This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.mft File: MGm6frw7Zy3QnsA0Th-AqhEx79A.mft (raw, json) Hash identifier: DnBg94+W2cG/ySVd+5h/yQgM9V9JrOCrvUsOouZFHLM= Subject key identifier: 1C:5D:50:C4:12:E7:31:D9:19:40:38:F2:EE:1F:57:A9:96:20:55:E8 Authority key identifier: 30:69:BA:7E:BC:3B:67:2D:D0:9E:C0:34:4E:1F:80:AA:11:31:EF:D0 Certificate issuer: /CN=3069ba7ebc3b672dd09ec0344e1f80aa1131efd0 Certificate serial: 019B3C104125F4909071FDB2D1866C1BC9F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGm6frw7Zy3QnsA0Th-AqhEx79A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 14:00:56 +0000 Manifest this update: Sat 20 Dec 2025 14:00:56 +0000 Manifest next update: Sun 21 Dec 2025 14:00:56 +0000 Files and hashes: 1: MGm6frw7Zy3QnsA0Th-AqhEx79A.crl (hash: TUh2XIE9FXLvlgYs63QfVODLOs3nznB2XT/jTRNHO90=) 2: eqJAEOy6NaY4mZwa5RQJfzteBn0.roa (hash: 4ycDfdQF4RJy7Cm3II/1bQM7j6qQFueYRHKWr/2hsvQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.mft rsync://rpki.ripe.net/repository/DEFAULT/MGm6frw7Zy3QnsA0Th-AqhEx79A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:10:41:25:f4:90:90:71:fd:b2:d1:86:6c:1b:c9:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3069ba7ebc3b672dd09ec0344e1f80aa1131efd0 Validity Not Before: Dec 20 14:00:56 2025 GMT Not After : Dec 21 14:00:56 2025 GMT Subject: CN=1c5d50c412e731d9194038f2ee1f57a9962055e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:59:8f:61:4f:54:3d:b9:d2:2a:7d:dc:76:a5: ec:15:64:b9:34:67:cb:b4:74:08:b3:66:43:36:03: d6:ef:3b:ab:3e:e8:83:89:1d:7c:08:26:86:1a:0d: 7c:be:d5:9d:c0:03:df:ad:ae:a4:54:55:a8:ba:99: f3:92:aa:c5:ba:97:21:0b:6e:b1:ec:71:67:28:f3: de:5e:84:57:ce:d3:ca:64:1a:a7:45:c9:42:9c:fa: c9:1f:3e:c1:ae:b6:11:15:ea:7e:3c:4e:31:23:ec: 93:b0:b2:42:24:0b:a4:80:43:ef:9d:c0:e7:15:c3: 30:2f:be:4e:2c:ae:96:8d:6a:01:a7:28:bd:c6:10: d3:0e:13:81:25:e8:f6:a9:0d:76:ca:74:34:02:51: be:8c:55:d5:d6:13:1b:85:52:5e:06:66:69:a5:7f: b9:9b:ea:f4:a2:75:7f:65:71:87:74:51:f4:94:94: 30:5d:d1:9e:3a:a1:0e:aa:42:c5:7e:86:80:b3:cc: 7b:23:a9:d5:34:8a:60:6f:d6:44:9f:82:f3:55:10: 6f:13:5f:61:5d:1d:7d:26:11:f5:85:71:51:fe:42: f1:2e:1d:bf:8f:16:d7:a1:ec:7f:b7:04:37:2e:72: ec:4e:cc:5a:0e:cf:80:d4:82:b5:46:d9:f5:c5:8b: 07:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:5D:50:C4:12:E7:31:D9:19:40:38:F2:EE:1F:57:A9:96:20:55:E8 X509v3 Authority Key Identifier: keyid:30:69:BA:7E:BC:3B:67:2D:D0:9E:C0:34:4E:1F:80:AA:11:31:EF:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGm6frw7Zy3QnsA0Th-AqhEx79A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:00:74:f8:f8:3d:13:5a:c0:de:42:8f:a0:fa:ea:80:a9:ad: 