This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.mft File: mGM1ShEa9tXhrRDaOK2BRLa-ho4.mft (raw, json) Hash identifier: xV0Gielkd8eJeho3NszDKl+qx9orrzOt4iS+oOYyRoA= Subject key identifier: 67:56:52:B2:A1:09:3B:6D:F3:1A:60:BF:21:54:F5:C5:A6:2E:5A:8A Authority key identifier: 98:63:35:4A:11:1A:F6:D5:E1:AD:10:DA:38:AD:81:44:B6:BE:86:8E Certificate issuer: /CN=9863354a111af6d5e1ad10da38ad8144b6be868e Certificate serial: 019AF1D24DC6814FCDE607C99C923BF79053 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGM1ShEa9tXhrRDaOK2BRLa-ho4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.mft Manifest number: 0859 Signing time: Sat 06 Dec 2025 04:01:22 +0000 Manifest this update: Sat 06 Dec 2025 04:01:22 +0000 Manifest next update: Sun 07 Dec 2025 04:01:22 +0000 Files and hashes: 1: J5SKCaGOc1EmK2ciMl5AsL0Yt6k.roa (hash: G1OhQbiptYNimu4j0r+tzGfxHpXqGX5AtlwZt3l6QBs=) 2: TMwrQ9VEC3dWwdOdSzhchqd9LKU.roa (hash: ddLT4suSyGT63FePBoB4o2Q5fl/qPXcvtKn+r4yKT0g=) 3: mGM1ShEa9tXhrRDaOK2BRLa-ho4.crl (hash: xI7KLpJyWhUeSFptSBjcbjEcVEEppGlrkxk9KDYB1RE=) 4: qjXXTFXVdVVWr7-MSHZr7AQqbSo.roa (hash: Sp8Mn3EU/O89RIW7deIN1lZCT2/D8tgJU4hIx0BHNRE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.crl rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.mft rsync://rpki.ripe.net/repository/DEFAULT/mGM1ShEa9tXhrRDaOK2BRLa-ho4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:4d:c6:81:4f:cd:e6:07:c9:9c:92:3b:f7:90:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9863354a111af6d5e1ad10da38ad8144b6be868e Validity Not Before: Dec 6 04:01:22 2025 GMT Not After : Dec 7 04:01:22 2025 GMT Subject: CN=675652b2a1093b6df31a60bf2154f5c5a62e5a8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e0:9f:f2:73:cc:06:95:a8:48:34:a8:14:7d: 2f:4b:8b:43:9f:e1:48:f6:7b:fc:55:75:e2:bf:67: 38:e7:b4:d8:d4:6c:0a:03:42:69:3a:dc:7a:58:41: eb:2b:5b:27:76:e6:8b:9b:92:09:e6:10:10:a9:af: db:50:2e:71:0c:c6:f9:ec:35:96:6b:50:73:a8:86: 41:e0:28:1c:17:24:a9:06:d3:25:55:5f:cf:91:09: 6b:4a:50:b5:db:8c:28:0d:6d:f7:6a:18:7d:4f:00: f6:54:03:5b:5c:45:41:92:c4:1b:13:ff:87:a6:b4: e9:5d:c5:f9:96:5f:17:a3:11:89:4b:44:ac:54:d5: 53:8c:68:dd:df:c0:25:7b:61:6f:60:a4:38:8d:27: 56:94:48:19:41:d4:6a:08:99:03:e7:ca:18:4b:27: 8f:82:08:f7:05:73:e4:15:0c:65:c8:da:4f:34:bf: 1e:ff:70:05:7d:c6:c7:a7:ab:15:39:ea:a9:36:20: e0:78:ee:5d:1d:49:ac:d3:8d:70:5d:55:a9:43:59: 67:c2:f6:c3:2a:67:c5:ee:cd:f8:0c:9f:ce:fc:fe: 2e:b2:4f:45:20:a2:c8:68:4b:52:ee:ef:f6:6e:16: 12:0f:00:eb:a3:d1:2b:62:f9:c3:b1:fd:03:71:02: e0:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:56:52:B2:A1:09:3B:6D:F3:1A:60:BF:21:54:F5:C5:A6:2E:5A:8A X509v3 Authority Key Identifier: