This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.mft File: MGatYcFi3wZQ7gq2DGgHWymiEcg.mft (raw, json) Hash identifier: KpRB5dp9EP2395Ic8XaC8K5ckjmMLUeKsxF6w7zrRWI= Subject key identifier: 3D:DC:3F:3E:DB:8F:B4:1C:5E:4D:D4:48:F0:35:F3:87:63:51:88:A0 Authority key identifier: 30:66:AD:61:C1:62:DF:06:50:EE:0A:B6:0C:68:07:5B:29:A2:11:C8 Certificate issuer: /CN=3066ad61c162df0650ee0ab60c68075b29a211c8 Certificate serial: 019AF209497FAAFE49FDE07AE039F3861D22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGatYcFi3wZQ7gq2DGgHWymiEcg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 05:01:26 +0000 Manifest this update: Sat 06 Dec 2025 05:01:26 +0000 Manifest next update: Sun 07 Dec 2025 05:01:26 +0000 Files and hashes: 1: MGatYcFi3wZQ7gq2DGgHWymiEcg.crl (hash: 3c64aXloe/5pJ73/YtYXDDIg59FTFqfSR7BAF5ONQwc=) 2: akH_-GUofRi3IR9WY9DWc-MBUHc.roa (hash: GH7ew6e0VLPyvTO+mxXZge5TTd6Djbt+GfnJ/q6zgIU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.mft rsync://rpki.ripe.net/repository/DEFAULT/MGatYcFi3wZQ7gq2DGgHWymiEcg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:49:7f:aa:fe:49:fd:e0:7a:e0:39:f3:86:1d:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3066ad61c162df0650ee0ab60c68075b29a211c8 Validity Not Before: Dec 6 05:01:26 2025 GMT Not After : Dec 7 05:01:26 2025 GMT Subject: CN=3ddc3f3edb8fb41c5e4dd448f035f387635188a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c0:ad:a4:f2:9f:89:f2:c8:9e:7b:1c:ba:4c: da:0a:f1:c2:b6:1a:0f:63:b9:ea:59:cf:4c:02:25: 58:ee:9f:17:be:c0:58:db:d2:10:f2:e6:6a:bc:3c: dd:49:a4:b9:ef:f1:b5:ee:9b:31:ca:49:53:53:f7: fc:bc:03:aa:24:18:8b:97:62:29:ec:09:9b:a6:1c: 1e:e5:1c:e7:5e:9e:f6:3b:51:82:86:53:50:60:23: d0:bf:5c:26:83:fb:5b:0c:69:89:cb:b5:48:14:c8: 51:86:1e:95:0d:95:e6:94:db:fa:b1:50:fb:b7:5b: ae:38:60:d2:6f:03:15:d2:8b:d5:3c:8a:f2:55:90: 2e:0e:ba:11:ec:10:98:a0:13:3c:0e:56:d6:13:6f: 4f:0e:91:b2:3e:5d:39:5f:3e:70:09:68:ee:8a:45: 50:76:85:a4:e3:b6:d2:44:f0:5a:21:6c:4b:82:72: f8:5f:aa:6e:b7:04:a7:1c:84:65:35:7d:d3:1e:58: d4:c8:14:e7:48:30:86:e3:74:19:c7:84:47:e4:e1: 31:5a:45:5f:66:67:c7:cd:b2:9f:fe:e6:1e:41:3f: c1:1b:0a:88:8d:9d:c1:73:1c:b5:ab:75:0d:02:24: 1f:4a:92:c7:58:83:60:b4:7a:b0:9e:35:45:d7:1b: b6:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:DC:3F:3E:DB:8F:B4:1C:5E:4D:D4:48:F0:35:F3:87:63:51:88:A0 X509v3 Authority Key Identifier: keyid:30:66:AD:61:C1:62:DF:06:50:EE:0A:B6:0C:68:07:5B:29:A2:11:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGatYcFi3wZQ7gq2DGgHWymiEcg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:e8:b6:17:b6:0e:48:92:92:68:e5:a4:24:b6:52:e5:66:50: b3:15:e7:72:e2:12:f8:80:ba:8e:6c:cf:7b:a6:28:41:bc:5f: de:b9:2a:ac:bc:cf:ac:49:9a:ac:0c:c8:3c:6b:4c:c4:e0:08: be:ef:3e:b5:0a:d9:ef:8f:b5:47:57:79:a1:41:00:45:94:24: 69:ff:7b:16:54:d7:f5:f5:e3:6a:c4:3a:fa:6f:90:ed:91:9a: e9:59:70:a5:02:a4:c4:fa:84:57:3a:58:6f:89:61:d3:fb:44: ee:0a:f1:5a:5f:e7:48:8c:c5:b3:6c:3a:9d:db:07:19:36:39: 66:69:e5:62:73:09:61:8c:86:49:a1:fa:60:25:10:ab:c2:c2: ed:6e:4d:70:aa:6f:20:91:86:6b:a6:07:c4:b1:2b:cd:31:77: 5e:71:cc:7e:e3:4e:75:87:79:9f:62:89:93:a3:8a:cc:5b:35: 14:0b:66:ee:73:66:50:42:cc:67:8e:c9:8b:c8:09:d3:7f:4e: 94:55:f9:0b:20:4d:dd:81:88:bd:16:9c:01:cd:9d:0f:e3:90: 03:8e:e0:39:4a:89:d6:5e:6d:53:35:62:9a:e3:20:25:4a:37: e0:13:6a:5c:e7:e7:72:63:b0:e2:35:bc:ae:d0:5d:03:69:ec: 47:74:6b:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCUl/qv5J/eB64Dnzhh0iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwNjZhZDYxYzE2MmRmMDY1MGVlMGFiNjBjNjgwNzViMjlh MjExYzgwHhcNMjUxMjA2MDUwMTI2WhcNMjUxMjA3MDUwMTI2WjAzMTEwLwYDVQQD EygzZGRjM2YzZWRiOGZiNDFjNWU0ZGQ0NDhmMDM1ZjM4NzYzNTE4OGEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8CtpPKfifLInnscukzaCvHCthoP Y7nqWc9MAiVY7p8XvsBY29IQ8uZqvDzdSaS57/G17psxyklTU/f8vAOqJBiLl2Ip 7Ambphwe5RznXp72O1GChlNQYCPQv1wmg/tbDGmJy7VIFMhRhh6VDZXmlNv6sVD7 t1uuOGDSbwMV0ovVPIryVZAuDroR7BCYoBM8DlbWE29PDpGyPl05Xz5wCWjuikVQ doWk47bSRPBaIWxLgnL4X6putwSnHIRlNX3THljUyBTnSDCG43QZx4RH5OExWkVf ZmfHzbKf/uYeQT/BGwqIjZ3Bcxy1q3UNAiQfSpLHWINgtHqwnjVF1xu2zQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD3cPz7bj7QcXk3USPA184djUYigMB8GA1UdIwQY MBaAFDBmrWHBYt8GUO4KtgxoB1spohHIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUdhdFljRmkzd1pRN2dxMkRHZ0hXeW1pRWNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC85YjM0YjAtMzAxYS00MWEyLWI0YzUt YTg4NjZhYTk1YzcxLzEvTUdhdFljRmkzd1pRN2dxMkRHZ0hXeW1pRWNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC85YjM0YjAtMzAxYS00MWEyLWI0YzUtYTg4NjZhYTk1Yzcx LzEvTUdhdFljRmkzd1pRN2dxMkRHZ0hXeW1pRWNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHei2F7YO SJKSaOWkJLZS5WZQsxXncuIS+IC6jmzPe6YoQbxf3rkqrLzPrEmarAzIPGtMxOAI vu8+tQrZ74+1R1d5oUEARZQkaf97FlTX9fXjasQ6+m+Q7ZGa6VlwpQKkxPqEVzpY b4lh0/tE7grxWl/nSIzFs2w6ndsHGTY5ZmnlYnMJYYyGSaH6YCUQq8LC7W5NcKpv IJGGa6YHxLErzTF3XnHMfuNOdYd5n2KJk6OKzFs1FAtm7nNmUELMZ47Ji8gJ039O lFX5CyBN3YGIvRacAc2dD+OQA47gOUqJ1l5tUzVimuMgJUo34BNqXOfncmOw4jW8 rtBdA2nsR3Rrmw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:01:15 2025 by rpki-client