This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.mft File: Mgskp0Dy5hYyBQrcFGwe5qPmhsU.mft (raw, json) Hash identifier: N+jaTyexLUfry/K/MgYH8Yoa0Xpuw3bY3IG3BT2TYB4= Subject key identifier: 3A:8B:0D:A0:0A:58:ED:5A:10:0A:4A:08:8B:D4:09:28:03:DA:D9:DD Authority key identifier: 32:0B:24:A7:40:F2:E6:16:32:05:0A:DC:14:6C:1E:E6:A3:E6:86:C5 Certificate issuer: /CN=320b24a740f2e61632050adc146c1ee6a3e686c5 Certificate serial: 019AF0F5CDA1028D8B341C52232FECCEE286 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 00:00:31 +0000 Manifest this update: Sat 06 Dec 2025 00:00:31 +0000 Manifest next update: Sun 07 Dec 2025 00:00:31 +0000 Files and hashes: 1: L6UZeUjVK5OZ7-mZGSjtJGUXkeo.roa (hash: zQv0Jn9i8JzxV9AzBkluRvg9IIcuWJrvzIFoMGo/YiA=) 2: Mgskp0Dy5hYyBQrcFGwe5qPmhsU.crl (hash: KfNACkG4WYbz4D22KvCTuyOjRZ/v5iYJgO8A1PYwNCs=) 3: cE9MAqwQ5qMGLkrFZGC06olWNS8.roa (hash: qikuqaUY8ZBatuemuXHDbHFmATqYtKgaMBnCotzhBRQ=) 4: eNulQrWkb7XXGYDw1_7yfQtfyjU.roa (hash: wqv9AveypucRXaFrqiWm0EqnYUR4U6N703H9MjT8w5I=) 5: ebOku8xEI298KvY-nyvK9tWb6FA.roa (hash: a5+jxAr4ask6hZY3MKueRH2rWcR2j9Q7nIukLKzVuw0=) 6: iDpQNT2zENvZBdlwmVa2eahg-4w.roa (hash: +pNICRMdPczLNv2a8Zb+PvZ8F7nTaRrJXFaN803DnT8=) 7: nOavIXppWmDFhXdDEZ0V1cMIqeg.roa (hash: uLvOIw0+fU0FW9oyjgIp/2zVisu3plAWDz1d4aRwn60=) 8: s9a3pEKBSyjyYAsrYAxiAEP4mCU.roa (hash: 0FpwdS9NLp08wzi3cGdRZXNNnpCGm190316Q+yHGVNo=) 9: v2JqIJBq3wJphTAbwK0-g33RShA.roa (hash: i1c3+hUzjW7SLy+JaUh7BqmO9B9VdI9iEDnKvNZU/ks=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.crl rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.mft rsync://rpki.ripe.net/repository/DEFAULT/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:f5:cd:a1:02:8d:8b:34:1c:52:23:2f:ec:ce:e2:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=320b24a740f2e61632050adc146c1ee6a3e686c5 Validity Not Before: Dec 6 00:00:31 2025 GMT Not After : Dec 7 00:00:31 2025 GMT Subject: CN=3a8b0da00a58ed5a100a4a088bd4092803dad9dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:cc:23:08:90:72:0f:7f:1c:be:ce:f2:5b:cc: d5:51:4b:57:a0:59:12:61:0d:7d:55:e8:80:73:bb: b0:8e:9a:75:64:1a:90:de:47:8e:e4:5b:9b:e0:37: a8:b9:bc:44:d1:9f:6d:70:aa:68:82:36:2c:af:d9: 57:1d:34:8d:38:a0:b4:b7:84:88:45:ef:26:66:e9: df:4c:0c:93:b0:3f:27:1f:50:c7:44:ac:f3:bc:6d: 1b:f3:e8:d6:99:c8:a2:b4:c7:80:6f:ba:35:b4:a8: 5b:7c:b2:4e:49:8a:be:7d:9e:01:3b:f1:76:bf:8b: 72:0d:cc:84:f7:5f:ee:f9:34:6b:a4:3b:61:35:99: db:f4:c2:49:d7:4a:c5:09:3b:17:e6:d6:9b:12:b9: e7:de:00:ea:00:5a:cd:e5:6a:4e:30:d3:d9:db:f2: 39:c3:0c:40:6c:15:59:d9:1c:2a:03:80:74:1f:c5: 3a:a9:ba:c5:05:23:12:38:6f:01:88:d4:a3:5e:5e: ed:2e:2e:8c:46:34:e6:82:a1:99:c3:36:6c:5c:a3: 6c:1c:b0:54:8d:79:b1:cd:d0:22:19:58:b1:bf:24: 86:0e:47:95:5e:b6:f9:f5:e7:d2:57:ef:20:8c:a9: 