This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.mft File: MgJHUW6RAX4tvLVyyg8poSKBrPA.mft (raw, json) Hash identifier: h1agL/kRzSNlvopYaDazIuGZ6OBTJ3JgnH8SEInolEY= Subject key identifier: 85:30:6C:94:6D:A9:B5:9B:F4:75:36:32:FF:BB:F2:2C:6F:E0:19:77 Authority key identifier: 32:02:47:51:6E:91:01:7E:2D:BC:B5:72:CA:0F:29:A1:22:81:AC:F0 Certificate issuer: /CN=320247516e91017e2dbcb572ca0f29a12281acf0 Certificate serial: 019AF23F6CEA7340AD932A17D82981401D27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MgJHUW6RAX4tvLVyyg8poSKBrPA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.mft Manifest number: 0609 Signing time: Sat 06 Dec 2025 06:00:33 +0000 Manifest this update: Sat 06 Dec 2025 06:00:33 +0000 Manifest next update: Sun 07 Dec 2025 06:00:33 +0000 Files and hashes: 1: MgJHUW6RAX4tvLVyyg8poSKBrPA.crl (hash: lv/46FETB5XqaCI8au5QFCiLBBtUt5PWEJx9VsifZ3Y=) 2: m7C6K0Dm5PPkueps5pZmHrJAHsQ.roa (hash: keru/3nPFQZwhtdrj8XoRvNJqtUTfDmo1KvvBMCi2Bg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.crl rsync://rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.mft rsync://rpki.ripe.net/repository/DEFAULT/MgJHUW6RAX4tvLVyyg8poSKBrPA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:6c:ea:73:40:ad:93:2a:17:d8:29:81:40:1d:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=320247516e91017e2dbcb572ca0f29a12281acf0 Validity Not Before: Dec 6 06:00:33 2025 GMT Not After : Dec 7 06:00:33 2025 GMT Subject: CN=85306c946da9b59bf4753632ffbbf22c6fe01977 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:6d:b9:7b:50:17:54:21:31:ce:8b:2e:88:3b: ba:a4:31:7c:ac:10:dc:ef:d2:3b:4b:f7:31:f6:08: 07:80:77:a9:1a:3c:e9:f6:b5:cb:02:86:f1:94:6d: 8c:ad:e8:e7:23:33:c2:76:f1:2d:8f:93:cb:b5:d9: ef:1f:50:bf:42:d8:9e:3e:e0:8f:56:f8:8a:b0:c8: ec:3e:cd:04:22:9e:ee:10:8e:8e:d3:94:0d:19:29: f4:c2:c4:9f:bf:ee:e0:96:50:67:cf:22:d9:ee:b3: 54:c7:c1:8a:2f:16:c9:74:b1:c4:ed:85:df:d3:6c: ce:d6:29:04:15:46:50:16:76:5d:85:06:ad:91:76: 12:1f:74:02:0f:ea:62:5c:4f:67:04:59:5e:b6:fd: f1:8b:db:74:b0:cb:d1:41:53:16:5f:e6:17:ba:a8: df:fe:25:9b:61:7f:09:97:af:b6:2f:48:3e:6c:75: 86:4b:b5:6a:b5:81:76:e4:d1:b6:93:9c:a4:d3:5d: 5f:d6:8d:b1:6f:a0:d1:1f:f0:ca:fc:79:1b:12:15: 68:61:0c:ef:48:27:9c:16:c3:6a:03:8d:06:b5:06: 0d:76:2c:0a:e9:c3:f2:3f:34:4b:65:c5:cc:9f:45: 31:49:a1:8d:bf:1b:93:11:ae:c0:86:a0:10:c5:34: 16:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:30:6C:94:6D:A9:B5:9B:F4:75:36:32:FF:BB:F2:2C:6F:E0:19:77 X509v3 Authority Key Identifier: keyid:32:02:47:51:6E:91:01:7E:2D:BC:B5:72:CA:0F:29:A1:22:81:AC:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MgJHUW6RAX4tvLVyyg8poSKBrPA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:2f:5e:96:8e:c9:e5:b9:cc:41:90:79:70:36:ea:87:a7:eb: 29:91:a1:ca:99:f4:a2:85:39:31:a3:6a:e7:1e:6b:54:25:ac: ad:af:fc:55:e3:ea:9e:77:78:15:c8:ce:40:6f:93:44:7e:7f: fd:33:23:3c:f4:1c:20:43:d0:22:af:82:7f:de:f6:25:0b:db: 65:10:9d:db:2b:97:1c:e6:01:64:b7:ff:55:53:d9:56:40:72: 30:6a:50:6d:a5:28:46:63:1c:2b:42:ce:1f:5d:a3:9b:52:7f: 83:26:7f:e4:45:98:b3:a1:07:f6:10:bb:0f:bc:8c:48:9a:2f: 5b:6b:fe:0b:7a:52:f0:7c:bc:7c:d3:27:71:36:7e:c2:b4:6e: 50:6e:ec:66:ca:45:0a:4b:8f:fa:8b:e8:51:9d:cc:2d:7a:be: a5:82:48:c6:f5:56:fc:af:e1:0e:b6:60:9f:98:c1:26:18:b3: 4f:dc:3f:81:a0:37:98:22:d3:4e:29:17:27:8e:1c:75:20:3f: cf:82:09:ad:98:aa:69:c9:70:d1:d9:20:f9:84:81:07:51:d9: 74:a0:fa:5b:af:b4:b2:a1:73:68:25:b2:73:05:12:4e:5c:29: 71:00:ba:f4:d6:8c:15:ae:5d:04:95:fb:b8:55:20:28:7c:44: ed:59:b5:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP2zqc0CtkyoX2CmBQB0nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyMDI0NzUxNmU5MTAxN2UyZGJjYjU3MmNhMGYyOWExMjI4 MWFjZjAwHhcNMjUxMjA2MDYwMDMzWhcNMjUxMjA3MDYwMDMzWjAzMTEwLwYDVQQD Eyg4NTMwNmM5NDZkYTliNTliZjQ3NTM2MzJmZmJiZjIyYzZmZTAxOTc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvW25e1AXVCExzosuiDu6pDF8rBDc 79I7S/cx9ggHgHepGjzp9rXLAobxlG2MrejnIzPCdvEtj5PLtdnvH1C/QtiePuCP VviKsMjsPs0EIp7uEI6O05QNGSn0wsSfv+7gllBnzyLZ7rNUx8GKLxbJdLHE7YXf 02zO1ikEFUZQFnZdhQatkXYSH3QCD+piXE9nBFletv3xi9t0sMvRQVMWX+YXuqjf /iWbYX8Jl6+2L0g+bHWGS7VqtYF25NG2k5yk011f1o2xb6DRH/DK/HkbEhVoYQzv SCecFsNqA40GtQYNdiwK6cPyPzRLZcXMn0UxSaGNvxuTEa7AhqAQxTQWDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIUwbJRtqbWb9HU2Mv+78ixv4Bl3MB8GA1UdIwQY MBaAFDICR1FukQF+Lby1csoPKaEigazwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWdKSFVXNlJBWDR0dkxWeXlnOHBvU0tCclBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS82MjRlNjMtYjg3Ni00ZWY0LWJmMTkt ZTQzNjIwODgwY2I2LzEvTWdKSFVXNlJBWDR0dkxWeXlnOHBvU0tCclBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS82MjRlNjMtYjg3Ni00ZWY0LWJmMTktZTQzNjIwODgwY2I2 LzEvTWdKSFVXNlJBWDR0dkxWeXlnOHBvU0tCclBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAti9elo7J 5bnMQZB5cDbqh6frKZGhypn0ooU5MaNq5x5rVCWsra/8VePqnnd4FcjOQG+TRH5/ /TMjPPQcIEPQIq+Cf972JQvbZRCd2yuXHOYBZLf/VVPZVkByMGpQbaUoRmMcK0LO H12jm1J/gyZ/5EWYs6EH9hC7D7yMSJovW2v+C3pS8Hy8fNMncTZ+wrRuUG7sZspF CkuP+ovoUZ3MLXq+pYJIxvVW/K/hDrZgn5jBJhizT9w/gaA3mCLTTikXJ44cdSA/ z4IJrZiqaclw0dkg+YSBB1HZdKD6W6+0sqFzaCWycwUSTlwpcQC69NaMFa5dBJX7 uFUgKHxE7Vm1EA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:33:16 2025 by rpki-client