This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.mft File: mgheBvLiouMEJW-IE1_xPectBzY.mft (raw, json) Hash identifier: +PLBlGzR76StkRqL5QjlY8kuOcFn1VpGO1kBazvSRhU= Subject key identifier: 0D:A8:42:1C:38:E6:2F:19:E8:B9:8D:4E:19:CC:B9:02:90:1C:BB:57 Authority key identifier: 9A:08:5E:06:F2:E2:A2:E3:04:25:6F:88:13:5F:F1:3D:E7:2D:07:36 Certificate issuer: /CN=9a085e06f2e2a2e304256f88135ff13de72d0736 Certificate serial: 019AF1640F9F824C80D67B51831292ECD129 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mgheBvLiouMEJW-IE1_xPectBzY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.mft Manifest number: 0E3F Signing time: Sat 06 Dec 2025 02:00:57 +0000 Manifest this update: Sat 06 Dec 2025 02:00:57 +0000 Manifest next update: Sun 07 Dec 2025 02:00:57 +0000 Files and hashes: 1: 9Dg6tOo6O44yr7jeWe1ba9VjCFs.roa (hash: 26YW4jX+yyct0IS6KpfO0MNuSdKZWiF48vsQnmBErMk=) 2: mgheBvLiouMEJW-IE1_xPectBzY.crl (hash: g9fPfNQfXcMDlDryf86t0+OqvqyX48pW+Nav7iVYzjM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.crl rsync://rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.mft rsync://rpki.ripe.net/repository/DEFAULT/mgheBvLiouMEJW-IE1_xPectBzY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:0f:9f:82:4c:80:d6:7b:51:83:12:92:ec:d1:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a085e06f2e2a2e304256f88135ff13de72d0736 Validity Not Before: Dec 6 02:00:57 2025 GMT Not After : Dec 7 02:00:57 2025 GMT Subject: CN=0da8421c38e62f19e8b98d4e19ccb902901cbb57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:2f:20:19:3c:a8:49:b9:fb:d0:d0:ec:75:5b: 4f:e4:b6:9e:2a:d8:30:3b:dd:2a:cd:cc:94:e5:c1: 87:6c:ec:e3:5a:28:ab:3c:f5:02:8c:3d:41:32:dd: d3:49:90:3a:06:ac:f1:89:37:9b:62:1b:17:85:54: ef:53:a7:a8:bd:2c:fc:39:34:64:6b:b3:37:8f:a2: 42:a4:ea:b5:3a:66:c4:66:74:ec:60:c6:3f:80:b3: 92:65:82:2a:35:7d:92:14:44:92:cf:84:29:04:ae: f4:04:b8:bb:d2:b0:40:34:a7:dd:b7:8a:fa:c6:40: 35:18:8b:0a:b5:31:e7:f0:b4:d7:ac:29:59:17:a2: 1e:53:5f:05:df:af:50:09:20:ab:7a:1a:3d:e1:d7: 44:7c:f2:0b:ee:ab:28:24:ea:87:77:23:60:bf:81: 08:08:57:3b:75:13:3e:48:f5:fd:7c:2a:2b:c0:86: a0:43:ed:38:f7:fa:34:fa:0e:52:6a:84:3e:e1:21: 1d:32:a2:bf:8f:c8:88:98:48:23:a7:05:04:96:32: 26:ec:b9:a0:4b:72:ce:04:87:69:b5:7a:8b:bf:48: f5:a7:d8:81:2c:c4:ce:30:3c:7c:54:19:e7:30:7b: 1a:82:c5:1c:a3:89:b5:cd:8f:2a:4f:a4:5d:68:ac: 1d:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:A8:42:1C:38:E6:2F:19:E8:B9:8D:4E:19:CC:B9:02:90:1C:BB:57 X509v3 Authority Key Identifier: keyid:9A:08:5E:06:F2:E2:A2:E3:04:25:6F:88:13:5F:F1:3D:E7:2D:07:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mgheBvLiouMEJW-IE1_xPectBzY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:37:83:d0:ca:d1:37:ae:ac:41:96:cb:7d:8a:bc:1b:0e:87: 6d:b4:5e:1b:bf:b3:ac:bc:da:f5:58:4d:22:fc:39:34:c6:bf: 8a:f2:3e:d1:7f:ef:cd:08:f0:b3:a2:68:ca:ce:ed:ba:de:e3: 48:76:47:42:1d:a5:58:ee:a8:b3:90:03:7a:fa:31:f5:af:04: b2:d8:82:ce:9a:c9:34:23:ce:9d:47:9b:e6:4a:fe:ef:39:fc: 1e:a0:a5:3e:ff:e4:94:db:38:d1:c7:cb:d4:b8:7e:8d:76:d4: 85:ab:c2:e6:33:ee:75:d7:d7:36:19:d7:76:7e:15:b6:0a:bc: b6:5a:7a:f4:aa:84:28:e3:c1:8c:0d:37:2e:96:dc:1f:6a:d2: c3:21:8a:03:32:1d:01:da:50:22:12:64:7a:b0:03:8b:29:2f: 2d:bc:9e:b8:31:10:9a:f0:81:e0:54:01:c8:45:e6:10:88:04: 18:8d:13:f3:4c:d8:e1:7f:91:04:05:74:31:20:33:da:b7:07: c6:04:4f:05:47:a5:d4:a9:e8:6e:69:89:e0:f1:da:70:6f:5c: f9:35:e1:c2:37:96:5e:95:e9:ab:5a:a6:c1:3e:e7:1b:3f:7e: 76:e2:66:2c:a4:1b:48:24:ea:93:a1:71:e2:8b:34:05:eb:bd: 58:37:a0:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZA+fgkyA1ntRgxKS7NEpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhMDg1ZTA2ZjJlMmEyZTMwNDI1NmY4ODEzNWZmMTNkZTcy ZDA3MzYwHhcNMjUxMjA2MDIwMDU3WhcNMjUxMjA3MDIwMDU3WjAzMTEwLwYDVQQD EygwZGE4NDIxYzM4ZTYyZjE5ZThiOThkNGUxOWNjYjkwMjkwMWNiYjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnS8gGTyoSbn70NDsdVtP5LaeKtgw O90qzcyU5cGHbOzjWiirPPUCjD1BMt3TSZA6BqzxiTebYhsXhVTvU6eovSz8OTRk a7M3j6JCpOq1OmbEZnTsYMY/gLOSZYIqNX2SFESSz4QpBK70BLi70rBANKfdt4r6 xkA1GIsKtTHn8LTXrClZF6IeU18F369QCSCreho94ddEfPIL7qsoJOqHdyNgv4EI CFc7dRM+SPX9fCorwIagQ+049/o0+g5SaoQ+4SEdMqK/j8iImEgjpwUEljIm7Lmg S3LOBIdptXqLv0j1p9iBLMTOMDx8VBnnMHsagsUco4m1zY8qT6RdaKwdwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA2oQhw45i8Z6LmNThnMuQKQHLtXMB8GA1UdIwQY MBaAFJoIXgby4qLjBCVviBNf8T3nLQc2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWdoZUJ2TGlvdU1FSlctSUUxX3hQZWN0QnpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8xMGZjZTAtZWU0Ny00ZWQ0LWEwM2Qt MGQ0NTQyOTIwYmNiLzEvbWdoZUJ2TGlvdU1FSlctSUUxX3hQZWN0QnpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC8xMGZjZTAtZWU0Ny00ZWQ0LWEwM2QtMGQ0NTQyOTIwYmNi LzEvbWdoZUJ2TGlvdU1FSlctSUUxX3hQZWN0QnpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPTeD0MrR N66sQZbLfYq8Gw6HbbReG7+zrLza9VhNIvw5NMa/ivI+0X/vzQjws6Joys7tut7j SHZHQh2lWO6os5ADevox9a8EstiCzprJNCPOnUeb5kr+7zn8HqClPv/klNs40cfL 1Lh+jXbUhavC5jPuddfXNhnXdn4Vtgq8tlp69KqEKOPBjA03LpbcH2rSwyGKAzId AdpQIhJkerADiykvLbyeuDEQmvCB4FQByEXmEIgEGI0T80zY4X+RBAV0MSAz2rcH xgRPBUel1KnobmmJ4PHacG9c+TXhwjeWXpXpq1qmwT7nGz9+duJmLKQbSCTqk6Fx 4os0Beu9WDegZg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:11:24 2025 by rpki-client