This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/30f34e-e2ad-4b8d-8ce0-011878255ba7/1/MGY7W3BEIyuYmBjRLMkEkCElJN8.mft File: MGY7W3BEIyuYmBjRLMkEkCElJN8.mft (raw, json) Hash identifier: Shv7jrdIgbymsa8+CleMPWnFqV8x51bEpU/zjdLm52k= Subject key identifier: B1:61:A6:2E:8E:84:46:3B:1A:CF:19:C9:89:1B:48:63:21:14:76:9D Authority key identifier: 30:66:3B:5B:70:44:23:2B:98:98:18:D1:2C:C9:04:90:21:25:24:DF Certificate issuer: /CN=30663b5b7044232b989818d12cc90490212524df Certificate serial: 019B32D757B90AB9299F290469FA3F1A7971 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGY7W3BEIyuYmBjRLMkEkCElJN8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/30f34e-e2ad-4b8d-8ce0-011878255ba7/1/MGY7W3BEIyuYmBjRLMkEkCElJN8.mft Manifest number: 0298 Signing time: Thu 18 Dec 2025 19:02:12 +0000 Manifest this update: Thu 18 Dec 2025 19:02:12 +0000 Manifest next update: Fri 19 Dec 2025 19:02:12 +0000 Files and hashes: 1: MGY7W3BEIyuYmBjRLMkEkCElJN8.crl (hash: +8+ToUX2j9BBGR10TggNIRrLs0B0GPex/9Gu61OSoHQ=) 2: jl5BGicOacjnQYcT0f92Ohaidfk.roa (hash: 2+8T//3NgApFzgg77XKjZhpHy2WC3GoSuHjoqbCDjuc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/30f34e-e2ad-4b8d-8ce0-011878255ba7/1/MGY7W3BEIyuYmBjRLMkEkCElJN8.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/30f34e-e2ad-4b8d-8ce0-011878255ba7/1/MGY7W3BEIyuYmBjRLMkEkCElJN8.mft rsync://rpki.ripe.net/repository/DEFAULT/MGY7W3BEIyuYmBjRLMkEkCElJN8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:02:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d7:57:b9:0a:b9:29:9f:29:04:69:fa:3f:1a:79:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30663b5b7044232b989818d12cc90490212524df Validity Not Before: Dec 18 19:02:12 2025 GMT Not After : Dec 19 19:02:12 2025 GMT Subject: CN=b161a62e8e84463b1acf19c9891b48632114769d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:78:77:f8:da:b8:46:12:92:94:b7:31:f3:06: b2:79:64:3a:a2:e6:df:c6:86:7d:bc:01:03:db:3f: d3:e8:dd:94:aa:35:13:8d:23:4b:e4:a3:38:99:8f: 2e:1f:ec:68:7c:69:47:84:6f:84:4b:97:11:4e:2b: a7:66:8f:96:12:0c:20:dd:ef:af:6c:fc:5e:32:95: fe:d6:2c:8d:68:92:a4:2b:df:ca:73:10:cf:59:68: 21:e4:1e:4f:f9:e4:0e:60:aa:79:68:6e:30:55:53: 50:9e:5e:7d:99:63:06:e2:57:21:28:72:15:ff:6e: 25:a6:e5:e1:f2:8c:f1:80:6a:25:7c:c1:4c:af:26: 0b:2c:62:03:e4:d4:3d:86:49:7f:03:0f:62:0b:1e: a5:e3:6e:91:5a:14:4f:0c:54:d7:49:81:f7:23:b1: 51:ad:39:12:ff:4d:dd:92:86:22:c1:76:44:ee:12: 5b:fc:be:70:1d:82:05:41:83:49:dc:34:ad:93:f0: 9c:30:68:ea:5a:20:45:ac:58:4c:cf:50:17:66:8d: 2e:32:31:70:5f:23:d4:5d:2e:88:5b:74:2b:50:5e: ba:db:22:ff:d8:4f:d3:c6:8a:1c:98:8c:a2:82:31: 4c:69:40:0b:10:0a:12:bb:3e:68:2d:07:62:d2:47: 32:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:61:A6:2E:8E:84:46:3B:1A:CF:19:C9:89:1B:48:63:21:14:76:9D X509v3 Authority Key Identifier: