This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/c66bc8-f206-43d0-94be-18aadd659566/1/Mg58DOtLoqb0uW_EuuGruFMDWro.mft File: Mg58DOtLoqb0uW_EuuGruFMDWro.mft (raw, json) Hash identifier: Ujrm+J+FK6seML0rPf9HFGVEIeesUi/lLAjz5tQn9GU= Subject key identifier: 40:14:6F:8C:70:0C:BC:EA:A7:E1:F8:CC:C5:84:C5:3B:75:EA:45:15 Authority key identifier: 32:0E:7C:0C:EB:4B:A2:A6:F4:B9:6F:C4:BA:E1:AB:B8:53:03:5A:BA Certificate issuer: /CN=320e7c0ceb4ba2a6f4b96fc4bae1abb853035aba Certificate serial: 019B1014E8AA33F4D5ED8574052B735E38E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mg58DOtLoqb0uW_EuuGruFMDWro.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/c66bc8-f206-43d0-94be-18aadd659566/1/Mg58DOtLoqb0uW_EuuGruFMDWro.mft Manifest number: 1704 Signing time: Fri 12 Dec 2025 01:02:44 +0000 Manifest this update: Fri 12 Dec 2025 01:02:44 +0000 Manifest next update: Sat 13 Dec 2025 01:02:44 +0000 Files and hashes: 1: IqkEA-rqe3obsi9U0tATjcGiORw.roa (hash: pdv/Uop5nT0xWWcfbMOXH1ucooA/J/I4hHoF5p2oy/A=) 2: Mg58DOtLoqb0uW_EuuGruFMDWro.crl (hash: SvTOFskQ3p0qIfmop/wUKt0Bo1enzY1axomh+tEkgMs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/c66bc8-f206-43d0-94be-18aadd659566/1/Mg58DOtLoqb0uW_EuuGruFMDWro.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/c66bc8-f206-43d0-94be-18aadd659566/1/Mg58DOtLoqb0uW_EuuGruFMDWro.mft rsync://rpki.ripe.net/repository/DEFAULT/Mg58DOtLoqb0uW_EuuGruFMDWro.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 01:02:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:14:e8:aa:33:f4:d5:ed:85:74:05:2b:73:5e:38:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=320e7c0ceb4ba2a6f4b96fc4bae1abb853035aba Validity Not Before: Dec 12 01:02:44 2025 GMT Not After : Dec 13 01:02:44 2025 GMT Subject: CN=40146f8c700cbceaa7e1f8ccc584c53b75ea4515 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:e8:b4:4b:a6:ea:41:ed:43:e8:99:30:ea:b7: a6:a5:f2:db:a7:29:1b:66:ec:be:4a:82:c6:e9:c4: d3:ef:b3:c8:ca:e2:02:fd:f7:fe:1d:07:8c:fd:41: c5:7d:45:09:07:11:02:83:e7:35:59:61:01:d1:87: 48:92:c0:09:9f:ee:16:06:92:a0:54:66:57:90:53: f5:a3:3d:18:0d:ad:f6:28:ea:b1:d7:df:33:ad:14: a7:f9:d0:4a:3a:75:7e:36:5e:0e:76:62:25:41:cb: b1:0f:9d:5d:c3:35:f3:e5:ca:46:e6:69:35:a9:ee: 59:fd:16:3d:e2:e5:49:ca:4e:b7:ae:d2:b0:63:3a: d7:78:f8:40:8a:bf:38:16:99:21:64:27:92:b8:12: dd:ae:20:bb:93:83:7a:f7:9f:a7:69:5e:f8:7d:3d: 6f:ce:a4:ab:d8:4d:bb:26:b4:79:49:d3:98:8c:44: ce:3e:31:bc:33:61:bb:cf:c8:58:33:3c:8c:d0:38: 53:36:6c:56:e8:43:27:b5:24:68:5d:c5:77:58:43: 4c:ca:e5:75:ba:57:ed:3d:ff:60:d1:59:d7:f7:c1: 65:75:72:a3:70:15:bc:d5:49:46:cf:74:e2:b2:47: c3:c3:40:d3:bd:b6:f4:da:34:de:19:66:78:d0:62: ff:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:14:6F:8C:70:0C:BC:EA:A7:E1:F8:CC:C5:84:C5:3B:75:EA:45:15 X509v3 Authority Key Identifier: keyid:32:0E:7C:0C:EB:4B:A2:A6:F4:B9:6F:C4:BA:E1:AB:B8:53:03:5A:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mg58DOtLoqb0uW_EuuGruFMDWro.