This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.mft File: mGM1ShEa9tXhrRDaOK2BRLa-ho4.mft (raw, json) Hash identifier: 7xpkdB8N1LXLKZoC9wCYyx32rQZ3vD+DHSQl/if72lU= Subject key identifier: B1:70:E4:93:B5:79:44:A4:2B:07:4C:3F:21:D1:B9:DF:6C:6E:C3:0F Authority key identifier: 98:63:35:4A:11:1A:F6:D5:E1:AD:10:DA:38:AD:81:44:B6:BE:86:8E Certificate issuer: /CN=9863354a111af6d5e1ad10da38ad8144b6be868e Certificate serial: 019AAC4BE4C7BC163783308AFECBB91B5586 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGM1ShEa9tXhrRDaOK2BRLa-ho4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.mft Manifest number: 0835 Signing time: Sat 22 Nov 2025 16:00:46 +0000 Manifest this update: Sat 22 Nov 2025 16:00:46 +0000 Manifest next update: Sun 23 Nov 2025 16:00:46 +0000 Files and hashes: 1: J5SKCaGOc1EmK2ciMl5AsL0Yt6k.roa (hash: G1OhQbiptYNimu4j0r+tzGfxHpXqGX5AtlwZt3l6QBs=) 2: TMwrQ9VEC3dWwdOdSzhchqd9LKU.roa (hash: ddLT4suSyGT63FePBoB4o2Q5fl/qPXcvtKn+r4yKT0g=) 3: mGM1ShEa9tXhrRDaOK2BRLa-ho4.crl (hash: CBpdOKJhlCSV9hKVs1sZTbBBJnSFZp+XDlqjb8Z6kRg=) 4: qjXXTFXVdVVWr7-MSHZr7AQqbSo.roa (hash: Sp8Mn3EU/O89RIW7deIN1lZCT2/D8tgJU4hIx0BHNRE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.crl rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.mft rsync://rpki.ripe.net/repository/DEFAULT/mGM1ShEa9tXhrRDaOK2BRLa-ho4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ac:4b:e4:c7:bc:16:37:83:30:8a:fe:cb:b9:1b:55:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9863354a111af6d5e1ad10da38ad8144b6be868e Validity Not Before: Nov 22 16:00:46 2025 GMT Not After : Nov 23 16:00:46 2025 GMT Subject: CN=b170e493b57944a42b074c3f21d1b9df6c6ec30f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:74:77:8a:06:56:36:6f:eb:02:3b:e2:d7:b9: 93:f4:0f:04:66:1a:00:d0:52:64:10:8c:a7:74:49: 0b:bb:17:a5:53:ec:82:f0:4b:da:a6:48:64:ec:f1: 84:bb:53:b3:57:92:78:9a:37:4d:ac:be:4f:ce:f5: c7:cb:5c:ae:b6:df:b1:8d:b0:2c:02:44:fa:74:97: 69:d7:ec:60:86:7d:8d:67:9b:aa:b3:70:f0:d3:f1: df:6c:c0:50:16:76:59:36:fc:98:e3:e1:9f:a7:91: ee:0b:e4:ee:15:4b:1c:13:e6:b3:c6:89:4a:a9:9b: 9d:e0:fe:cf:a6:88:f9:d4:82:33:a2:19:72:04:e0: e7:8e:03:ee:8f:49:b7:05:e0:89:cf:18:df:b6:ec: 17:32:cf:9f:36:d4:f6:f7:14:f2:d2:dd:66:e1:0d: ba:40:28:00:d2:d3:2c:4d:60:2e:6e:19:b1:36:f2: 3e:45:b7:32:38:db:87:3e:b3:d2:80:fa:cc:83:1b: 62:5a:38:0e:21:fe:18:88:23:aa:1d:8f:4a:35:c4: 02:b7:cc:b5:ee:fe:df:32:45:36:13:a9:49:c8:17: b4:7b:5d:c5:41:86:22:75:42:f3:07:e6:3e:d7:85: 7b:bb:e3:74:29:45:c9:f7:34:ec:79:1e:9e:85:2e: da:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:70:E4:93:B5:79:44:A4:2B:07:4C:3F:21:D1:B9:DF:6C:6E:C3:0F X509v3 Authority Key Identifier: