This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/MGtGjMMe86PQgayPArJx4xR1Wb8.mft File: MGtGjMMe86PQgayPArJx4xR1Wb8.mft (raw, json) Hash identifier: qLwj1ftNUqrvayo+0PJVlI4zQ5hhU8l+lle7YctCuec= Subject key identifier: 2B:40:91:F7:95:01:9E:93:1F:59:FA:B8:4B:7A:16:F9:78:B1:3A:D8 Authority key identifier: 30:6B:46:8C:C3:1E:F3:A3:D0:81:AC:8F:02:B2:71:E3:14:75:59:BF Certificate issuer: /CN=306b468cc31ef3a3d081ac8f02b271e3147559bf Certificate serial: 019AF1D1A207CED7E07A8CE575F8A057484B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGtGjMMe86PQgayPArJx4xR1Wb8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/MGtGjMMe86PQgayPArJx4xR1Wb8.mft Manifest number: 0C1D Signing time: Sat 06 Dec 2025 04:00:38 +0000 Manifest this update: Sat 06 Dec 2025 04:00:38 +0000 Manifest next update: Sun 07 Dec 2025 04:00:38 +0000 Files and hashes: 1: MGtGjMMe86PQgayPArJx4xR1Wb8.crl (hash: GVvwVkQX6rZTeRHDwNnUINdI6TnSiQ0lxeQNY2+E5Z4=) 2: zCf3OK6AbL-GLEVW2m2fiyVZR2o.roa (hash: T9wprypvgjd5UjKaL97Qh7s/fP7I922vE5XInqdd1G4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/MGtGjMMe86PQgayPArJx4xR1Wb8.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/MGtGjMMe86PQgayPArJx4xR1Wb8.mft rsync://rpki.ripe.net/repository/DEFAULT/MGtGjMMe86PQgayPArJx4xR1Wb8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:a2:07:ce:d7:e0:7a:8c:e5:75:f8:a0:57:48:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=306b468cc31ef3a3d081ac8f02b271e3147559bf Validity Not Before: Dec 6 04:00:38 2025 GMT Not After : Dec 7 04:00:38 2025 GMT Subject: CN=2b4091f795019e931f59fab84b7a16f978b13ad8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:3d:0e:26:21:cc:3e:1f:f0:2f:bc:2c:27:7d: fb:6c:98:13:d2:9e:b4:53:64:36:d7:96:7e:a4:da: 68:5e:5c:6d:23:19:38:e9:d9:06:95:f4:ca:98:9a: 38:33:6c:2d:8d:03:3d:97:13:37:97:cf:36:2c:cc: 08:2f:e7:ec:0c:85:de:e1:4e:65:74:7d:11:7a:c6: 3a:30:4b:cc:e8:2f:e4:02:99:7f:a8:da:5d:3c:0c: ff:39:73:60:14:94:30:0a:5b:4e:92:7c:d8:54:03: e4:dc:54:6e:e6:9c:dd:0d:5a:d6:2e:31:ca:b8:42: 3d:30:82:a1:ec:25:6b:f8:b1:65:c0:96:c0:a3:c6: 57:e3:b0:de:8e:33:11:e2:1c:1f:12:e7:39:6c:be: 70:ea:97:4b:3f:bc:27:b0:b7:d7:a5:17:ec:95:80: 99:03:94:3e:5d:ae:eb:79:3b:a2:16:26:77:64:db: 1c:42:88:bd:c4:be:c0:a0:db:83:30:5b:3d:e8:19: 5d:ae:89:7a:49:0d:79:55:ca:58:89:63:c0:7b:46: 9c:f7:a0:0e:6c:01:da:5f:db:bc:15:80:f2:2d:54: c9:b4:ca:62:10:ff:c5:c1:e1:b4:85:ab:cc:03:17: ec:ef:a4:2f:10:22:14:07:ad:32:90:2d:e2:c4:25: 10:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:40:91:F7:95:01:9E:93:1F:59:FA:B8:4B:7A:16:F9:78:B1:3A:D8 X509v3 Authority Key Identifier: keyid:30:6B:46:8C:C3:1E:F3:A3:D0:81:AC:8F:02:B2:71:E3:14:75:59:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGtGjMMe86PQgayPArJx4xR1Wb8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/MGtGjMMe86PQgayPArJx4xR1Wb8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/MGtGjMMe86PQgayPArJx4xR1Wb8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:bb:49:5b:70:c1:f2:d8:79:f4:53:84:76:b5:7a:86:05:e1: 61:87:35:c4:e6:30:f4:f1:c8:ce:82:8c:ae:86:8b:16:2e:74: 7a:7c:80:3a:8a:38:12:d4:7a:a8:92:75:65:13:cc:34:12:dc: 35:54:eb:e5:20:4a:94:e4:e6:57:2f:f3:6c:42:d3:e1:8b:84: ea:9f:2d:e6:82:9b:58:4a:06:08:c7:ad:e6:77:5d:08:ff:0a: 80:35:77:5a:1f:cb:94:22:90:a6:7f:90:10:67:22:3c:2e:47: 04:0b:69:d1:7a:2f:ad:81:5f:db:fe:2f:1c:1a:b5:dd:96:5c: 8e:4f:e8:8e:51:b3:30:63:54:0f:43:b1:c1:99:83:b8:f7:d7: 74:ae:8c:77:3b:d3:44:ea:f6:fe:e9:11:af:ba:55:6f:c1:7c: 86:a7:bb:79:ec:b0:1a:4e:7d:66:58:e5:13:b5:79:21:42:df: 63:82:4e:a7:1e:c2:a6:be:0c:d9:7b:d4:a7:e0:e3:34:87:4c: f0:ef:32:4c:67:29:2c:81:3e:2c:0c:d0:f8:57:c4:2f:00:4d: e9:ac:62:9e:f5:7e:bd:e7:0a:ca:40:fb:9b:b2:01:02:c0:f0: df:ff:a1:e8:9d:bb:aa:11:aa:83:86:c2:9e:3f:39:d7:16:33: 02:7b:5d:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0aIHztfgeozldfigV0hLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwNmI0NjhjYzMxZWYzYTNkMDgxYWM4ZjAyYjI3MWUzMTQ3 NTU5YmYwHhcNMjUxMjA2MDQwMDM4WhcNMjUxMjA3MDQwMDM4WjAzMTEwLwYDVQQD EygyYjQwOTFmNzk1MDE5ZTkzMWY1OWZhYjg0YjdhMTZmOTc4YjEzYWQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsj0OJiHMPh/wL7wsJ337bJgT0p60 U2Q215Z+pNpoXlxtIxk46dkGlfTKmJo4M2wtjQM9lxM3l882LMwIL+fsDIXe4U5l dH0ResY6MEvM6C/kApl/qNpdPAz/OXNgFJQwCltOknzYVAPk3FRu5pzdDVrWLjHK uEI9MIKh7CVr+LFlwJbAo8ZX47DejjMR4hwfEuc5bL5w6pdLP7wnsLfXpRfslYCZ A5Q+Xa7reTuiFiZ3ZNscQoi9xL7AoNuDMFs96Bldrol6SQ15VcpYiWPAe0ac96AO bAHaX9u8FYDyLVTJtMpiEP/FweG0havMAxfs76QvECIUB60ykC3ixCUQDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCtAkfeVAZ6TH1n6uEt6Fvl4sTrYMB8GA1UdIwQY MBaAFDBrRozDHvOj0IGsjwKyceMUdVm/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUd0R2pNTWU4NlBRZ2F5UEFySng0eFIxV2I4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC83ZTRlYTgtODk1MC00MTgzLWFiYzAt MzM4Mjc5NDA0OWMyLzEvTUd0R2pNTWU4NlBRZ2F5UEFySng0eFIxV2I4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC83ZTRlYTgtODk1MC00MTgzLWFiYzAtMzM4Mjc5NDA0OWMy LzEvTUd0R2pNTWU4NlBRZ2F5UEFySng0eFIxV2I4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJLtJW3DB 8th59FOEdrV6hgXhYYc1xOYw9PHIzoKMroaLFi50enyAOoo4EtR6qJJ1ZRPMNBLc NVTr5SBKlOTmVy/zbELT4YuE6p8t5oKbWEoGCMet5nddCP8KgDV3Wh/LlCKQpn+Q EGciPC5HBAtp0XovrYFf2/4vHBq13ZZcjk/ojlGzMGNUD0OxwZmDuPfXdK6MdzvT ROr2/ukRr7pVb8F8hqe7eeywGk59ZljlE7V5IULfY4JOpx7Cpr4M2XvUp+DjNIdM 8O8yTGcpLIE+LAzQ+FfELwBN6axinvV+vecKykD7m7IBAsDw3/+h6J27qhGqg4bC nj851xYzAntdUg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:08:47 2025 by rpki-client