This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.mft File: mBGGh_3W_4D7CYqe7vBt43f4XW4.mft (raw, json) Hash identifier: CG0kD4FDVsF2U/6mRlSu55sbrkCeEzSeyAEVomNk2cE= Subject key identifier: FF:39:21:B1:F4:25:00:A4:57:63:CB:13:8E:D4:71:34:46:B4:A4:F0 Authority key identifier: 98:11:86:87:FD:D6:FF:80:FB:09:8A:9E:EE:F0:6D:E3:77:F8:5D:6E Certificate issuer: /CN=98118687fdd6ff80fb098a9eeef06de377f85d6e Certificate serial: 019B1EE15A3F68864AEA39CE6C448CDC383A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mBGGh_3W_4D7CYqe7vBt43f4XW4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.mft Manifest number: 0CD3 Signing time: Sun 14 Dec 2025 22:00:43 +0000 Manifest this update: Sun 14 Dec 2025 22:00:43 +0000 Manifest next update: Mon 15 Dec 2025 22:00:43 +0000 Files and hashes: 1: 1lsllJIGemqZ89xHiZQkdlO1fKw.roa (hash: z+LS30vNnG/3Pd/eJpUiR3agQpnmviOChE1etXIcdSc=) 2: 3lXi1_g77NKzjT3HhPoXoOvjf4w.roa (hash: Ay8Ub8kwHojvnn8g9zm4+05FafWEgsI4HELIX5EKY7A=) 3: mBGGh_3W_4D7CYqe7vBt43f4XW4.crl (hash: KY0OQwsZOdPArtq6yC/s0Jeb0TqVJigFrwM0U/TYrNM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.mft rsync://rpki.ripe.net/repository/DEFAULT/mBGGh_3W_4D7CYqe7vBt43f4XW4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1e:e1:5a:3f:68:86:4a:ea:39:ce:6c:44:8c:dc:38:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98118687fdd6ff80fb098a9eeef06de377f85d6e Validity Not Before: Dec 14 22:00:43 2025 GMT Not After : Dec 15 22:00:43 2025 GMT Subject: CN=ff3921b1f42500a45763cb138ed4713446b4a4f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d8:24:aa:34:41:4e:f9:d6:e5:8c:bc:2b:f9: c3:e6:75:a1:db:bf:22:03:5e:fb:58:e7:70:21:63: 03:fe:a0:50:cf:1a:28:29:b0:0b:0c:ee:99:d9:60: 5d:13:3f:86:77:9b:66:5d:80:21:db:2f:d2:6f:63: 54:b2:b9:a0:01:67:2e:43:55:87:7a:ee:37:2c:69: 4c:cd:fb:86:1d:09:34:66:08:93:a2:a5:2f:da:ea: c4:bc:82:69:4f:24:ba:f9:94:08:02:f7:32:e7:ee: 2b:ce:35:35:e3:ff:63:60:32:e3:d4:be:19:d9:5b: 34:ed:25:cb:c0:c1:6e:f4:36:ec:2a:b3:79:83:0b: 55:7c:51:43:a7:ca:f4:47:fc:db:ac:17:2a:a2:5b: 1b:5d:65:ac:be:d3:30:35:72:57:99:9f:0b:91:d9: d8:a2:8f:b2:a1:b4:db:78:8b:a9:ba:2a:22:3e:45: f7:b7:b5:a8:5f:1c:ac:c0:7c:79:02:33:a9:a3:d6: c5:76:48:59:2a:61:ed:2c:69:33:c4:78:5c:7a:c8: ef:ad:47:c7:85:95:85:71:35:3c:82:5b:ed:ec:2e: c6:bd:7d:aa:ea:eb:94:20:c9:3e:9d:ce:b2:de:95: 22:2c:7c:c5:9b:cf:52:f0:33:de:1c:cb:6b:9a:4e: 78:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:39:21:B1:F4:25:00:A4:57:63:CB:13:8E:D4:71:34:46:B4:A4:F0 X509v3 Authority Key Identifier: keyid:98:11:86:87:FD:D6:FF:80:FB:09:8A:9E:EE:F0:6D:E3:77:F8:5D:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mBGGh_3W_4D7CYqe7vBt43f4XW4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:cc:51:43:e8:19:5b:ac:bc:df:26:06:bb:79:a0:b2:17:60: a2:2f:4f:b3:25:16:78:ac:5d:40:33:cb:eb:dd:47:2f:1a:a4: 98:49:b1:8a:99:91:51:00:64:b5:b9:8a:d9:bd:56:40:74:0a: 27:1c:79:41:56:6a:a4:b2:6e:ca:27:89:45:fa:74:25:4b:20: 3c:38:07:bd:dc:62:81:d2:87:e4:95:e9:89:2e:5a:cc:19:f8: 77:9a:da:2d:68:5a:87:01:04:bb:d3:d9:9c:01:c3:72:c0:b9: 84:f9:83:00:5f:93:47:96:6a:ce:e9:c6:fe:67:fc:ca:7c:4d: 1f:a3:50:78:3f:3b:aa:22:8e:8e:0a:28:08:de:a7:ed:6d:dc: 3b:7a:41:f7:19:2c:a8:f5:5b:ff:97:f8:5c:38:2e:18:fb:42: 18:be:65:d4:ac:d0:ba:25:ed:40:96:bc:f2:0a:ec:04:ca:8b: db:07:1d:87:b3:15:42:94:e1:52:96:2c:c1:e9:6a:cf:ac:79: b2:30:c3:f5:69:8b:bc:8c:57:af:aa:71:a0:de:0f:a9:f5:68: 48:3a:fe:3d:37:f1:c2:ef:34:6a:00:1f:ef:da:3b:41:27:e5: 51:1c:cd:f7:4f:6f:a7:0a:5f:ef:46:2b:ee:94:ce:89:dc:03: 01:3b:82:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZse4Vo/aIZK6jnObESM3Dg6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4MTE4Njg3ZmRkNmZmODBmYjA5OGE5ZWVlZjA2ZGUzNzdm ODVkNmUwHhcNMjUxMjE0MjIwMDQzWhcNMjUxMjE1MjIwMDQzWjAzMTEwLwYDVQQD EyhmZjM5MjFiMWY0MjUwMGE0NTc2M2NiMTM4ZWQ0NzEzNDQ2YjRhNGYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNgkqjRBTvnW5Yy8K/nD5nWh278i A177WOdwIWMD/qBQzxooKbALDO6Z2WBdEz+Gd5tmXYAh2y/Sb2NUsrmgAWcuQ1WH eu43LGlMzfuGHQk0ZgiToqUv2urEvIJpTyS6+ZQIAvcy5+4rzjU14/9jYDLj1L4Z 2Vs07SXLwMFu9DbsKrN5gwtVfFFDp8r0R/zbrBcqolsbXWWsvtMwNXJXmZ8LkdnY oo+yobTbeIupuioiPkX3t7WoXxyswHx5AjOpo9bFdkhZKmHtLGkzxHhcesjvrUfH hZWFcTU8glvt7C7GvX2q6uuUIMk+nc6y3pUiLHzFm89S8DPeHMtrmk548wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP85IbH0JQCkV2PLE47UcTRGtKTwMB8GA1UdIwQY MBaAFJgRhof91v+A+wmKnu7wbeN3+F1uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUJHR2hfM1dfNEQ3Q1lxZTd2QnQ0M2Y0WFc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy81OTA4YTktMGMwZi00MGFiLWJmZDYt NjlhZjBhNmU5ODliLzEvbUJHR2hfM1dfNEQ3Q1lxZTd2QnQ0M2Y0WFc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy81OTA4YTktMGMwZi00MGFiLWJmZDYtNjlhZjBhNmU5ODli LzEvbUJHR2hfM1dfNEQ3Q1lxZTd2QnQ0M2Y0WFc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAisxRQ+gZ W6y83yYGu3mgshdgoi9PsyUWeKxdQDPL691HLxqkmEmxipmRUQBktbmK2b1WQHQK Jxx5QVZqpLJuyieJRfp0JUsgPDgHvdxigdKH5JXpiS5azBn4d5raLWhahwEEu9PZ nAHDcsC5hPmDAF+TR5ZqzunG/mf8ynxNH6NQeD87qiKOjgooCN6n7W3cO3pB9xks qPVb/5f4XDguGPtCGL5l1KzQuiXtQJa88grsBMqL2wcdh7MVQpThUpYswelqz6x5 sjDD9WmLvIxXr6pxoN4PqfVoSDr+PTfxwu80agAf79o7QSflURzN909vpwpf70Yr 7pTOidwDATuCfw== -----END CERTIFICATE-----Generated at Mon Dec 15 00:58:54 2025 by rpki-client