This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.mft File: MGm6frw7Zy3QnsA0Th-AqhEx79A.mft (raw, json) Hash identifier: WXMZ+XtXpwBpOpY/hB4uonCtoOjxGJThPcC7GEVJerY= Subject key identifier: DB:D8:5F:42:C4:4C:CF:85:D9:74:13:DB:9B:B0:5B:22:5F:0B:67:EF Authority key identifier: 30:69:BA:7E:BC:3B:67:2D:D0:9E:C0:34:4E:1F:80:AA:11:31:EF:D0 Certificate issuer: /CN=3069ba7ebc3b672dd09ec0344e1f80aa1131efd0 Certificate serial: 019B4B8359A46770DA184448DA06486756D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGm6frw7Zy3QnsA0Th-AqhEx79A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.mft Manifest number: 1790 Signing time: Tue 23 Dec 2025 14:00:57 +0000 Manifest this update: Tue 23 Dec 2025 14:00:57 +0000 Manifest next update: Wed 24 Dec 2025 14:00:57 +0000 Files and hashes: 1: MGm6frw7Zy3QnsA0Th-AqhEx79A.crl (hash: KDnmbZ3OgH/RRPo0ZSdPpKndwfQRHqWKFonSFKNvO0c=) 2: eqJAEOy6NaY4mZwa5RQJfzteBn0.roa (hash: 4ycDfdQF4RJy7Cm3II/1bQM7j6qQFueYRHKWr/2hsvQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.mft rsync://rpki.ripe.net/repository/DEFAULT/MGm6frw7Zy3QnsA0Th-AqhEx79A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:83:59:a4:67:70:da:18:44:48:da:06:48:67:56:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3069ba7ebc3b672dd09ec0344e1f80aa1131efd0 Validity Not Before: Dec 23 14:00:57 2025 GMT Not After : Dec 24 14:00:57 2025 GMT Subject: CN=dbd85f42c44ccf85d97413db9bb05b225f0b67ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c1:5a:cf:70:73:23:cc:20:50:97:2f:88:4a: 7a:bc:2f:b1:e2:93:ce:2a:cf:72:c6:19:39:99:30: af:3f:cb:48:18:46:fa:82:fa:e5:b6:06:d6:93:63: 64:67:b3:d6:1d:b0:b1:7b:e2:40:c3:79:d3:be:06: de:fb:1a:8c:28:38:77:16:30:25:f5:99:32:06:29: ae:d9:cb:8e:1f:9a:72:36:10:31:20:be:49:f3:84: 13:b0:02:4d:2f:ab:c4:3c:10:bf:d1:d3:78:9b:d4: 55:ae:46:e2:b4:d8:1d:94:35:13:5f:ab:52:89:12: 10:c6:31:81:78:4d:79:f3:5c:b4:28:14:99:22:89: 3b:3b:b3:7f:31:36:69:52:a5:66:d9:72:e8:0e:b0: 0c:50:31:50:a7:8a:ee:bf:2d:be:29:de:4a:5d:23: 7b:1f:fd:eb:a6:8f:5b:c4:96:dd:7e:15:3a:d6:ec: dc:b5:8e:8f:a9:a6:b4:4c:e6:bd:55:ab:02:25:9f: 29:7c:92:27:71:78:51:6a:cf:dd:82:93:c9:01:6e: 19:9e:33:be:a8:46:00:8a:2f:4f:bc:3d:12:df:80: 7a:15:92:ba:a8:33:73:6e:e9:e9:f0:35:5c:48:bd: 3c:5c:89:05:fc:b7:62:ab:3a:e5:3b:8e:cc:15:1f: fc:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:D8:5F:42:C4:4C:CF:85:D9:74:13:DB:9B:B0:5B:22:5F:0B:67:EF X509v3 Authority Key Identifier: keyid:30:69:BA:7E:BC:3B:67:2D:D0:9E:C0:34:4E:1F:80:AA:11:31:EF:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGm6frw7Zy3QnsA0Th-AqhEx79A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:ca:4c:be:5c:89:14:82:c2:e9:ff:36:30:17:d5:b8:94:9b: 