This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/8b060c-17c1-4d9a-851e-b47e0417397d/1/mxNLbpAkBkuQVyg0ib8sQ29Adeg.mft File: mxNLbpAkBkuQVyg0ib8sQ29Adeg.mft (raw, json) Hash identifier: lU+NmlxeGN4+NaIaQKkixSto86csYRqB35Qu/181TI4= Subject key identifier: BA:CD:55:18:F0:CB:7A:BD:09:BC:10:F7:01:8A:02:65:D5:FB:55:2C Authority key identifier: 9B:13:4B:6E:90:24:06:4B:90:57:28:34:89:BF:2C:43:6F:40:75:E8 Certificate issuer: /CN=9b134b6e9024064b9057283489bf2c436f4075e8 Certificate serial: 019B59764773EEE3A9E624FDC7A33A79699E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mxNLbpAkBkuQVyg0ib8sQ29Adeg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/8b060c-17c1-4d9a-851e-b47e0417397d/1/mxNLbpAkBkuQVyg0ib8sQ29Adeg.mft Manifest number: 08F2 Signing time: Fri 26 Dec 2025 07:01:22 +0000 Manifest this update: Fri 26 Dec 2025 07:01:22 +0000 Manifest next update: Sat 27 Dec 2025 07:01:22 +0000 Files and hashes: 1: mxNLbpAkBkuQVyg0ib8sQ29Adeg.crl (hash: k7YGVTTgIB4HcpyiczpGlUKeElDskmmvWh6SH621KiU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/8b060c-17c1-4d9a-851e-b47e0417397d/1/mxNLbpAkBkuQVyg0ib8sQ29Adeg.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/8b060c-17c1-4d9a-851e-b47e0417397d/1/mxNLbpAkBkuQVyg0ib8sQ29Adeg.mft rsync://rpki.ripe.net/repository/DEFAULT/mxNLbpAkBkuQVyg0ib8sQ29Adeg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:47:73:ee:e3:a9:e6:24:fd:c7:a3:3a:79:69:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b134b6e9024064b9057283489bf2c436f4075e8 Validity Not Before: Dec 26 07:01:22 2025 GMT Not After : Dec 27 07:01:22 2025 GMT Subject: CN=bacd5518f0cb7abd09bc10f7018a0265d5fb552c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:65:a8:6c:c8:c7:93:f1:81:c5:82:a3:38:32: 44:72:4b:37:bc:3b:71:b9:ea:66:4a:ab:4e:d5:8e: 2f:8b:61:1d:21:cd:09:14:a6:1f:dd:a6:59:b1:ba: 1c:12:1d:b4:23:d3:f3:5e:c6:fe:52:3c:30:a5:29: 29:a3:d9:a3:68:51:ae:e6:0d:f8:0a:3e:38:d2:9a: 38:46:20:09:a9:a1:5a:11:2a:63:0c:de:0a:84:a2: 03:fb:7b:fe:0f:8e:37:b8:93:c9:10:c0:2d:f2:6b: e1:fe:7f:5b:a6:91:6d:48:d0:b0:fe:5d:77:66:1e: 47:41:05:af:6a:83:44:89:c8:1c:54:6a:6b:67:10: 6d:6d:ce:76:60:8a:63:51:da:71:c1:d2:5f:4a:18: 70:4c:60:ec:18:73:fa:6a:87:10:29:45:67:5e:23: da:dc:79:62:39:6b:43:a4:94:3e:3d:85:ad:50:1a: aa:05:ad:b5:1f:cc:b2:d3:9e:36:29:87:ab:5c:39: cd:ae:fd:cd:9c:5c:ba:cd:e9:65:2a:2a:7d:78:a1: 51:54:ad:4c:7f:8e:7a:f2:1e:81:95:ea:b7:f2:cd: 59:2e:77:6e:db:fe:1b:1a:f8:e3:07:bd:57:ae:d4: 2d:0d:fd:4d:ee:5a:58:14:e5:d6:7f:f0:2f:a4:72: 04:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:CD:55:18:F0:CB:7A:BD:09:BC:10:F7:01:8A:02:65:D5:FB:55:2C X509v3 Authority Key Identifier: