This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.mft File: mgheBvLiouMEJW-IE1_xPectBzY.mft (raw, json) Hash identifier: r7wag+/HWO0qYVsdcgaqeADk6kV07CGSXFdByfqWOm8= Subject key identifier: B2:50:9D:FE:DC:AB:B5:76:6A:99:B6:7B:56:DB:13:07:6D:5C:D1:08 Authority key identifier: 9A:08:5E:06:F2:E2:A2:E3:04:25:6F:88:13:5F:F1:3D:E7:2D:07:36 Certificate issuer: /CN=9a085e06f2e2a2e304256f88135ff13de72d0736 Certificate serial: 019B1FBD4FBF702D56E8C8F9846C65A372CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mgheBvLiouMEJW-IE1_xPectBzY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.mft Manifest number: 0E57 Signing time: Mon 15 Dec 2025 02:00:58 +0000 Manifest this update: Mon 15 Dec 2025 02:00:58 +0000 Manifest next update: Tue 16 Dec 2025 02:00:58 +0000 Files and hashes: 1: 9Dg6tOo6O44yr7jeWe1ba9VjCFs.roa (hash: 26YW4jX+yyct0IS6KpfO0MNuSdKZWiF48vsQnmBErMk=) 2: mgheBvLiouMEJW-IE1_xPectBzY.crl (hash: FFi2XJw2oTuHajpjlBTRsrlffXwOrcycB8a25pXioPw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.crl rsync://rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.mft rsync://rpki.ripe.net/repository/DEFAULT/mgheBvLiouMEJW-IE1_xPectBzY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 02:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1f:bd:4f:bf:70:2d:56:e8:c8:f9:84:6c:65:a3:72:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a085e06f2e2a2e304256f88135ff13de72d0736 Validity Not Before: Dec 15 02:00:58 2025 GMT Not After : Dec 16 02:00:58 2025 GMT Subject: CN=b2509dfedcabb5766a99b67b56db13076d5cd108 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:74:dd:2f:71:3b:35:98:c7:f7:96:54:db:a1: 3e:e3:98:70:51:e2:ad:39:7a:9e:a2:d8:91:5a:d2: 86:bd:04:92:da:79:79:54:f4:80:61:b7:99:75:f5: 4a:c4:d8:83:21:cb:6c:46:83:d4:14:e7:16:69:df: d0:ba:f8:9c:55:7d:91:cd:d2:28:0a:93:d3:25:dc: 20:e4:f0:77:e5:e4:81:3b:e5:c5:a4:92:17:60:ba: 66:3e:b9:c0:50:7d:99:28:9e:ae:8e:81:c8:42:00: fb:e7:8d:a7:44:18:98:f9:51:e7:d1:7d:e7:86:cb: 8a:ad:ed:c6:1b:0a:a1:ae:cc:6c:12:d1:4e:c1:10: a5:96:98:1a:0d:b5:a7:70:01:a9:ff:58:0d:9c:15: 0b:22:be:d3:b1:9e:0e:1a:b5:8c:44:30:d8:e9:0e: 22:49:3e:1d:c0:74:78:c4:81:f9:7d:a6:1f:38:d5: f3:98:2f:28:3d:eb:98:ee:cc:43:84:40:13:0f:dd: 68:e3:cf:d1:5d:37:a9:ad:30:f8:b5:c1:47:55:55: 56:62:f2:09:af:08:9d:f9:1d:2b:e7:d6:92:0e:dd: 1e:c8:7b:58:c8:7c:d0:e0:da:91:35:63:26:5c:69: b6:75:6b:d7:71:7e:3c:07:a2:8e:13:22:24:13:c1: f0:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:50:9D:FE:DC:AB:B5:76:6A:99:B6:7B:56:DB:13:07:6D:5C:D1:08 X509v3 Authority Key Identifier: keyid:9A:08:5E:06:F2:E2:A2:E3:04:25:6F:88:13:5F:F1:3D:E7:2D:07:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mgheBvLiouMEJW-IE1_xPectBzY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:6e:b7:eb:f7:12:95:39:9f:ea:e9:7b:20:5d:e6:75:3d:37: 37:4f:71:76:71:e5:bb:bd:77:21:aa:bf:14:ea:91:3a:25:61: d1:04:a5:f1:40:a6:96:b4:fc:5e:a8:e4:d1:f4:db:62:fb:1b: 9e:87:df:e2:c5:bb:be:06:aa:5a:ad:39:1e:c4:e1:c5:90:d6: 7a:9a:43:17:5b:79:31:2f:28:96:35:f0:f2:b1:8b:c8:0a:5c: c5:63:7c:52:ce:4f:ad:38:d7:55:8c:89:27:6c:30:a0:05:fe: e9:ae:92:7f:12:95:10:4a:6e:03:32:75:d2:17:ee:b5:5e:04: 10:9b:7e:ec:52:f1:a7:00:c5:a1:13:81:7d:64:e3:66:8d:45: 09:03:d7:60:44:aa:db:b3:8a:fd:9d:6c:46:a2:fa:85:a5:85: 31:bb:95:7d:81:a7:0b:62:f9:37:cf:ec:da:c6:fb:c1:99:ae: 16:28:71:61:54:b1:39:59:ff:6d:3d:2f:44:db:27:66:87:55: 60:15:82:d5:0c:06:14:a4:24:c5:53:07:f6:4d:b6:82:b6:f1: 94:53:d5:30:40:4c:84:07:c1:46:fa:a2:6a:2d:83:32:28:74: 58:fa:c0:34:0f:00:1a:c3:6f:bb:06:f9:51:b1:e8:9b:f0:da: b3:55:b7:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsfvU+/cC1W6Mj5hGxlo3LNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhMDg1ZTA2ZjJlMmEyZTMwNDI1NmY4ODEzNWZmMTNkZTcy ZDA3MzYwHhcNMjUxMjE1MDIwMDU4WhcNMjUxMjE2MDIwMDU4WjAzMTEwLwYDVQQD EyhiMjUwOWRmZWRjYWJiNTc2NmE5OWI2N2I1NmRiMTMwNzZkNWNkMTA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnTdL3E7NZjH95ZU26E+45hwUeKt OXqeotiRWtKGvQSS2nl5VPSAYbeZdfVKxNiDIctsRoPUFOcWad/QuvicVX2RzdIo CpPTJdwg5PB35eSBO+XFpJIXYLpmPrnAUH2ZKJ6ujoHIQgD7542nRBiY+VHn0X3n hsuKre3GGwqhrsxsEtFOwRCllpgaDbWncAGp/1gNnBULIr7TsZ4OGrWMRDDY6Q4i ST4dwHR4xIH5faYfONXzmC8oPeuY7sxDhEATD91o48/RXTeprTD4tcFHVVVWYvIJ rwid+R0r59aSDt0eyHtYyHzQ4NqRNWMmXGm2dWvXcX48B6KOEyIkE8Hw2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLJQnf7cq7V2apm2e1bbEwdtXNEIMB8GA1UdIwQY MBaAFJoIXgby4qLjBCVviBNf8T3nLQc2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWdoZUJ2TGlvdU1FSlctSUUxX3hQZWN0QnpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8xMGZjZTAtZWU0Ny00ZWQ0LWEwM2Qt MGQ0NTQyOTIwYmNiLzEvbWdoZUJ2TGlvdU1FSlctSUUxX3hQZWN0QnpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC8xMGZjZTAtZWU0Ny00ZWQ0LWEwM2QtMGQ0NTQyOTIwYmNi LzEvbWdoZUJ2TGlvdU1FSlctSUUxX3hQZWN0QnpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhW636/cS lTmf6ul7IF3mdT03N09xdnHlu713Iaq/FOqROiVh0QSl8UCmlrT8Xqjk0fTbYvsb noff4sW7vgaqWq05HsThxZDWeppDF1t5MS8oljXw8rGLyApcxWN8Us5PrTjXVYyJ J2wwoAX+6a6SfxKVEEpuAzJ10hfutV4EEJt+7FLxpwDFoROBfWTjZo1FCQPXYESq 27OK/Z1sRqL6haWFMbuVfYGnC2L5N8/s2sb7wZmuFihxYVSxOVn/bT0vRNsnZodV YBWC1QwGFKQkxVMH9k22grbxlFPVMEBMhAfBRvqiai2DMih0WPrANA8AGsNvuwb5 UbHom/Das1W3Nw== -----END CERTIFICATE-----Generated at Mon Dec 15 12:11:11 2025 by rpki-client