This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.mft File: MGm6frw7Zy3QnsA0Th-AqhEx79A.mft (raw, json) Hash identifier: wEwyfWg5vTTo2rO/lgGvp3eQWKX8zQJTD31ExD2LSVs= Subject key identifier: 69:8D:35:64:88:BF:54:83:06:92:86:30:73:57:03:BA:A1:40:5C:71 Authority key identifier: 30:69:BA:7E:BC:3B:67:2D:D0:9E:C0:34:4E:1F:80:AA:11:31:EF:D0 Certificate issuer: /CN=3069ba7ebc3b672dd09ec0344e1f80aa1131efd0 Certificate serial: 019AF2ADA9C21CBB6F06C4CA9BFCD4B021C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGm6frw7Zy3QnsA0Th-AqhEx79A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 08:00:58 +0000 Manifest this update: Sat 06 Dec 2025 08:00:58 +0000 Manifest next update: Sun 07 Dec 2025 08:00:58 +0000 Files and hashes: 1: MGm6frw7Zy3QnsA0Th-AqhEx79A.crl (hash: uabu8ofXWW+zh1U1ZA92fV6UsUBUWdlSDtAqiGFfZeU=) 2: eqJAEOy6NaY4mZwa5RQJfzteBn0.roa (hash: 4ycDfdQF4RJy7Cm3II/1bQM7j6qQFueYRHKWr/2hsvQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.mft rsync://rpki.ripe.net/repository/DEFAULT/MGm6frw7Zy3QnsA0Th-AqhEx79A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:a9:c2:1c:bb:6f:06:c4:ca:9b:fc:d4:b0:21:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3069ba7ebc3b672dd09ec0344e1f80aa1131efd0 Validity Not Before: Dec 6 08:00:58 2025 GMT Not After : Dec 7 08:00:58 2025 GMT Subject: CN=698d356488bf548306928630735703baa1405c71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:33:d7:c8:d7:58:56:89:19:7a:a8:5c:59:a7: b8:bc:98:a7:90:7b:53:6b:a7:26:46:4e:8c:e2:98: d0:80:3b:37:50:6a:21:74:55:6e:d0:b1:84:d4:36: d3:6c:bb:67:ba:12:89:77:e9:9c:82:75:8d:12:77: ed:f6:77:8c:03:e1:d7:10:0c:30:99:5e:38:aa:05: 87:fa:15:45:ee:22:70:3c:ca:83:18:82:29:72:69: 85:fc:85:af:86:2a:1e:c8:75:e1:c3:a1:fe:0e:f5: 52:f0:07:10:fd:e0:fe:ac:49:e6:f5:75:26:ea:e5: 4c:bd:8e:41:6b:c8:42:bf:d8:75:19:a9:2e:72:04: 42:bc:d9:ec:6e:1d:61:8b:ee:fd:79:91:c4:3a:90: 7e:3c:38:7e:e7:e4:49:87:a9:9a:1b:b1:98:7d:6f: 7a:0f:3e:e9:46:f7:81:19:d2:2e:84:a2:9e:ba:41: 9c:2e:51:65:8e:d0:ea:95:dc:5c:09:87:31:ea:bf: 75:b0:29:b2:b2:96:45:15:c3:21:2e:99:07:31:66: 97:b1:0f:cb:8c:28:8b:e4:9e:53:aa:20:a6:a6:18: fd:75:41:f2:31:80:5b:46:19:62:55:0a:d1:f1:1f: 8c:2e:3f:ce:db:63:fd:7a:3d:3c:d2:97:71:50:76: 8c:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:8D:35:64:88:BF:54:83:06:92:86:30:73:57:03:BA:A1:40:5C:71 X509v3 Authority Key Identifier: keyid:30:69:BA:7E:BC:3B:67:2D:D0:9E:C0:34:4E:1F:80:AA:11:31:EF:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGm6frw7Zy3QnsA0Th-AqhEx79A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:96:cd:99:6e:7c:3a:68:da:3a:76:31:fd:87:2c:5e:33:3f: 