This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/5c0b4a-2da4-43a5-9289-1937bde8cd6f/1/mpGLgMuzJzekayRIaaatVQlUP6E.mft File: mpGLgMuzJzekayRIaaatVQlUP6E.mft (raw, json) Hash identifier: HccoaOJ2eU794GMC4P+LZ1HkF3RB2IvWwjzlIcdieIw= Subject key identifier: C8:CB:9E:2B:D3:28:79:6D:2F:D2:04:0D:33:91:01:39:72:4F:C7:D9 Authority key identifier: 9A:91:8B:80:CB:B3:27:37:A4:6B:24:48:69:A6:AD:55:09:54:3F:A1 Certificate issuer: /CN=9a918b80cbb32737a46b244869a6ad5509543fa1 Certificate serial: 019B1FF4050EF1261C079506B2CDB59BCA9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mpGLgMuzJzekayRIaaatVQlUP6E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/5c0b4a-2da4-43a5-9289-1937bde8cd6f/1/mpGLgMuzJzekayRIaaatVQlUP6E.mft Manifest number: 0B20 Signing time: Mon 15 Dec 2025 03:00:44 +0000 Manifest this update: Mon 15 Dec 2025 03:00:44 +0000 Manifest next update: Tue 16 Dec 2025 03:00:44 +0000 Files and hashes: 1: _sJ1gEKp9zcUkmdoEUiL1Hgw__4.roa (hash: QNXdCikQmuLlbojTN81QhJiEfrR2COSucqfmF6ZaSHQ=) 2: mpGLgMuzJzekayRIaaatVQlUP6E.crl (hash: 8eeReAJwOHQ1pFYj+wl/N6h1QFj8VhW6wQqK6wFYaC4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/5c0b4a-2da4-43a5-9289-1937bde8cd6f/1/mpGLgMuzJzekayRIaaatVQlUP6E.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/5c0b4a-2da4-43a5-9289-1937bde8cd6f/1/mpGLgMuzJzekayRIaaatVQlUP6E.mft rsync://rpki.ripe.net/repository/DEFAULT/mpGLgMuzJzekayRIaaatVQlUP6E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 03:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1f:f4:05:0e:f1:26:1c:07:95:06:b2:cd:b5:9b:ca:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a918b80cbb32737a46b244869a6ad5509543fa1 Validity Not Before: Dec 15 03:00:44 2025 GMT Not After : Dec 16 03:00:44 2025 GMT Subject: CN=c8cb9e2bd328796d2fd2040d33910139724fc7d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:7f:08:8e:c8:a3:fe:32:e3:ee:55:04:c6:d5: 15:a2:28:e6:ea:b7:ad:07:87:cc:5f:1b:28:57:00: 23:d4:ae:82:89:32:40:dd:24:65:82:de:82:bf:15: 57:ba:63:17:e9:2c:01:e4:bd:98:9b:a5:18:51:cb: 81:be:10:87:14:76:76:fe:ba:40:5c:2a:85:4a:7d: fd:ac:63:ea:18:5f:3a:37:3e:a1:1c:db:ba:5a:7c: 1d:39:62:30:9e:8e:ca:1d:b5:2b:19:80:46:34:52: b5:1c:1b:eb:9a:9d:be:17:c9:0f:d4:29:0e:88:e3: 04:06:c7:9a:62:4b:4c:2a:28:24:0d:f0:18:3d:b7: ee:96:64:b8:95:5b:85:02:b7:86:1d:85:9b:76:a6: e3:de:18:80:6b:a0:5e:8d:a3:43:8f:14:1d:13:38: 48:d0:5c:4e:d3:ff:f2:d6:21:9c:ad:8c:a5:a2:5a: 1c:8c:e4:fd:79:54:1e:d2:61:1f:96:a2:22:e9:e4: 8e:f3:8f:c1:99:58:42:a8:55:b2:a4:30:f4:90:0e: 9a:de:0c:54:5a:3d:8d:e3:b1:76:0a:a8:37:38:91: ae:5b:f5:b4:2c:95:ed:bb:b5:3c:c6:6b:64:60:42: 04:4c:8e:6e:7b:cc:af:d4:3b:b9:96:eb:52:57:d6: da:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:CB:9E:2B:D3:28:79:6D:2F:D2:04:0D:33:91:01:39:72:4F:C7:D9 X509v3 Authority Key Identifier: keyid:9A:91:8B:80:CB:B3:27:37:A4:6B:24:48:69:A6:AD:55:09:54:3F:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpGLgMuzJzekayRIaaatVQlUP6E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5c0b4a-2da4-43a5-9289-1937bde8cd6f/1/mpGLgMuzJzekayRIaaatVQlUP6E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5c0b4a-2da4-43a5-9289-1937bde8cd6f/1/mpGLgMuzJzekayRIaaatVQlUP6E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:95:15:ea:a0:57:49:86:a5:07:30:60:0c:03:c6:05:0c:5a: 54:68:0a:51:95:62:ac:b8:37:58:32:d4:77:24:78:68:19:ec: 1a:66:42:eb:86:d9:02:3a:15:71:13:58:cf:a8:89:49:0c:51: 82:b7:28:ef:1c:b5:af:9e:34:2b:28:df:ab:be:b3:66:4e:8a: 79:de:a6:65:f7:a6:8d:31:02:89:ed:9f:ec:b4:ac:0e:fb:aa: aa:ed:4a:f0:bc:ff:d1:f4:ca:7d:9e:79:cc:38:7e:98:cb:27: 7c:6d:f5:13:95:10:57:fe:7f:5d:a4:8b:12:49:f9:a5:4a:53: b5:c9:1c:c3:53:59:55:a4:31:c0:2d:5a:fc:30:7b:51:e5:8b: b3:42:b5:52:74:82:9b:6a:63:f7:43:02:89:b5:c0:15:00:0e: 93:91:9c:46:08:a1:57:bb:aa:c0:a8:0a:86:24:1e:3e:d7:1f: fc:99:39:8c:5a:32:aa:33:35:3b:70:ed:9f:69:23:ae:01:63: d0:64:90:59:9d:bb:e1:39:7e:33:f8:a8:5d:f0:76:9c:8c:7f: f5:99:6e:a5:34:2f:8c:4e:dc:45:2a:b4:34:69:e7:bd:a3:b5: 4a:00:20:2a:d0:13:47:51:d8:8e:2f:ce:9d:14:b8:bb:ed:2b: 62:67:2a:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsf9AUO8SYcB5UGss21m8qeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhOTE4YjgwY2JiMzI3MzdhNDZiMjQ0ODY5YTZhZDU1MDk1 NDNmYTEwHhcNMjUxMjE1MDMwMDQ0WhcNMjUxMjE2MDMwMDQ0WjAzMTEwLwYDVQQD EyhjOGNiOWUyYmQzMjg3OTZkMmZkMjA0MGQzMzkxMDEzOTcyNGZjN2Q5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwn8Ijsij/jLj7lUExtUVoijm6ret B4fMXxsoVwAj1K6CiTJA3SRlgt6CvxVXumMX6SwB5L2Ym6UYUcuBvhCHFHZ2/rpA XCqFSn39rGPqGF86Nz6hHNu6WnwdOWIwno7KHbUrGYBGNFK1HBvrmp2+F8kP1CkO iOMEBseaYktMKigkDfAYPbfulmS4lVuFAreGHYWbdqbj3hiAa6BejaNDjxQdEzhI 0FxO0//y1iGcrYylolocjOT9eVQe0mEflqIi6eSO84/BmVhCqFWypDD0kA6a3gxU Wj2N47F2Cqg3OJGuW/W0LJXtu7U8xmtkYEIETI5ue8yv1Du5lutSV9ba1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMjLnivTKHltL9IEDTORATlyT8fZMB8GA1UdIwQY MBaAFJqRi4DLsyc3pGskSGmmrVUJVD+hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXBHTGdNdXpKemVrYXlSSWFhYXRWUWxVUDZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi81YzBiNGEtMmRhNC00M2E1LTkyODkt MTkzN2JkZThjZDZmLzEvbXBHTGdNdXpKemVrYXlSSWFhYXRWUWxVUDZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi81YzBiNGEtMmRhNC00M2E1LTkyODktMTkzN2JkZThjZDZm LzEvbXBHTGdNdXpKemVrYXlSSWFhYXRWUWxVUDZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADJUV6qBX SYalBzBgDAPGBQxaVGgKUZVirLg3WDLUdyR4aBnsGmZC64bZAjoVcRNYz6iJSQxR grco7xy1r540Kyjfq76zZk6Ked6mZfemjTECie2f7LSsDvuqqu1K8Lz/0fTKfZ55 zDh+mMsnfG31E5UQV/5/XaSLEkn5pUpTtckcw1NZVaQxwC1a/DB7UeWLs0K1UnSC m2pj90MCibXAFQAOk5GcRgihV7uqwKgKhiQePtcf/Jk5jFoyqjM1O3Dtn2kjrgFj 0GSQWZ274Tl+M/ioXfB2nIx/9ZlupTQvjE7cRSq0NGnnvaO1SgAgKtATR1HYji/O nRS4u+0rYmcqog== -----END CERTIFICATE-----Generated at Mon Dec 15 13:17:34 2025 by rpki-client