This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft File: MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft (raw, json) Hash identifier: 0NE8v+uKCsPuwryM10cWzcCWs9yBixPfHDpBfNuzCMQ= Subject key identifier: 85:4F:7D:35:32:0F:E9:00:0E:E2:42:96:DC:F8:B8:B4:CC:33:2A:48 Authority key identifier: 30:6D:61:83:55:BD:89:37:F7:5B:B4:65:0B:B5:C1:AF:70:F9:A1:2E Certificate issuer: /CN=306d618355bd8937f75bb4650bb5c1af70f9a12e Certificate serial: 019B23632EA799EE2B8B0B722A0D6365B006 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MG1hg1W9iTf3W7RlC7XBr3D5oS4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft Manifest number: 1319 Signing time: Mon 15 Dec 2025 19:01:01 +0000 Manifest this update: Mon 15 Dec 2025 19:01:01 +0000 Manifest next update: Tue 16 Dec 2025 19:01:01 +0000 Files and hashes: 1: 3jZVmIYXRpFGaUpKFxmxg6yk0v4.roa (hash: DxwsnC6ETAvm52TcakM8AMF0oIdLtUXLvOU8uNsDQAw=) 2: MG1hg1W9iTf3W7RlC7XBr3D5oS4.crl (hash: VYVlLnKkJuj4s5L9cgApzz3uZkWzIaRnieP2SdwglKw=) 3: OhFs8ELf0BkBqUqSta-UtJTxxOY.roa (hash: eORqJrZ4eHwt+ZtqWQMblZ7ybIDSjazTPoe3DTl1tC8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.crl rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft rsync://rpki.ripe.net/repository/DEFAULT/MG1hg1W9iTf3W7RlC7XBr3D5oS4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 19:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:63:2e:a7:99:ee:2b:8b:0b:72:2a:0d:63:65:b0:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=306d618355bd8937f75bb4650bb5c1af70f9a12e Validity Not Before: Dec 15 19:01:01 2025 GMT Not After : Dec 16 19:01:01 2025 GMT Subject: CN=854f7d35320fe9000ee24296dcf8b8b4cc332a48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:1a:c2:6c:31:6c:bd:79:f4:b4:2e:ae:b5:90: 4a:08:a8:72:a5:32:24:19:a5:0d:a9:a7:e1:e3:5e: 11:fe:3d:0c:5e:83:ec:e4:6a:a3:db:f1:72:23:a0: 8a:71:d5:9a:ae:63:2c:eb:6e:e1:3c:08:8b:37:f5: a5:63:16:af:64:12:bf:ae:70:bf:55:0f:05:5f:a6: 0c:f3:17:e4:60:6c:05:19:b4:c4:ab:e7:42:9e:b8: 4c:58:9c:0c:0d:90:72:2a:ef:78:1d:8d:d4:ba:04: e6:65:db:e1:48:74:a0:e6:e9:d2:2e:c9:e6:bf:4b: e5:03:2d:5a:3c:75:bb:60:f5:7c:a8:3f:85:f3:43: 68:85:a3:d4:ee:c4:a3:b0:a4:8c:89:9e:e7:a6:6b: 47:fd:5e:3f:af:64:88:52:2b:5a:42:1e:b1:c1:60: 4f:36:3e:31:ff:cc:b7:fc:09:33:72:ae:0a:43:39: 28:c6:a4:0d:29:0d:0d:9e:62:8f:00:3c:59:d5:ce: 61:70:c8:cd:d0:30:72:28:2a:b4:56:f3:e5:c5:74: ac:e3:58:58:a2:8d:32:66:74:46:73:09:3f:8e:eb: 03:77:35:76:b3:1c:f6:31:c9:df:d9:01:a4:bb:a8: be:e6:93:55:a3:2e:45:87:b6:a2:cc:98:07:e2:f0: 43:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:4F:7D:35:32:0F:E9:00:0E:E2:42:96:DC:F8:B8:B4:CC:33:2A:48 X509v3 Authority Key Identifier: