This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c26199-3303-4223-9f0f-5dafc634ccd6/1/MgrQyxyPq9KnFycj8utT6gLoSmk.mft File: MgrQyxyPq9KnFycj8utT6gLoSmk.mft (raw, json) Hash identifier: JF2NRCMYiENvne4fZNmuepJs6GnuPmN5I2fy0EUeve4= Subject key identifier: 63:F6:29:FC:1A:6C:7D:CD:F7:4F:00:8F:6E:01:90:E7:95:F4:A9:08 Authority key identifier: 32:0A:D0:CB:1C:8F:AB:D2:A7:17:27:23:F2:EB:53:EA:02:E8:4A:69 Certificate issuer: /CN=320ad0cb1c8fabd2a7172723f2eb53ea02e84a69 Certificate serial: 019B4926AF29833516E4CE13877BBF3D2E81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MgrQyxyPq9KnFycj8utT6gLoSmk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c26199-3303-4223-9f0f-5dafc634ccd6/1/MgrQyxyPq9KnFycj8utT6gLoSmk.mft Manifest number: 03FC Signing time: Tue 23 Dec 2025 03:00:30 +0000 Manifest this update: Tue 23 Dec 2025 03:00:30 +0000 Manifest next update: Wed 24 Dec 2025 03:00:30 +0000 Files and hashes: 1: JUrgcpIbkD2s0Xwl5MPFsKClBSA.roa (hash: h68v76M+ZVUfqYetcYYdqqWMVphcDkEUG23cxVpEUw4=) 2: MgrQyxyPq9KnFycj8utT6gLoSmk.crl (hash: glMO/4W5JV0+TUD0sE3V5FOTcyJ4w6HbxqpmZa8aMy8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c26199-3303-4223-9f0f-5dafc634ccd6/1/MgrQyxyPq9KnFycj8utT6gLoSmk.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/c26199-3303-4223-9f0f-5dafc634ccd6/1/MgrQyxyPq9KnFycj8utT6gLoSmk.mft rsync://rpki.ripe.net/repository/DEFAULT/MgrQyxyPq9KnFycj8utT6gLoSmk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:26:af:29:83:35:16:e4:ce:13:87:7b:bf:3d:2e:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=320ad0cb1c8fabd2a7172723f2eb53ea02e84a69 Validity Not Before: Dec 23 03:00:30 2025 GMT Not After : Dec 24 03:00:30 2025 GMT Subject: CN=63f629fc1a6c7dcdf74f008f6e0190e795f4a908 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c6:18:ab:2b:b8:4e:24:cd:1d:b4:75:58:ee: fd:b8:24:83:9a:bf:6a:12:51:d5:bf:db:b6:9f:1c: 0d:9e:73:55:02:f5:82:e7:26:75:8e:02:33:bd:a8: ba:1e:ee:d2:98:90:84:bd:6a:6d:6a:8e:4d:94:56: 0f:3a:ce:55:bb:9c:8f:24:80:37:2d:fe:71:6a:e3: cf:45:bc:6b:32:4b:fd:72:bf:bb:c4:ba:4e:bf:af: 1b:e3:ae:07:f5:ad:94:41:9f:d6:42:3a:ed:f2:f6: c2:78:3c:1f:1e:8c:3b:32:c3:bd:81:bd:2a:d7:42: 4d:f1:7d:8c:01:d0:10:c1:1e:46:89:96:bb:55:af: c2:9f:69:78:5f:d6:38:9a:d9:cb:e6:1c:17:9b:fb: 66:5f:1c:a7:3b:bc:78:78:4f:76:ad:71:b5:69:ec: f1:ee:66:4c:d4:67:30:8d:f0:d1:89:59:cb:19:d4: b7:16:c3:9e:1f:73:19:df:7c:f7:9a:05:0c:ef:64: 0e:fb:96:07:a1:42:82:6d:a2:65:78:1a:be:1d:6e: d5:71:32:cc:cd:d7:ed:e0:05:a6:2c:c3:79:22:26: 7e:11:ac:71:eb:ba:63:8e:94:30:3e:04:de:21:2c: 5e:37:01:86:a1:3e:a7:08:7d:da:bd:dc:c2:c0:d0: 01:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:F6:29:FC:1A:6C:7D:CD:F7:4F:00:8F:6E:01:90:E7:95:F4:A9:08 X509v3 Authority Key Identifier: keyid:32:0A:D0:CB:1C:8F:AB:D2:A7:17:27:23:F2:EB:53:EA:02:E8:4A:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MgrQyxyPq9KnFycj8utT6gLoSmk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c26199-3303-4223-9f0f-5dafc634ccd6/1/MgrQyxyPq9KnFycj8utT6gLoSmk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c26199-3303-4223-9f0f-5dafc634ccd6/1/MgrQyxyPq9KnFycj8utT6gLoSmk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:d1:85:37:b5:40:e0:26:2e:c4:03:05:a7:4c:01:7e:f1:fc: 22:6e:b8:2e:b1:c4:d1:b5:99:d8:78:e2:c1:07:c9:27:22:0f: 61:a1:b4:3e:e0:aa:bb:a8:0a:71:2c:c3:3f:de:00:62:6e:63: 30:5e:64:ca:21:56:20:77:aa:b2:a2:18:a1:ef:d3:5e:e6:8b: 8d:4a:3e:9a:82:d1:38:26:be:0f:ae:88:6f:ee:b4:af:91:12: 60:ce:20:ab:a3:d6:58:0f:cc:f1:ce:7b:95:63:96:03:8f:54: 7e:f7:d8:68:82:88:36:25:6a:a6:2a:5c:c1:b6:08:a4:6f:e9: 58:c3:fe:ab:7b:9e:d7:9c:53:42:44:11:e8:7d:00:84:fa:83: 16:98:ed:5f:22:7c:c3:23:03:cc:5a:8e:ab:2e:44:d4:2f:0c: df:ff:f0:3e:0a:57:f2:8c:95:9c:b5:e3:06:36:00:db:99:63: ad:50:57:92:4c:86:36:05:62:19:84:c3:55:f0:e2:5a:02:b2: ad:46:61:d8:d2:c4:5e:9c:22:f5:df:df:95:0d:5c:75:ff:cd: 27:a4:49:ce:f2:c2:54:75:8e:51:04:a2:1f:cb:92:c1:57:84: 86:32:74:01:32:70:ac:83:6d:ef:bf:d8:a0:fa:e2:b2:a8:e4: 38:c0:d1:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtJJq8pgzUW5M4Th3u/PS6BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyMGFkMGNiMWM4ZmFiZDJhNzE3MjcyM2YyZWI1M2VhMDJl ODRhNjkwHhcNMjUxMjIzMDMwMDMwWhcNMjUxMjI0MDMwMDMwWjAzMTEwLwYDVQQD Eyg2M2Y2MjlmYzFhNmM3ZGNkZjc0ZjAwOGY2ZTAxOTBlNzk1ZjRhOTA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscYYqyu4TiTNHbR1WO79uCSDmr9q ElHVv9u2nxwNnnNVAvWC5yZ1jgIzvai6Hu7SmJCEvWptao5NlFYPOs5Vu5yPJIA3 Lf5xauPPRbxrMkv9cr+7xLpOv68b464H9a2UQZ/WQjrt8vbCeDwfHow7MsO9gb0q 10JN8X2MAdAQwR5GiZa7Va/Cn2l4X9Y4mtnL5hwXm/tmXxynO7x4eE92rXG1aezx 7mZM1GcwjfDRiVnLGdS3FsOeH3MZ33z3mgUM72QO+5YHoUKCbaJleBq+HW7VcTLM zdft4AWmLMN5IiZ+Eaxx67pjjpQwPgTeISxeNwGGoT6nCH3avdzCwNABqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGP2KfwabH3N908Aj24BkOeV9KkIMB8GA1UdIwQY MBaAFDIK0Mscj6vSpxcnI/LrU+oC6EppMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWdyUXl4eVBxOUtuRnljajh1dFQ2Z0xvU21rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9jMjYxOTktMzMwMy00MjIzLTlmMGYt NWRhZmM2MzRjY2Q2LzEvTWdyUXl4eVBxOUtuRnljajh1dFQ2Z0xvU21rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9jMjYxOTktMzMwMy00MjIzLTlmMGYtNWRhZmM2MzRjY2Q2 LzEvTWdyUXl4eVBxOUtuRnljajh1dFQ2Z0xvU21rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADdGFN7VA 4CYuxAMFp0wBfvH8Im64LrHE0bWZ2HjiwQfJJyIPYaG0PuCqu6gKcSzDP94AYm5j MF5kyiFWIHeqsqIYoe/TXuaLjUo+moLROCa+D66Ib+60r5ESYM4gq6PWWA/M8c57 lWOWA49UfvfYaIKINiVqpipcwbYIpG/pWMP+q3ue15xTQkQR6H0AhPqDFpjtXyJ8 wyMDzFqOqy5E1C8M3//wPgpX8oyVnLXjBjYA25ljrVBXkkyGNgViGYTDVfDiWgKy rUZh2NLEXpwi9d/flQ1cdf/NJ6RJzvLCVHWOUQSiH8uSwVeEhjJ0ATJwrINt77/Y oPrisqjkOMDRVQ== -----END CERTIFICATE-----Generated at Tue Dec 23 05:50:28 2025 by rpki-client