5e:89:bb:15:f4:12:13:13:bd:dc:75:45:1d:e2:57:4e:ec:33: 24:62:b1:f7:18:5b:04:d5:b9:87:9a:6e:27:1b:73:c8:7d:ca: 1d:00:49:7d:b1:25:d6:cd:d8:0f:2a:f4:46:7d:ab:a1:09:6b: 61:1b:d0:fc:a5:2d:2e:02:f5:df:53:42:e2:5e:25:22:a3:56: cd:20:48:aa:44:04:bd:f9:c0:7d:f4:6e:0f:50:ce:13:f8:60: f2:e1:6f:32:2d:0e:eb:41:37:a6:bc:e5:e0:58:15:5f:6a:be: 6b:68:f8:5e:bb:c0:eb:fa:e7:fb:be:44:6e:d9:c3:cd:79:84: a0:08:cb:ab:6c:1b:6b:13:6c:39:97:4f:5e:de:90:a7:72:7c: bf:d2:86:9b:9a:d2:1b:af:9b:f0:8b:fc:c8:53:f1:46:4f:81: a1:02:f7:fa:40:39:53:eb:91:d5:b3:d8:8c:e8:c4:a0:f2:19: 73:a4:b5:8d:e3:bf:77:ef:f1:da:ef:ed:40:62:34:41:eb:dd: b8:9c:f4:06:56:a3:a9:27:d7:e5:4e:b8:00:bf:f6:1c:32:bf: 88:1b:49:6b:35:13:94:6f:40:2e:d0:b2:70:5a:b7:5d:12:1a: c6:2b:95:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryranCHLtvBsTKm/zUsCHCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwNjliYTdlYmMzYjY3MmRkMDllYzAzNDRlMWY4MGFhMTEz MWVmZDAwHhcNMjUxMjA2MDgwMDU4WhcNMjUxMjA3MDgwMDU4WjAzMTEwLwYDVQQD Eyg2OThkMzU2NDg4YmY1NDgzMDY5Mjg2MzA3MzU3MDNiYWExNDA1YzcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3DPXyNdYVokZeqhcWae4vJinkHtT a6cmRk6M4pjQgDs3UGohdFVu0LGE1DbTbLtnuhKJd+mcgnWNEnft9neMA+HXEAww mV44qgWH+hVF7iJwPMqDGIIpcmmF/IWvhioeyHXhw6H+DvVS8AcQ/eD+rEnm9XUm 6uVMvY5Ba8hCv9h1GakucgRCvNnsbh1hi+79eZHEOpB+PDh+5+RJh6maG7GYfW96 Dz7pRveBGdIuhKKeukGcLlFljtDqldxcCYcx6r91sCmyspZFFcMhLpkHMWaXsQ/L jCiL5J5TqiCmphj9dUHyMYBbRhliVQrR8R+MLj/O22P9ej080pdxUHaM2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGmNNWSIv1SDBpKGMHNXA7qhQFxxMB8GA1UdIwQY MBaAFDBpun68O2ct0J7ANE4fgKoRMe/QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUdtNmZydzdaeTNRbnNBMFRoLUFxaEV4NzlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi80Y2JhMmYtNGE1Yi00NDM1LThhZWMt OTIzY2I1MGFiZTJlLzEvTUdtNmZydzdaeTNRbnNBMFRoLUFxaEV4NzlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi80Y2JhMmYtNGE1Yi00NDM1LThhZWMtOTIzY2I1MGFiZTJl LzEvTUdtNmZydzdaeTNRbnNBMFRoLUFxaEV4NzlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc5bNmW58 OmjaOnYx/YcsXjM/Xom7FfQSExO93HVFHeJXTuwzJGKx9xhbBNW5h5puJxtzyH3K HQBJfbEl1s3YDyr0Rn2roQlrYRvQ/KUtLgL131NC4l4lIqNWzSBIqkQEvfnAffRu D1DOE/hg8uFvMi0O60E3przl4FgVX2q+a2j4XrvA6/rn+75EbtnDzXmEoAjLq2wb axNsOZdPXt6Qp3J8v9KGm5rSG6+b8Iv8yFPxRk+BoQL3+kA5U+uR1bPYjOjEoPIZ c6S1jeO/d+/x2u/tQGI0QevduJz0BlajqSfX5U64AL/2HDK/iBtJazUTlG9ALtCy cFq3XRIaxiuV2w== -----END CERTIFICATE-----Generated at Sat Dec 6 14:51:47 2025 by rpki-client