This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/0f2682-9878-416b-965c-40aac6396777/1/mjgMVcRhF_nQ-fifiF_YrFhMcuc.mft File: mjgMVcRhF_nQ-fifiF_YrFhMcuc.mft (raw, json) Hash identifier: WLdu8zndNKR4eaM35YWyiExTfHhhGsKMmKvzx6NGUbM= Subject key identifier: 16:7B:34:16:D8:CD:B6:4E:C0:77:83:EC:3F:06:43:50:B9:07:AA:05 Authority key identifier: 9A:38:0C:55:C4:61:17:F9:D0:F9:F8:9F:88:5F:D8:AC:58:4C:72:E7 Certificate issuer: /CN=9a380c55c46117f9d0f9f89f885fd8ac584c72e7 Certificate serial: 019AF3BFE305F04594AFB3360B741407EEBA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mjgMVcRhF_nQ-fifiF_YrFhMcuc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/0f2682-9878-416b-965c-40aac6396777/1/mjgMVcRhF_nQ-fifiF_YrFhMcuc.mft Manifest number: 0686 Signing time: Sat 06 Dec 2025 13:00:30 +0000 Manifest this update: Sat 06 Dec 2025 13:00:30 +0000 Manifest next update: Sun 07 Dec 2025 13:00:30 +0000 Files and hashes: 1: 0Xa-Nei_d95pLvklAjjCcq4wB50.roa (hash: IPQHZLb7lkBMMEnjRg8Zyo+jCG1PIyAJca8gIl7Nyqw=) 2: mjgMVcRhF_nQ-fifiF_YrFhMcuc.crl (hash: C1GpMeDd5qWpWPsjVGiOFTx0vx7rcg9KER5b7Bhhh4g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/0f2682-9878-416b-965c-40aac6396777/1/mjgMVcRhF_nQ-fifiF_YrFhMcuc.crl rsync://rpki.ripe.net/repository/DEFAULT/31/0f2682-9878-416b-965c-40aac6396777/1/mjgMVcRhF_nQ-fifiF_YrFhMcuc.mft rsync://rpki.ripe.net/repository/DEFAULT/mjgMVcRhF_nQ-fifiF_YrFhMcuc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:bf:e3:05:f0:45:94:af:b3:36:0b:74:14:07:ee:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a380c55c46117f9d0f9f89f885fd8ac584c72e7 Validity Not Before: Dec 6 13:00:30 2025 GMT Not After : Dec 7 13:00:30 2025 GMT Subject: CN=167b3416d8cdb64ec07783ec3f064350b907aa05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c1:14:08:c5:1f:d1:71:38:2e:b1:9a:0c:e2: 94:79:83:c0:b2:a4:6c:ab:94:21:72:80:25:2b:48: 57:c8:83:39:86:13:c9:d5:31:fe:81:18:19:88:95: 91:2c:ee:59:9f:67:55:4a:22:eb:21:82:4c:ad:3d: 43:07:89:a2:7e:3b:de:6e:de:51:9d:9e:68:32:ff: c3:3e:cd:49:c6:e7:68:47:4d:92:96:57:60:d0:9c: 4f:4d:4f:eb:a2:99:f4:79:40:43:c6:f5:97:76:19: d3:8f:0b:7a:29:ae:18:f4:0c:f7:2f:83:83:32:0b: 16:9b:85:fe:50:07:a8:71:9b:3c:0c:d8:d7:e0:a6: d0:3f:5a:18:0c:ad:aa:7b:b5:46:18:9d:90:5a:89: 21:6c:53:13:e9:8a:39:f6:00:e6:cb:46:d7:42:8b: b1:2e:45:bb:9a:5d:33:3e:ad:b0:4c:9c:f8:f8:48: 36:b9:28:66:dc:2c:c5:61:ac:33:e8:b7:0b:b3:d7: 38:8f:c6:42:c8:66:05:63:13:d2:d2:e2:04:fc:0f: 64:a2:ab:e8:2a:97:87:d0:23:e3:1b:51:41:c2:e2: 08:36:ac:c8:07:90:ce:92:dc:47:71:68:de:4c:82: 5f:c7:bb:54:9a:76:15:2d:0c:27:63:c2:6c:93:7a: ae:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:7B:34:16:D8:CD:B6:4E:C0:77:83:EC:3F:06:43:50:B9:07:AA:05 X509v3 Authority Key Identifier: