This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/232cfd-76dc-49e9-a94d-5188ea17d9a9/1/MGavc-_zrCH_F6CVL_Nw5gykS10.mft File: MGavc-_zrCH_F6CVL_Nw5gykS10.mft (raw, json) Hash identifier: QDBfLy5RZ/JjNn0Nktlaer9f4KaQR1yEVoIkQNfJHWY= Subject key identifier: 11:54:C2:FE:6A:35:5F:5D:63:B8:1D:FA:1F:FD:A6:6A:24:47:52:7B Authority key identifier: 30:66:AF:73:EF:F3:AC:21:FF:17:A0:95:2F:F3:70:E6:0C:A4:4B:5D Certificate issuer: /CN=3066af73eff3ac21ff17a0952ff370e60ca44b5d Certificate serial: 019B3E6D9A3EC5C1BD09F91C51B14F0AAC09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGavc-_zrCH_F6CVL_Nw5gykS10.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/232cfd-76dc-49e9-a94d-5188ea17d9a9/1/MGavc-_zrCH_F6CVL_Nw5gykS10.mft Manifest number: 1788 Signing time: Sun 21 Dec 2025 01:02:08 +0000 Manifest this update: Sun 21 Dec 2025 01:02:08 +0000 Manifest next update: Mon 22 Dec 2025 01:02:08 +0000 Files and hashes: 1: MGavc-_zrCH_F6CVL_Nw5gykS10.crl (hash: U5sss/6aWm4K6vOcriX/AVMjlUvUPDg5oEfJ/RzcYfQ=) 2: iic_3MWvnXwRjdS-4rnJnbVlZdw.roa (hash: ft3o3Jhs8krX+yoAKh9srXW+5Ly/fpaA/Ux+H2kgUMA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/232cfd-76dc-49e9-a94d-5188ea17d9a9/1/MGavc-_zrCH_F6CVL_Nw5gykS10.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/232cfd-76dc-49e9-a94d-5188ea17d9a9/1/MGavc-_zrCH_F6CVL_Nw5gykS10.mft rsync://rpki.ripe.net/repository/DEFAULT/MGavc-_zrCH_F6CVL_Nw5gykS10.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6d:9a:3e:c5:c1:bd:09:f9:1c:51:b1:4f:0a:ac:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3066af73eff3ac21ff17a0952ff370e60ca44b5d Validity Not Before: Dec 21 01:02:08 2025 GMT Not After : Dec 22 01:02:08 2025 GMT Subject: CN=1154c2fe6a355f5d63b81dfa1ffda66a2447527b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:60:70:f5:19:e9:71:9e:a3:06:14:8a:0b:5a: f3:97:bc:2e:2f:84:d5:93:31:38:4b:5c:93:ae:1c: c3:f4:96:77:b3:27:3a:61:88:d8:7d:2e:e1:ba:94: 2d:7c:a7:06:5e:7d:1c:5c:fc:0c:92:c1:15:b9:e6: a5:c1:b7:1b:db:13:ec:d1:13:e4:8d:59:fb:c8:60: 21:32:e6:5b:74:d1:08:18:65:ec:96:02:ff:5b:69: 4f:5f:a0:87:5b:26:01:3b:1a:e5:89:bd:91:81:5c: 2b:fe:ea:5f:bb:aa:c5:9e:61:e7:32:e2:73:0f:51: 0c:b9:36:88:ff:eb:9e:0d:32:69:7a:71:2f:33:41: 2f:74:7c:1e:3e:fe:dc:ad:b4:53:be:82:3f:a9:3a: d7:90:14:49:f9:fb:6f:c0:e6:1d:c3:90:18:66:e0: 76:81:0f:ce:f0:ec:97:85:40:83:0b:f2:06:06:23: 6f:13:cb:cf:db:97:5b:89:21:c7:cc:31:12:06:6b: a4:7c:77:24:bb:69:48:d3:2b:de:4f:27:e6:4e:fa: 3d:7e:e5:f0:72:93:e4:69:3a:28:b6:96:73:23:7c: 97:3e:9a:19:ba:02:12:a9:4c:08:f6:36:9c:ea:65: ad:fa:51:1e:c3:e5:e3:79:ac:11:30:de:d4:96:3e: 49:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:54:C2:FE:6A:35:5F:5D:63:B8:1D:FA:1F:FD:A6:6A:24:47:52:7B X509v3 Authority Key Identifier: keyid:30:66:AF:73:EF:F3:AC:21:FF:17:A0:95:2F:F3:70:E6:0C:A4:4B:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGavc-_zrCH_F6CVL_Nw5gykS10.