This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft File: rMGajH8XQRRJx9SP-TCNJIMulSs.mft (raw, json) Hash identifier: sD6GZ8nHo3ZvXkBubI8U2PC63c1f7V7iogHTJ7grJps= Subject key identifier: 51:8D:20:49:D4:ED:3B:4A:56:80:99:D3:4B:37:F2:0D:9E:48:9E:1C Authority key identifier: AC:C1:9A:8C:7F:17:41:14:49:C7:D4:8F:F9:30:8D:24:83:2E:95:2B Certificate issuer: /CN=acc19a8c7f17411449c7d48ff9308d24832e952b Certificate serial: 019AF12CEF925911E5DEF79DEFD9778E9966 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rMGajH8XQRRJx9SP-TCNJIMulSs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 01:00:45 +0000 Manifest this update: Sat 06 Dec 2025 01:00:45 +0000 Manifest next update: Sun 07 Dec 2025 01:00:45 +0000 Files and hashes: 1: Qwfm7iyTFcUFA4cP-BGJUr6nVGo.roa (hash: cGT3x4JJQpP+f+7JmlJEaoJ5r1uUvYJMBAOOSckaWRE=) 2: rMGajH8XQRRJx9SP-TCNJIMulSs.crl (hash: hyIPYKVvuH3jvkr0ipkTc6ok5+ywmWx0WCsIeLILs+k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft rsync://rpki.ripe.net/repository/DEFAULT/rMGajH8XQRRJx9SP-TCNJIMulSs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:ef:92:59:11:e5:de:f7:9d:ef:d9:77:8e:99:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=acc19a8c7f17411449c7d48ff9308d24832e952b Validity Not Before: Dec 6 01:00:45 2025 GMT Not After : Dec 7 01:00:45 2025 GMT Subject: CN=518d2049d4ed3b4a568099d34b37f20d9e489e1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:33:a7:d7:48:a4:9a:54:bb:1d:74:80:bd:a5: 6f:d2:6a:a6:05:24:2d:cf:f4:78:09:7e:91:eb:66: ed:55:0f:8e:ee:5c:14:1a:d1:f4:96:ff:8e:20:93: 64:65:0b:14:03:6d:5d:10:71:80:79:96:a3:71:fc: 4b:ac:83:e7:4a:f2:2b:39:32:78:8a:32:8f:37:47: 80:da:57:45:cb:12:32:f7:28:8a:27:e4:9c:be:8d: 1c:53:be:72:08:07:b0:cd:cf:89:1a:7a:c6:91:21: 86:bb:4f:03:cd:98:55:f8:96:55:b6:18:7e:35:ff: 6e:86:d8:b2:b2:8a:9d:d3:65:d2:1e:8a:80:3f:7e: 3a:f6:02:fc:64:c3:32:07:e3:b9:48:b2:3f:02:e0: 44:85:2e:08:d5:c6:6b:df:2f:a8:5f:7a:74:f1:f1: a8:86:b0:5a:04:7e:0a:0d:51:21:95:ff:e5:4d:43: 2c:a7:d2:f7:18:bf:14:77:37:63:e1:5f:d9:cc:0e: 15:61:1c:1d:fd:ae:85:3b:96:c1:66:e1:14:f9:ce: 6e:b7:01:85:fd:f8:65:0d:d7:ef:1c:e0:0b:f5:fd: b5:7a:e2:41:25:01:e5:c7:ab:33:32:07:b9:1d:7a: e6:57:a0:01:ae:65:0f:48:9b:2e:6a:fc:97:3e:cd: 31:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:8D:20:49:D4:ED:3B:4A:56:80:99:D3:4B:37:F2:0D:9E:48:9E:1C X509v3 Authority Key Identifier: keyid:AC:C1:9A:8C:7F:17:41:14:49:C7:D4:8F:F9:30:8D:24:83:2E:95:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMGajH8XQRRJx9SP-TCNJIMulSs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:76:44:42:c9:81:4d:2e:8f:11:7f:03:a0:0c:86:02:d0:b1: