This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/3d838c-8622-4e58-870f-de9e02d41797/1/mgdjMrvSgPCFLbafYVsPFJkUgxs.mft File: mgdjMrvSgPCFLbafYVsPFJkUgxs.mft (raw, json) Hash identifier: JlJA2ZANWeNpFb50eeDrEqnDFfM0gUpNXsdMhg0HfUU= Subject key identifier: D3:D1:22:BC:3B:5F:C3:55:A2:86:8E:B6:05:FE:46:51:D1:0A:E4:9D Authority key identifier: 9A:07:63:32:BB:D2:80:F0:85:2D:B6:9F:61:5B:0F:14:99:14:83:1B Certificate issuer: /CN=9a076332bbd280f0852db69f615b0f149914831b Certificate serial: 019AF277334F281B029B556EA019F5360E56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mgdjMrvSgPCFLbafYVsPFJkUgxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/3d838c-8622-4e58-870f-de9e02d41797/1/mgdjMrvSgPCFLbafYVsPFJkUgxs.mft Manifest number: 04EE Signing time: Sat 06 Dec 2025 07:01:29 +0000 Manifest this update: Sat 06 Dec 2025 07:01:29 +0000 Manifest next update: Sun 07 Dec 2025 07:01:29 +0000 Files and hashes: 1: mgdjMrvSgPCFLbafYVsPFJkUgxs.crl (hash: QoHKV5R0FIVVtPX7ghnbjbVAvvIh4Tvt84cjWnnuEE8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/3d838c-8622-4e58-870f-de9e02d41797/1/mgdjMrvSgPCFLbafYVsPFJkUgxs.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/3d838c-8622-4e58-870f-de9e02d41797/1/mgdjMrvSgPCFLbafYVsPFJkUgxs.mft rsync://rpki.ripe.net/repository/DEFAULT/mgdjMrvSgPCFLbafYVsPFJkUgxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:33:4f:28:1b:02:9b:55:6e:a0:19:f5:36:0e:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a076332bbd280f0852db69f615b0f149914831b Validity Not Before: Dec 6 07:01:29 2025 GMT Not After : Dec 7 07:01:29 2025 GMT Subject: CN=d3d122bc3b5fc355a2868eb605fe4651d10ae49d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:ca:95:b2:51:33:57:1a:42:d2:ed:7a:31:95: 2e:50:90:e2:9e:99:7a:7f:99:a5:40:37:2e:bf:ab: b0:df:e6:f9:64:a5:aa:5e:db:0d:d4:d4:6a:c3:b9: ca:d8:04:75:49:65:25:bc:69:7a:96:49:a2:10:f1: ee:78:73:8a:48:e7:5d:94:82:27:05:26:c3:a1:b1: d4:81:3f:48:cb:28:52:e7:df:85:14:76:34:ba:b8: 0e:ac:91:31:fb:e5:4c:64:17:bb:9f:06:f4:51:b1: 3b:cc:45:ca:93:40:14:ef:28:2a:1d:66:58:79:3f: 95:8a:0f:ea:17:02:9d:70:06:04:91:89:f2:19:ef: c5:5c:81:0a:e0:a9:e9:1c:d3:62:0f:c7:2d:0f:59: 5e:d4:3a:31:3d:b8:d9:00:a6:05:6f:93:61:c8:50: 56:39:3f:7b:11:97:a3:72:e7:be:3b:a6:dd:b6:67: a7:47:33:4e:b4:94:f8:f9:12:c8:19:61:54:24:70: ca:9e:73:04:90:dd:5b:3d:c8:c1:83:47:fa:fa:50: 39:85:0b:14:aa:dc:4f:cd:fb:3c:7e:ce:21:41:14: 9a:cf:0c:93:58:f7:62:d0:4c:38:c2:5a:e7:f0:02: 0e:64:37:70:a1:c4:59:8f:bf:1f:1c:09:2b:6d:20: a6:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:D1:22:BC:3B:5F:C3:55:A2:86:8E:B6:05:FE:46:51:D1:0A:E4:9D X509v3 Authority Key Identifier: keyid:9A:07:63:32:BB:D2:80:F0:85:2D:B6:9F:61:5B:0F:14:99:14:83:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mgdjMrvSgPCFLbafYVsPFJkUgxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3d838c-8622-4e58-870f-de9e02d41797/1/mgdjMrvSgPCFLbafYVsPFJkUgxs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3d838c-8622-4e58-870f-de9e02d41797/1/mgdjMrvSgPCFLbafYVsPFJkUgxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:01:61:37:8c:ae:d9:e9:ea:49:0b:99:c3:b1:b3:ba:5c:0d: d3:43:8a:1f:60:ff:41:47:5a:4c:02:49:36:e3:00:a7:db:11: ca:bb:f6:7f:d4:fb:7c:b7:c0:43:f2:49:ae:5e:bd:eb:d6:44: 67:d1:fa:7c:fa:e0:e1:e0:6e:17:fa:4b:3e:ef:0d:8f:4c:e3: 7a:55:e1:b3:82:ac:b9:ba:34:f3:33:6f:a4:f5:f8:1c:6d:d0: 2b:51:9c:de:ea:4d:b3:41:7e:c3:4d:ee:bf:19:8a:15:e3:34: 93:2e:7b:ce:3a:13:89:6e:e2:9d:19:0f:b2:64:82:3a:7f:4f: a2:8b:98:57:ad:50:59:d0:a8:e0:c3:cf:a2:90:32:cf:b4:12: 87:83:45:35:88:2f:90:e7:bd:37:ca:e8:87:47:69:f9:39:10: e2:7e:f3:fc:cb:d5:99:d2:2a:c5:1d:8d:a7:a4:05:52:3d:2b: fa:06:47:8e:68:16:a0:e8:b6:c9:08:15:bb:74:14:a9:36:71: e6:c6:a6:83:c8:18:d5:ed:0b:fb:e1:26:5d:fe:e5:de:c5:a4: 27:b8:a7:cd:ad:a4:8a:ec:33:83:4e:9a:09:fb:c2:6f:6e:11: fb:db:ba:98:5a:f4:62:11:dc:cf:4b:e2:22:73:7c:4a:44:52: dd:68:57:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydzNPKBsCm1VuoBn1Ng5WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhMDc2MzMyYmJkMjgwZjA4NTJkYjY5ZjYxNWIwZjE0OTkx NDgzMWIwHhcNMjUxMjA2MDcwMTI5WhcNMjUxMjA3MDcwMTI5WjAzMTEwLwYDVQQD EyhkM2QxMjJiYzNiNWZjMzU1YTI4NjhlYjYwNWZlNDY1MWQxMGFlNDlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7cqVslEzVxpC0u16MZUuUJDinpl6 f5mlQDcuv6uw3+b5ZKWqXtsN1NRqw7nK2AR1SWUlvGl6lkmiEPHueHOKSOddlIIn BSbDobHUgT9IyyhS59+FFHY0urgOrJEx++VMZBe7nwb0UbE7zEXKk0AU7ygqHWZY eT+Vig/qFwKdcAYEkYnyGe/FXIEK4KnpHNNiD8ctD1le1DoxPbjZAKYFb5NhyFBW OT97EZejcue+O6bdtmenRzNOtJT4+RLIGWFUJHDKnnMEkN1bPcjBg0f6+lA5hQsU qtxPzfs8fs4hQRSazwyTWPdi0Ew4wlrn8AIOZDdwocRZj78fHAkrbSCmUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNPRIrw7X8NVooaOtgX+RlHRCuSdMB8GA1UdIwQY MBaAFJoHYzK70oDwhS22n2FbDxSZFIMbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWdkak1ydlNnUENGTGJhZllWc1BGSmtVZ3hzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8zZDgzOGMtODYyMi00ZTU4LTg3MGYt ZGU5ZTAyZDQxNzk3LzEvbWdkak1ydlNnUENGTGJhZllWc1BGSmtVZ3hzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy8zZDgzOGMtODYyMi00ZTU4LTg3MGYtZGU5ZTAyZDQxNzk3 LzEvbWdkak1ydlNnUENGTGJhZllWc1BGSmtVZ3hzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPAFhN4yu 2enqSQuZw7GzulwN00OKH2D/QUdaTAJJNuMAp9sRyrv2f9T7fLfAQ/JJrl6969ZE Z9H6fPrg4eBuF/pLPu8Nj0zjelXhs4Ksubo08zNvpPX4HG3QK1Gc3upNs0F+w03u vxmKFeM0ky57zjoTiW7inRkPsmSCOn9PoouYV61QWdCo4MPPopAyz7QSh4NFNYgv kOe9N8roh0dp+TkQ4n7z/MvVmdIqxR2Np6QFUj0r+gZHjmgWoOi2yQgVu3QUqTZx 5samg8gY1e0L++EmXf7l3sWkJ7inza2kiuwzg06aCfvCb24R+9u6mFr0YhHcz0vi InN8SkRS3WhXrA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:03:32 2025 by rpki-client