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/232cfd-76dc-49e9-a94d-5188ea17d9a9/1/MGavc-_zrCH_F6CVL_Nw5gykS10.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/232cfd-76dc-49e9-a94d-5188ea17d9a9/1/MGavc-_zrCH_F6CVL_Nw5gykS10.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:60:d5:c4:33:6b:0a:37:9a:d2:2e:31:d0:2f:80:ec:e3:26: dd:de:f7:56:8c:02:a6:41:97:15:e3:69:5f:dd:18:71:b0:d8: 97:21:f2:7f:73:d8:0a:2f:a0:19:7e:80:7d:a3:d6:5c:fe:3c: 92:d3:48:99:13:df:55:7e:67:07:57:ec:5e:56:dc:75:bd:47: 47:c3:dc:73:35:17:f3:b7:49:e9:27:8d:45:11:3b:8e:a3:59: 11:3b:7c:d7:17:e7:e6:5a:0c:e8:ef:c0:94:dc:b7:cf:f6:e5: 07:47:bf:55:a6:19:8c:bb:bb:d9:5c:14:3c:9a:ec:53:c2:2c: c4:86:87:c9:89:8b:c1:f7:2c:ba:db:47:f2:00:09:49:70:e5: 9d:b6:5f:51:e9:82:f5:bd:5b:63:56:05:9f:c5:4a:9e:67:56: 0c:4f:77:1a:f7:c3:d0:85:b9:b7:33:70:3f:4b:db:ad:12:98: fb:94:ea:a9:cd:3f:2a:7a:25:f8:7a:d4:6a:b2:04:2f:91:b2: fa:ed:54:d8:ab:e4:27:2f:40:55:cc:68:cc:f5:de:71:7f:23: 6a:1d:05:ca:50:c2:e6:21:a6:92:6a:49:c1:57:97:a9:cf:d1: ba:8f:e8:45:1c:a5:a5:35:d2:c2:ce:2e:32:65:59:e2:90:7f: 65:bc:a4:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bZo+xcG9CfkcUbFPCqwJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwNjZhZjczZWZmM2FjMjFmZjE3YTA5NTJmZjM3MGU2MGNh NDRiNWQwHhcNMjUxMjIxMDEwMjA4WhcNMjUxMjIyMDEwMjA4WjAzMTEwLwYDVQQD EygxMTU0YzJmZTZhMzU1ZjVkNjNiODFkZmExZmZkYTY2YTI0NDc1MjdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWBw9RnpcZ6jBhSKC1rzl7wuL4TV kzE4S1yTrhzD9JZ3syc6YYjYfS7hupQtfKcGXn0cXPwMksEVuealwbcb2xPs0RPk jVn7yGAhMuZbdNEIGGXslgL/W2lPX6CHWyYBOxrlib2RgVwr/upfu6rFnmHnMuJz D1EMuTaI/+ueDTJpenEvM0EvdHwePv7crbRTvoI/qTrXkBRJ+ftvwOYdw5AYZuB2 gQ/O8OyXhUCDC/IGBiNvE8vP25dbiSHHzDESBmukfHcku2lI0yveTyfmTvo9fuXw cpPkaTootpZzI3yXPpoZugISqUwI9jac6mWt+lEew+XjeawRMN7Ulj5JmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBFUwv5qNV9dY7gd+h/9pmokR1J7MB8GA1UdIwQY MBaAFDBmr3Pv86wh/xeglS/zcOYMpEtdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUdhdmMtX3pyQ0hfRjZDVkxfTnc1Z3lrUzEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8yMzJjZmQtNzZkYy00OWU5LWE5NGQt NTE4OGVhMTdkOWE5LzEvTUdhdmMtX3pyQ0hfRjZDVkxfTnc1Z3lrUzEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC8yMzJjZmQtNzZkYy00OWU5LWE5NGQtNTE4OGVhMTdkOWE5 LzEvTUdhdmMtX3pyQ0hfRjZDVkxfTnc1Z3lrUzEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk2DVxDNr Cjea0i4x0C+A7OMm3d73VowCpkGXFeNpX90YcbDYlyHyf3PYCi+gGX6AfaPWXP48 ktNImRPfVX5nB1fsXlbcdb1HR8PcczUX87dJ6SeNRRE7jqNZETt81xfn5loM6O/A lNy3z/blB0e/VaYZjLu72VwUPJrsU8IsxIaHyYmLwfcsuttH8gAJSXDlnbZfUemC 9b1bY1YFn8VKnmdWDE93GvfD0IW5tzNwP0vbrRKY+5Tqqc0/Knol+HrUarIEL5Gy +u1U2KvkJy9AVcxozPXecX8jah0FylDC5iGmkmpJwVeXqc/Ruo/oRRylpTXSws4u MmVZ4pB/ZbykaQ== -----END CERTIFICATE-----Generated at Sun Dec 21 07:59:30 2025 by rpki-client