This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.mft File: Mgax0ge2XA69PyP6djABbYe0E0k.mft (raw, json) Hash identifier: Q7hWCXM3koCpPzhXXcvNoVujPXQ49+nrZEEC8Ia9mNg= Subject key identifier: 42:09:07:5B:FD:FB:8F:39:8B:2D:C4:B4:8F:A8:DD:2D:15:D5:02:BC Authority key identifier: 32:06:B1:D2:07:B6:5C:0E:BD:3F:23:FA:76:30:01:6D:87:B4:13:49 Certificate issuer: /CN=3206b1d207b65c0ebd3f23fa7630016d87b41349 Certificate serial: 019B8272829388634728CE6628E301A7F3D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mgax0ge2XA69PyP6djABbYe0E0k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.mft Manifest number: 07CB Signing time: Sat 03 Jan 2026 06:01:41 +0000 Manifest this update: Sat 03 Jan 2026 06:01:41 +0000 Manifest next update: Sun 04 Jan 2026 06:01:41 +0000 Files and hashes: 1: Mgax0ge2XA69PyP6djABbYe0E0k.crl (hash: WzyKWg1QafmK7zeD+a5opKswUVa5gYJqlenlTZhTnDM=) 2: RSErlzqCpSdDsRHtwGnzvJLUb9Q.roa (hash: rLSLw6+T+Et0d1Efgq167+zRkvB4aSf6ep1NRZLeTMI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.crl rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.mft rsync://rpki.ripe.net/repository/DEFAULT/Mgax0ge2XA69PyP6djABbYe0E0k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 23:33:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:82:72:82:93:88:63:47:28:ce:66:28:e3:01:a7:f3:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3206b1d207b65c0ebd3f23fa7630016d87b41349 Validity Not Before: Jan 3 06:01:41 2026 GMT Not After : Jan 4 06:01:41 2026 GMT Subject: CN=4209075bfdfb8f398b2dc4b48fa8dd2d15d502bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:9c:07:b9:cd:0a:44:d7:29:e8:16:e3:66:c9: 20:89:ac:96:d2:b9:32:4b:44:ac:b9:2a:a0:fd:b3: 6b:df:dc:fa:ab:bd:d4:69:5d:e6:d6:62:44:b6:f0: fb:75:63:3d:8a:96:bc:d6:d7:d7:9c:a5:18:c8:ac: 3b:4d:0d:cc:f0:3a:b6:bb:55:72:17:28:72:82:be: d5:e9:d6:e5:4f:48:0f:f6:29:99:71:f2:9d:65:0a: 8b:04:7f:f8:5c:fe:0f:06:65:e6:17:4d:d2:bc:ef: 6b:73:83:ff:3b:e1:d2:f7:66:f1:34:39:a0:c3:da: 8f:ee:3a:d7:b4:bc:10:34:b4:59:0a:b9:93:00:e8: 37:c4:52:70:15:9f:60:45:21:b8:b7:74:f8:c3:18: 99:61:3e:19:43:f9:b3:60:eb:55:94:f3:43:79:5b: 10:38:9b:90:c1:2a:7f:28:a1:b9:0e:22:d9:7f:ee: 31:d0:fb:29:6c:05:ff:c7:1a:95:b1:61:6c:a7:c4: 50:10:e6:4a:46:4a:d0:c9:8d:e3:76:fa:fe:b2:99: 91:4a:9e:8d:44:d6:ea:8d:48:65:ed:bc:73:ab:5d: dd:e5:82:76:00:67:3b:30:00:76:9d:84:0e:85:2b: d3:9b:9f:7f:7a:2d:79:5a:bd:de:5f:99:f2:34:1f: 64:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:09:07:5B:FD:FB:8F:39:8B:2D:C4:B4:8F:A8:DD:2D:15:D5:02:BC X509v3 Authority Key Identifier: keyid:32:06:B1:D2:07:B6:5C:0E:BD:3F:23:FA:76:30:01:6D:87:B4:13:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mgax0ge2XA69PyP6djABbYe0E0k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:6f:e0:c1:a7:49:39:1a:ed:fd:09:5b:ac:d5:1b:b2:e1:38: a8:f9:f0:7f:4b:92:04:4d:b6:d4:e7:53:f5:ca:b6:42:7b:13: 89:49:65:e9:a2:a1:f4:09:13:26:55:4a:a0:6e:c3:3f:05:cc: 5d:02:dd:6a:69:ec:35:1f:45:26:4a:22:08:67:af:26:7e:37: 2c:b8:a9:fb:2b:0c:2b:6f:1d:e7:11:fa:a0:6b:a9:c8:18:43: 4c:cb:07:39:7b:f0:0c:41:28:16:2b:04:fb:0d:4a:ee:b3:eb: 08:3d:52:09:b7:2c:c3:2f:35:e5:1e:0d:70:62:ac:34:33:b8: 8b:2f:cb:77:9d:55:02:05:46:f2:1a:98:92:e3:f3:43:e9:f7: cc:19:45:89:c8:91:59:8c:4a:c7:1a:8d:b2:cd:63:0d:8d:45: 52:96:75:22:96:41:9a:8e:78:dd:a5:56:8e:fa:fd:6b:96:03: 86:9c:c6:db:52:26:16:cd:38:59:31:7e:dd:7b:2f:9b:fa:c3: bb:d5:32:2d:07:4f:61:d2:5a:02:c6:00:13:68:e0:df:0a:d1: 4c:27:a9:a2:7b:d2:90:65:d7:0b:9a:d0:07:6b:58:89:07:92: 76:0f:74:cb:c4:8e:44:e7:5e:d7:9c:e9:70:2a:29:d0:92:d2: 7a:4a:8a:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuCcoKTiGNHKM5mKOMBp/PVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyMDZiMWQyMDdiNjVjMGViZDNmMjNmYTc2MzAwMTZkODdi NDEzNDkwHhcNMjYwMTAzMDYwMTQxWhcNMjYwMTA0MDYwMTQxWjAzMTEwLwYDVQQD Eyg0MjA5MDc1YmZkZmI4ZjM5OGIyZGM0YjQ4ZmE4ZGQyZDE1ZDUwMmJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA95wHuc0KRNcp6BbjZskgiayW0rky S0SsuSqg/bNr39z6q73UaV3m1mJEtvD7dWM9ipa81tfXnKUYyKw7TQ3M8Dq2u1Vy Fyhygr7V6dblT0gP9imZcfKdZQqLBH/4XP4PBmXmF03SvO9rc4P/O+HS92bxNDmg w9qP7jrXtLwQNLRZCrmTAOg3xFJwFZ9gRSG4t3T4wxiZYT4ZQ/mzYOtVlPNDeVsQ OJuQwSp/KKG5DiLZf+4x0PspbAX/xxqVsWFsp8RQEOZKRkrQyY3jdvr+spmRSp6N RNbqjUhl7bxzq13d5YJ2AGc7MAB2nYQOhSvTm59/ei15Wr3eX5nyNB9k7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEIJB1v9+485iy3EtI+o3S0V1QK8MB8GA1UdIwQY MBaAFDIGsdIHtlwOvT8j+nYwAW2HtBNJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWdheDBnZTJYQTY5UHlQNmRqQUJiWWUwRTBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy82OTNmZTItZmJhZi00MzBmLThhMjIt MWJhZTkzY2ZhMDc4LzEvTWdheDBnZTJYQTY5UHlQNmRqQUJiWWUwRTBrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy82OTNmZTItZmJhZi00MzBmLThhMjItMWJhZTkzY2ZhMDc4 LzEvTWdheDBnZTJYQTY5UHlQNmRqQUJiWWUwRTBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlW/gwadJ ORrt/QlbrNUbsuE4qPnwf0uSBE221OdT9cq2QnsTiUll6aKh9AkTJlVKoG7DPwXM XQLdamnsNR9FJkoiCGevJn43LLip+ysMK28d5xH6oGupyBhDTMsHOXvwDEEoFisE +w1K7rPrCD1SCbcswy815R4NcGKsNDO4iy/Ld51VAgVG8hqYkuPzQ+n3zBlFiciR WYxKxxqNss1jDY1FUpZ1IpZBmo543aVWjvr9a5YDhpzG21ImFs04WTF+3Xsvm/rD u9UyLQdPYdJaAsYAE2jg3wrRTCeponvSkGXXC5rQB2tYiQeSdg90y8SOROde15zp cCop0JLSekqKFA== -----END CERTIFICATE-----Generated at Sat Jan 3 08:21:03 2026 by rpki-client