This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/ccdc8f-285d-43b6-8def-4b39fcabc371/1/MBYKH8YoL1eCp6in6g7SBrlEQSM.mft File: MBYKH8YoL1eCp6in6g7SBrlEQSM.mft (raw, json) Hash identifier: cD4AYAAtu4PKlQ2pXNCBQDp0WczDCinzPNtMn0AXbFE= Subject key identifier: 29:FE:17:43:89:00:25:7C:04:92:38:53:57:A5:F3:03:3B:01:36:B6 Authority key identifier: 30:16:0A:1F:C6:28:2F:57:82:A7:A8:A7:EA:0E:D2:06:B9:44:41:23 Certificate issuer: /CN=30160a1fc6282f5782a7a8a7ea0ed206b9444123 Certificate serial: 019AAC1510A8FE4C7877850A02A866BB5FCF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MBYKH8YoL1eCp6in6g7SBrlEQSM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/ccdc8f-285d-43b6-8def-4b39fcabc371/1/MBYKH8YoL1eCp6in6g7SBrlEQSM.mft Manifest number: 068D Signing time: Sat 22 Nov 2025 15:00:52 +0000 Manifest this update: Sat 22 Nov 2025 15:00:52 +0000 Manifest next update: Sun 23 Nov 2025 15:00:52 +0000 Files and hashes: 1: HB4IhdwJTMbxhpvjbt56qq4pRj4.roa (hash: 9DEHc5XR7sLsTAJDe4PK9ikNGkjNKZGV2LC/PP63QHo=) 2: LyL-vHk5nmQH5BUFL_MLxK_-CMg.roa (hash: x/LQ85Ba6X1diSN88n/xPeBpJxAdwtrVHussR4Eyk+s=) 3: MBYKH8YoL1eCp6in6g7SBrlEQSM.crl (hash: 1aDhWuKrfQSUsiRtxR55xDT8xlvODeg2w5zrx776FrA=) 4: VAFUCoUK_BVxyNjCRQWaoFAcB9M.roa (hash: vDTV3bo0aODJvLN0QwS2mzTjLvwXVgvjezjkUwqmkNs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/ccdc8f-285d-43b6-8def-4b39fcabc371/1/MBYKH8YoL1eCp6in6g7SBrlEQSM.crl rsync://rpki.ripe.net/repository/DEFAULT/76/ccdc8f-285d-43b6-8def-4b39fcabc371/1/MBYKH8YoL1eCp6in6g7SBrlEQSM.mft rsync://rpki.ripe.net/repository/DEFAULT/MBYKH8YoL1eCp6in6g7SBrlEQSM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ac:15:10:a8:fe:4c:78:77:85:0a:02:a8:66:bb:5f:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30160a1fc6282f5782a7a8a7ea0ed206b9444123 Validity Not Before: Nov 22 15:00:52 2025 GMT Not After : Nov 23 15:00:52 2025 GMT Subject: CN=29fe17438900257c0492385357a5f3033b0136b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:6d:30:d1:ea:17:65:34:3b:9b:ed:bc:07:f0: 58:24:55:b5:ef:46:5d:49:c6:58:b5:85:b8:96:15: f8:ae:cb:b6:f0:3d:78:de:66:6e:08:34:65:ea:50: e8:82:8e:4a:5f:19:b3:34:c1:b4:ee:50:a4:27:6a: 75:0b:2e:16:46:4d:67:73:03:a6:94:31:2d:dd:c0: 6b:0d:f8:0a:02:5f:1d:83:d9:6f:90:f2:e6:e5:6c: 9c:7e:1f:a6:fa:c4:aa:ad:41:53:0e:38:c2:e8:af: 99:8e:be:6c:9c:4a:a6:ce:86:73:67:0d:b9:4f:c0: c5:06:3f:d8:f2:2a:e3:45:9d:55:8d:84:38:4b:01: 4f:dd:46:b4:80:ee:55:9b:f1:22:47:af:f3:0e:f4: 00:c5:50:da:a3:e4:53:f6:be:a4:c7:55:a1:a7:ff: 46:a2:8f:83:fc:ef:97:a1:9a:8f:bb:59:40:e5:b5: 6d:74:13:55:4a:02:cd:a4:c0:37:17:1c:6f:4c:b6: 19:ce:bc:b1:a6:55:f3:6e:52:26:43:27:28:d3:a0: ff:0e:a9:2a:11:d1:fe:74:7c:3a:38:cf:43:bc:16: 99:2c:39:38:21:9c:41:8c:f3:e3:5a:d4:11:51:c2: cd:c2:af:a6:93:3b:f9:98:72:c0:41:71:ae:98:56: a3:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:FE:17:43:89:00:25:7C:04:92:38:53:57:A5:F3:03:3B:01:36:B6 X509v3 Authority Key Identifier: keyid:30:16:0A:1F:C6:28:2F:57:82:A7:A8:A7:EA:0E:D2:06:B9:44:41:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBYKH8YoL1eCp6in6g7SBrlEQSM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/ccdc8f-285d-43b6-8def-4b39fcabc371/1/MBYKH8YoL1eCp6in6g7SBrlEQSM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/ccdc8f-285d-43b6-8def-4b39fcabc371/1/MBYKH8YoL1eCp6in6g7SBrlEQSM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:4a:9d:4d:f9:d4:8d:6c:93:70:8f:52:dd:9d:b5:38:44:f5: ed:65:8f:d5:06:b3:f4:b2:c4:f9:4f:ed:c7:84:43:eb:61:81: a6:d1:8e:8b:19:8f:10:bd:88:0e:a5:de:09:3f:6a:ed:70:5f: b5:76:9e:c5:dc:fd:e1:ed:82:ce:59:fd:52:e5:9b:2b:c3:69: 3b:88:82:47:50:96:20:fe:bd:52:ca:d8:18:19:66:6f:67:32: 34:da:90:cf:b4:f0:02:82:7d:83:ca:d6:a2:97:c6:2a:f2:1f: 72:10:4d:9b:3e:03:0b:e6:6a:fc:cb:4a:a7:b2:e1:b9:93:7f: ff:7f:0d:ed:9a:e3:83:bc:c3:aa:42:be:c0:bf:57:ab:c2:41: 82:9f:be:ab:fe:df:b3:f2:95:3c:3b:6e:4b:99:88:19:b5:c7: b7:20:f5:97:b1:99:be:e3:32:90:08:de:19:e7:6d:e9:3d:d5: 3d:3d:d2:84:eb:bc:72:3d:29:27:d8:3f:06:e3:01:ec:5e:2f: 37:b9:98:1d:97:e3:e5:c3:ef:84:04:46:e2:76:9f:30:2c:cb: 13:05:5c:a5:7b:08:7d:92:00:4f:3d:89:78:00:e5:46:b8:94: a0:df:25:9a:c3:b8:38:4d:b4:e4:5c:3a:15:fe:42:d6:c6:2c: 4d:ed:a6:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqsFRCo/kx4d4UKAqhmu1/PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwMTYwYTFmYzYyODJmNTc4MmE3YThhN2VhMGVkMjA2Yjk0 NDQxMjMwHhcNMjUxMTIyMTUwMDUyWhcNMjUxMTIzMTUwMDUyWjAzMTEwLwYDVQQD EygyOWZlMTc0Mzg5MDAyNTdjMDQ5MjM4NTM1N2E1ZjMwMzNiMDEzNmI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtW0w0eoXZTQ7m+28B/BYJFW170Zd ScZYtYW4lhX4rsu28D143mZuCDRl6lDogo5KXxmzNMG07lCkJ2p1Cy4WRk1ncwOm lDEt3cBrDfgKAl8dg9lvkPLm5Wycfh+m+sSqrUFTDjjC6K+Zjr5snEqmzoZzZw25 T8DFBj/Y8irjRZ1VjYQ4SwFP3Ua0gO5Vm/EiR6/zDvQAxVDao+RT9r6kx1Whp/9G oo+D/O+XoZqPu1lA5bVtdBNVSgLNpMA3FxxvTLYZzryxplXzblImQyco06D/Dqkq EdH+dHw6OM9DvBaZLDk4IZxBjPPjWtQRUcLNwq+mkzv5mHLAQXGumFajbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCn+F0OJACV8BJI4U1el8wM7ATa2MB8GA1UdIwQY MBaAFDAWCh/GKC9Xgqeop+oO0ga5REEjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUJZS0g4WW9MMWVDcDZpbjZnN1NCcmxFUVNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni9jY2RjOGYtMjg1ZC00M2I2LThkZWYt NGIzOWZjYWJjMzcxLzEvTUJZS0g4WW9MMWVDcDZpbjZnN1NCcmxFUVNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni9jY2RjOGYtMjg1ZC00M2I2LThkZWYtNGIzOWZjYWJjMzcx LzEvTUJZS0g4WW9MMWVDcDZpbjZnN1NCcmxFUVNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHkqdTfnU jWyTcI9S3Z21OET17WWP1Qaz9LLE+U/tx4RD62GBptGOixmPEL2IDqXeCT9q7XBf tXaexdz94e2Czln9UuWbK8NpO4iCR1CWIP69UsrYGBlmb2cyNNqQz7TwAoJ9g8rW opfGKvIfchBNmz4DC+Zq/MtKp7LhuZN//38N7Zrjg7zDqkK+wL9Xq8JBgp++q/7f s/KVPDtuS5mIGbXHtyD1l7GZvuMykAjeGedt6T3VPT3ShOu8cj0pJ9g/BuMB7F4v N7mYHZfj5cPvhARG4nafMCzLEwVcpXsIfZIATz2JeADlRriUoN8lmsO4OE205Fw6 Ff5C1sYsTe2m3w== -----END CERTIFICATE-----Generated at Sat Nov 22 21:39:56 2025 by rpki-client