27:c0:59:c7:3f:3e:c2:4a:81:57:f2:f3:c6:db:47: 86:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:8B:0D:A0:0A:58:ED:5A:10:0A:4A:08:8B:D4:09:28:03:DA:D9:DD X509v3 Authority Key Identifier: keyid:32:0B:24:A7:40:F2:E6:16:32:05:0A:DC:14:6C:1E:E6:A3:E6:86:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:a9:f0:2b:18:a1:68:60:b9:ac:29:d6:4f:1e:c1:fe:d3:b1: b1:53:0d:0b:c9:5c:a2:90:cd:66:8a:bf:23:5e:3f:ed:32:cf: 41:2b:03:36:1e:d4:7d:95:c3:41:3c:f1:58:74:ba:a7:cc:87: 8e:74:6a:c6:52:8c:3e:73:f0:1e:53:96:ab:1c:76:2b:3d:6f: 6b:82:14:ed:13:13:6d:3c:dd:4f:a1:2e:68:1e:1e:ed:f3:8b: 43:4f:31:45:95:97:5a:34:cb:5f:fa:2f:3c:b0:e2:f4:fe:df: eb:34:23:f4:b5:26:2e:ea:8d:d8:61:4d:b0:4c:f2:8f:15:8c: 9e:43:70:42:4c:2d:af:6c:b3:6d:d9:99:82:ee:04:bd:80:c1: 5a:2b:c3:e1:d9:e4:78:e3:88:41:3e:d2:dd:b5:9a:b5:ad:37: 48:41:2c:33:dd:d2:b5:3d:35:b2:3a:e9:53:9d:ed:aa:35:70: 15:2a:b0:b5:76:16:34:07:62:84:73:5f:da:75:5b:d9:08:69: e8:14:d7:d2:46:90:ee:06:fa:7a:2f:93:54:95:b8:32:fa:2b: 21:fc:b7:99:41:15:c7:22:ba:41:6c:de:55:73:6c:37:8f:e5: 4f:cc:6a:d9:37:73:8a:d4:03:eb:2c:3d:7b:eb:02:0a:c5:06: 0c:57:a0:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrw9c2hAo2LNBxSIy/szuKGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyMGIyNGE3NDBmMmU2MTYzMjA1MGFkYzE0NmMxZWU2YTNl Njg2YzUwHhcNMjUxMjA2MDAwMDMxWhcNMjUxMjA3MDAwMDMxWjAzMTEwLwYDVQQD EygzYThiMGRhMDBhNThlZDVhMTAwYTRhMDg4YmQ0MDkyODAzZGFkOWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8wjCJByD38cvs7yW8zVUUtXoFkS YQ19VeiAc7uwjpp1ZBqQ3keO5Fub4DeoubxE0Z9tcKpogjYsr9lXHTSNOKC0t4SI Re8mZunfTAyTsD8nH1DHRKzzvG0b8+jWmciitMeAb7o1tKhbfLJOSYq+fZ4BO/F2 v4tyDcyE91/u+TRrpDthNZnb9MJJ10rFCTsX5tabErnn3gDqAFrN5WpOMNPZ2/I5 wwxAbBVZ2RwqA4B0H8U6qbrFBSMSOG8BiNSjXl7tLi6MRjTmgqGZwzZsXKNsHLBU jXmxzdAiGVixvySGDkeVXrb59efSV+8gjKknwFnHPz7CSoFX8vPG20eGTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDqLDaAKWO1aEApKCIvUCSgD2tndMB8GA1UdIwQY MBaAFDILJKdA8uYWMgUK3BRsHuaj5obFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWdza3AwRHk1aFl5QlFyY0ZHd2U1cVBtaHNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy85YzI3ZTQtZDdiMS00M2MxLWEzOGYt OTQ5MTRmNWRkYjNjLzEvTWdza3AwRHk1aFl5QlFyY0ZHd2U1cVBtaHNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy85YzI3ZTQtZDdiMS00M2MxLWEzOGYtOTQ5MTRmNWRkYjNj LzEvTWdza3AwRHk1aFl5QlFyY0ZHd2U1cVBtaHNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlKnwKxih aGC5rCnWTx7B/tOxsVMNC8lcopDNZoq/I14/7TLPQSsDNh7UfZXDQTzxWHS6p8yH jnRqxlKMPnPwHlOWqxx2Kz1va4IU7RMTbTzdT6EuaB4e7fOLQ08xRZWXWjTLX/ov PLDi9P7f6zQj9LUmLuqN2GFNsEzyjxWMnkNwQkwtr2yzbdmZgu4EvYDBWivD4dnk eOOIQT7S3bWata03SEEsM93StT01sjrpU53tqjVwFSqwtXYWNAdihHNf2nVb2Qhp 6BTX0kaQ7gb6ei+TVJW4MvorIfy3mUEVxyK6QWzeVXNsN4/lT8xq2TdzitQD6yw9 e+sCCsUGDFegIQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:26:36 2025 by rpki-client