This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/0f2682-9878-416b-965c-40aac6396777/1/mjgMVcRhF_nQ-fifiF_YrFhMcuc.mft File: mjgMVcRhF_nQ-fifiF_YrFhMcuc.mft (raw, json) Hash identifier: 7G7hdvCY/zyVt13z1gUUfxDE1efmyV6AUfpQPos2ufM= Subject key identifier: F7:07:F5:8B:E0:A8:19:E2:DA:43:C5:7D:4A:BE:EE:58:9C:85:37:DE Authority key identifier: 9A:38:0C:55:C4:61:17:F9:D0:F9:F8:9F:88:5F:D8:AC:58:4C:72:E7 Certificate issuer: /CN=9a380c55c46117f9d0f9f89f885fd8ac584c72e7 Certificate serial: 019B3758635D4659E277544200FA9FD2A931 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mjgMVcRhF_nQ-fifiF_YrFhMcuc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/0f2682-9878-416b-965c-40aac6396777/1/mjgMVcRhF_nQ-fifiF_YrFhMcuc.mft Manifest number: 06A9 Signing time: Fri 19 Dec 2025 16:01:37 +0000 Manifest this update: Fri 19 Dec 2025 16:01:37 +0000 Manifest next update: Sat 20 Dec 2025 16:01:37 +0000 Files and hashes: 1: 0Xa-Nei_d95pLvklAjjCcq4wB50.roa (hash: IPQHZLb7lkBMMEnjRg8Zyo+jCG1PIyAJca8gIl7Nyqw=) 2: mjgMVcRhF_nQ-fifiF_YrFhMcuc.crl (hash: yMFT3ViXIKpmXGskc3M4rAqcwGUnJRaXmx1ZrYV7MW0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/0f2682-9878-416b-965c-40aac6396777/1/mjgMVcRhF_nQ-fifiF_YrFhMcuc.crl rsync://rpki.ripe.net/repository/DEFAULT/31/0f2682-9878-416b-965c-40aac6396777/1/mjgMVcRhF_nQ-fifiF_YrFhMcuc.mft rsync://rpki.ripe.net/repository/DEFAULT/mjgMVcRhF_nQ-fifiF_YrFhMcuc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:58:63:5d:46:59:e2:77:54:42:00:fa:9f:d2:a9:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a380c55c46117f9d0f9f89f885fd8ac584c72e7 Validity Not Before: Dec 19 16:01:37 2025 GMT Not After : Dec 20 16:01:37 2025 GMT Subject: CN=f707f58be0a819e2da43c57d4abeee589c8537de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:82:a6:62:a2:25:01:17:92:c7:ee:61:0d:ca: 22:93:78:d3:d3:fe:4c:ed:1f:3c:d7:dd:82:85:af: 32:d5:5f:79:b3:1b:d4:5f:a0:a4:68:cf:a7:5d:d7: 4c:1b:78:b1:26:6c:59:9f:c7:9e:e0:73:96:ec:17: c9:8f:c5:09:0f:57:0a:e3:c5:6e:c7:32:7c:25:40: 00:d4:05:c2:29:b3:ba:60:75:5f:56:d5:fc:45:3d: 0a:31:a5:07:21:bb:71:59:6b:67:2e:1a:12:f0:c7: 13:7d:d9:40:e0:99:d2:d1:6d:df:9c:62:ee:2c:18: 34:9c:44:27:67:30:9c:06:af:fe:07:76:61:33:c8: 10:dc:4b:33:4d:e2:de:ee:33:50:27:11:4a:d7:78: 29:a8:6d:75:f6:5a:1c:57:75:1e:02:4a:02:d2:7f: 72:65:f8:4f:3f:de:c3:8d:63:f3:17:af:a3:af:f4: 49:51:14:b2:3f:50:60:15:23:a6:1e:ad:b3:95:e5: 4f:cd:96:be:4d:9b:6c:ab:ff:1e:85:e6:07:c8:7a: 1d:a6:a4:88:df:3e:32:9d:cf:60:4a:b9:bf:87:81: 4b:30:30:6b:b0:d6:a4:6c:fd:e6:8e:74:8e:5e:cd: 8d:d4:38:1e:44:de:c1:84:1e:b9:fb:9a:a9:6c:8b: 0a:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:07:F5:8B:E0:A8:19:E2:DA:43:C5:7D:4A:BE:EE:58:9C:85:37:DE X509v3 Authority Key Identifier: keyid:9A:38:0C:55:C4:61:17:F9:D0:F9:F8:9F:88:5F:D8:AC:58:4C:72:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mjgMVcRhF_nQ-fifiF_YrFhMcuc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0f2682-9878-416b-965c-40aac6396777/1/mjgMVcRhF_nQ-fifiF_YrFhMcuc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0f2682-9878-416b-965c-40aac6396777/1/mjgMVcRhF_nQ-fifiF_YrFhMcuc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:01:e8:62:69:e2:34:0c:ff:a1:c1:b3:ea:0a:55:cc:b7:05: 3a:5b:52:84:5b:77:51:2c:70:b3:e8:cc:98:c9:70:cc:1a:05: 92:36:77:6f:4c:9a:c0:21:c8:e3:2d:96:6d:ea:df:6b:80:29: 37:a2:3d:70:25:4a:bd:f3:49:4c:43:52:d3:84:3e:bd:72:bb: 93:6c:d8:8c:48:9f:75:60:8f:7f:d5:ca:74:b0:1a:40:80:0e: 89:de:79:a4:18:b1:25:da:b9:6f:c2:6a:0e:18:9b:e3:5f:fb: ff:58:ae:81:8f:df:5b:72:8e:91:ee:bd:b6:9f:ab:3b:4b:5b: fd:f4:17:3a:2a:af:a3:24:39:fc:6a:78:4c:d2:d0:66:f3:b6: 93:5d:3f:e0:04:85:83:b2:33:a1:50:df:87:9e:cf:79:bb:09: 59:7f:8e:c2:4d:03:d3:dd:65:ee:dd:d5:53:50:23:8a:85:5b: 55:48:ce:da:f3:d2:dc:f7:30:85:16:a0:3a:07:bc:8c:ba:95: 17:8b:fc:2d:4f:98:31:2d:dd:f5:46:02:7f:6d:3b:5e:99:3b: 59:de:c6:2c:c6:70:3b:eb:e0:62:b7:83:40:bf:a0:f6:ea:67: e9:2f:52:e5:2f:68:66:62:fc:d2:66:1d:55:a9:83:0b:84:13: d9:a4:c5:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3WGNdRlnid1RCAPqf0qkxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhMzgwYzU1YzQ2MTE3ZjlkMGY5Zjg5Zjg4NWZkOGFjNTg0 YzcyZTcwHhcNMjUxMjE5MTYwMTM3WhcNMjUxMjIwMTYwMTM3WjAzMTEwLwYDVQQD EyhmNzA3ZjU4YmUwYTgxOWUyZGE0M2M1N2Q0YWJlZWU1ODljODUzN2RlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6IKmYqIlAReSx+5hDcoik3jT0/5M 7R88192Cha8y1V95sxvUX6CkaM+nXddMG3ixJmxZn8ee4HOW7BfJj8UJD1cK48Vu xzJ8JUAA1AXCKbO6YHVfVtX8RT0KMaUHIbtxWWtnLhoS8McTfdlA4JnS0W3fnGLu LBg0nEQnZzCcBq/+B3ZhM8gQ3EszTeLe7jNQJxFK13gpqG119locV3UeAkoC0n9y ZfhPP97DjWPzF6+jr/RJURSyP1BgFSOmHq2zleVPzZa+TZtsq/8eheYHyHodpqSI 3z4ync9gSrm/h4FLMDBrsNakbP3mjnSOXs2N1DgeRN7BhB65+5qpbIsKSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPcH9YvgqBni2kPFfUq+7lichTfeMB8GA1UdIwQY MBaAFJo4DFXEYRf50Pn4n4hf2KxYTHLnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWpnTVZjUmhGX25RLWZpZmlGX1lyRmhNY3VjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8wZjI2ODItOTg3OC00MTZiLTk2NWMt NDBhYWM2Mzk2Nzc3LzEvbWpnTVZjUmhGX25RLWZpZmlGX1lyRmhNY3VjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS8wZjI2ODItOTg3OC00MTZiLTk2NWMtNDBhYWM2Mzk2Nzc3 LzEvbWpnTVZjUmhGX25RLWZpZmlGX1lyRmhNY3VjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADQHoYmni NAz/ocGz6gpVzLcFOltShFt3USxws+jMmMlwzBoFkjZ3b0yawCHI4y2Wberfa4Ap N6I9cCVKvfNJTENS04Q+vXK7k2zYjEifdWCPf9XKdLAaQIAOid55pBixJdq5b8Jq Dhib41/7/1iugY/fW3KOke69tp+rO0tb/fQXOiqvoyQ5/Gp4TNLQZvO2k10/4ASF g7IzoVDfh57PebsJWX+Owk0D091l7t3VU1AjioVbVUjO2vPS3PcwhRagOge8jLqV F4v8LU+YMS3d9UYCf207Xpk7Wd7GLMZwO+vgYreDQL+g9upn6S9S5S9oZmL80mYd VamDC4QT2aTFzg== -----END CERTIFICATE-----Generated at Fri Dec 19 21:12:58 2025 by rpki-client