This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/40e57e-c627-4b9b-9577-596fa8c0a57a/1/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.mft File: MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.mft (raw, json) Hash identifier: hTaCwPLtsQuC13PsQqKXYIJMw0jfTatyuul0iiuWU7s= Subject key identifier: 90:1B:A0:F1:33:92:75:13:06:40:EE:1B:AC:C1:C9:27:8F:17:1B:B7 Authority key identifier: 30:62:8D:92:38:E2:3D:6B:F4:C7:35:99:5C:9E:2D:EA:00:50:F0:0C Certificate issuer: /CN=30628d9238e23d6bf4c735995c9e2dea0050f00c Certificate serial: 019B1A601818F5E2406BD29CAFABF894138F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/40e57e-c627-4b9b-9577-596fa8c0a57a/1/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.mft Manifest number: 07DC Signing time: Sun 14 Dec 2025 01:01:03 +0000 Manifest this update: Sun 14 Dec 2025 01:01:03 +0000 Manifest next update: Mon 15 Dec 2025 01:01:03 +0000 Files and hashes: 1: MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.crl (hash: 9RrFMaGN8EGr4qJaD+2pdQ3/96JMzD/4pgQctdgcJh4=) 2: gVZpy_aU2P0Pr-2EJHA1HwKJhRU.roa (hash: P5u1LpZGGtQaGv/FeFmSXhXnEGgm7B33JQ+aoyUNOOk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/40e57e-c627-4b9b-9577-596fa8c0a57a/1/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/40e57e-c627-4b9b-9577-596fa8c0a57a/1/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.mft rsync://rpki.ripe.net/repository/DEFAULT/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:60:18:18:f5:e2:40:6b:d2:9c:af:ab:f8:94:13:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30628d9238e23d6bf4c735995c9e2dea0050f00c Validity Not Before: Dec 14 01:01:03 2025 GMT Not After : Dec 15 01:01:03 2025 GMT Subject: CN=901ba0f1339275130640ee1bacc1c9278f171bb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:d6:24:50:90:51:82:f9:a4:df:10:9b:a7:16: 0f:ee:33:07:67:99:48:ca:0f:a8:f1:03:d2:b6:aa: 66:1d:a5:fb:b3:a2:e4:f1:a1:18:98:5e:16:9d:70: f5:b8:8a:0a:ea:45:9f:77:40:43:60:42:cc:5e:fa: 36:82:df:02:a5:ef:a6:ac:66:27:d2:97:e9:64:ae: 01:67:d6:4a:cd:1e:de:5b:15:21:95:ea:12:b0:29: 03:d4:d6:a3:25:94:5d:0e:ea:1c:22:67:f3:8e:d0: 94:70:ca:bf:f7:f8:33:ba:95:82:7e:3f:1f:d6:3b: 4d:08:5b:7e:b2:ab:f8:f3:41:20:22:41:ed:29:3a: 05:6a:5a:94:41:96:85:0e:a3:87:9b:2d:d3:f4:89: 09:40:79:b4:2d:0f:62:23:87:12:8a:d5:8e:80:53: c0:95:e4:c9:3c:15:8b:38:ad:65:4d:31:bd:17:3c: aa:b7:aa:24:49:e7:31:7e:b8:31:4a:80:31:5f:e7: 69:60:16:ab:a3:c8:76:87:66:a7:49:b8:c4:5e:ce: a2:98:86:c0:9d:8d:59:a1:9f:68:5b:80:75:08:36: f3:9f:a2:71:7d:98:79:fe:82:6b:66:48:3f:37:94: 81:75:a7:11:b0:19:93:4a:d0:64:d3:07:66:7e:09: cf:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:1B:A0:F1:33:92:75:13:06:40:EE:1B:AC:C1:C9:27:8F:17:1B:B7 X509v3 Authority Key Identifier: keyid:30:62:8D:92:38:E2:3D:6B:F4:C7:35:99:5C:9E:2D:EA:00:50:F0:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/40e57e-c627-4b9b-9577-596fa8c0a57a/1/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/40e57e-c627-4b9b-9577-596fa8c0a57a/1/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:13:ec:bf:90:bd:f9:51:1d:b9:22:34:a5:f3:fe:04:2d:fd: c6:89:4b:a3:21:e9:03:96:31:9f:7a:77:25:61:0f:3b:fe:64: d0:08:af:fa:fc:43:a0:cb:dd:8d:0a:17:5c:6f:fd:07:bb:38: 11:b4:32:c9:01:c0:2e:95:2e:a3:4d:69:7d:88:14:ef:04:78: 44:d4:cb:dd:87:50:2b:f6:b6:9d:7d:25:b4:38:43:3a:52:a1: cc:66:5c:ce:fd:6c:de:87:8a:86:45:b9:3f:c9:e8:c0:04:81: 38:21:65:61:cf:40:6b:3f:d2:de:34:46:4f:26:cd:05:af:fc: 02:af:6d:cd:60:4b:86:ca:11:6c:71:7b:82:cf:9a:54:ca:ec: 8f:51:f4:dd:0d:b8:f2:83:90:3b:4a:50:1c:b1:14:25:62:2b: a5:c0:43:04:8d:1f:68:c6:31:fe:0c:59:92:f8:c9:5d:86:79: 27:25:b4:84:50:e3:dc:29:ba:0a:52:97:62:74:2e:dd:4c:eb: 12:ba:4f:b4:71:07:9f:b8:06:86:3b:21:eb:40:0a:70:1a:0f: 20:9c:03:92:5d:2d:2e:36:8d:f1:e5:8a:4a:02:ad:0d:be:58: 35:8d:50:99:dc:78:82:bd:a1:6c:90:b0:ae:56:f1:4c:a8:57: 7a:28:24:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsaYBgY9eJAa9Kcr6v4lBOPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwNjI4ZDkyMzhlMjNkNmJmNGM3MzU5OTVjOWUyZGVhMDA1 MGYwMGMwHhcNMjUxMjE0MDEwMTAzWhcNMjUxMjE1MDEwMTAzWjAzMTEwLwYDVQQD Eyg5MDFiYTBmMTMzOTI3NTEzMDY0MGVlMWJhY2MxYzkyNzhmMTcxYmI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3NYkUJBRgvmk3xCbpxYP7jMHZ5lI yg+o8QPStqpmHaX7s6Lk8aEYmF4WnXD1uIoK6kWfd0BDYELMXvo2gt8Cpe+mrGYn 0pfpZK4BZ9ZKzR7eWxUhleoSsCkD1NajJZRdDuocImfzjtCUcMq/9/gzupWCfj8f 1jtNCFt+sqv480EgIkHtKToFalqUQZaFDqOHmy3T9IkJQHm0LQ9iI4cSitWOgFPA leTJPBWLOK1lTTG9Fzyqt6okSecxfrgxSoAxX+dpYBaro8h2h2anSbjEXs6imIbA nY1ZoZ9oW4B1CDbzn6JxfZh5/oJrZkg/N5SBdacRsBmTStBk0wdmfgnPzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJAboPEzknUTBkDuG6zBySePFxu3MB8GA1UdIwQY MBaAFDBijZI44j1r9Mc1mVyeLeoAUPAMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUdLTmtqamlQV3YweHpXWlhKNHQ2Z0JROEF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS80MGU1N2UtYzYyNy00YjliLTk1Nzct NTk2ZmE4YzBhNTdhLzEvTUdLTmtqamlQV3YweHpXWlhKNHQ2Z0JROEF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS80MGU1N2UtYzYyNy00YjliLTk1NzctNTk2ZmE4YzBhNTdh LzEvTUdLTmtqamlQV3YweHpXWlhKNHQ2Z0JROEF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABhPsv5C9 +VEduSI0pfP+BC39xolLoyHpA5Yxn3p3JWEPO/5k0Aiv+vxDoMvdjQoXXG/9B7s4 EbQyyQHALpUuo01pfYgU7wR4RNTL3YdQK/a2nX0ltDhDOlKhzGZczv1s3oeKhkW5 P8nowASBOCFlYc9Aaz/S3jRGTybNBa/8Aq9tzWBLhsoRbHF7gs+aVMrsj1H03Q24 8oOQO0pQHLEUJWIrpcBDBI0faMYx/gxZkvjJXYZ5JyW0hFDj3Cm6ClKXYnQu3Uzr ErpPtHEHn7gGhjsh60AKcBoPIJwDkl0tLjaN8eWKSgKtDb5YNY1Qmdx4gr2hbJCw rlbxTKhXeigk4w== -----END CERTIFICATE-----Generated at Sun Dec 14 03:42:15 2025 by rpki-client