cb:6d:4d:da:c6:9e:77:1e:1a:11:44:77:48:08:c0:0b:e9:0a: 54:0a:70:28:e7:29:1c:80:ef:6c:83:aa:83:59:72:d3:a6:08: e1:30:ca:e9:27:16:fb:64:d9:5d:24:a5:23:65:86:dc:d9:7a: 4d:d3:07:07:56:a5:bf:ab:31:77:c1:e3:7f:a3:9d:e3:79:b9: 12:e2:a5:30:54:c2:65:fe:9a:f1:1f:d1:4d:35:1b:80:a6:a4: 8f:39:28:10:3a:7b:a9:26:c0:39:28:06:71:13:dd:59:49:77: 52:5d:97:5e:f1:00:8f:dc:53:44:93:69:14:a4:b5:73:e1:1d: 18:28:ed:dc:bc:30:81:6f:f6:10:7b:28:e5:47:d4:ea:37:91: 23:aa:51:01:ef:46:f9:9f:48:13:3b:17:23:a7:d2:fb:86:51: 27:ae:6b:85:9d:e2:f2:c3:6b:66:ac:80:a9:bc:14:1d:bb:9c: 9f:18:f9:ad:69:5e:86:46:f3:a3:b2:4d:b3:f0:18:6d:00:e3: dd:cd:af:00:cb:91:6a:0e:c1:e9:46:b4:f8:16:b9:6c:6d:9f: 80:ad:0d:90:d9:3a:be:a4:db:c1:c8:4f:f9:f4:88:52:ec:c2: d1:b5:60:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLO+SWRHl3ved79l3jplmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjYzE5YThjN2YxNzQxMTQ0OWM3ZDQ4ZmY5MzA4ZDI0ODMy ZTk1MmIwHhcNMjUxMjA2MDEwMDQ1WhcNMjUxMjA3MDEwMDQ1WjAzMTEwLwYDVQQD Eyg1MThkMjA0OWQ0ZWQzYjRhNTY4MDk5ZDM0YjM3ZjIwZDllNDg5ZTFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9DOn10ikmlS7HXSAvaVv0mqmBSQt z/R4CX6R62btVQ+O7lwUGtH0lv+OIJNkZQsUA21dEHGAeZajcfxLrIPnSvIrOTJ4 ijKPN0eA2ldFyxIy9yiKJ+Scvo0cU75yCAewzc+JGnrGkSGGu08DzZhV+JZVthh+ Nf9uhtiysoqd02XSHoqAP3469gL8ZMMyB+O5SLI/AuBEhS4I1cZr3y+oX3p08fGo hrBaBH4KDVEhlf/lTUMsp9L3GL8Udzdj4V/ZzA4VYRwd/a6FO5bBZuEU+c5utwGF /fhlDdfvHOAL9f21euJBJQHlx6szMge5HXrmV6ABrmUPSJsuavyXPs0xvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFGNIEnU7TtKVoCZ00s38g2eSJ4cMB8GA1UdIwQY MBaAFKzBmox/F0EUScfUj/kwjSSDLpUrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvck1HYWpIOFhRUlJKeDlTUC1UQ05KSU11bFNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9mNDA1YTItNGUzZS00NjIxLTk3MWQt YmY4ZjNkNDM4ODRmLzEvck1HYWpIOFhRUlJKeDlTUC1UQ05KSU11bFNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9mNDA1YTItNGUzZS00NjIxLTk3MWQtYmY4ZjNkNDM4ODRm LzEvck1HYWpIOFhRUlJKeDlTUC1UQ05KSU11bFNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAanZEQsmB TS6PEX8DoAyGAtCxy21N2saedx4aEUR3SAjAC+kKVApwKOcpHIDvbIOqg1ly06YI 4TDK6ScW+2TZXSSlI2WG3Nl6TdMHB1alv6sxd8Hjf6Od43m5EuKlMFTCZf6a8R/R TTUbgKakjzkoEDp7qSbAOSgGcRPdWUl3Ul2XXvEAj9xTRJNpFKS1c+EdGCjt3Lww gW/2EHso5UfU6jeRI6pRAe9G+Z9IEzsXI6fS+4ZRJ65rhZ3i8sNrZqyAqbwUHbuc nxj5rWlehkbzo7JNs/AYbQDj3c2vAMuRag7B6Ua0+Ba5bG2fgK0NkNk6vqTbwchP +fSIUuzC0bVgPw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:27:20 2025 by rpki-client