This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/0f2682-9878-416b-965c-40aac6396777/1/mjgMVcRhF_nQ-fifiF_YrFhMcuc.mft File: mjgMVcRhF_nQ-fifiF_YrFhMcuc.mft (raw, json) Hash identifier: u1vkdlgfpgm7J/RXXUucMFbzkuzB4Tn6Aq89GUoj8i8= Subject key identifier: DE:70:FC:41:D1:CE:2F:A2:98:6E:70:CB:48:EB:CB:E6:E7:B5:18:B6 Authority key identifier: 9A:38:0C:55:C4:61:17:F9:D0:F9:F8:9F:88:5F:D8:AC:58:4C:72:E7 Certificate issuer: /CN=9a380c55c46117f9d0f9f89f885fd8ac584c72e7 Certificate serial: 019B42EE344732A4503D21E0113E6B07496C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mjgMVcRhF_nQ-fifiF_YrFhMcuc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/0f2682-9878-416b-965c-40aac6396777/1/mjgMVcRhF_nQ-fifiF_YrFhMcuc.mft Manifest number: 06AF Signing time: Sun 21 Dec 2025 22:01:05 +0000 Manifest this update: Sun 21 Dec 2025 22:01:05 +0000 Manifest next update: Mon 22 Dec 2025 22:01:05 +0000 Files and hashes: 1: 0Xa-Nei_d95pLvklAjjCcq4wB50.roa (hash: IPQHZLb7lkBMMEnjRg8Zyo+jCG1PIyAJca8gIl7Nyqw=) 2: mjgMVcRhF_nQ-fifiF_YrFhMcuc.crl (hash: FQPmpAG/w8075A+Rt10/DIYrKIVeSoPlRLrLGF27OC0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/0f2682-9878-416b-965c-40aac6396777/1/mjgMVcRhF_nQ-fifiF_YrFhMcuc.crl rsync://rpki.ripe.net/repository/DEFAULT/31/0f2682-9878-416b-965c-40aac6396777/1/mjgMVcRhF_nQ-fifiF_YrFhMcuc.mft rsync://rpki.ripe.net/repository/DEFAULT/mjgMVcRhF_nQ-fifiF_YrFhMcuc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:ee:34:47:32:a4:50:3d:21:e0:11:3e:6b:07:49:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a380c55c46117f9d0f9f89f885fd8ac584c72e7 Validity Not Before: Dec 21 22:01:05 2025 GMT Not After : Dec 22 22:01:05 2025 GMT Subject: CN=de70fc41d1ce2fa2986e70cb48ebcbe6e7b518b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:4e:af:c3:f5:13:4d:af:ff:3f:f2:39:2c:e6: 9c:e9:d2:67:99:6b:5a:5c:29:ef:03:be:b1:20:13: 2d:5a:8e:27:74:66:09:62:a5:88:88:1a:83:05:e9: 09:69:c7:5b:30:6f:b3:bd:67:76:aa:23:3b:5f:e7: a2:97:db:11:fe:65:1f:85:aa:2a:bb:5a:e2:aa:3a: 48:71:df:2a:a4:81:db:bf:4a:1f:07:76:c9:70:6d: 3e:86:68:6e:a8:43:27:42:0a:ef:2d:f4:2f:18:ef: 6e:44:5e:e2:f9:12:1d:e5:1a:0c:75:6b:30:65:fd: 2c:43:fc:2b:dc:1e:81:8f:cf:27:29:c9:7d:f9:4a: 83:66:41:69:66:6f:de:9b:5b:8b:a4:18:9d:e0:38: 3b:d3:49:08:ae:e2:c3:a1:4e:d9:9d:48:26:98:25: 5f:e0:e7:99:10:21:d9:11:0f:9b:72:66:77:98:ce: c4:65:c7:55:5f:b4:ef:be:b6:1c:84:0b:fb:44:f3: b9:08:05:61:bd:de:7f:20:21:d2:21:96:e4:c5:fb: 8b:46:d3:aa:ac:f1:29:ad:e7:07:b5:ab:71:02:ff: a6:71:02:2e:99:56:07:78:2b:59:9c:89:fa:fa:17: de:14:21:0c:52:38:14:4f:bb:9e:64:c9:d7:f0:41: df:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:70:FC:41:D1:CE:2F:A2:98:6E:70:CB:48:EB:CB:E6:E7:B5:18:B6 X509v3 Authority Key Identifier: keyid:9A:38:0C:55:C4:61:17:F9:D0:F9:F8:9F:88:5F:D8:AC:58:4C:72:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mjgMVcRhF_nQ-fifiF_YrFhMcuc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0f2682-9878-416b-965c-40aac6396777/1/mjgMVcRhF_nQ-fifiF_YrFhMcuc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0f2682-9878-416b-965c-40aac6396777/1/mjgMVcRhF_nQ-fifiF_YrFhMcuc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:f8:21:19:72:cc:37:c1:7d:93:2f:63:42:8c:e2:83:47:a2: 34:e1:9f:16:dc:17:9d:af:c1:c2:ad:95:77:2c:60:86:ae:21: 49:9e:d8:50:2b:29:0b:73:31:8f:07:8f:a0:9e:8e:ec:9c:2f: a9:be:09:21:65:62:bf:cf:e2:ce:7b:1b:1b:89:b2:c1:62:42: b1:6d:a6:94:3b:1f:de:a6:e0:63:72:1f:84:99:b0:05:a4:e3: 94:4a:a4:e8:8e:f4:41:39:64:e6:3b:45:61:23:e7:b4:cb:d2: 98:3f:7d:86:da:22:23:ab:19:74:7b:b4:fe:43:f5:c0:61:4e: 5b:3c:cb:c5:5a:ce:30:0b:c7:36:b1:50:c1:e9:30:e8:bf:a6: 07:07:39:76:27:9b:7b:31:db:3d:f1:82:3b:fb:b1:49:31:2e: 30:9e:43:bb:23:ff:20:e7:87:52:96:ca:e8:93:00:7a:0b:b6: 88:fd:69:de:33:46:c7:32:a8:98:8b:57:44:85:0a:93:e7:a6: 67:6f:ce:6e:c8:00:36:88:b6:3f:71:50:2a:4c:6f:78:58:f7: 3c:a3:e0:c8:18:59:e9:06:20:8f:10:5e:8f:74:3b:5f:bc:3d: ac:46:6e:00:81:3c:35:77:0d:24:82:98:a1:39:39:fa:f7:07: 7f:05:34:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtC7jRHMqRQPSHgET5rB0lsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhMzgwYzU1YzQ2MTE3ZjlkMGY5Zjg5Zjg4NWZkOGFjNTg0 YzcyZTcwHhcNMjUxMjIxMjIwMTA1WhcNMjUxMjIyMjIwMTA1WjAzMTEwLwYDVQQD EyhkZTcwZmM0MWQxY2UyZmEyOTg2ZTcwY2I0OGViY2JlNmU3YjUxOGI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAik6vw/UTTa//P/I5LOac6dJnmWta XCnvA76xIBMtWo4ndGYJYqWIiBqDBekJacdbMG+zvWd2qiM7X+eil9sR/mUfhaoq u1riqjpIcd8qpIHbv0ofB3bJcG0+hmhuqEMnQgrvLfQvGO9uRF7i+RId5RoMdWsw Zf0sQ/wr3B6Bj88nKcl9+UqDZkFpZm/em1uLpBid4Dg700kIruLDoU7ZnUgmmCVf 4OeZECHZEQ+bcmZ3mM7EZcdVX7TvvrYchAv7RPO5CAVhvd5/ICHSIZbkxfuLRtOq rPEprecHtatxAv+mcQIumVYHeCtZnIn6+hfeFCEMUjgUT7ueZMnX8EHfqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN5w/EHRzi+imG5wy0jry+bntRi2MB8GA1UdIwQY MBaAFJo4DFXEYRf50Pn4n4hf2KxYTHLnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWpnTVZjUmhGX25RLWZpZmlGX1lyRmhNY3VjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8wZjI2ODItOTg3OC00MTZiLTk2NWMt NDBhYWM2Mzk2Nzc3LzEvbWpnTVZjUmhGX25RLWZpZmlGX1lyRmhNY3VjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS8wZjI2ODItOTg3OC00MTZiLTk2NWMtNDBhYWM2Mzk2Nzc3 LzEvbWpnTVZjUmhGX25RLWZpZmlGX1lyRmhNY3VjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJfghGXLM N8F9ky9jQozig0eiNOGfFtwXna/Bwq2Vdyxghq4hSZ7YUCspC3MxjwePoJ6O7Jwv qb4JIWViv8/iznsbG4mywWJCsW2mlDsf3qbgY3IfhJmwBaTjlEqk6I70QTlk5jtF YSPntMvSmD99htoiI6sZdHu0/kP1wGFOWzzLxVrOMAvHNrFQwekw6L+mBwc5dieb ezHbPfGCO/uxSTEuMJ5DuyP/IOeHUpbK6JMAegu2iP1p3jNGxzKomItXRIUKk+em Z2/ObsgANoi2P3FQKkxveFj3PKPgyBhZ6QYgjxBej3Q7X7w9rEZuAIE8NXcNJIKY oTk5+vcHfwU0Fw== -----END CERTIFICATE-----Generated at Mon Dec 22 02:17:31 2025 by rpki-client