d2:df:d0:dd:37:9f:fa:3e:5e:9d:e8:cb:3c:09:a1: 0b:ff:33:11:e9:ab:52:3d:4c:5d:ad:0c:61:5d:50: 3c:19:a8:ed:bf:f8:19:3a:47:48:e4:4f:ad:96:24: 51:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:88:9D:01:65:57:E9:EA:C8:9F:FA:01:74:4C:16:F0:9F:E9:39:EF X509v3 Authority Key Identifier: keyid:31:3C:DB:C4:B4:DE:54:95:EE:61:31:7D:2E:73:7C:2C:3F:7F:83:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MTzbxLTeVJXuYTF9LnN8LD9_g7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/9fd57c-90ef-44b0-93e4-fe5aed59a7d9/1/MTzbxLTeVJXuYTF9LnN8LD9_g7o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/9fd57c-90ef-44b0-93e4-fe5aed59a7d9/1/MTzbxLTeVJXuYTF9LnN8LD9_g7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:4d:eb:4b:40:08:0b:00:1a:96:6d:58:50:e1:e0:fb:ad:e3: 93:10:01:6b:d7:c2:99:4c:25:89:1f:b7:ef:39:3c:68:08:03: 52:20:94:93:16:81:88:71:29:e8:70:a9:a5:98:b5:2b:08:e0: 80:27:c5:9d:ca:e6:67:f3:a3:7f:08:46:24:6c:4f:c2:fa:f1: be:e4:fa:68:e1:04:95:c3:4c:cd:52:ef:55:34:2e:e9:61:74: cf:de:2a:1c:a1:6f:8e:f6:5c:e5:1d:61:e9:16:e4:3a:3b:58: 11:df:c8:18:38:cb:27:fa:d4:88:e2:08:ea:d5:e4:b7:66:64: 41:d7:b6:7e:af:76:31:57:eb:ff:b6:e8:be:45:ab:bd:2e:0c: 0f:98:3e:17:59:ce:ae:13:50:c6:f6:52:ba:a0:21:ba:2b:67: 25:46:45:85:09:8c:29:bf:0b:91:da:c3:47:b9:c6:3e:23:04: 12:c4:65:88:35:63:b8:0f:e7:08:46:91:17:bb:61:fc:1e:e4: ba:ee:c5:da:02:cb:15:86:92:0a:08:19:9b:dc:85:04:79:a1: 0b:52:94:b0:bb:cf:0a:82:b6:e9:62:3b:b4:54:32:a5:56:e0: 73:ea:92:42:9c:d7:44:45:c5:07:56:69:ae:57:4c:4a:a8:77: 0d:d8:89:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUcLHoc9glA/d6+7jiYOaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxM2NkYmM0YjRkZTU0OTVlZTYxMzE3ZDJlNzM3YzJjM2Y3 ZjgzYmEwHhcNMjUxMjI2MTEwMTA2WhcNMjUxMjI3MTEwMTA2WjAzMTEwLwYDVQQD EyhjMzg4OWQwMTY1NTdlOWVhYzg5ZmZhMDE3NDRjMTZmMDlmZTkzOWVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPxybcxvI43ElCqjqFqNJrac2F63 ggdjeKoqKev4pOrZyxhO4zrZsflg8+me5Ks6elPGcqXKcQJpTk/A39/DeE0aCk3s 35IlTZ46xIOn//CICv/0c3VzPSkvOXszW4+iggWUPnNsRMPlQTkvpRVP/n/qtVdq YkMcBQ1gCM5ZEYAW7uyknQ4W3TM//CIuqSEzmi8F2U5E7WJCjiRZky+tPczDGLPk jzcvPvoKVj/heDIxtfFlnAzSpxb8ajE4rMHSArnqy4zVDof51djlYtlkNhTS39Dd N5/6Pl6d6Ms8CaEL/zMR6atSPUxdrQxhXVA8Gajtv/gZOkdI5E+tliRRbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMOInQFlV+nqyJ/6AXRMFvCf6TnvMB8GA1UdIwQY MBaAFDE828S03lSV7mExfS5zfCw/f4O6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVR6YnhMVGVWSlh1WVRGOUxuTjhMRDlfZzdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny85ZmQ1N2MtOTBlZi00NGIwLTkzZTQt ZmU1YWVkNTlhN2Q5LzEvTVR6YnhMVGVWSlh1WVRGOUxuTjhMRDlfZzdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny85ZmQ1N2MtOTBlZi00NGIwLTkzZTQtZmU1YWVkNTlhN2Q5 LzEvTVR6YnhMVGVWSlh1WVRGOUxuTjhMRDlfZzdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgU3rS0AI CwAalm1YUOHg+63jkxABa9fCmUwliR+37zk8aAgDUiCUkxaBiHEp6HCppZi1Kwjg gCfFncrmZ/OjfwhGJGxPwvrxvuT6aOEElcNMzVLvVTQu6WF0z94qHKFvjvZc5R1h 6RbkOjtYEd/IGDjLJ/rUiOII6tXkt2ZkQde2fq92MVfr/7bovkWrvS4MD5g+F1nO rhNQxvZSuqAhuitnJUZFhQmMKb8LkdrDR7nGPiMEEsRliDVjuA/nCEaRF7th/B7k uu7F2gLLFYaSCggZm9yFBHmhC1KUsLvPCoK26WI7tFQypVbgc+qSQpzXREXFB1Zp rldMSqh3DdiJyA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:18:17 2025 by rpki-client