keyid:9B:13:4B:6E:90:24:06:4B:90:57:28:34:89:BF:2C:43:6F:40:75:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mxNLbpAkBkuQVyg0ib8sQ29Adeg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8b060c-17c1-4d9a-851e-b47e0417397d/1/mxNLbpAkBkuQVyg0ib8sQ29Adeg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8b060c-17c1-4d9a-851e-b47e0417397d/1/mxNLbpAkBkuQVyg0ib8sQ29Adeg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:0b:6a:36:8a:80:62:eb:e1:f8:1a:7f:63:cd:43:f5:12:98: f4:70:fb:cb:fa:71:67:43:af:0f:82:bc:45:a9:8a:50:ee:58: 43:45:86:e2:4d:9e:5e:42:9a:d2:6b:29:96:62:ab:25:20:00: 1c:71:a7:cc:57:eb:8c:2e:db:2a:e0:ee:77:8b:ca:b9:f1:45: 40:51:5c:73:a7:8c:52:06:6a:37:c6:e0:f7:7a:41:ae:7f:ba: dd:51:3c:ac:e2:4c:6a:38:74:ff:3f:bb:91:cb:aa:d5:d2:19: 81:14:c7:50:64:16:53:b0:46:5f:90:6e:78:da:ca:81:62:5f: 01:5c:35:be:59:84:f6:d6:23:8c:38:aa:ab:95:de:81:74:6b: 7b:61:91:30:3f:d0:21:e9:97:a6:f2:eb:04:6f:a2:5a:e7:ff: 55:b2:43:6f:13:7f:12:6e:b6:60:b1:4b:2c:30:e4:16:50:72: 9e:8d:da:5e:67:d3:d8:30:b0:63:dc:87:55:42:7d:75:77:53: ed:3f:75:c7:3f:a6:29:9a:26:c0:85:30:93:d2:11:3c:30:4c: 2f:ab:33:0b:41:76:6c:64:98:f5:b0:0c:7d:8d:d5:5c:6b:5a: 6c:20:24:71:74:8a:e2:44:be:f5:87:0b:f9:47:eb:b2:b7:ff: c9:d3:3c:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdkdz7uOp5iT9x6M6eWmeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliMTM0YjZlOTAyNDA2NGI5MDU3MjgzNDg5YmYyYzQzNmY0 MDc1ZTgwHhcNMjUxMjI2MDcwMTIyWhcNMjUxMjI3MDcwMTIyWjAzMTEwLwYDVQQD EyhiYWNkNTUxOGYwY2I3YWJkMDliYzEwZjcwMThhMDI2NWQ1ZmI1NTJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGWobMjHk/GBxYKjODJEcks3vDtx uepmSqtO1Y4vi2EdIc0JFKYf3aZZsbocEh20I9PzXsb+UjwwpSkpo9mjaFGu5g34 Cj440po4RiAJqaFaESpjDN4KhKID+3v+D443uJPJEMAt8mvh/n9bppFtSNCw/l13 Zh5HQQWvaoNEicgcVGprZxBtbc52YIpjUdpxwdJfShhwTGDsGHP6aocQKUVnXiPa 3HliOWtDpJQ+PYWtUBqqBa21H8yy0542KYerXDnNrv3NnFy6zellKip9eKFRVK1M f4568h6Bleq38s1ZLndu2/4bGvjjB71XrtQtDf1N7lpYFOXWf/AvpHIETwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLrNVRjwy3q9CbwQ9wGKAmXV+1UsMB8GA1UdIwQY MBaAFJsTS26QJAZLkFcoNIm/LENvQHXoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXhOTGJwQWtCa3VRVnlnMGliOHNRMjlBZGVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi84YjA2MGMtMTdjMS00ZDlhLTg1MWUt YjQ3ZTA0MTczOTdkLzEvbXhOTGJwQWtCa3VRVnlnMGliOHNRMjlBZGVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi84YjA2MGMtMTdjMS00ZDlhLTg1MWUtYjQ3ZTA0MTczOTdk LzEvbXhOTGJwQWtCa3VRVnlnMGliOHNRMjlBZGVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlQtqNoqA Yuvh+Bp/Y81D9RKY9HD7y/pxZ0OvD4K8RamKUO5YQ0WG4k2eXkKa0msplmKrJSAA HHGnzFfrjC7bKuDud4vKufFFQFFcc6eMUgZqN8bg93pBrn+63VE8rOJMajh0/z+7 kcuq1dIZgRTHUGQWU7BGX5BueNrKgWJfAVw1vlmE9tYjjDiqq5XegXRre2GRMD/Q IemXpvLrBG+iWuf/VbJDbxN/Em62YLFLLDDkFlByno3aXmfT2DCwY9yHVUJ9dXdT 7T91xz+mKZomwIUwk9IRPDBML6szC0F2bGSY9bAMfY3VXGtabCAkcXSK4kS+9YcL +Ufrsrf/ydM8jA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:16:45 2025 by rpki-client