This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.mft File: MGatYcFi3wZQ7gq2DGgHWymiEcg.mft (raw, json) Hash identifier: RUbVZ8aCAr9XKTPOfoSqfkY9UImhTlk0iQU2MAG4rLY= Subject key identifier: D3:9F:5C:FE:F9:1F:67:03:21:9B:37:F8:A8:A7:DD:F7:D5:07:98:22 Authority key identifier: 30:66:AD:61:C1:62:DF:06:50:EE:0A:B6:0C:68:07:5B:29:A2:11:C8 Certificate issuer: /CN=3066ad61c162df0650ee0ab60c68075b29a211c8 Certificate serial: 019B0F005569C07FB7049B8D6CEA5139DF54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGatYcFi3wZQ7gq2DGgHWymiEcg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.mft Manifest number: 1772 Signing time: Thu 11 Dec 2025 20:00:38 +0000 Manifest this update: Thu 11 Dec 2025 20:00:38 +0000 Manifest next update: Fri 12 Dec 2025 20:00:38 +0000 Files and hashes: 1: MGatYcFi3wZQ7gq2DGgHWymiEcg.crl (hash: 011o6UpJZBHooimVzMgz5dCKJA2jw6OW9oSF/lsGFTg=) 2: akH_-GUofRi3IR9WY9DWc-MBUHc.roa (hash: GH7ew6e0VLPyvTO+mxXZge5TTd6Djbt+GfnJ/q6zgIU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.mft rsync://rpki.ripe.net/repository/DEFAULT/MGatYcFi3wZQ7gq2DGgHWymiEcg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:00:55:69:c0:7f:b7:04:9b:8d:6c:ea:51:39:df:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3066ad61c162df0650ee0ab60c68075b29a211c8 Validity Not Before: Dec 11 20:00:38 2025 GMT Not After : Dec 12 20:00:38 2025 GMT Subject: CN=d39f5cfef91f6703219b37f8a8a7ddf7d5079822 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:05:5c:0e:fe:60:67:73:10:be:33:b3:7b:d9: 45:44:db:c6:01:5e:c1:b6:12:64:e2:a8:0c:5f:bb: 9a:8d:90:b1:54:da:bd:82:e1:f9:87:ca:bb:ef:bf: 06:07:e3:de:b5:2e:65:75:b5:23:df:97:b3:c6:a9: b0:84:c3:46:34:e7:cb:6d:b1:2a:72:87:59:5d:b2: 51:35:5e:ff:c7:c9:57:fb:f2:63:44:d0:de:c4:31: 8c:76:3c:f9:a1:00:5e:31:7c:a2:f2:0c:37:1c:a6: cc:2c:1c:7b:42:22:69:5f:29:fc:c2:d5:49:fb:77: 47:06:71:a0:f5:51:c7:e4:11:06:00:7b:c2:fe:50: 29:cb:c4:9e:ce:af:62:71:00:fc:ec:d0:93:f8:61: 94:4d:24:ee:4c:e9:c3:9b:8e:70:bd:35:90:39:6f: f8:54:2e:32:0d:f3:69:6b:64:38:65:c0:b2:e5:0a: ab:ca:25:31:6e:d5:63:15:37:e4:a6:14:97:11:d3: d1:75:c0:0c:30:e5:4f:c9:a3:67:7b:d9:fa:99:50: c9:cd:7a:f3:82:54:2c:dd:86:3b:6c:19:10:f4:0c: 96:53:ba:ca:74:c7:81:d6:ca:1a:ef:06:c3:60:46: 6d:34:73:72:1d:3e:01:2b:17:3e:6e:ea:8a:65:1f: 5d:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:9F:5C:FE:F9:1F:67:03:21:9B:37:F8:A8:A7:DD:F7:D5:07:98:22 X509v3 Authority Key Identifier: keyid:30:66:AD:61:C1:62:DF:06:50:EE:0A:B6:0C:68:07:5B:29:A2:11:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGatYcFi3wZQ7gq2DGgHWymiEcg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:a2:16:34:6f:0a:b7:b5:5b:69:51:20:8e:34:59:d7:7c:ae: c2:46:bd:f4:4f:4c:f2:ab:ae:5b:85:92:17:d2:45:4d:a0:2c: fb:31:62:de:b4:f2:11:e7:6b:b5:27:04:8d:28:fb:83:19:f9: 39:11:5a:ca:a8:7d:90:4c:c9:a3:f7:d0:f6:5b:69:fa:94:e0: 17:eb:b5:51:88:b8:e1:f1:fd:5a:e6:8d:fd:46:e9:81:00:2f: 83:d7:f4:1d:c6:96:91:b5:e6:2c:4b:4c:74:a9:0c:52:87:89: 8b:cb:16:7d:bc:6d:2b:ed:01:2b:7b:a8:b0:db:55:91:7a:7f: 6e:c2:c1:b3:97:c3:06:9f:37:04:83:07:fa:e2:97:4d:ca:8e: c3:a9:3c:8a:74:13:00:3c:d7:4c:66:c8:6b:dc:f4:e6:b3:57: 54:5f:64:14:6d:2a:a9:ca:5d:b7:8f:b5:52:e7:7e:b3:e0:e9: d1:d0:d6:45:da:13:98:b1:9a:91:11:18:83:77:2c:5a:28:94: 7b:08:6a:01:d1:b0:75:35:91:70:9a:bf:c2:5a:28:90:a0:e9: b5:39:3a:6c:cb:d4:94:17:36:35:72:c2:bd:5a:58:cc:67:53: 10:5a:63:93:29:98:6f:12:60:a2:23:7e:b4:e1:dd:e6:87:8e: 0f:72:a5:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPAFVpwH+3BJuNbOpROd9UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwNjZhZDYxYzE2MmRmMDY1MGVlMGFiNjBjNjgwNzViMjlh MjExYzgwHhcNMjUxMjExMjAwMDM4WhcNMjUxMjEyMjAwMDM4WjAzMTEwLwYDVQQD EyhkMzlmNWNmZWY5MWY2NzAzMjE5YjM3ZjhhOGE3ZGRmN2Q1MDc5ODIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzgVcDv5gZ3MQvjOze9lFRNvGAV7B thJk4qgMX7uajZCxVNq9guH5h8q7778GB+PetS5ldbUj35ezxqmwhMNGNOfLbbEq codZXbJRNV7/x8lX+/JjRNDexDGMdjz5oQBeMXyi8gw3HKbMLBx7QiJpXyn8wtVJ +3dHBnGg9VHH5BEGAHvC/lApy8Sezq9icQD87NCT+GGUTSTuTOnDm45wvTWQOW/4 VC4yDfNpa2Q4ZcCy5QqryiUxbtVjFTfkphSXEdPRdcAMMOVPyaNne9n6mVDJzXrz glQs3YY7bBkQ9AyWU7rKdMeB1soa7wbDYEZtNHNyHT4BKxc+buqKZR9ddwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNOfXP75H2cDIZs3+Kin3ffVB5giMB8GA1UdIwQY MBaAFDBmrWHBYt8GUO4KtgxoB1spohHIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUdhdFljRmkzd1pRN2dxMkRHZ0hXeW1pRWNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC85YjM0YjAtMzAxYS00MWEyLWI0YzUt YTg4NjZhYTk1YzcxLzEvTUdhdFljRmkzd1pRN2dxMkRHZ0hXeW1pRWNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC85YjM0YjAtMzAxYS00MWEyLWI0YzUtYTg4NjZhYTk1Yzcx LzEvTUdhdFljRmkzd1pRN2dxMkRHZ0hXeW1pRWNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf6IWNG8K t7VbaVEgjjRZ13yuwka99E9M8quuW4WSF9JFTaAs+zFi3rTyEedrtScEjSj7gxn5 ORFayqh9kEzJo/fQ9ltp+pTgF+u1UYi44fH9WuaN/UbpgQAvg9f0HcaWkbXmLEtM dKkMUoeJi8sWfbxtK+0BK3uosNtVkXp/bsLBs5fDBp83BIMH+uKXTcqOw6k8inQT ADzXTGbIa9z05rNXVF9kFG0qqcpdt4+1Uud+s+Dp0dDWRdoTmLGakREYg3csWiiU ewhqAdGwdTWRcJq/wlookKDptTk6bMvUlBc2NXLCvVpYzGdTEFpjkymYbxJgoiN+ tOHd5oeOD3Klww== -----END CERTIFICATE-----Generated at Fri Dec 12 01:14:38 2025 by rpki-client