91:5a:c0:8c:8c:ce:e6:2f:72:9d:73:e9:5f:57:ce:71:f5:36: 75:50:95:80:fd:c0:ad:bd:2b:a5:b8:71:ec:88:34:4a:05:21: 71:bc:a7:e6:3a:fa:d9:5a:63:0f:42:f2:70:f2:c5:42:ee:36: da:70:fe:fb:30:5c:e9:e3:99:99:4c:61:58:b2:60:44:7a:bb: e3:f6:2c:b7:50:ef:94:ef:77:2d:ef:cc:68:07:a1:40:16:76: af:b2:95:71:c2:a2:4a:82:55:91:be:eb:9e:77:39:a8:70:be: 44:24:f3:c1:91:b0:73:2e:b5:79:65:c4:2f:cc:35:64:0d:de: 73:7b:7a:8e:c1:20:fd:7a:a8:75:59:a1:c7:56:fd:6e:a1:54: ef:3c:76:8b:1c:30:c5:00:ae:04:06:d9:a3:48:28:df:d7:08: d8:60:1d:03:d2:65:76:bc:8c:97:5e:a3:77:0d:35:4c:ec:ec: e2:64:32:49:bb:6f:69:49:2c:57:df:ae:1e:1f:8b:15:d4:a2: a4:fc:5a:44:05:70:83:6a:ec:1a:23:ca:c8:ee:0a:52:b6:0e: d3:dc:9c:86:e1:e8:72:88:c7:23:0a:91:42:7e:67:a5:ca:41: ff:27:7e:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8EEEl9JCQcf2y0YZsG8nzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwNjliYTdlYmMzYjY3MmRkMDllYzAzNDRlMWY4MGFhMTEz MWVmZDAwHhcNMjUxMjIwMTQwMDU2WhcNMjUxMjIxMTQwMDU2WjAzMTEwLwYDVQQD EygxYzVkNTBjNDEyZTczMWQ5MTk0MDM4ZjJlZTFmNTdhOTk2MjA1NWU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1mPYU9UPbnSKn3cdqXsFWS5NGfL tHQIs2ZDNgPW7zurPuiDiR18CCaGGg18vtWdwAPfra6kVFWoupnzkqrFupchC26x 7HFnKPPeXoRXztPKZBqnRclCnPrJHz7BrrYRFep+PE4xI+yTsLJCJAukgEPvncDn FcMwL75OLK6WjWoBpyi9xhDTDhOBJej2qQ12ynQ0AlG+jFXV1hMbhVJeBmZppX+5 m+r0onV/ZXGHdFH0lJQwXdGeOqEOqkLFfoaAs8x7I6nVNIpgb9ZEn4LzVRBvE19h XR19JhH1hXFR/kLxLh2/jxbXoex/twQ3LnLsTsxaDs+A1IK1Rtn1xYsHowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBxdUMQS5zHZGUA48u4fV6mWIFXoMB8GA1UdIwQY MBaAFDBpun68O2ct0J7ANE4fgKoRMe/QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUdtNmZydzdaeTNRbnNBMFRoLUFxaEV4NzlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi80Y2JhMmYtNGE1Yi00NDM1LThhZWMt OTIzY2I1MGFiZTJlLzEvTUdtNmZydzdaeTNRbnNBMFRoLUFxaEV4NzlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi80Y2JhMmYtNGE1Yi00NDM1LThhZWMtOTIzY2I1MGFiZTJl LzEvTUdtNmZydzdaeTNRbnNBMFRoLUFxaEV4NzlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAagB0+Pg9 E1rA3kKPoPrqgKmtkVrAjIzO5i9ynXPpX1fOcfU2dVCVgP3Arb0rpbhx7Ig0SgUh cbyn5jr62VpjD0LycPLFQu422nD++zBc6eOZmUxhWLJgRHq74/Yst1DvlO93Le/M aAehQBZ2r7KVccKiSoJVkb7rnnc5qHC+RCTzwZGwcy61eWXEL8w1ZA3ec3t6jsEg /XqodVmhx1b9bqFU7zx2ixwwxQCuBAbZo0go39cI2GAdA9JldryMl16jdw01TOzs 4mQySbtvaUksV9+uHh+LFdSipPxaRAVwg2rsGiPKyO4KUrYO09ychuHocojHIwqR Qn5npcpB/yd+Vw== -----END CERTIFICATE-----Generated at Sat Dec 20 20:03:25 2025 by rpki-client