keyid:30:6D:61:83:55:BD:89:37:F7:5B:B4:65:0B:B5:C1:AF:70:F9:A1:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MG1hg1W9iTf3W7RlC7XBr3D5oS4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:e4:3b:09:91:71:91:f1:27:f5:ff:10:ef:5f:51:cf:49:04: 0a:0e:81:7e:2b:44:66:c1:70:c5:19:7e:eb:12:c8:19:b4:88: ee:e2:58:2b:b2:6a:eb:6f:63:d7:1b:04:d9:57:82:f0:5c:62: eb:2e:39:61:de:ba:93:6c:57:7b:fa:61:c6:6f:cc:61:3e:37: 55:38:c6:e1:93:35:00:43:12:a0:f1:ee:6a:0e:68:a9:eb:bd: 5c:60:e1:a7:c5:00:0d:d8:fa:07:95:71:4c:40:66:0e:31:e8: 19:60:52:09:27:5a:02:48:48:43:6e:5f:da:4f:5d:6f:27:ac: 60:a5:c6:0a:af:ab:90:69:8a:f4:84:f5:fa:20:c7:43:da:51: 53:81:9a:c1:e1:0c:79:f6:e4:25:72:4b:71:10:8e:28:a6:b1: b6:6d:d4:b8:3b:40:16:3e:31:d8:ed:d4:39:5a:d7:72:48:45: ae:e5:6d:b0:aa:58:36:8a:ac:a7:97:dc:f5:d2:b7:be:71:47: 96:ed:08:a1:4d:c2:e4:cc:6b:7e:d3:ab:ae:70:f9:e1:5d:9c: 97:2c:c9:31:e8:d8:2e:2f:8a:37:aa:b2:76:fb:6d:ba:02:21: d2:7f:eb:e5:61:1f:dc:bb:ef:fc:fd:41:76:19:ba:0f:26:27: 67:38:28:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsjYy6nme4riwtyKg1jZbAGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwNmQ2MTgzNTViZDg5MzdmNzViYjQ2NTBiYjVjMWFmNzBm OWExMmUwHhcNMjUxMjE1MTkwMTAxWhcNMjUxMjE2MTkwMTAxWjAzMTEwLwYDVQQD Eyg4NTRmN2QzNTMyMGZlOTAwMGVlMjQyOTZkY2Y4YjhiNGNjMzMyYTQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshrCbDFsvXn0tC6utZBKCKhypTIk GaUNqafh414R/j0MXoPs5Gqj2/FyI6CKcdWarmMs627hPAiLN/WlYxavZBK/rnC/ VQ8FX6YM8xfkYGwFGbTEq+dCnrhMWJwMDZByKu94HY3UugTmZdvhSHSg5unSLsnm v0vlAy1aPHW7YPV8qD+F80NohaPU7sSjsKSMiZ7npmtH/V4/r2SIUitaQh6xwWBP Nj4x/8y3/Akzcq4KQzkoxqQNKQ0NnmKPADxZ1c5hcMjN0DByKCq0VvPlxXSs41hY oo0yZnRGcwk/jusDdzV2sxz2Mcnf2QGku6i+5pNVoy5Fh7aizJgH4vBD1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIVPfTUyD+kADuJCltz4uLTMMypIMB8GA1UdIwQY MBaAFDBtYYNVvYk391u0ZQu1wa9w+aEuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUcxaGcxVzlpVGYzVzdSbEM3WEJyM0Q1b1M0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi8zY2RlOWItMzcwNS00ZGMzLThkN2Ut NTE2ZmZkODczNzZjLzEvTUcxaGcxVzlpVGYzVzdSbEM3WEJyM0Q1b1M0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi8zY2RlOWItMzcwNS00ZGMzLThkN2UtNTE2ZmZkODczNzZj LzEvTUcxaGcxVzlpVGYzVzdSbEM3WEJyM0Q1b1M0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmeQ7CZFx kfEn9f8Q719Rz0kECg6BfitEZsFwxRl+6xLIGbSI7uJYK7Jq629j1xsE2VeC8Fxi 6y45Yd66k2xXe/phxm/MYT43VTjG4ZM1AEMSoPHuag5oqeu9XGDhp8UADdj6B5Vx TEBmDjHoGWBSCSdaAkhIQ25f2k9dbyesYKXGCq+rkGmK9IT1+iDHQ9pRU4GaweEM efbkJXJLcRCOKKaxtm3UuDtAFj4x2O3UOVrXckhFruVtsKpYNoqsp5fc9dK3vnFH lu0IoU3C5MxrftOrrnD54V2clyzJMejYLi+KN6qydvttugIh0n/r5WEf3Lvv/P1B dhm6DyYnZzgomA== -----END CERTIFICATE-----Generated at Tue Dec 16 04:59:13 2025 by rpki-client