keyid:98:63:35:4A:11:1A:F6:D5:E1:AD:10:DA:38:AD:81:44:B6:BE:86:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGM1ShEa9tXhrRDaOK2BRLa-ho4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:af:e2:72:bf:db:b6:57:74:d7:9f:11:60:32:59:5f:63:43: 58:6d:d7:5c:55:00:66:1e:bb:46:4b:ef:39:6b:0e:84:89:97: 32:4e:80:c1:15:2b:2b:79:c5:0a:80:95:37:16:36:25:c5:77: a9:36:0e:a3:d1:59:e8:11:73:b7:eb:d3:86:1d:d7:65:d4:32: 2f:71:3e:3c:75:5a:ca:6d:40:8a:e4:1e:f2:82:ec:fd:b5:f1: 31:89:4b:6e:01:fc:11:88:a5:1e:17:4f:a3:70:82:f3:a9:58: c2:2b:17:4e:72:d9:33:19:b9:89:bb:c1:58:17:7c:2f:c2:cc: ec:d1:62:a3:86:33:38:3a:0e:11:9d:97:be:06:7a:25:41:8c: e2:94:07:42:37:c4:23:2f:bd:12:7b:d7:df:84:a4:5c:05:06: 0c:92:cb:da:0a:f5:8b:0d:54:2d:33:c4:73:e7:43:eb:ab:7f: d9:76:9d:9a:06:ec:83:6a:8c:ce:93:e9:59:1e:19:7a:23:96: d5:6e:32:39:12:74:45:b4:58:3d:36:44:79:8c:c6:24:21:9c: d9:a7:42:be:a6:b3:56:93:1b:b5:0e:22:c3:c6:04:bd:e7:f8: ea:7a:cc:80:2f:5c:a2:d1:ff:8d:cf:35:66:33:81:8f:7f:b4: d0:57:d3:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0k3GgU/N5gfJnJI795BTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4NjMzNTRhMTExYWY2ZDVlMWFkMTBkYTM4YWQ4MTQ0YjZi ZTg2OGUwHhcNMjUxMjA2MDQwMTIyWhcNMjUxMjA3MDQwMTIyWjAzMTEwLwYDVQQD Eyg2NzU2NTJiMmExMDkzYjZkZjMxYTYwYmYyMTU0ZjVjNWE2MmU1YThhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAteCf8nPMBpWoSDSoFH0vS4tDn+FI 9nv8VXXiv2c457TY1GwKA0JpOtx6WEHrK1snduaLm5IJ5hAQqa/bUC5xDMb57DWW a1BzqIZB4CgcFySpBtMlVV/PkQlrSlC124woDW33ahh9TwD2VANbXEVBksQbE/+H prTpXcX5ll8XoxGJS0SsVNVTjGjd38Ale2FvYKQ4jSdWlEgZQdRqCJkD58oYSyeP ggj3BXPkFQxlyNpPNL8e/3AFfcbHp6sVOeqpNiDgeO5dHUms041wXVWpQ1lnwvbD KmfF7s34DJ/O/P4usk9FIKLIaEtS7u/2bhYSDwDro9ErYvnDsf0DcQLgrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGdWUrKhCTtt8xpgvyFU9cWmLlqKMB8GA1UdIwQY MBaAFJhjNUoRGvbV4a0Q2jitgUS2voaOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUdNMVNoRWE5dFhoclJEYU9LMkJSTGEtaG80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9iZWE4NDctYTc4My00ODlkLWFlNGIt NTNmNTc1MDRlZjM1LzEvbUdNMVNoRWE5dFhoclJEYU9LMkJSTGEtaG80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS9iZWE4NDctYTc4My00ODlkLWFlNGItNTNmNTc1MDRlZjM1 LzEvbUdNMVNoRWE5dFhoclJEYU9LMkJSTGEtaG80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPq/icr/b tld0158RYDJZX2NDWG3XXFUAZh67RkvvOWsOhImXMk6AwRUrK3nFCoCVNxY2JcV3 qTYOo9FZ6BFzt+vThh3XZdQyL3E+PHVaym1AiuQe8oLs/bXxMYlLbgH8EYilHhdP o3CC86lYwisXTnLZMxm5ibvBWBd8L8LM7NFio4YzODoOEZ2XvgZ6JUGM4pQHQjfE Iy+9EnvX34SkXAUGDJLL2gr1iw1ULTPEc+dD66t/2Xadmgbsg2qMzpPpWR4ZeiOW 1W4yORJ0RbRYPTZEeYzGJCGc2adCvqazVpMbtQ4iw8YEvef46nrMgC9cotH/jc81 ZjOBj3+00FfTUg== -----END CERTIFICATE-----Generated at Sat Dec 6 14:26:16 2025 by rpki-client