This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/MGtGjMMe86PQgayPArJx4xR1Wb8.mft File: MGtGjMMe86PQgayPArJx4xR1Wb8.mft (raw, json) Hash identifier: /bbXeATkelPkBnD8Isu2waCi/XSi7HUWZauPxq3HLSg= Subject key identifier: 4B:B2:79:BB:A2:70:42:35:EC:AA:09:41:35:61:90:96:6A:15:7F:EE Authority key identifier: 30:6B:46:8C:C3:1E:F3:A3:D0:81:AC:8F:02:B2:71:E3:14:75:59:BF Certificate issuer: /CN=306b468cc31ef3a3d081ac8f02b271e3147559bf Certificate serial: 019B2407C43562AF90C511A6D995AAA9F2E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGtGjMMe86PQgayPArJx4xR1Wb8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/MGtGjMMe86PQgayPArJx4xR1Wb8.mft Manifest number: 0C37 Signing time: Mon 15 Dec 2025 22:00:47 +0000 Manifest this update: Mon 15 Dec 2025 22:00:47 +0000 Manifest next update: Tue 16 Dec 2025 22:00:47 +0000 Files and hashes: 1: MGtGjMMe86PQgayPArJx4xR1Wb8.crl (hash: lx60+PpfPVhuztqeh9q0VW4YEA2meCWSBihWYDXjKW0=) 2: zCf3OK6AbL-GLEVW2m2fiyVZR2o.roa (hash: T9wprypvgjd5UjKaL97Qh7s/fP7I922vE5XInqdd1G4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/MGtGjMMe86PQgayPArJx4xR1Wb8.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/MGtGjMMe86PQgayPArJx4xR1Wb8.mft rsync://rpki.ripe.net/repository/DEFAULT/MGtGjMMe86PQgayPArJx4xR1Wb8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 22:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:07:c4:35:62:af:90:c5:11:a6:d9:95:aa:a9:f2:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=306b468cc31ef3a3d081ac8f02b271e3147559bf Validity Not Before: Dec 15 22:00:47 2025 GMT Not After : Dec 16 22:00:47 2025 GMT Subject: CN=4bb279bba2704235ecaa0941356190966a157fee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:1c:1b:d4:0b:82:9b:56:6f:4a:44:e3:91:cb: 27:8c:14:6b:92:00:33:18:58:f4:b2:ca:ca:aa:b1: f9:50:a5:51:f5:8b:fb:65:fc:80:30:2d:c2:a5:a1: 7f:66:82:06:de:66:a5:20:c5:45:4e:42:cd:bb:df: c7:64:e2:e7:ef:5d:6b:5c:21:0c:0f:fa:1f:89:b0: a5:0e:e5:1c:f4:4d:05:49:c3:ee:6d:77:f4:93:9b: 7d:93:e8:1d:2e:15:17:1f:83:79:a7:99:da:d1:9a: e4:95:7e:11:ef:93:a1:49:ea:cb:9a:e6:35:cc:f2: f4:8a:20:22:7d:32:59:ae:cf:5b:ea:44:24:f6:4a: 6d:33:97:26:18:cb:de:b3:80:81:88:a9:10:b8:6a: 68:cd:21:3d:83:c1:65:9d:41:67:d6:8f:35:7e:1e: 4e:93:85:44:ec:05:dc:84:45:e1:86:b9:14:0a:f8: 46:70:56:b8:e6:0f:dd:03:0d:78:0e:ce:ff:d2:3c: 53:0d:bb:29:d3:1c:f0:10:cc:99:3d:b7:c7:df:65: cb:14:92:d5:85:a0:41:c0:b0:20:17:36:a2:c1:8e: 52:36:2c:1a:b8:6e:0a:23:54:9d:83:09:8b:fa:77: 0b:ce:e1:68:b8:f3:ce:9f:4c:3a:37:9f:52:19:64: ce:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:B2:79:BB:A2:70:42:35:EC:AA:09:41:35:61:90:96:6A:15:7F:EE X509v3 Authority Key Identifier: keyid:30:6B:46:8C:C3:1E:F3:A3:D0:81:AC:8F:02:B2:71:E3:14:75:59:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGtGjMMe86PQgayPArJx4xR1Wb8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/MGtGjMMe86PQgayPArJx4xR1Wb8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/MGtGjMMe86PQgayPArJx4xR1Wb8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:fd:d2:79:f2:21:e7:99:84:d8:d9:a1:1e:c0:71:8b:d0:63: e8:13:fc:7d:ad:7a:77:30:2a:33:f4:79:bc:7d:cc:12:55:ee: 3d:60:58:e7:d7:55:6f:a9:b2:55:d8:db:d3:aa:88:b4:40:11: c6:6c:cc:00:b0:9d:ee:5b:21:90:9a:a6:c9:7e:30:5b:f3:95: 60:7b:a5:9b:35:b8:21:7e:b1:f2:ba:1a:85:7e:b2:c7:f0:fc: 90:5c:47:ca:0b:7a:30:d7:94:ed:f9:1d:6f:c1:6a:a2:92:ca: 45:b1:3b:ef:fe:b7:3d:12:9f:05:72:66:f4:68:f7:b1:4e:ae: a0:96:4b:d0:fd:38:03:3c:a0:25:c9:19:56:92:12:e0:ab:93: d6:5e:a9:86:1d:2a:27:a5:88:36:fa:dc:e9:03:1a:8b:35:5d: 98:2e:5c:80:64:34:c5:c9:8b:c6:9e:a0:84:72:07:4f:47:bd: 24:fe:61:66:c6:66:b1:63:a0:a0:39:15:4c:14:26:9c:1e:98: 01:94:db:66:2f:a0:d4:18:57:a5:9d:29:32:8b:30:dc:94:cb: 50:cc:82:10:29:2b:b3:96:db:7f:9a:a0:80:37:83:40:4b:1b: c2:72:50:b8:30:03:97:c0:4e:b7:4e:76:cd:0f:70:82:6e:de: 1b:08:3f:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskB8Q1Yq+QxRGm2ZWqqfLiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwNmI0NjhjYzMxZWYzYTNkMDgxYWM4ZjAyYjI3MWUzMTQ3 NTU5YmYwHhcNMjUxMjE1MjIwMDQ3WhcNMjUxMjE2MjIwMDQ3WjAzMTEwLwYDVQQD Eyg0YmIyNzliYmEyNzA0MjM1ZWNhYTA5NDEzNTYxOTA5NjZhMTU3ZmVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxwb1AuCm1ZvSkTjkcsnjBRrkgAz GFj0ssrKqrH5UKVR9Yv7ZfyAMC3CpaF/ZoIG3malIMVFTkLNu9/HZOLn711rXCEM D/ofibClDuUc9E0FScPubXf0k5t9k+gdLhUXH4N5p5na0ZrklX4R75OhSerLmuY1 zPL0iiAifTJZrs9b6kQk9kptM5cmGMves4CBiKkQuGpozSE9g8FlnUFn1o81fh5O k4VE7AXchEXhhrkUCvhGcFa45g/dAw14Ds7/0jxTDbsp0xzwEMyZPbfH32XLFJLV haBBwLAgFzaiwY5SNiwauG4KI1SdgwmL+ncLzuFouPPOn0w6N59SGWTOawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEuyebuicEI17KoJQTVhkJZqFX/uMB8GA1UdIwQY MBaAFDBrRozDHvOj0IGsjwKyceMUdVm/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUd0R2pNTWU4NlBRZ2F5UEFySng0eFIxV2I4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC83ZTRlYTgtODk1MC00MTgzLWFiYzAt MzM4Mjc5NDA0OWMyLzEvTUd0R2pNTWU4NlBRZ2F5UEFySng0eFIxV2I4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC83ZTRlYTgtODk1MC00MTgzLWFiYzAtMzM4Mjc5NDA0OWMy LzEvTUd0R2pNTWU4NlBRZ2F5UEFySng0eFIxV2I4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC/3SefIh 55mE2NmhHsBxi9Bj6BP8fa16dzAqM/R5vH3MElXuPWBY59dVb6myVdjb06qItEAR xmzMALCd7lshkJqmyX4wW/OVYHulmzW4IX6x8roahX6yx/D8kFxHygt6MNeU7fkd b8FqopLKRbE77/63PRKfBXJm9Gj3sU6uoJZL0P04AzygJckZVpIS4KuT1l6phh0q J6WINvrc6QMaizVdmC5cgGQ0xcmLxp6ghHIHT0e9JP5hZsZmsWOgoDkVTBQmnB6Y AZTbZi+g1BhXpZ0pMosw3JTLUMyCECkrs5bbf5qggDeDQEsbwnJQuDADl8BOt052 zQ9wgm7eGwg/ug== -----END CERTIFICATE-----Generated at Tue Dec 16 03:14:37 2025 by rpki-client