This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c26199-3303-4223-9f0f-5dafc634ccd6/1/MgrQyxyPq9KnFycj8utT6gLoSmk.mft File: MgrQyxyPq9KnFycj8utT6gLoSmk.mft (raw, json) Hash identifier: HRPJXb/pYoil5TK91Rv9N9BTC4eyA48DxMtcHqQP+cA= Subject key identifier: 34:2F:EF:7F:B7:9E:4E:DA:FB:A6:1F:33:D9:FB:36:36:65:07:AA:09 Authority key identifier: 32:0A:D0:CB:1C:8F:AB:D2:A7:17:27:23:F2:EB:53:EA:02:E8:4A:69 Certificate issuer: /CN=320ad0cb1c8fabd2a7172723f2eb53ea02e84a69 Certificate serial: 019B37C5A0A2925D75C5E1E63E12D550E0F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MgrQyxyPq9KnFycj8utT6gLoSmk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c26199-3303-4223-9f0f-5dafc634ccd6/1/MgrQyxyPq9KnFycj8utT6gLoSmk.mft Manifest number: 03F3 Signing time: Fri 19 Dec 2025 18:00:57 +0000 Manifest this update: Fri 19 Dec 2025 18:00:57 +0000 Manifest next update: Sat 20 Dec 2025 18:00:57 +0000 Files and hashes: 1: JUrgcpIbkD2s0Xwl5MPFsKClBSA.roa (hash: h68v76M+ZVUfqYetcYYdqqWMVphcDkEUG23cxVpEUw4=) 2: MgrQyxyPq9KnFycj8utT6gLoSmk.crl (hash: SF0ScB/NuL4dbHmeztDtq4/n0/pD8SUHevJHR2QiXaU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c26199-3303-4223-9f0f-5dafc634ccd6/1/MgrQyxyPq9KnFycj8utT6gLoSmk.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/c26199-3303-4223-9f0f-5dafc634ccd6/1/MgrQyxyPq9KnFycj8utT6gLoSmk.mft rsync://rpki.ripe.net/repository/DEFAULT/MgrQyxyPq9KnFycj8utT6gLoSmk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:c5:a0:a2:92:5d:75:c5:e1:e6:3e:12:d5:50:e0:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=320ad0cb1c8fabd2a7172723f2eb53ea02e84a69 Validity Not Before: Dec 19 18:00:57 2025 GMT Not After : Dec 20 18:00:57 2025 GMT Subject: CN=342fef7fb79e4edafba61f33d9fb36366507aa09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0b:1d:0f:35:14:67:8c:cb:f9:de:73:af:6c: 70:10:c7:a1:10:e3:04:b9:39:82:bd:d0:5c:7d:15: 5b:57:37:aa:97:ae:49:79:78:54:8d:7d:9b:ce:65: 7c:29:23:3d:a5:f2:b2:5d:a7:5f:da:66:a7:da:fd: 57:2e:6c:c9:64:3e:4b:65:3e:41:93:fa:06:7e:e8: 3f:1d:cf:70:70:87:c5:e5:87:e0:e7:30:6c:ab:28: 82:e9:19:4b:90:e4:89:c6:ce:9b:f5:88:ea:24:03: ff:74:32:e1:46:85:bd:79:72:63:5b:8f:fe:a9:30: d7:df:86:52:f5:e6:ca:37:a7:86:27:a1:7b:c0:d4: 9a:65:14:f1:c8:73:d9:8d:03:81:88:67:46:ca:e5: dd:94:08:b1:ec:c2:12:5e:2f:a6:c8:91:43:d1:f1: df:e4:ec:21:6e:2e:43:ed:a4:71:cc:1c:ab:dc:cd: ed:99:e9:46:98:cc:51:46:c7:dd:61:f3:fe:05:48: 53:b0:9f:ed:48:98:c5:53:5b:b5:81:4b:e8:72:f7: 1d:24:ba:17:18:ab:6a:b3:1f:d7:9f:85:a0:e3:3f: 40:1e:fa:cf:a6:1b:b0:d7:81:2b:44:22:c4:a6:44: 5c:51:11:d7:e0:45:31:ef:0a:22:d5:e0:2d:2f:d9: 7c:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:2F:EF:7F:B7:9E:4E:DA:FB:A6:1F:33:D9:FB:36:36:65:07:AA:09 X509v3 Authority Key Identifier: keyid:32:0A:D0:CB:1C:8F:AB:D2:A7:17:27:23:F2:EB:53:EA:02:E8:4A:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MgrQyxyPq9KnFycj8utT6gLoSmk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c26199-3303-4223-9f0f-5dafc634ccd6/1/MgrQyxyPq9KnFycj8utT6gLoSmk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c26199-3303-4223-9f0f-5dafc634ccd6/1/MgrQyxyPq9KnFycj8utT6gLoSmk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:bf:27:a8:fc:2c:80:5f:95:8e:a0:dc:bd:f8:ac:7c:4a:37: ec:f0:b7:b4:13:5e:26:ad:e1:4a:6d:d3:c9:08:cc:7a:a7:a5: 4e:79:8a:0c:c8:37:2f:6f:f6:2d:99:17:ab:74:b3:d9:91:5c: d1:5d:0f:b1:ec:f6:1e:5e:7b:5f:32:08:b4:22:4d:21:4e:fe: 6b:e3:c1:92:f2:f7:b0:43:3f:fe:a0:a7:36:7e:30:25:dc:ff: 5e:dd:a8:16:13:2a:21:5e:3c:27:64:a2:55:32:4f:fb:ec:b7: c5:b1:51:61:f5:3c:43:b7:3e:ed:3a:cc:1d:4f:a0:89:fe:c5: ed:eb:13:9d:4c:1a:7a:96:ad:05:bd:71:c9:cc:e8:9b:95:8c: 48:36:d6:cb:3e:7a:c7:d8:1f:ba:4b:11:99:0e:39:b9:da:80: 9c:62:a0:f0:c8:41:35:f9:71:0a:c9:6c:d4:27:0d:f0:65:b5: 0a:fa:2b:76:bf:9e:a4:81:da:65:07:2a:93:52:89:3b:64:46: 6d:88:62:82:b9:60:4e:79:74:fd:62:50:65:57:55:11:6c:29: 01:61:2b:eb:16:33:46:90:77:f1:e3:15:7d:d0:3a:4f:12:3f: 85:01:b2:f8:5e:6e:70:5d:27:ee:77:a9:c6:aa:72:7b:ce:6a: e7:3e:22:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3xaCikl11xeHmPhLVUOD2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyMGFkMGNiMWM4ZmFiZDJhNzE3MjcyM2YyZWI1M2VhMDJl ODRhNjkwHhcNMjUxMjE5MTgwMDU3WhcNMjUxMjIwMTgwMDU3WjAzMTEwLwYDVQQD EygzNDJmZWY3ZmI3OWU0ZWRhZmJhNjFmMzNkOWZiMzYzNjY1MDdhYTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQsdDzUUZ4zL+d5zr2xwEMehEOME uTmCvdBcfRVbVzeql65JeXhUjX2bzmV8KSM9pfKyXadf2man2v1XLmzJZD5LZT5B k/oGfug/Hc9wcIfF5Yfg5zBsqyiC6RlLkOSJxs6b9YjqJAP/dDLhRoW9eXJjW4/+ qTDX34ZS9ebKN6eGJ6F7wNSaZRTxyHPZjQOBiGdGyuXdlAix7MISXi+myJFD0fHf 5Owhbi5D7aRxzByr3M3tmelGmMxRRsfdYfP+BUhTsJ/tSJjFU1u1gUvocvcdJLoX GKtqsx/Xn4Wg4z9AHvrPphuw14ErRCLEpkRcURHX4EUx7woi1eAtL9l8mQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDQv73+3nk7a+6YfM9n7NjZlB6oJMB8GA1UdIwQY MBaAFDIK0Mscj6vSpxcnI/LrU+oC6EppMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWdyUXl4eVBxOUtuRnljajh1dFQ2Z0xvU21rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9jMjYxOTktMzMwMy00MjIzLTlmMGYt NWRhZmM2MzRjY2Q2LzEvTWdyUXl4eVBxOUtuRnljajh1dFQ2Z0xvU21rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9jMjYxOTktMzMwMy00MjIzLTlmMGYtNWRhZmM2MzRjY2Q2 LzEvTWdyUXl4eVBxOUtuRnljajh1dFQ2Z0xvU21rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW78nqPws gF+VjqDcvfisfEo37PC3tBNeJq3hSm3TyQjMeqelTnmKDMg3L2/2LZkXq3Sz2ZFc 0V0Psez2Hl57XzIItCJNIU7+a+PBkvL3sEM//qCnNn4wJdz/Xt2oFhMqIV48J2Si VTJP++y3xbFRYfU8Q7c+7TrMHU+gif7F7esTnUwaepatBb1xyczom5WMSDbWyz56 x9gfuksRmQ45udqAnGKg8MhBNflxCsls1CcN8GW1Cvordr+epIHaZQcqk1KJO2RG bYhigrlgTnl0/WJQZVdVEWwpAWEr6xYzRpB38eMVfdA6TxI/hQGy+F5ucF0n7nep xqpye85q5z4iWw== -----END CERTIFICATE-----Generated at Fri Dec 19 21:13:57 2025 by rpki-client