This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft File: rMGajH8XQRRJx9SP-TCNJIMulSs.mft (raw, json) Hash identifier: tnN8OvtBFdf1Vr6D8sAorYLFTbPtTRxBUD828gQJfq8= Subject key identifier: 4E:D9:3F:D2:52:FF:DD:94:D8:14:FC:32:6D:D1:D9:C0:CE:F4:F6:A6 Authority key identifier: AC:C1:9A:8C:7F:17:41:14:49:C7:D4:8F:F9:30:8D:24:83:2E:95:2B Certificate issuer: /CN=acc19a8c7f17411449c7d48ff9308d24832e952b Certificate serial: 019B0E268FBE3B959B3736C8625D0996CB49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rMGajH8XQRRJx9SP-TCNJIMulSs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft Manifest number: 1771 Signing time: Thu 11 Dec 2025 16:02:46 +0000 Manifest this update: Thu 11 Dec 2025 16:02:46 +0000 Manifest next update: Fri 12 Dec 2025 16:02:46 +0000 Files and hashes: 1: Qwfm7iyTFcUFA4cP-BGJUr6nVGo.roa (hash: cGT3x4JJQpP+f+7JmlJEaoJ5r1uUvYJMBAOOSckaWRE=) 2: rMGajH8XQRRJx9SP-TCNJIMulSs.crl (hash: A//4cv26pJs0Gm1USIJ7sh75H8+TXBjL3cw+ToDi5Xo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft rsync://rpki.ripe.net/repository/DEFAULT/rMGajH8XQRRJx9SP-TCNJIMulSs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 16:02:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:26:8f:be:3b:95:9b:37:36:c8:62:5d:09:96:cb:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=acc19a8c7f17411449c7d48ff9308d24832e952b Validity Not Before: Dec 11 16:02:46 2025 GMT Not After : Dec 12 16:02:46 2025 GMT Subject: CN=4ed93fd252ffdd94d814fc326dd1d9c0cef4f6a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e5:81:f9:e2:11:9b:00:2d:a9:dc:0b:dd:44: 0a:8d:d3:5f:5f:fb:3b:26:2c:52:fc:46:5f:6d:c8: d3:3e:73:c9:12:fc:1e:f9:ec:50:21:41:e5:16:7e: 3a:24:13:e2:62:9b:89:00:00:5e:17:60:ea:1c:65: af:c2:0a:80:5e:c8:0d:b6:59:16:ad:d3:4b:5a:94: 08:b0:6e:e5:94:8d:ff:ac:9d:b8:7b:a9:02:ea:e9: dc:b7:d0:fc:3d:fe:fb:e3:94:09:82:2b:d4:68:12: 0f:c8:5d:b6:c1:47:f8:d8:80:ad:a0:5e:63:a9:0d: 13:90:40:eb:2b:2a:ac:24:78:ab:56:2f:64:9e:21: 83:96:b8:10:3d:63:73:ca:1d:f5:e5:1a:88:44:64: ed:9e:6f:35:38:30:b0:85:74:32:01:51:ae:9e:15: f5:e2:b3:cb:98:83:c4:41:ef:ac:07:e4:2b:81:15: 3e:59:be:e0:cd:b7:e4:34:a9:e8:08:bc:82:ec:7b: 68:d4:2b:c6:e4:4b:69:f7:da:f7:26:73:b9:f7:99: 1a:40:d0:97:87:97:00:c8:1a:e0:d9:c6:f4:d9:99: 27:05:74:c2:d5:36:84:ad:33:fe:72:68:83:f9:e7: 20:34:45:1d:d2:fd:b4:66:70:eb:40:86:c2:c4:d4: 3e:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:D9:3F:D2:52:FF:DD:94:D8:14:FC:32:6D:D1:D9:C0:CE:F4:F6:A6 X509v3 Authority Key Identifier: keyid:AC:C1:9A:8C:7F:17:41:14:49:C7:D4:8F:F9:30:8D:24:83:2E:95:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMGajH8XQRRJx9SP-TCNJIMulSs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:e4:67:6a:8d:6b:32:bf:5b:eb:7c:4d:7b:ed:eb:52:21:2e: b6:3e:7b:5f:30:4f:ea:4f:00:08:a7:d0:92:1b:51:7e:a4:a7: 62:e8:75:48:7b:fb:21:82:bb:f3:01:12:f5:8c:35:4e:5c:9a: d6:0e:46:47:a9:47:dc:14:4e:5d:23:cb:64:38:c1:8d:c2:99: 90:ca:57:57:ec:5f:50:e6:a4:87:ff:2e:b6:1f:72:2d:4a:c1: 7e:cc:c2:b4:7e:e2:42:6c:0f:7f:ff:8a:b1:b6:71:40:0f:46: 7b:74:52:06:31:34:18:0b:78:fd:32:65:e7:a1:23:38:0f:70: 96:93:26:06:99:3f:dd:1b:c2:36:23:ef:ff:98:74:30:64:b6: f4:34:7e:31:cf:04:e4:78:ca:de:20:30:1c:81:ec:3b:11:7a: 7d:9c:34:a5:dd:a2:2e:c3:49:13:f0:67:ca:a7:ff:95:ff:3d: 48:1b:29:d7:cb:89:3e:ca:60:8b:ed:5a:57:ee:20:bd:61:e1: 1e:a0:3f:83:27:61:1e:ae:2f:62:12:ea:f6:4d:85:bc:c6:77: ab:a9:43:fa:fb:3f:ae:85:0a:86:7a:21:ee:0b:3b:36:a0:e5: 81:ae:83:fa:22:6e:a7:11:d0:90:22:94:03:db:89:f2:53:7e: 77:01:08:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJo++O5WbNzbIYl0JlstJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjYzE5YThjN2YxNzQxMTQ0OWM3ZDQ4ZmY5MzA4ZDI0ODMy ZTk1MmIwHhcNMjUxMjExMTYwMjQ2WhcNMjUxMjEyMTYwMjQ2WjAzMTEwLwYDVQQD Eyg0ZWQ5M2ZkMjUyZmZkZDk0ZDgxNGZjMzI2ZGQxZDljMGNlZjRmNmE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1eWB+eIRmwAtqdwL3UQKjdNfX/s7 JixS/EZfbcjTPnPJEvwe+exQIUHlFn46JBPiYpuJAABeF2DqHGWvwgqAXsgNtlkW rdNLWpQIsG7llI3/rJ24e6kC6unct9D8Pf7745QJgivUaBIPyF22wUf42ICtoF5j qQ0TkEDrKyqsJHirVi9kniGDlrgQPWNzyh315RqIRGTtnm81ODCwhXQyAVGunhX1 4rPLmIPEQe+sB+QrgRU+Wb7gzbfkNKnoCLyC7Hto1CvG5Etp99r3JnO595kaQNCX h5cAyBrg2cb02ZknBXTC1TaErTP+cmiD+ecgNEUd0v20ZnDrQIbCxNQ+3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE7ZP9JS/92U2BT8Mm3R2cDO9PamMB8GA1UdIwQY MBaAFKzBmox/F0EUScfUj/kwjSSDLpUrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvck1HYWpIOFhRUlJKeDlTUC1UQ05KSU11bFNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9mNDA1YTItNGUzZS00NjIxLTk3MWQt YmY4ZjNkNDM4ODRmLzEvck1HYWpIOFhRUlJKeDlTUC1UQ05KSU11bFNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9mNDA1YTItNGUzZS00NjIxLTk3MWQtYmY4ZjNkNDM4ODRm LzEvck1HYWpIOFhRUlJKeDlTUC1UQ05KSU11bFNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALuRnao1r Mr9b63xNe+3rUiEutj57XzBP6k8ACKfQkhtRfqSnYuh1SHv7IYK78wES9Yw1Tlya 1g5GR6lH3BROXSPLZDjBjcKZkMpXV+xfUOakh/8uth9yLUrBfszCtH7iQmwPf/+K sbZxQA9Ge3RSBjE0GAt4/TJl56EjOA9wlpMmBpk/3RvCNiPv/5h0MGS29DR+Mc8E 5HjK3iAwHIHsOxF6fZw0pd2iLsNJE/Bnyqf/lf89SBsp18uJPspgi+1aV+4gvWHh HqA/gydhHq4vYhLq9k2FvMZ3q6lD+vs/roUKhnoh7gs7NqDlga6D+iJupxHQkCKU A9uJ8lN+dwEIjw== -----END CERTIFICATE-----Generated at Fri Dec 12 01:32:41 2025 by rpki-client