This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/fb42e6-cc51-4d2b-8637-a243cbfaaef3/1/mGzlJJY15OKWTTdEk9zDeoddBTk.mft File: mGzlJJY15OKWTTdEk9zDeoddBTk.mft (raw, json) Hash identifier: qYsEjGbjIUPyOVfA29kjqVfeEw0WznHgrq5tKwCJcO0= Subject key identifier: 0C:4C:32:60:9B:14:5C:FE:F3:96:01:E1:FF:F4:4A:C3:BA:D9:FE:79 Authority key identifier: 98:6C:E5:24:96:35:E4:E2:96:4D:37:44:93:DC:C3:7A:87:5D:05:39 Certificate issuer: /CN=986ce5249635e4e2964d374493dcc37a875d0539 Certificate serial: 019AF509AB36983B78A3CB094B5BEC94B77F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGzlJJY15OKWTTdEk9zDeoddBTk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/fb42e6-cc51-4d2b-8637-a243cbfaaef3/1/mGzlJJY15OKWTTdEk9zDeoddBTk.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 19:00:42 +0000 Manifest this update: Sat 06 Dec 2025 19:00:42 +0000 Manifest next update: Sun 07 Dec 2025 19:00:42 +0000 Files and hashes: 1: I46JWrJ0wkgqhhjcXFEe1Gwyho8.roa (hash: DdJIf3u90dazdq9CZo2Xm0G5puQXvhN9Fr/LhJUcUXI=) 2: mGzlJJY15OKWTTdEk9zDeoddBTk.crl (hash: 5sPxpyIrhqWo5SewlXXkgp9wXmKfTOFnoBt8TaYuw8g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/fb42e6-cc51-4d2b-8637-a243cbfaaef3/1/mGzlJJY15OKWTTdEk9zDeoddBTk.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/fb42e6-cc51-4d2b-8637-a243cbfaaef3/1/mGzlJJY15OKWTTdEk9zDeoddBTk.mft rsync://rpki.ripe.net/repository/DEFAULT/mGzlJJY15OKWTTdEk9zDeoddBTk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:ab:36:98:3b:78:a3:cb:09:4b:5b:ec:94:b7:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=986ce5249635e4e2964d374493dcc37a875d0539 Validity Not Before: Dec 6 19:00:42 2025 GMT Not After : Dec 7 19:00:42 2025 GMT Subject: CN=0c4c32609b145cfef39601e1fff44ac3bad9fe79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:2a:fa:4f:d1:44:51:3d:41:a0:6b:17:5d:55: d9:e7:ec:fe:24:08:94:8f:ba:37:e2:f4:07:e8:ec: ae:44:4e:6d:db:90:5b:6b:35:e3:b8:af:78:59:b8: b6:11:5b:60:ec:b9:63:07:35:9d:d0:e9:b7:bc:dd: b3:c0:c7:7b:2e:7d:e8:dd:54:1b:b1:35:e1:fb:61: b7:d6:08:35:49:d4:de:17:49:a2:62:59:d4:eb:8d: 7c:ee:70:cb:2f:ad:7e:5d:19:9d:54:ed:cb:04:fc: 61:55:a0:df:c6:6a:d8:da:05:e9:2e:12:6e:bd:0d: 9d:ab:25:96:dd:74:6b:ff:d1:27:64:2d:bd:84:bb: b2:90:76:f7:69:54:81:09:18:ee:bc:20:aa:8f:39: fe:9b:ad:92:86:a9:a6:30:62:76:ad:86:9e:8a:3f: d8:a2:a8:4d:90:31:03:2f:3e:7b:c2:8a:ec:12:58: 0a:63:2b:80:c9:4b:f9:11:f6:98:c0:db:52:0f:01: 22:22:ba:d9:e4:39:d0:84:d6:ce:2f:70:c7:6d:9d: 9e:2e:7d:4f:31:c3:a8:02:9c:ec:52:36:f1:1a:15: d6:f7:fd:85:2f:d4:6e:fa:50:ed:16:0b:53:8e:59: 51:91:02:96:23:a7:ea:11:82:e0:3d:02:ee:c2:fa: ce:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:4C:32:60:9B:14:5C:FE:F3:96:01:E1:FF:F4:4A:C3:BA:D9:FE:79 X509v3 Authority Key Identifier: keyid:98:6C:E5:24:96:35:E4:E2:96:4D:37:44:93:DC:C3:7A:87:5D:05:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGzlJJY15OKWTTdEk9zDeoddBTk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/fb42e6-cc51-4d2b-8637-a243cbfaaef3/1/mGzlJJY15OKWTTdEk9zDeoddBTk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/fb42e6-cc51-4d2b-8637-a243cbfaaef3/1/mGzlJJY15OKWTTdEk9zDeoddBTk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:12:d7:98:b7:4e:43:1c:45:f5:1f:1b:4a:1e:7d:98:7c:1c: 9b:74:38:5c:f7:87:1e:08:3c:cf:15:66:85:9d:ec:f2:85:51: df:ad:d0:fa:31:cf:25:c7:05:80:58:9f:16:fb:f6:48:00:12: c9:65:53:3c:03:c9:55:1f:98:19:e8:1b:de:d5:b3:c2:68:7b: cd:91:d5:20:75:8a:34:06:2a:4b:b3:a4:1a:54:dc:21:fb:9c: a8:5c:b0:d1:49:df:97:3a:84:04:d3:b7:9e:fb:7b:e9:9a:7a: a6:e7:3a:af:8d:8c:33:cc:f7:58:45:04:8b:c5:9d:2f:b2:fc: e1:80:78:7c:87:39:06:48:37:98:7d:f6:f8:70:4e:0a:cb:d9: 27:2b:5b:7e:c7:79:1a:1c:27:44:09:6f:96:75:8a:cc:06:70: 1d:e6:6b:90:5a:8d:2a:04:4f:e0:6e:f4:a8:af:16:4d:40:78: 42:32:f0:eb:b0:5e:1e:b9:06:df:ec:ef:9a:17:6a:c1:37:94: 98:10:7e:ca:2f:30:5f:88:dd:73:00:09:7a:aa:43:6c:be:17: 5b:73:12:7f:4e:ed:18:ac:60:b7:46:ac:80:8b:cf:7e:55:ed: b1:67:eb:fe:32:fd:64:1c:15:27:e9:9b:94:d5:6c:e0:4e:a8: 4c:3b:b0:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1Cas2mDt4o8sJS1vslLd/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4NmNlNTI0OTYzNWU0ZTI5NjRkMzc0NDkzZGNjMzdhODc1 ZDA1MzkwHhcNMjUxMjA2MTkwMDQyWhcNMjUxMjA3MTkwMDQyWjAzMTEwLwYDVQQD EygwYzRjMzI2MDliMTQ1Y2ZlZjM5NjAxZTFmZmY0NGFjM2JhZDlmZTc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyr6T9FEUT1BoGsXXVXZ5+z+JAiU j7o34vQH6OyuRE5t25BbazXjuK94Wbi2EVtg7LljBzWd0Om3vN2zwMd7Ln3o3VQb sTXh+2G31gg1SdTeF0miYlnU64187nDLL61+XRmdVO3LBPxhVaDfxmrY2gXpLhJu vQ2dqyWW3XRr/9EnZC29hLuykHb3aVSBCRjuvCCqjzn+m62ShqmmMGJ2rYaeij/Y oqhNkDEDLz57worsElgKYyuAyUv5EfaYwNtSDwEiIrrZ5DnQhNbOL3DHbZ2eLn1P McOoApzsUjbxGhXW9/2FL9Ru+lDtFgtTjllRkQKWI6fqEYLgPQLuwvrOBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAxMMmCbFFz+85YB4f/0SsO62f55MB8GA1UdIwQY MBaAFJhs5SSWNeTilk03RJPcw3qHXQU5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUd6bEpKWTE1T0tXVFRkRWs5ekRlb2RkQlRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9mYjQyZTYtY2M1MS00ZDJiLTg2Mzct YTI0M2NiZmFhZWYzLzEvbUd6bEpKWTE1T0tXVFRkRWs5ekRlb2RkQlRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS9mYjQyZTYtY2M1MS00ZDJiLTg2MzctYTI0M2NiZmFhZWYz LzEvbUd6bEpKWTE1T0tXVFRkRWs5ekRlb2RkQlRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASRLXmLdO QxxF9R8bSh59mHwcm3Q4XPeHHgg8zxVmhZ3s8oVR363Q+jHPJccFgFifFvv2SAAS yWVTPAPJVR+YGegb3tWzwmh7zZHVIHWKNAYqS7OkGlTcIfucqFyw0UnflzqEBNO3 nvt76Zp6puc6r42MM8z3WEUEi8WdL7L84YB4fIc5Bkg3mH32+HBOCsvZJytbfsd5 GhwnRAlvlnWKzAZwHeZrkFqNKgRP4G70qK8WTUB4QjLw67BeHrkG3+zvmhdqwTeU mBB+yi8wX4jdcwAJeqpDbL4XW3MSf07tGKxgt0asgIvPflXtsWfr/jL9ZBwVJ+mb lNVs4E6oTDuw6w== -----END CERTIFICATE-----Generated at Sun Dec 7 03:57:33 2025 by rpki-client