This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/a8941a-7250-48ec-aaf8-6d8ea9d1cd73/1/MGE0vPWfWB1rdmMM-oeGeHaikhU.mft File: MGE0vPWfWB1rdmMM-oeGeHaikhU.mft (raw, json) Hash identifier: UH5GU4rUBJf2MSFE2gjgi6s+4GgoSeHccbhEdw70Szg= Subject key identifier: BD:1E:8B:FD:B2:5C:E3:0C:50:BE:73:BB:BE:F5:87:59:57:79:93:A3 Authority key identifier: 30:61:34:BC:F5:9F:58:1D:6B:76:63:0C:FA:87:86:78:76:A2:92:15 Certificate issuer: /CN=306134bcf59f581d6b76630cfa87867876a29215 Certificate serial: 019B292E135C17FDCBBE5946937CB141AD8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGE0vPWfWB1rdmMM-oeGeHaikhU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/a8941a-7250-48ec-aaf8-6d8ea9d1cd73/1/MGE0vPWfWB1rdmMM-oeGeHaikhU.mft Manifest number: 131D Signing time: Tue 16 Dec 2025 22:00:44 +0000 Manifest this update: Tue 16 Dec 2025 22:00:44 +0000 Manifest next update: Wed 17 Dec 2025 22:00:44 +0000 Files and hashes: 1: MGE0vPWfWB1rdmMM-oeGeHaikhU.crl (hash: BD7HWw24yKhMnnSMc1/qdiIwhbGQKVQLD76pb6Sso6I=) 2: iyT2rEaTLGTQJtoCzDixmDHk4q8.roa (hash: DJdcXuwOyrFSr66rkLo/Y+8lRD0xwqdql+52mCZmuDA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/a8941a-7250-48ec-aaf8-6d8ea9d1cd73/1/MGE0vPWfWB1rdmMM-oeGeHaikhU.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/a8941a-7250-48ec-aaf8-6d8ea9d1cd73/1/MGE0vPWfWB1rdmMM-oeGeHaikhU.mft rsync://rpki.ripe.net/repository/DEFAULT/MGE0vPWfWB1rdmMM-oeGeHaikhU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 22:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:29:2e:13:5c:17:fd:cb:be:59:46:93:7c:b1:41:ad:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=306134bcf59f581d6b76630cfa87867876a29215 Validity Not Before: Dec 16 22:00:44 2025 GMT Not After : Dec 17 22:00:44 2025 GMT Subject: CN=bd1e8bfdb25ce30c50be73bbbef58759577993a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:db:10:c2:25:72:cb:cf:81:b9:7f:05:77:b0: bc:33:61:d9:97:d9:89:77:9b:e5:20:42:7e:c6:1e: 3e:65:1e:f4:e6:fd:4d:d4:37:37:36:48:aa:c4:fa: 06:c9:f9:61:cb:9c:90:5b:61:9d:d2:58:6e:ed:ea: 0d:c1:9c:16:64:e1:d3:ee:9e:cd:b1:55:b2:56:bc: d4:23:d6:b6:e3:d9:c1:92:a7:1d:20:32:f0:60:82: 51:a0:8c:39:fd:33:16:b4:90:70:71:55:7a:22:44: 2c:67:fe:58:08:82:43:29:02:bf:b9:da:47:78:81: 13:9b:94:47:6f:b7:98:f6:c9:db:02:af:6f:26:52: db:a5:d4:09:11:e6:1f:61:ab:af:21:c8:08:5b:f2: 6f:ec:d2:a3:30:df:66:74:1b:38:ee:e6:35:01:1e: 3a:f9:bf:c4:21:55:08:9c:2f:31:9f:68:aa:71:48: 70:f7:87:68:25:e8:c1:ef:79:2c:14:44:2e:b9:37: 24:80:7c:70:ad:90:ad:7b:b8:9c:db:6d:1d:82:a6: c5:fc:05:dc:b0:ed:86:cf:02:fd:dc:dd:64:8d:58: d8:cd:47:d7:86:e3:7a:2d:cc:e5:b7:32:93:bf:23: 5f:93:a5:8c:b9:db:6d:4d:88:28:b7:ee:4b:b2:fd: 76:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:1E:8B:FD:B2:5C:E3:0C:50:BE:73:BB:BE:F5:87:59:57:79:93:A3 X509v3 Authority Key Identifier: keyid:30:61:34:BC:F5:9F:58:1D:6B:76:63:0C:FA:87:86:78:76:A2:92:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGE0vPWfWB1rdmMM-oeGeHaikhU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a8941a-7250-48ec-aaf8-6d8ea9d1cd73/1/MGE0vPWfWB1rdmMM-oeGeHaikhU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a8941a-7250-48ec-aaf8-6d8ea9d1cd73/1/MGE0vPWfWB1rdmMM-oeGeHaikhU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:cb:67:54:0e:81:28:55:7d:69:73:cc:e3:88:0f:cb:3a:c5: eb:d6:c8:06:da:d5:4d:10:8e:6e:d1:32:bd:35:d7:ea:47:6b: d7:f6:8b:1e:5f:81:75:ed:f7:bb:c9:8d:95:a9:86:9e:1d:a5: 31:0a:4f:c5:ac:4d:eb:b2:d0:f9:c4:f4:3b:05:41:e3:65:bb: a5:1a:42:39:21:88:67:ff:a5:62:38:66:6e:82:88:04:12:3f: 2a:91:36:84:66:d4:28:14:30:5f:e5:36:06:bb:3f:49:00:0d: fc:2e:58:02:34:ae:b7:c7:89:07:89:6c:53:3f:67:fb:50:7a: 8e:8d:ef:b3:92:3f:28:3e:8c:89:9f:00:51:e7:e1:a4:c2:d3: ad:98:04:53:fe:19:1d:ef:ec:99:61:5c:fe:cd:50:fe:8d:22: 23:fa:90:0f:e0:d6:c4:c9:bb:f0:6c:ba:75:62:84:c9:78:9a: a0:db:6c:9c:0d:1e:64:1b:5e:90:df:a1:01:19:c3:d5:ff:08: b8:91:19:33:de:68:4e:e6:f6:a7:5f:55:e6:73:f4:eb:5e:0a: 32:3b:b7:9b:6f:cd:49:2b:fe:b6:1f:77:2b:aa:c4:ec:7e:19: 1a:38:9b:4e:20:c4:00:dc:1e:94:1d:44:a1:07:42:0d:fa:a6: c5:e3:26:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZspLhNcF/3LvllGk3yxQa2PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwNjEzNGJjZjU5ZjU4MWQ2Yjc2NjMwY2ZhODc4Njc4NzZh MjkyMTUwHhcNMjUxMjE2MjIwMDQ0WhcNMjUxMjE3MjIwMDQ0WjAzMTEwLwYDVQQD EyhiZDFlOGJmZGIyNWNlMzBjNTBiZTczYmJiZWY1ODc1OTU3Nzk5M2EzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8dsQwiVyy8+BuX8Fd7C8M2HZl9mJ d5vlIEJ+xh4+ZR705v1N1Dc3NkiqxPoGyflhy5yQW2Gd0lhu7eoNwZwWZOHT7p7N sVWyVrzUI9a249nBkqcdIDLwYIJRoIw5/TMWtJBwcVV6IkQsZ/5YCIJDKQK/udpH eIETm5RHb7eY9snbAq9vJlLbpdQJEeYfYauvIcgIW/Jv7NKjMN9mdBs47uY1AR46 +b/EIVUInC8xn2iqcUhw94doJejB73ksFEQuuTckgHxwrZCte7ic220dgqbF/AXc sO2GzwL93N1kjVjYzUfXhuN6LczltzKTvyNfk6WMudttTYgot+5Lsv12MwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL0ei/2yXOMMUL5zu771h1lXeZOjMB8GA1UdIwQY MBaAFDBhNLz1n1gda3ZjDPqHhnh2opIVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUdFMHZQV2ZXQjFyZG1NTS1vZUdlSGFpa2hVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9hODk0MWEtNzI1MC00OGVjLWFhZjgt NmQ4ZWE5ZDFjZDczLzEvTUdFMHZQV2ZXQjFyZG1NTS1vZUdlSGFpa2hVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9hODk0MWEtNzI1MC00OGVjLWFhZjgtNmQ4ZWE5ZDFjZDcz LzEvTUdFMHZQV2ZXQjFyZG1NTS1vZUdlSGFpa2hVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGstnVA6B KFV9aXPM44gPyzrF69bIBtrVTRCObtEyvTXX6kdr1/aLHl+Bde33u8mNlamGnh2l MQpPxaxN67LQ+cT0OwVB42W7pRpCOSGIZ/+lYjhmboKIBBI/KpE2hGbUKBQwX+U2 Brs/SQAN/C5YAjSut8eJB4lsUz9n+1B6jo3vs5I/KD6MiZ8AUefhpMLTrZgEU/4Z He/smWFc/s1Q/o0iI/qQD+DWxMm78Gy6dWKEyXiaoNtsnA0eZBtekN+hARnD1f8I uJEZM95oTub2p19V5nP0614KMju3m2/NSSv+th93K6rE7H4ZGjibTiDEANwelB1E oQdCDfqmxeMmqw== -----END CERTIFICATE-----Generated at Wed Dec 17 06:17:57 2025 by rpki-client