This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft File: MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft (raw, json) Hash identifier: pyPLAk49+TFrqbCqctd1szE70bk3T4obz1CKzpl2wqE= Subject key identifier: 14:D7:80:48:D1:3F:F0:F5:6D:49:A7:09:26:BF:FC:C6:A3:48:E9:85 Authority key identifier: 30:6D:61:83:55:BD:89:37:F7:5B:B4:65:0B:B5:C1:AF:70:F9:A1:2E Certificate issuer: /CN=306d618355bd8937f75bb4650bb5c1af70f9a12e Certificate serial: 019B1F864FD2935048EE3726DD1F65663B11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MG1hg1W9iTf3W7RlC7XBr3D5oS4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft Manifest number: 1317 Signing time: Mon 15 Dec 2025 01:00:54 +0000 Manifest this update: Mon 15 Dec 2025 01:00:54 +0000 Manifest next update: Tue 16 Dec 2025 01:00:54 +0000 Files and hashes: 1: 3jZVmIYXRpFGaUpKFxmxg6yk0v4.roa (hash: DxwsnC6ETAvm52TcakM8AMF0oIdLtUXLvOU8uNsDQAw=) 2: MG1hg1W9iTf3W7RlC7XBr3D5oS4.crl (hash: PhDnsDkXHxPYkW3s+1nT0x9AIGNqwF7Hf8l+fg+HfI0=) 3: OhFs8ELf0BkBqUqSta-UtJTxxOY.roa (hash: eORqJrZ4eHwt+ZtqWQMblZ7ybIDSjazTPoe3DTl1tC8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.crl rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft rsync://rpki.ripe.net/repository/DEFAULT/MG1hg1W9iTf3W7RlC7XBr3D5oS4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1f:86:4f:d2:93:50:48:ee:37:26:dd:1f:65:66:3b:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=306d618355bd8937f75bb4650bb5c1af70f9a12e Validity Not Before: Dec 15 01:00:54 2025 GMT Not After : Dec 16 01:00:54 2025 GMT Subject: CN=14d78048d13ff0f56d49a70926bffcc6a348e985 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:46:0c:54:29:8c:6e:64:94:80:42:45:da:7a: 12:ea:fd:72:06:7d:eb:49:2c:d9:64:f9:17:4a:25: f8:ce:d6:a5:49:65:98:1a:6a:8f:32:76:4c:31:c8: 7c:47:fb:48:ef:7a:0a:8c:d5:14:5d:d4:69:1d:7c: c4:8e:90:a5:3d:d9:d4:a8:0d:27:af:23:5e:7f:bf: 48:79:d6:80:70:53:f5:a5:64:3a:70:7d:ec:d5:b9: a6:19:66:79:c8:c0:a6:4a:7b:7b:38:96:3b:aa:96: f9:11:77:13:e0:54:2e:19:be:dc:a5:dc:d1:b8:56: a2:c1:2e:c3:6c:59:d3:0a:dc:c5:ef:2b:6c:8f:8b: eb:f4:dd:0b:1d:84:0d:9f:16:91:8a:62:4d:af:64: 15:d9:6e:0f:ae:73:09:01:82:5a:19:d6:f4:f0:bc: 97:cd:f4:90:d4:cb:a3:60:76:13:66:52:50:5f:d9: 6b:d4:af:27:c5:b2:72:4d:cb:13:cf:10:60:9e:40: 34:b0:c9:ea:13:31:b7:aa:aa:ee:eb:0a:85:41:f5: 60:b6:2c:68:a0:23:5b:13:6d:ae:17:e5:dd:6c:55: 5d:b5:ff:d8:e9:5a:b6:fc:5e:4a:ef:c1:01:35:69: c1:03:6b:6c:0a:68:e2:fe:cd:b9:93:a8:b2:e1:73: 23:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:D7:80:48:D1:3F:F0:F5:6D:49:A7:09:26:BF:FC:C6:A3:48:E9:85 X509v3 Authority Key Identifier: keyid:30:6D:61:83:55:BD:89:37:F7:5B:B4:65:0B:B5:C1:AF:70:F9:A1:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MG1hg1W9iTf3W7RlC7XBr3D5oS4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:58:82:fa:64:f1:c1:bf:cf:f4:5f:d1:fb:f2:a8:28:8e:5f: 6e:ee:f9:99:e8:31:6c:23:f5:66:ae:b3:21:7e:0e:46:81:08: cf:76:bb:a1:4d:5c:5c:36:94:75:9d:81:e5:8f:70:e6:71:35: d1:04:0e:36:3a:a3:21:4f:a0:ad:40:5f:61:2d:e2:22:cc:57: 47:01:11:fe:cb:42:a4:71:14:e1:fb:cf:c2:15:ad:15:41:5d: 5f:e8:2d:f2:bd:18:a5:d0:1b:a6:2e:ab:b6:0d:83:0f:14:8c: 58:4c:43:25:0d:f9:79:28:c5:4f:8b:cb:6a:2a:53:eb:cb:9a: 95:78:c6:d2:89:44:b5:0b:79:a0:00:cc:22:99:28:5a:32:a3: 8c:20:a6:b9:38:c2:30:73:18:9c:93:0c:12:dd:ab:f6:a0:c0: 2e:3f:be:8a:d0:d9:7f:c9:80:03:4a:d5:bc:28:05:e1:2a:07: 80:90:b3:e7:38:da:e3:be:2a:68:bd:d8:98:f6:2a:f3:17:e3: 4e:f9:9b:9f:e2:d5:f9:ed:ed:81:73:7f:e7:4d:3b:19:6f:08: 78:6d:ae:8f:cf:24:0b:98:21:c3:2d:78:c5:f2:0d:a4:8c:b9: 94:57:c4:2c:f8:56:dd:80:58:d4:3a:ab:a2:da:f6:36:d8:78: 02:99:ea:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsfhk/Sk1BI7jcm3R9lZjsRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwNmQ2MTgzNTViZDg5MzdmNzViYjQ2NTBiYjVjMWFmNzBm OWExMmUwHhcNMjUxMjE1MDEwMDU0WhcNMjUxMjE2MDEwMDU0WjAzMTEwLwYDVQQD EygxNGQ3ODA0OGQxM2ZmMGY1NmQ0OWE3MDkyNmJmZmNjNmEzNDhlOTg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEYMVCmMbmSUgEJF2noS6v1yBn3r SSzZZPkXSiX4ztalSWWYGmqPMnZMMch8R/tI73oKjNUUXdRpHXzEjpClPdnUqA0n ryNef79IedaAcFP1pWQ6cH3s1bmmGWZ5yMCmSnt7OJY7qpb5EXcT4FQuGb7cpdzR uFaiwS7DbFnTCtzF7ytsj4vr9N0LHYQNnxaRimJNr2QV2W4PrnMJAYJaGdb08LyX zfSQ1MujYHYTZlJQX9lr1K8nxbJyTcsTzxBgnkA0sMnqEzG3qqru6wqFQfVgtixo oCNbE22uF+XdbFVdtf/Y6Vq2/F5K78EBNWnBA2tsCmji/s25k6iy4XMjaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBTXgEjRP/D1bUmnCSa//MajSOmFMB8GA1UdIwQY MBaAFDBtYYNVvYk391u0ZQu1wa9w+aEuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUcxaGcxVzlpVGYzVzdSbEM3WEJyM0Q1b1M0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi8zY2RlOWItMzcwNS00ZGMzLThkN2Ut NTE2ZmZkODczNzZjLzEvTUcxaGcxVzlpVGYzVzdSbEM3WEJyM0Q1b1M0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi8zY2RlOWItMzcwNS00ZGMzLThkN2UtNTE2ZmZkODczNzZj LzEvTUcxaGcxVzlpVGYzVzdSbEM3WEJyM0Q1b1M0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb1iC+mTx wb/P9F/R+/KoKI5fbu75megxbCP1Zq6zIX4ORoEIz3a7oU1cXDaUdZ2B5Y9w5nE1 0QQONjqjIU+grUBfYS3iIsxXRwER/stCpHEU4fvPwhWtFUFdX+gt8r0YpdAbpi6r tg2DDxSMWExDJQ35eSjFT4vLaipT68ualXjG0olEtQt5oADMIpkoWjKjjCCmuTjC MHMYnJMMEt2r9qDALj++itDZf8mAA0rVvCgF4SoHgJCz5zja474qaL3YmPYq8xfj Tvmbn+LV+e3tgXN/5007GW8IeG2uj88kC5ghwy14xfINpIy5lFfELPhW3YBY1Dqr otr2Nth4ApnqNg== -----END CERTIFICATE-----Generated at Mon Dec 15 04:55:17 2025 by rpki-client