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/c66bc8-f206-43d0-94be-18aadd659566/1/Mg58DOtLoqb0uW_EuuGruFMDWro.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/c66bc8-f206-43d0-94be-18aadd659566/1/Mg58DOtLoqb0uW_EuuGruFMDWro.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:53:1c:b9:2a:7a:3e:c2:9c:f7:d9:cc:d9:cb:b2:e6:aa:87: 33:62:02:76:79:95:39:54:df:27:c9:24:7c:d4:ec:57:61:66: 57:fe:33:bd:91:f8:42:4a:69:1d:af:ee:bf:9e:03:a0:0f:0c: 3d:df:eb:a6:3c:53:f2:dd:c0:a8:3c:cb:66:ad:e6:d9:20:56: e8:1f:f5:02:43:57:79:53:88:d1:0d:10:7a:46:30:d4:ce:8c: ee:01:45:23:5d:28:9b:ba:03:12:2f:af:4c:30:1d:0f:5f:12: 6b:80:68:6c:d3:64:3f:1d:ab:3d:3d:b8:d8:8f:fc:11:cf:5a: dd:8a:a4:0b:4e:23:de:ed:10:5a:21:a2:82:d2:ec:c5:98:da: 58:f6:4e:1d:b7:3e:e7:58:84:6c:df:73:cd:8c:71:a1:36:92: 48:69:57:c2:91:2f:ab:ac:dd:52:92:31:91:44:8b:ad:cf:1f: c5:09:7b:16:26:09:89:f5:13:eb:39:ae:82:95:9e:aa:60:fe: 19:8b:da:6a:38:ef:2d:1e:df:a6:25:b0:79:aa:36:90:ca:3b: 04:a8:fa:54:90:14:e1:3d:94:79:22:ff:51:56:6c:be:94:41: 20:6f:9f:78:46:8e:fe:05:fa:6e:4b:b1:17:85:d0:56:4f:d0: 7a:49:a6:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQFOiqM/TV7YV0BStzXjjkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyMGU3YzBjZWI0YmEyYTZmNGI5NmZjNGJhZTFhYmI4NTMw MzVhYmEwHhcNMjUxMjEyMDEwMjQ0WhcNMjUxMjEzMDEwMjQ0WjAzMTEwLwYDVQQD Eyg0MDE0NmY4YzcwMGNiY2VhYTdlMWY4Y2NjNTg0YzUzYjc1ZWE0NTE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4+i0S6bqQe1D6Jkw6rempfLbpykb Zuy+SoLG6cTT77PIyuIC/ff+HQeM/UHFfUUJBxECg+c1WWEB0YdIksAJn+4WBpKg VGZXkFP1oz0YDa32KOqx198zrRSn+dBKOnV+Nl4OdmIlQcuxD51dwzXz5cpG5mk1 qe5Z/RY94uVJyk63rtKwYzrXePhAir84FpkhZCeSuBLdriC7k4N695+naV74fT1v zqSr2E27JrR5SdOYjETOPjG8M2G7z8hYMzyM0DhTNmxW6EMntSRoXcV3WENMyuV1 ulftPf9g0VnX98FldXKjcBW81UlGz3TiskfDw0DTvbb02jTeGWZ40GL/nwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEAUb4xwDLzqp+H4zMWExTt16kUVMB8GA1UdIwQY MBaAFDIOfAzrS6Km9LlvxLrhq7hTA1q6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWc1OERPdExvcWIwdVdfRXV1R3J1Rk1EV3JvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9jNjZiYzgtZjIwNi00M2QwLTk0YmUt MThhYWRkNjU5NTY2LzEvTWc1OERPdExvcWIwdVdfRXV1R3J1Rk1EV3JvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi9jNjZiYzgtZjIwNi00M2QwLTk0YmUtMThhYWRkNjU5NTY2 LzEvTWc1OERPdExvcWIwdVdfRXV1R3J1Rk1EV3JvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMVMcuSp6 PsKc99nM2cuy5qqHM2ICdnmVOVTfJ8kkfNTsV2FmV/4zvZH4QkppHa/uv54DoA8M Pd/rpjxT8t3AqDzLZq3m2SBW6B/1AkNXeVOI0Q0QekYw1M6M7gFFI10om7oDEi+v TDAdD18Sa4BobNNkPx2rPT242I/8Ec9a3YqkC04j3u0QWiGigtLsxZjaWPZOHbc+ 51iEbN9zzYxxoTaSSGlXwpEvq6zdUpIxkUSLrc8fxQl7FiYJifUT6zmugpWeqmD+ GYvaajjvLR7fpiWweao2kMo7BKj6VJAU4T2UeSL/UVZsvpRBIG+feEaO/gX6bkux F4XQVk/QekmmIQ== -----END CERTIFICATE-----Generated at Fri Dec 12 10:56:53 2025 by rpki-client