keyid:98:63:35:4A:11:1A:F6:D5:E1:AD:10:DA:38:AD:81:44:B6:BE:86:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGM1ShEa9tXhrRDaOK2BRLa-ho4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:df:95:ce:7f:a7:b3:58:53:cc:ab:e8:21:48:7b:06:2e:8b: 95:a2:a8:b6:07:b4:b7:fe:22:42:95:be:9c:0d:0f:d0:3d:82: d3:ad:89:b6:40:bc:75:63:6b:30:04:de:35:0d:e9:d1:70:86: 96:cf:4f:c3:41:2f:89:f5:f9:01:99:90:90:d5:d6:a9:5a:ca: ea:b3:bb:ef:0c:43:fa:8a:be:cc:7d:ad:39:c0:7a:1d:ee:5f: 61:22:3e:5e:b0:cb:23:1c:e8:76:12:e2:33:c5:6a:07:af:d6: a9:43:d4:46:5d:bd:4a:68:76:9f:1a:9b:04:8f:c1:30:0c:0d: 7d:e5:b2:ad:1a:2f:29:52:2c:a9:22:14:e8:0c:40:dc:8e:77: 9f:ab:d5:f7:ff:3d:14:62:84:32:0e:c7:7b:24:e7:be:a2:d6: 5d:54:a0:4b:31:89:b2:43:86:a0:d5:7e:f9:2a:55:6f:c8:2c: 4b:40:f0:d1:79:ed:32:98:1e:54:58:5f:61:da:ec:b9:36:55: be:49:45:7b:03:68:64:ee:b7:ec:0d:36:e9:e9:7b:14:1a:93: 5f:58:50:6e:42:6a:da:30:c4:d4:05:74:1b:99:07:c6:03:83: 21:7f:89:c4:2c:a6:94:a6:3f:9f:19:af:fc:ea:bc:89:d8:cc: 9f:bb:30:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqsS+THvBY3gzCK/su5G1WGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4NjMzNTRhMTExYWY2ZDVlMWFkMTBkYTM4YWQ4MTQ0YjZi ZTg2OGUwHhcNMjUxMTIyMTYwMDQ2WhcNMjUxMTIzMTYwMDQ2WjAzMTEwLwYDVQQD EyhiMTcwZTQ5M2I1Nzk0NGE0MmIwNzRjM2YyMWQxYjlkZjZjNmVjMzBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3R3igZWNm/rAjvi17mT9A8EZhoA 0FJkEIyndEkLuxelU+yC8Evapkhk7PGEu1OzV5J4mjdNrL5PzvXHy1yutt+xjbAs AkT6dJdp1+xghn2NZ5uqs3Dw0/HfbMBQFnZZNvyY4+Gfp5HuC+TuFUscE+azxolK qZud4P7Ppoj51IIzohlyBODnjgPuj0m3BeCJzxjftuwXMs+fNtT29xTy0t1m4Q26 QCgA0tMsTWAubhmxNvI+RbcyONuHPrPSgPrMgxtiWjgOIf4YiCOqHY9KNcQCt8y1 7v7fMkU2E6lJyBe0e13FQYYidULzB+Y+14V7u+N0KUXJ9zTseR6ehS7azwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLFw5JO1eUSkKwdMPyHRud9sbsMPMB8GA1UdIwQY MBaAFJhjNUoRGvbV4a0Q2jitgUS2voaOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUdNMVNoRWE5dFhoclJEYU9LMkJSTGEtaG80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9iZWE4NDctYTc4My00ODlkLWFlNGIt NTNmNTc1MDRlZjM1LzEvbUdNMVNoRWE5dFhoclJEYU9LMkJSTGEtaG80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS9iZWE4NDctYTc4My00ODlkLWFlNGItNTNmNTc1MDRlZjM1 LzEvbUdNMVNoRWE5dFhoclJEYU9LMkJSTGEtaG80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABd+Vzn+n s1hTzKvoIUh7Bi6LlaKotge0t/4iQpW+nA0P0D2C062JtkC8dWNrMATeNQ3p0XCG ls9Pw0EvifX5AZmQkNXWqVrK6rO77wxD+oq+zH2tOcB6He5fYSI+XrDLIxzodhLi M8VqB6/WqUPURl29Smh2nxqbBI/BMAwNfeWyrRovKVIsqSIU6AxA3I53n6vV9/89 FGKEMg7HeyTnvqLWXVSgSzGJskOGoNV++SpVb8gsS0Dw0XntMpgeVFhfYdrsuTZV vklFewNoZO637A026el7FBqTX1hQbkJq2jDE1AV0G5kHxgODIX+JxCymlKY/nxmv /Oq8idjMn7swpg== -----END CERTIFICATE-----Generated at Sat Nov 22 21:39:44 2025 by rpki-client