This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/5bf797-bc55-48c1-9e92-992825cd3214/1/MgTAPDbIBtaH6D6o0nIM7ru9w0M.mft File: MgTAPDbIBtaH6D6o0nIM7ru9w0M.mft (raw, json) Hash identifier: LqHsnuJnxwZBXRf3Hbnc1ndLM0gluahC42EjHPj2KQk= Subject key identifier: 43:8E:8A:5B:AD:0B:D5:5F:1B:B9:C6:D9:2F:4C:BE:7F:54:A6:37:88 Authority key identifier: 32:04:C0:3C:36:C8:06:D6:87:E8:3E:A8:D2:72:0C:EE:BB:BD:C3:43 Certificate issuer: /CN=3204c03c36c806d687e83ea8d2720ceebbbdc343 Certificate serial: 019AF50B935D57BC35233C0929F1B2DB762E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MgTAPDbIBtaH6D6o0nIM7ru9w0M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/5bf797-bc55-48c1-9e92-992825cd3214/1/MgTAPDbIBtaH6D6o0nIM7ru9w0M.mft Manifest number: 0746 Signing time: Sat 06 Dec 2025 19:02:47 +0000 Manifest this update: Sat 06 Dec 2025 19:02:47 +0000 Manifest next update: Sun 07 Dec 2025 19:02:47 +0000 Files and hashes: 1: 4iEprq9S0niaPUM7nGF34QiTqwo.roa (hash: f7Epr5pWf6vu+WKqHqf6izv8485TY6ZobKvsLuSbPr4=) 2: MgTAPDbIBtaH6D6o0nIM7ru9w0M.crl (hash: duP8Fo8DsvTG7XCIMlcxXS0AzgBysSWfblzZ3Fh+Jzg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/5bf797-bc55-48c1-9e92-992825cd3214/1/MgTAPDbIBtaH6D6o0nIM7ru9w0M.crl rsync://rpki.ripe.net/repository/DEFAULT/47/5bf797-bc55-48c1-9e92-992825cd3214/1/MgTAPDbIBtaH6D6o0nIM7ru9w0M.mft rsync://rpki.ripe.net/repository/DEFAULT/MgTAPDbIBtaH6D6o0nIM7ru9w0M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:93:5d:57:bc:35:23:3c:09:29:f1:b2:db:76:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3204c03c36c806d687e83ea8d2720ceebbbdc343 Validity Not Before: Dec 6 19:02:47 2025 GMT Not After : Dec 7 19:02:47 2025 GMT Subject: CN=438e8a5bad0bd55f1bb9c6d92f4cbe7f54a63788 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a9:05:1e:a5:bd:6b:ee:b8:1b:9a:2d:98:c0: 0e:1d:63:7f:5b:08:f5:82:bc:b7:ba:67:96:33:3a: 95:2b:ef:6b:b8:51:fb:8e:f1:7d:07:30:ac:f2:cf: 89:81:cb:95:75:6c:6c:ec:79:3a:ad:e0:0e:1a:a6: cc:aa:3a:d1:04:56:12:cd:6f:bb:f7:4e:02:cb:2e: 5f:f1:c2:f8:46:4b:7b:6a:57:fb:7f:07:27:9d:32: 37:ca:b0:bd:65:a6:ee:d1:b1:28:07:cc:1e:a1:ea: 45:21:3f:64:12:8f:3f:8f:25:6d:3a:39:31:1d:e0: 19:96:c4:f2:93:4a:42:15:d1:aa:5b:78:16:c4:96: 29:1a:cb:60:8d:63:2a:df:b9:b9:55:f4:4d:67:44: 59:32:f4:54:8d:3a:0c:2e:09:77:2b:b1:9f:e0:93: 9b:1e:d0:30:ec:2d:f0:fb:b3:37:3e:92:bd:28:48: 4d:75:de:8c:c9:4f:0c:6c:c6:50:8c:41:46:e9:0a: 1a:79:c5:41:39:5d:a1:62:60:0c:96:42:78:47:c5: 0c:74:86:66:f6:15:32:11:a4:42:a9:b8:52:a7:b8: a8:35:ab:d3:cc:98:5f:33:7e:23:79:75:cf:38:4d: f2:1a:34:f0:e4:48:5e:1c:a2:bb:33:91:e2:52:a5: 38:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:8E:8A:5B:AD:0B:D5:5F:1B:B9:C6:D9:2F:4C:BE:7F:54:A6:37:88 X509v3 Authority Key Identifier: keyid:32:04:C0:3C:36:C8:06:D6:87:E8:3E:A8:D2:72:0C:EE:BB:BD:C3:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MgTAPDbIBtaH6D6o0nIM7ru9w0M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/5bf797-bc55-48c1-9e92-992825cd3214/1/MgTAPDbIBtaH6D6o0nIM7ru9w0M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/5bf797-bc55-48c1-9e92-992825cd3214/1/MgTAPDbIBtaH6D6o0nIM7ru9w0M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:1c:7c:cd:a9:e1:1e:21:e4:ea:2c:f0:c4:35:ce:67:47:69: ea:8d:0e:26:e0:bf:9c:3a:e1:e4:22:77:32:f0:36:c0:59:e3: c9:47:0f:14:53:bc:97:55:e5:38:12:d0:0f:b5:31:a1:9f:37: b4:28:c0:47:bf:64:36:10:c7:fa:5e:23:f2:6c:5d:2e:51:50: 93:fe:01:da:e2:98:db:ad:23:9a:2b:0c:21:11:ec:a1:11:85: 71:b1:32:8e:d6:91:87:ba:7c:27:45:a9:9c:8f:80:52:27:cf: fc:35:5b:dd:a2:0e:a4:ae:6f:99:76:d8:a7:e5:89:e6:6a:48: a4:c6:27:b8:65:ac:37:c0:45:96:2f:23:57:f8:e9:60:e2:e1: 6d:87:0f:fb:d1:a7:cd:cb:01:dd:12:90:15:ea:99:2f:07:f8: 3e:b8:41:87:c0:ab:17:02:01:e4:6b:90:eb:fd:96:a1:b6:66: 7c:12:ef:54:28:e4:e7:8b:6c:5d:29:5a:e3:9a:4b:cc:eb:5b: 63:3d:56:89:90:3a:21:b1:93:bc:c0:41:91:c7:40:87:53:2a: c1:f5:15:40:ad:44:0e:2e:97:5c:87:e8:2a:73:04:2c:14:e2: 76:52:9c:0a:bc:c6:37:1e:06:ac:de:52:23:50:b2:41:a3:ff: 99:ef:af:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1C5NdV7w1IzwJKfGy23YuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyMDRjMDNjMzZjODA2ZDY4N2U4M2VhOGQyNzIwY2VlYmJi ZGMzNDMwHhcNMjUxMjA2MTkwMjQ3WhcNMjUxMjA3MTkwMjQ3WjAzMTEwLwYDVQQD Eyg0MzhlOGE1YmFkMGJkNTVmMWJiOWM2ZDkyZjRjYmU3ZjU0YTYzNzg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6kFHqW9a+64G5otmMAOHWN/Wwj1 gry3umeWMzqVK+9ruFH7jvF9BzCs8s+JgcuVdWxs7Hk6reAOGqbMqjrRBFYSzW+7 904Cyy5f8cL4Rkt7alf7fwcnnTI3yrC9Zabu0bEoB8weoepFIT9kEo8/jyVtOjkx HeAZlsTyk0pCFdGqW3gWxJYpGstgjWMq37m5VfRNZ0RZMvRUjToMLgl3K7Gf4JOb HtAw7C3w+7M3PpK9KEhNdd6MyU8MbMZQjEFG6QoaecVBOV2hYmAMlkJ4R8UMdIZm 9hUyEaRCqbhSp7ioNavTzJhfM34jeXXPOE3yGjTw5EheHKK7M5HiUqU4XwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEOOilutC9VfG7nG2S9Mvn9UpjeIMB8GA1UdIwQY MBaAFDIEwDw2yAbWh+g+qNJyDO67vcNDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWdUQVBEYklCdGFINkQ2bzBuSU03cnU5dzBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny81YmY3OTctYmM1NS00OGMxLTllOTIt OTkyODI1Y2QzMjE0LzEvTWdUQVBEYklCdGFINkQ2bzBuSU03cnU5dzBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny81YmY3OTctYmM1NS00OGMxLTllOTItOTkyODI1Y2QzMjE0 LzEvTWdUQVBEYklCdGFINkQ2bzBuSU03cnU5dzBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwBx8zanh HiHk6izwxDXOZ0dp6o0OJuC/nDrh5CJ3MvA2wFnjyUcPFFO8l1XlOBLQD7UxoZ83 tCjAR79kNhDH+l4j8mxdLlFQk/4B2uKY260jmisMIRHsoRGFcbEyjtaRh7p8J0Wp nI+AUifP/DVb3aIOpK5vmXbYp+WJ5mpIpMYnuGWsN8BFli8jV/jpYOLhbYcP+9Gn zcsB3RKQFeqZLwf4PrhBh8CrFwIB5GuQ6/2WobZmfBLvVCjk54tsXSla45pLzOtb Yz1WiZA6IbGTvMBBkcdAh1MqwfUVQK1EDi6XXIfoKnMELBTidlKcCrzGNx4GrN5S I1CyQaP/me+vNQ== -----END CERTIFICATE-----Generated at Sat Dec 6 22:41:37 2025 by rpki-client