This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/5bf797-bc55-48c1-9e92-992825cd3214/1/MgTAPDbIBtaH6D6o0nIM7ru9w0M.mft File: MgTAPDbIBtaH6D6o0nIM7ru9w0M.mft (raw, json) Hash identifier: +FRWcFXhCI+ZR3E1ZfVZgcdBMEV1IWZFIsPGuqR+SY4= Subject key identifier: AD:D4:0F:65:40:AB:FB:E7:57:B2:D7:AD:D1:0C:79:B0:FB:A8:09:16 Authority key identifier: 32:04:C0:3C:36:C8:06:D6:87:E8:3E:A8:D2:72:0C:EE:BB:BD:C3:43 Certificate issuer: /CN=3204c03c36c806d687e83ea8d2720ceebbbdc343 Certificate serial: 019B38A27B0FC5B3030BE942C776EBC61352 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MgTAPDbIBtaH6D6o0nIM7ru9w0M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/5bf797-bc55-48c1-9e92-992825cd3214/1/MgTAPDbIBtaH6D6o0nIM7ru9w0M.mft Manifest number: 0769 Signing time: Fri 19 Dec 2025 22:02:10 +0000 Manifest this update: Fri 19 Dec 2025 22:02:10 +0000 Manifest next update: Sat 20 Dec 2025 22:02:10 +0000 Files and hashes: 1: 4iEprq9S0niaPUM7nGF34QiTqwo.roa (hash: f7Epr5pWf6vu+WKqHqf6izv8485TY6ZobKvsLuSbPr4=) 2: MgTAPDbIBtaH6D6o0nIM7ru9w0M.crl (hash: 8C+Y2+6Bn8h3tFH81Fr6rmCLqcFbI4GLYSDV13/9X6A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/5bf797-bc55-48c1-9e92-992825cd3214/1/MgTAPDbIBtaH6D6o0nIM7ru9w0M.crl rsync://rpki.ripe.net/repository/DEFAULT/47/5bf797-bc55-48c1-9e92-992825cd3214/1/MgTAPDbIBtaH6D6o0nIM7ru9w0M.mft rsync://rpki.ripe.net/repository/DEFAULT/MgTAPDbIBtaH6D6o0nIM7ru9w0M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 22:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a2:7b:0f:c5:b3:03:0b:e9:42:c7:76:eb:c6:13:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3204c03c36c806d687e83ea8d2720ceebbbdc343 Validity Not Before: Dec 19 22:02:10 2025 GMT Not After : Dec 20 22:02:10 2025 GMT Subject: CN=add40f6540abfbe757b2d7add10c79b0fba80916 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:24:e0:d4:c3:a0:6d:4f:cb:98:dd:a1:fb:b3: 52:23:97:f9:e1:4b:9b:7e:04:b7:1d:11:43:a3:5b: 81:2a:82:bd:0d:19:ab:0c:9b:c5:2b:05:2f:aa:68: d2:3e:53:37:de:c4:04:bd:99:7f:76:ec:0b:78:3e: 8c:b1:7c:8f:bd:5e:81:9f:25:45:54:b0:2f:e8:32: 8d:ab:a7:6d:f8:dd:74:d8:17:0b:70:31:1d:a6:4a: 20:5f:fa:e9:97:a7:c9:5b:5f:e4:b1:b3:38:d9:d7: 7c:89:d7:38:ee:7b:27:66:8d:87:84:6e:1c:1a:ee: 69:09:d3:a3:9f:fd:8f:b7:c3:e5:3e:53:63:bb:29: 0c:c4:57:50:ea:61:c4:6b:ab:f9:9a:d0:bd:8a:33: 24:fc:1c:53:f4:a7:5a:0b:46:f8:00:a9:55:7b:38: 7b:50:ba:19:1a:58:83:ce:3e:f0:e7:cc:6c:62:51: b8:f4:e8:69:0f:8b:f7:0a:59:e8:08:f4:48:ab:4c: d3:95:e1:b0:e8:93:1d:6f:61:d6:4f:6b:81:3d:fa: 0d:2c:e9:61:b5:4f:fa:b8:14:8e:ab:e3:ff:aa:11: 8d:2a:0e:b5:8b:63:01:4c:9e:9e:5b:28:5c:66:21: 4b:45:84:38:6d:78:6e:fb:57:26:eb:aa:99:69:94: 5f:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:D4:0F:65:40:AB:FB:E7:57:B2:D7:AD:D1:0C:79:B0:FB:A8:09:16 X509v3 Authority Key Identifier: keyid:32:04:C0:3C:36:C8:06:D6:87:E8:3E:A8:D2:72:0C:EE:BB:BD:C3:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MgTAPDbIBtaH6D6o0nIM7ru9w0M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/5bf797-bc55-48c1-9e92-992825cd3214/1/MgTAPDbIBtaH6D6o0nIM7ru9w0M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/5bf797-bc55-48c1-9e92-992825cd3214/1/MgTAPDbIBtaH6D6o0nIM7ru9w0M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:63:1d:92:4c:f3:23:f3:91:67:57:15:a9:57:82:ec:f4:8c: 9f:ec:2f:43:c8:a9:9a:8f:fa:df:5c:ff:a8:83:9d:03:b1:e4: a8:2f:3f:bb:ff:0c:56:b2:b4:38:d1:44:e8:e6:fe:16:d6:1b: d7:21:91:c5:d8:eb:52:3e:f8:cb:8d:c2:8c:59:04:29:31:91: 97:a0:34:a8:65:b1:91:42:77:d4:b7:e2:9c:19:e2:56:58:d4: 0e:71:8c:0a:c1:f9:c5:77:ed:48:81:38:78:3f:d2:8e:48:4c: f7:9d:17:57:82:96:55:4f:4b:26:d7:a9:2b:7a:ce:b3:3f:53: f2:9b:c9:f6:c4:bb:6d:e3:26:66:ca:01:36:b8:cf:b1:a6:e9: 34:59:00:f1:ef:ed:8b:8b:41:ba:73:6c:14:0e:90:6d:f8:de: a0:b0:16:17:be:4c:d0:83:3b:b3:2b:0d:3c:1a:85:03:1c:1a: be:93:1d:4d:43:81:3d:a3:64:f8:85:8f:96:8f:d4:72:1a:f0: 04:87:b8:95:62:4c:94:db:5c:ca:32:11:c9:1c:ee:d1:70:3f: 30:3c:2e:c7:1c:1e:bd:33:c8:6b:4f:3f:f2:2a:16:c1:aa:2b: c1:c2:66:66:aa:2d:52:e8:4b:a9:f9:93:fb:c3:44:74:d0:18: 84:bd:1d:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4onsPxbMDC+lCx3brxhNSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyMDRjMDNjMzZjODA2ZDY4N2U4M2VhOGQyNzIwY2VlYmJi ZGMzNDMwHhcNMjUxMjE5MjIwMjEwWhcNMjUxMjIwMjIwMjEwWjAzMTEwLwYDVQQD EyhhZGQ0MGY2NTQwYWJmYmU3NTdiMmQ3YWRkMTBjNzliMGZiYTgwOTE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSTg1MOgbU/LmN2h+7NSI5f54Uub fgS3HRFDo1uBKoK9DRmrDJvFKwUvqmjSPlM33sQEvZl/duwLeD6MsXyPvV6BnyVF VLAv6DKNq6dt+N102BcLcDEdpkogX/rpl6fJW1/ksbM42dd8idc47nsnZo2HhG4c Gu5pCdOjn/2Pt8PlPlNjuykMxFdQ6mHEa6v5mtC9ijMk/BxT9KdaC0b4AKlVezh7 ULoZGliDzj7w58xsYlG49OhpD4v3ClnoCPRIq0zTleGw6JMdb2HWT2uBPfoNLOlh tU/6uBSOq+P/qhGNKg61i2MBTJ6eWyhcZiFLRYQ4bXhu+1cm66qZaZRfwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK3UD2VAq/vnV7LXrdEMebD7qAkWMB8GA1UdIwQY MBaAFDIEwDw2yAbWh+g+qNJyDO67vcNDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWdUQVBEYklCdGFINkQ2bzBuSU03cnU5dzBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny81YmY3OTctYmM1NS00OGMxLTllOTIt OTkyODI1Y2QzMjE0LzEvTWdUQVBEYklCdGFINkQ2bzBuSU03cnU5dzBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny81YmY3OTctYmM1NS00OGMxLTllOTItOTkyODI1Y2QzMjE0 LzEvTWdUQVBEYklCdGFINkQ2bzBuSU03cnU5dzBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMWMdkkzz I/ORZ1cVqVeC7PSMn+wvQ8ipmo/631z/qIOdA7HkqC8/u/8MVrK0ONFE6Ob+FtYb 1yGRxdjrUj74y43CjFkEKTGRl6A0qGWxkUJ31LfinBniVljUDnGMCsH5xXftSIE4 eD/SjkhM950XV4KWVU9LJtepK3rOsz9T8pvJ9sS7beMmZsoBNrjPsabpNFkA8e/t i4tBunNsFA6QbfjeoLAWF75M0IM7sysNPBqFAxwavpMdTUOBPaNk+IWPlo/Uchrw BIe4lWJMlNtcyjIRyRzu0XA/MDwuxxwevTPIa08/8ioWwaorwcJmZqotUuhLqfmT +8NEdNAYhL0dFA== -----END CERTIFICATE-----Generated at Sat Dec 20 07:33:58 2025 by rpki-client