keyid:30:66:3B:5B:70:44:23:2B:98:98:18:D1:2C:C9:04:90:21:25:24:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGY7W3BEIyuYmBjRLMkEkCElJN8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/30f34e-e2ad-4b8d-8ce0-011878255ba7/1/MGY7W3BEIyuYmBjRLMkEkCElJN8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/30f34e-e2ad-4b8d-8ce0-011878255ba7/1/MGY7W3BEIyuYmBjRLMkEkCElJN8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:3a:ae:d1:99:85:17:5c:34:3a:fc:5e:1e:7e:f2:84:90:4b: 68:2a:d2:8a:58:bf:40:de:96:b7:ef:b8:61:1f:34:26:6b:71: 3d:14:49:78:70:3b:7e:94:0a:e8:3f:b8:e6:d8:54:03:e4:65: 3a:0c:1f:2b:b1:39:07:95:ac:3a:d8:1f:cf:60:f5:bf:f3:83: 72:71:3e:a5:24:fe:b1:d7:d4:cb:70:4b:1c:99:dd:66:77:41: 93:16:ac:0b:2a:03:37:a6:0c:95:c0:1d:3f:0a:91:2f:cd:b2: e2:16:d8:ae:6c:fd:65:c0:b4:e9:65:c6:2f:a4:52:26:39:dd: 21:19:80:2b:51:d0:73:01:12:0c:6f:39:ad:ab:c6:8e:cc:0c: d7:e7:f2:c8:4a:76:07:f4:d4:3b:ae:aa:e1:ee:3d:f8:4b:5c: 53:4d:23:de:70:b7:b4:43:a2:85:2f:05:49:28:11:b4:6d:60: fa:b2:fc:75:3c:c1:fb:6c:bc:d5:e2:23:74:c1:e9:d2:c1:71: 00:5b:34:7c:ab:be:30:94:37:f1:4d:0d:2e:8e:51:3f:bb:72: 2d:42:e9:c4:c5:50:36:91:05:78:25:ef:e7:3d:e4:59:3c:ac: 99:82:43:e8:2e:7a:cd:10:9f:5b:02:90:97:2a:7c:0e:ba:91: d9:ea:51:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy11e5CrkpnykEafo/GnlxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwNjYzYjViNzA0NDIzMmI5ODk4MThkMTJjYzkwNDkwMjEy NTI0ZGYwHhcNMjUxMjE4MTkwMjEyWhcNMjUxMjE5MTkwMjEyWjAzMTEwLwYDVQQD EyhiMTYxYTYyZThlODQ0NjNiMWFjZjE5Yzk4OTFiNDg2MzIxMTQ3NjlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Xh3+Nq4RhKSlLcx8wayeWQ6oubf xoZ9vAED2z/T6N2UqjUTjSNL5KM4mY8uH+xofGlHhG+ES5cRTiunZo+WEgwg3e+v bPxeMpX+1iyNaJKkK9/KcxDPWWgh5B5P+eQOYKp5aG4wVVNQnl59mWMG4lchKHIV /24lpuXh8ozxgGolfMFMryYLLGID5NQ9hkl/Aw9iCx6l426RWhRPDFTXSYH3I7FR rTkS/03dkoYiwXZE7hJb/L5wHYIFQYNJ3DStk/CcMGjqWiBFrFhMz1AXZo0uMjFw XyPUXS6IW3QrUF662yL/2E/TxoocmIyigjFMaUALEAoSuz5oLQdi0kcyqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLFhpi6OhEY7Gs8ZyYkbSGMhFHadMB8GA1UdIwQY MBaAFDBmO1twRCMrmJgY0SzJBJAhJSTfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUdZN1czQkVJeXVZbUJqUkxNa0VrQ0VsSk44LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8zMGYzNGUtZTJhZC00YjhkLThjZTAt MDExODc4MjU1YmE3LzEvTUdZN1czQkVJeXVZbUJqUkxNa0VrQ0VsSk44Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi8zMGYzNGUtZTJhZC00YjhkLThjZTAtMDExODc4MjU1YmE3 LzEvTUdZN1czQkVJeXVZbUJqUkxNa0VrQ0VsSk44LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJzqu0ZmF F1w0OvxeHn7yhJBLaCrSili/QN6Wt++4YR80JmtxPRRJeHA7fpQK6D+45thUA+Rl OgwfK7E5B5WsOtgfz2D1v/ODcnE+pST+sdfUy3BLHJndZndBkxasCyoDN6YMlcAd PwqRL82y4hbYrmz9ZcC06WXGL6RSJjndIRmAK1HQcwESDG85ravGjswM1+fyyEp2 B/TUO66q4e49+EtcU00j3nC3tEOihS8FSSgRtG1g+rL8dTzB+2y81eIjdMHp0sFx AFs0fKu+MJQ38U0NLo5RP7tyLULpxMVQNpEFeCXv5z3kWTysmYJD6C56zRCfWwKQ lyp8DrqR2epRmQ== -----END CERTIFICATE-----Generated at Thu Dec 18 23:38:59 2025 by rpki-client