9b:81:8e:c9:a7:32:27:fc:bd:bf:be:02:a5:6d:34:f6:28:87: c4:60:c9:76:3c:93:be:d4:d7:ad:41:20:95:2b:80:e2:7d:1c: 39:a0:b1:76:fa:de:f0:4e:ab:f8:4b:90:11:22:c0:8b:69:21: 7c:f2:38:50:6e:4b:95:83:45:25:1f:3d:ff:fb:6f:d6:ca:d6: 7e:2c:d6:c7:c3:1e:96:1e:31:20:bf:a0:50:bc:06:5f:26:3f: 51:97:0c:8c:f0:74:bd:45:2f:af:0a:fb:54:fb:1d:6b:d4:40: 50:9c:9b:e9:4f:ae:2a:12:c7:38:13:c6:09:06:d5:98:5c:7d: 1d:b7:de:04:3b:62:55:ce:ea:c2:98:0b:85:8c:e4:4f:e1:d0: e9:bf:36:3d:41:38:ec:45:3d:3b:ac:93:be:ff:4e:45:76:e8: b6:5a:f3:0c:3a:df:bb:0b:e1:2a:26:93:90:77:88:62:48:f0: b8:6b:61:0f:62:f2:f3:33:29:04:48:de:cd:2a:70:29:d3:04: 42:16:67:db:db:0f:1e:3f:37:b8:e5:f3:db:dc:15:54:58:a6: 0c:75:73:c8:b3:a8:88:c7:f2:0b:75:42:6a:6d:f2:44:57:c5: af:72:53:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtLg1mkZ3DaGERI2gZIZ1bYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwNjliYTdlYmMzYjY3MmRkMDllYzAzNDRlMWY4MGFhMTEz MWVmZDAwHhcNMjUxMjIzMTQwMDU3WhcNMjUxMjI0MTQwMDU3WjAzMTEwLwYDVQQD EyhkYmQ4NWY0MmM0NGNjZjg1ZDk3NDEzZGI5YmIwNWIyMjVmMGI2N2VmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8Faz3BzI8wgUJcviEp6vC+x4pPO Ks9yxhk5mTCvP8tIGEb6gvrltgbWk2NkZ7PWHbCxe+JAw3nTvgbe+xqMKDh3FjAl 9ZkyBimu2cuOH5pyNhAxIL5J84QTsAJNL6vEPBC/0dN4m9RVrkbitNgdlDUTX6tS iRIQxjGBeE1581y0KBSZIok7O7N/MTZpUqVm2XLoDrAMUDFQp4ruvy2+Kd5KXSN7 H/3rpo9bxJbdfhU61uzctY6Pqaa0TOa9VasCJZ8pfJIncXhRas/dgpPJAW4ZnjO+ qEYAii9PvD0S34B6FZK6qDNzbunp8DVcSL08XIkF/LdiqzrlO47MFR/8ywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNvYX0LETM+F2XQT25uwWyJfC2fvMB8GA1UdIwQY MBaAFDBpun68O2ct0J7ANE4fgKoRMe/QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUdtNmZydzdaeTNRbnNBMFRoLUFxaEV4NzlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi80Y2JhMmYtNGE1Yi00NDM1LThhZWMt OTIzY2I1MGFiZTJlLzEvTUdtNmZydzdaeTNRbnNBMFRoLUFxaEV4NzlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi80Y2JhMmYtNGE1Yi00NDM1LThhZWMtOTIzY2I1MGFiZTJl LzEvTUdtNmZydzdaeTNRbnNBMFRoLUFxaEV4NzlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANMpMvlyJ FILC6f82MBfVuJSbm4GOyacyJ/y9v74CpW009iiHxGDJdjyTvtTXrUEglSuA4n0c OaCxdvre8E6r+EuQESLAi2khfPI4UG5LlYNFJR89//tv1srWfizWx8Melh4xIL+g ULwGXyY/UZcMjPB0vUUvrwr7VPsda9RAUJyb6U+uKhLHOBPGCQbVmFx9HbfeBDti Vc7qwpgLhYzkT+HQ6b82PUE47EU9O6yTvv9ORXbotlrzDDrfuwvhKiaTkHeIYkjw uGthD2Ly8zMpBEjezSpwKdMEQhZn29sPHj83uOXz29wVVFimDHVzyLOoiMfyC3VC am3yRFfFr3JTbw== -----END CERTIFICATE-----Generated at Tue Dec 23 16:08:26 2025 by rpki-client