This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.mft File: MBlcO7BQWGtfTlAEEYAHxIs06uU.mft (raw, json) Hash identifier: 83rr3lvFghcdUyhcc96mZMh6XiwbrvmNRyh2Fye97uc= Subject key identifier: 9C:90:C9:E4:A1:47:AA:D9:AA:C9:7C:6E:20:B6:33:82:98:FB:2E:95 Authority key identifier: 30:19:5C:3B:B0:50:58:6B:5F:4E:50:04:11:80:07:C4:8B:34:EA:E5 Certificate issuer: /CN=30195c3bb050586b5f4e5004118007c48b34eae5 Certificate serial: 019B11944852F19AD55B048F22E11973219A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MBlcO7BQWGtfTlAEEYAHxIs06uU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.mft Manifest number: 1771 Signing time: Fri 12 Dec 2025 08:01:29 +0000 Manifest this update: Fri 12 Dec 2025 08:01:29 +0000 Manifest next update: Sat 13 Dec 2025 08:01:29 +0000 Files and hashes: 1: FVoKa0hbyicRxj9T5QoKnrF-IQk.roa (hash: PJKMkHGyKfQ7AHpH2DcIDSD5neBvRyes+CMY82lEecA=) 2: MBlcO7BQWGtfTlAEEYAHxIs06uU.crl (hash: xahGJkDbPy7GfBSZfY368+IPRim7WG4tczB0oi+57tk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.crl rsync://rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.mft rsync://rpki.ripe.net/repository/DEFAULT/MBlcO7BQWGtfTlAEEYAHxIs06uU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:94:48:52:f1:9a:d5:5b:04:8f:22:e1:19:73:21:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30195c3bb050586b5f4e5004118007c48b34eae5 Validity Not Before: Dec 12 08:01:29 2025 GMT Not After : Dec 13 08:01:29 2025 GMT Subject: CN=9c90c9e4a147aad9aac97c6e20b6338298fb2e95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:bc:d7:d9:34:61:26:25:e3:a3:5e:44:12:e8: 1c:d3:a8:1b:05:30:fa:c7:84:c7:2e:9c:97:24:53: 6a:c5:bb:86:1f:e2:ef:04:b2:81:13:69:28:43:d1: c6:e3:e4:dc:66:2c:f4:9d:2d:fd:08:56:d7:48:c8: d2:dd:e7:39:e6:3c:be:66:5a:e6:dc:85:11:eb:17: 75:55:6f:08:e0:51:1b:e6:9d:6f:64:9e:16:c9:6c: 19:99:af:82:7a:d5:6e:b8:b2:66:ce:1a:0f:ba:c4: 59:5a:fc:aa:3d:c6:82:60:e0:b8:1b:be:6d:be:af: 64:b9:9e:9a:cf:58:e1:d8:f9:d0:d6:9f:58:93:43: bd:d1:12:eb:11:1e:d6:6a:7b:4e:ce:fe:78:96:a4: 41:ed:14:0a:fc:ed:06:ba:c9:02:49:b2:85:9f:7d: 18:36:eb:04:0e:b8:66:19:02:00:f9:72:90:04:f5: c3:22:50:d8:d1:73:a1:16:36:32:b1:fb:43:21:b1: 57:36:47:51:5c:3d:b4:65:a5:7c:ec:02:16:19:d6: 18:78:7c:a5:ff:c5:9c:df:f1:3a:fd:f6:c7:ba:76: 5a:7c:4b:fe:f8:63:31:c4:91:39:9a:42:53:61:51: 1f:ae:41:b8:63:f4:c9:5b:21:6b:95:11:a6:b6:4e: 26:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:90:C9:E4:A1:47:AA:D9:AA:C9:7C:6E:20:B6:33:82:98:FB:2E:95 X509v3 Authority Key Identifier: keyid:30:19:5C:3B:B0:50:58:6B:5F:4E:50:04:11:80:07:C4:8B:34:EA:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBlcO7BQWGtfTlAEEYAHxIs06uU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:0b:da:bb:aa:ec:f0:25:5f:e3:b9:8c:fe:0a:28:0a:ad:96: b4:af:e4:1d:52:46:02:96:7d:a6:c2:c0:ce:35:07:7c:0b:f9: a6:9c:14:7a:5f:5a:bf:3a:d1:a0:17:70:71:70:66:78:0b:92: e3:cb:60:be:e4:ec:33:e2:6f:54:6b:49:46:0e:36:b7:81:69: b5:e9:3f:16:bf:99:fe:3d:8e:73:e8:98:9e:82:ec:ec:8f:4f: 68:b8:b9:36:6a:5a:bc:90:ad:6a:68:c0:ff:95:5e:ed:c8:24: 50:fe:99:8b:38:eb:2b:41:2a:43:4c:e4:b1:dc:38:be:c0:8e: 1a:31:d9:83:9d:31:8c:25:79:9a:ac:ed:3c:5d:fd:7c:b6:94: fd:4a:ea:5d:28:03:4f:58:b9:c7:f8:4e:d1:12:da:7c:83:8b: 00:13:ae:2f:4e:f9:2a:f0:0b:37:86:d9:99:b3:c6:1f:f0:02: d0:8d:6f:17:4e:d6:76:13:36:b2:a9:4f:99:29:2a:f7:9d:8b: df:4f:e4:fc:55:f6:df:46:2d:38:b5:81:af:34:99:2d:a9:54: 33:73:b7:52:ef:4f:d5:f3:e6:31:1c:64:24:d3:f2:62:ff:40: cb:0b:48:fb:86:70:06:cc:9e:1a:63:c2:95:25:6e:1a:e4:db: 0a:65:5d:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsRlEhS8ZrVWwSPIuEZcyGaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwMTk1YzNiYjA1MDU4NmI1ZjRlNTAwNDExODAwN2M0OGIz NGVhZTUwHhcNMjUxMjEyMDgwMTI5WhcNMjUxMjEzMDgwMTI5WjAzMTEwLwYDVQQD Eyg5YzkwYzllNGExNDdhYWQ5YWFjOTdjNmUyMGI2MzM4Mjk4ZmIyZTk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLzX2TRhJiXjo15EEugc06gbBTD6 x4THLpyXJFNqxbuGH+LvBLKBE2koQ9HG4+TcZiz0nS39CFbXSMjS3ec55jy+Zlrm 3IUR6xd1VW8I4FEb5p1vZJ4WyWwZma+CetVuuLJmzhoPusRZWvyqPcaCYOC4G75t vq9kuZ6az1jh2PnQ1p9Yk0O90RLrER7WantOzv54lqRB7RQK/O0GuskCSbKFn30Y NusEDrhmGQIA+XKQBPXDIlDY0XOhFjYysftDIbFXNkdRXD20ZaV87AIWGdYYeHyl /8Wc3/E6/fbHunZafEv++GMxxJE5mkJTYVEfrkG4Y/TJWyFrlRGmtk4mqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJyQyeShR6rZqsl8biC2M4KY+y6VMB8GA1UdIwQY MBaAFDAZXDuwUFhrX05QBBGAB8SLNOrlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUJsY083QlFXR3RmVGxBRUVZQUh4SXMwNnVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9jNzYyNzUtZDhkYS00NTIzLTgzYWQt YjQyMWMzOGIyZjdmLzEvTUJsY083QlFXR3RmVGxBRUVZQUh4SXMwNnVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9jNzYyNzUtZDhkYS00NTIzLTgzYWQtYjQyMWMzOGIyZjdm LzEvTUJsY083QlFXR3RmVGxBRUVZQUh4SXMwNnVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGAvau6rs 8CVf47mM/gooCq2WtK/kHVJGApZ9psLAzjUHfAv5ppwUel9avzrRoBdwcXBmeAuS 48tgvuTsM+JvVGtJRg42t4Fptek/Fr+Z/j2Oc+iYnoLs7I9PaLi5NmpavJCtamjA /5Ve7cgkUP6ZizjrK0EqQ0zksdw4vsCOGjHZg50xjCV5mqztPF39fLaU/UrqXSgD T1i5x/hO0RLafIOLABOuL075KvALN4bZmbPGH/AC0I1vF07WdhM2sqlPmSkq952L 30/k/FX230YtOLWBrzSZLalUM3O3Uu9P1fPmMRxkJNPyYv9AywtI+4ZwBsyeGmPC lSVuGuTbCmVdug== -----END CERTIFICATE-----Generated at Fri Dec 12 13:14:48 2025 by rpki-client