keyid:9A:38:0C:55:C4:61:17:F9:D0:F9:F8:9F:88:5F:D8:AC:58:4C:72:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mjgMVcRhF_nQ-fifiF_YrFhMcuc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0f2682-9878-416b-965c-40aac6396777/1/mjgMVcRhF_nQ-fifiF_YrFhMcuc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0f2682-9878-416b-965c-40aac6396777/1/mjgMVcRhF_nQ-fifiF_YrFhMcuc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:27:42:eb:76:bd:c6:b0:81:de:ec:5c:a7:a9:68:a6:2d:36: e5:fe:67:71:5f:93:dd:3b:60:f8:ee:7d:2e:6e:af:f2:d2:c3: 90:55:d6:92:b8:d0:0c:3a:80:83:0c:53:67:21:68:d4:4c:73: 6c:dc:63:82:34:0d:60:25:f8:86:54:ca:30:68:87:de:a0:3a: 7f:4a:82:42:c0:4b:35:0c:a8:40:a8:53:32:79:1b:46:35:76: 30:3d:f6:da:77:2e:26:d0:cb:a2:e6:7c:1f:dd:6d:5a:41:cc: c7:67:8e:be:cd:44:46:08:ab:d4:78:5c:79:ac:ce:d9:6f:a9: 71:e9:47:db:d3:7d:b6:a7:0c:37:db:55:a3:4a:cb:16:8b:d6: db:c9:fd:17:92:07:47:e4:df:36:f6:fd:20:77:31:88:69:fe: 48:14:6d:25:0c:3a:7a:f3:c9:97:07:d6:af:af:31:e1:b4:5c: 42:3b:6d:38:28:8a:63:0e:32:32:86:f3:4f:31:77:6c:d7:22: 1a:90:1e:62:8c:87:1a:da:f5:b9:f1:cd:ae:ca:f2:5a:9a:ca: 76:69:93:bb:9b:03:19:0d:58:86:da:9c:75:de:85:04:59:fe: 32:4b:47:7a:b1:58:75:af:6e:3e:df:be:e8:cf:a0:04:1b:83: 7a:9a:42:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzv+MF8EWUr7M2C3QUB+66MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhMzgwYzU1YzQ2MTE3ZjlkMGY5Zjg5Zjg4NWZkOGFjNTg0 YzcyZTcwHhcNMjUxMjA2MTMwMDMwWhcNMjUxMjA3MTMwMDMwWjAzMTEwLwYDVQQD EygxNjdiMzQxNmQ4Y2RiNjRlYzA3NzgzZWMzZjA2NDM1MGI5MDdhYTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8EUCMUf0XE4LrGaDOKUeYPAsqRs q5QhcoAlK0hXyIM5hhPJ1TH+gRgZiJWRLO5Zn2dVSiLrIYJMrT1DB4mifjvebt5R nZ5oMv/DPs1JxudoR02Slldg0JxPTU/ropn0eUBDxvWXdhnTjwt6Ka4Y9Az3L4OD MgsWm4X+UAeocZs8DNjX4KbQP1oYDK2qe7VGGJ2QWokhbFMT6Yo59gDmy0bXQoux LkW7ml0zPq2wTJz4+Eg2uShm3CzFYawz6LcLs9c4j8ZCyGYFYxPS0uIE/A9koqvo KpeH0CPjG1FBwuIINqzIB5DOktxHcWjeTIJfx7tUmnYVLQwnY8Jsk3qubQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBZ7NBbYzbZOwHeD7D8GQ1C5B6oFMB8GA1UdIwQY MBaAFJo4DFXEYRf50Pn4n4hf2KxYTHLnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWpnTVZjUmhGX25RLWZpZmlGX1lyRmhNY3VjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8wZjI2ODItOTg3OC00MTZiLTk2NWMt NDBhYWM2Mzk2Nzc3LzEvbWpnTVZjUmhGX25RLWZpZmlGX1lyRmhNY3VjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS8wZjI2ODItOTg3OC00MTZiLTk2NWMtNDBhYWM2Mzk2Nzc3 LzEvbWpnTVZjUmhGX25RLWZpZmlGX1lyRmhNY3VjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoidC63a9 xrCB3uxcp6lopi025f5ncV+T3Ttg+O59Lm6v8tLDkFXWkrjQDDqAgwxTZyFo1Exz bNxjgjQNYCX4hlTKMGiH3qA6f0qCQsBLNQyoQKhTMnkbRjV2MD322ncuJtDLouZ8 H91tWkHMx2eOvs1ERgir1HhceazO2W+pcelH29N9tqcMN9tVo0rLFovW28n9F5IH R+TfNvb9IHcxiGn+SBRtJQw6evPJlwfWr68x4bRcQjttOCiKYw4yMobzTzF3bNci GpAeYoyHGtr1ufHNrsryWprKdmmTu5sDGQ1Yhtqcdd6FBFn+MktHerFYda9uPt++ 6M+gBBuDeppCPA== -----END CERTIFICATE-----Generated at Sat Dec 6 20:26:55 2025 by rpki-client