This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.mft File: MGm6frw7Zy3QnsA0Th-AqhEx79A.mft (raw, json) Hash identifier: DE3LVjTG4NBukl/Zk81HZ/65opqhJqYc12uZeoulKv4= Subject key identifier: FE:C9:3D:E5:03:96:BD:11:F5:B1:72:02:57:F8:59:E1:CF:69:FC:4A Authority key identifier: 30:69:BA:7E:BC:3B:67:2D:D0:9E:C0:34:4E:1F:80:AA:11:31:EF:D0 Certificate issuer: /CN=3069ba7ebc3b672dd09ec0344e1f80aa1131efd0 Certificate serial: 019B3FECA719A8DA582385622AE2179B5DCB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGm6frw7Zy3QnsA0Th-AqhEx79A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.mft Manifest number: 178A Signing time: Sun 21 Dec 2025 08:00:32 +0000 Manifest this update: Sun 21 Dec 2025 08:00:32 +0000 Manifest next update: Mon 22 Dec 2025 08:00:32 +0000 Files and hashes: 1: MGm6frw7Zy3QnsA0Th-AqhEx79A.crl (hash: ribVYwCHTDIy62eqPassIuHTKCsN22//9ofTGMdYQ20=) 2: eqJAEOy6NaY4mZwa5RQJfzteBn0.roa (hash: 4ycDfdQF4RJy7Cm3II/1bQM7j6qQFueYRHKWr/2hsvQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.mft rsync://rpki.ripe.net/repository/DEFAULT/MGm6frw7Zy3QnsA0Th-AqhEx79A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:ec:a7:19:a8:da:58:23:85:62:2a:e2:17:9b:5d:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3069ba7ebc3b672dd09ec0344e1f80aa1131efd0 Validity Not Before: Dec 21 08:00:32 2025 GMT Not After : Dec 22 08:00:32 2025 GMT Subject: CN=fec93de50396bd11f5b1720257f859e1cf69fc4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e6:76:82:2d:65:cc:c6:fa:11:02:cd:b8:b4: 17:9e:7a:cf:41:65:94:6a:50:c4:66:c8:bd:f7:65: 85:81:f7:6e:34:de:1b:81:b2:6d:c0:14:f5:c7:91: 2f:93:63:94:28:2d:b3:f6:e3:e9:e9:0c:ab:f8:5c: 5b:87:7b:a0:3c:79:e7:da:5e:e2:c2:85:c5:07:77: a3:8c:04:6d:63:90:30:a8:5c:b3:02:d3:a9:b9:48: f7:b3:13:47:f7:59:8c:cf:62:16:f4:6f:0e:11:76: 2d:9a:a0:61:d9:18:b1:97:92:aa:e4:af:f7:88:2a: ac:98:8e:eb:37:e2:3f:d6:33:9d:cc:1c:a6:ad:af: f9:fa:c5:0d:e8:14:28:41:ae:46:0d:af:91:f7:2c: 7d:5b:3a:ee:37:1f:f8:b1:6b:d1:e0:8b:9b:b8:99: 34:b8:3e:73:56:fa:e3:5d:74:b6:62:dd:b2:b3:69: 04:5e:53:e7:a3:b2:a7:cc:c2:da:0e:5f:2a:42:60: 71:80:91:a1:9d:68:9d:55:e2:77:da:bd:0c:57:87: 06:6a:4f:63:ef:bb:7d:83:32:5f:8d:e0:5a:6e:2c: e4:3a:8c:ad:a0:77:3e:2d:59:45:9c:6d:3e:ff:e1: 30:13:17:a5:4f:05:0a:ce:aa:aa:65:a5:9b:7f:2a: 26:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:C9:3D:E5:03:96:BD:11:F5:B1:72:02:57:F8:59:E1:CF:69:FC:4A X509v3 Authority Key Identifier: keyid:30:69:BA:7E:BC:3B:67:2D:D0:9E:C0:34:4E:1F:80:AA:11:31:EF:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGm6frw7Zy3QnsA0Th-AqhEx79A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:23:b0:55:c0:87:b5:34:ec:57:ac:d2:27:cf:0f:ad:a6:e1: b4:99:cb:c8:40:35:b5:82:dc:bf:c4:cc:23:c9:f7:3a:36:e8: df:d2:4b:fb:52:ff:f8:b3:ef:e0:90:2d:68:00:2a:87:9b:36: f2:77:90:40:64:82:f5:ea:8a:df:9c:7f:87:71:30:a2:38:15: 82:49:3f:9a:55:a6:3d:6a:e8:8c:4e:bc:c5:4a:d9:0d:fa:eb: 96:6b:da:70:ab:29:35:f4:d9:07:68:72:b6:b4:4c:d1:aa:3d: ae:8e:9f:3a:12:67:66:39:cd:70:3f:5d:b1:73:2e:98:3c:90: 3e:87:3e:ec:87:76:eb:27:4f:a7:c8:5a:06:ce:5f:21:3c:7c: 95:ea:09:e3:5d:2b:1c:bc:d4:cd:81:36:9a:1d:e8:28:19:58: 3f:17:a4:02:62:4c:bc:2a:7b:3c:b4:17:0e:28:56:9d:87:dd: 2e:87:69:a1:da:bd:7a:b1:cf:52:ee:1b:0b:ae:f9:02:88:69: 43:69:56:1a:0b:75:10:c3:5d:f1:f7:12:e8:ca:2c:53:0f:54: d4:c0:8f:94:a7:de:da:bb:9a:25:3e:26:27:c3:d0:85:cf:09: cf:f7:bc:66:6e:e7:71:88:48:e4:16:0a:f6:38:73:57:43:bb: 1e:97:19:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/7KcZqNpYI4ViKuIXm13LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwNjliYTdlYmMzYjY3MmRkMDllYzAzNDRlMWY4MGFhMTEz MWVmZDAwHhcNMjUxMjIxMDgwMDMyWhcNMjUxMjIyMDgwMDMyWjAzMTEwLwYDVQQD EyhmZWM5M2RlNTAzOTZiZDExZjViMTcyMDI1N2Y4NTllMWNmNjlmYzRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOZ2gi1lzMb6EQLNuLQXnnrPQWWU alDEZsi992WFgfduNN4bgbJtwBT1x5Evk2OUKC2z9uPp6Qyr+Fxbh3ugPHnn2l7i woXFB3ejjARtY5AwqFyzAtOpuUj3sxNH91mMz2IW9G8OEXYtmqBh2Rixl5Kq5K/3 iCqsmI7rN+I/1jOdzBymra/5+sUN6BQoQa5GDa+R9yx9WzruNx/4sWvR4IubuJk0 uD5zVvrjXXS2Yt2ys2kEXlPno7KnzMLaDl8qQmBxgJGhnWidVeJ32r0MV4cGak9j 77t9gzJfjeBabizkOoytoHc+LVlFnG0+/+EwExelTwUKzqqqZaWbfyomnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP7JPeUDlr0R9bFyAlf4WeHPafxKMB8GA1UdIwQY MBaAFDBpun68O2ct0J7ANE4fgKoRMe/QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUdtNmZydzdaeTNRbnNBMFRoLUFxaEV4NzlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi80Y2JhMmYtNGE1Yi00NDM1LThhZWMt OTIzY2I1MGFiZTJlLzEvTUdtNmZydzdaeTNRbnNBMFRoLUFxaEV4NzlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi80Y2JhMmYtNGE1Yi00NDM1LThhZWMtOTIzY2I1MGFiZTJl LzEvTUdtNmZydzdaeTNRbnNBMFRoLUFxaEV4NzlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfCOwVcCH tTTsV6zSJ88PrabhtJnLyEA1tYLcv8TMI8n3Ojbo39JL+1L/+LPv4JAtaAAqh5s2 8neQQGSC9eqK35x/h3EwojgVgkk/mlWmPWrojE68xUrZDfrrlmvacKspNfTZB2hy trRM0ao9ro6fOhJnZjnNcD9dsXMumDyQPoc+7Id26ydPp8haBs5fITx8leoJ410r HLzUzYE2mh3oKBlYPxekAmJMvCp7PLQXDihWnYfdLodpodq9erHPUu4bC675Aohp Q2lWGgt1EMNd8fcS6MosUw9U1MCPlKfe2ruaJT4mJ8PQhc8Jz/e8Zm7ncYhI5BYK 9jhzV0O7HpcZJw== -----END CERTIFICATE-----Generated at Sun Dec 21 11:44:16 2025 by rpki-client