This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/5a7e46-ce1b-4955-9f39-4b311326c230/1/mgNSX2jrayNfHeIrYLG67S_H_4M.mft File: mgNSX2jrayNfHeIrYLG67S_H_4M.mft (raw, json) Hash identifier: GCcoU0/qtHM7CRoJt2S9OMp2Dz5dEU7zTttNJXu9Kmo= Subject key identifier: 33:C4:B1:2C:29:08:CC:D3:FF:DB:58:D9:76:B1:F4:9A:B8:28:23:49 Authority key identifier: 9A:03:52:5F:68:EB:6B:23:5F:1D:E2:2B:60:B1:BA:ED:2F:C7:FF:83 Certificate issuer: /CN=9a03525f68eb6b235f1de22b60b1baed2fc7ff83 Certificate serial: 019AF19B15B9CEC994ECF8A399490351F22C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mgNSX2jrayNfHeIrYLG67S_H_4M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/5a7e46-ce1b-4955-9f39-4b311326c230/1/mgNSX2jrayNfHeIrYLG67S_H_4M.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 03:01:03 +0000 Manifest this update: Sat 06 Dec 2025 03:01:03 +0000 Manifest next update: Sun 07 Dec 2025 03:01:03 +0000 Files and hashes: 1: mgNSX2jrayNfHeIrYLG67S_H_4M.crl (hash: fJWx1jMwpoPeLPDiCbXZFwnHDoMCWM/g4pxREo0rUpA=) 2: xV2TYyNPjWPupKmb43ad00Tt3n8.roa (hash: +ey9CZvGJrxa71wfksSgu55Jb8r1NMsse9tFxoel7Ig=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/5a7e46-ce1b-4955-9f39-4b311326c230/1/mgNSX2jrayNfHeIrYLG67S_H_4M.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/5a7e46-ce1b-4955-9f39-4b311326c230/1/mgNSX2jrayNfHeIrYLG67S_H_4M.mft rsync://rpki.ripe.net/repository/DEFAULT/mgNSX2jrayNfHeIrYLG67S_H_4M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:15:b9:ce:c9:94:ec:f8:a3:99:49:03:51:f2:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a03525f68eb6b235f1de22b60b1baed2fc7ff83 Validity Not Before: Dec 6 03:01:03 2025 GMT Not After : Dec 7 03:01:03 2025 GMT Subject: CN=33c4b12c2908ccd3ffdb58d976b1f49ab8282349 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:69:6a:d0:d7:d6:c2:a3:bd:7c:a0:ba:a9:dd: cd:cd:64:d8:ba:96:2d:3d:1d:0a:7e:4b:07:fc:46: 32:09:38:2e:12:56:b5:b6:0f:01:c5:65:ed:ef:6c: 86:b7:72:03:3e:83:8e:f4:97:31:a9:37:aa:94:8f: 89:1c:79:4e:b0:d2:0c:6b:83:a4:4b:08:3a:74:3b: 73:a6:92:97:58:87:24:05:c4:b5:3b:6d:29:bc:b6: 2f:b6:4e:35:6d:b1:2e:6e:e8:06:75:0f:b3:5b:64: 77:70:71:16:dc:0d:29:89:d0:ef:d8:7b:42:4e:e4: cc:b6:41:43:85:23:30:bb:24:69:ec:93:bd:77:66: 6b:c9:8f:d8:51:28:e3:4c:73:30:ce:89:93:1e:98: 04:36:ac:c9:eb:10:5b:e7:c7:b6:1f:5c:07:51:c4: 64:db:02:29:c3:94:dc:2e:c9:aa:0d:ba:dd:aa:11: 07:eb:a7:d4:43:88:d4:be:d4:24:50:04:ec:1d:6e: 87:09:3d:dc:19:58:25:72:be:a3:92:9a:26:6f:be: 37:5f:4b:90:39:8d:20:a7:6a:14:ad:ea:cc:77:4d: 05:ca:0f:d3:af:bf:d9:07:1a:e9:ad:4e:c7:35:06: 43:8f:60:4b:b4:db:3d:89:ab:53:d0:6d:4d:fc:68: 34:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:C4:B1:2C:29:08:CC:D3:FF:DB:58:D9:76:B1:F4:9A:B8:28:23:49 X509v3 Authority Key Identifier: keyid:9A:03:52:5F:68:EB:6B:23:5F:1D:E2:2B:60:B1:BA:ED:2F:C7:FF:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mgNSX2jrayNfHeIrYLG67S_H_4M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/5a7e46-ce1b-4955-9f39-4b311326c230/1/mgNSX2jrayNfHeIrYLG67S_H_4M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/5a7e46-ce1b-4955-9f39-4b311326c230/1/mgNSX2jrayNfHeIrYLG67S_H_4M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e3:61:5b:31:c9:70:cf:11:50:32:05:fb:14:0d:b4:45:61:80: 11:fb:5a:d2:1f:68:c6:a8:37:05:5a:85:d2:a9:5b:82:4d:41: 44:0a:0f:a7:74:a2:33:e9:a6:92:27:6e:51:f5:cd:6a:87:de: 49:ab:3e:94:11:85:7f:1b:01:b4:f8:0c:2c:3b:1a:98:b9:64: 17:b0:3a:c5:50:b4:35:fe:7c:43:9e:51:c5:80:13:02:e6:dc: 1f:36:22:b7:de:63:3c:89:55:59:7f:d9:44:8b:fc:13:ec:60: b0:1d:16:db:e5:7b:2b:17:ce:bd:30:6b:a0:d6:d9:0a:51:a3: 57:99:7a:ea:b6:a7:9c:55:d0:34:fb:0f:aa:98:ed:3e:43:ea: f9:47:d5:9f:de:b3:fe:4e:d9:a5:d7:f5:2e:ed:6c:3f:22:e3: 40:29:89:b9:4b:90:2d:e0:d8:90:6c:fa:72:d7:95:35:fa:bc: 7c:80:f0:48:b3:ec:9d:15:0f:b4:02:07:c1:88:a3:47:6a:69: 0d:d9:3d:6e:a3:b1:4a:56:d8:6d:0e:1a:7e:03:28:07:55:2b: 1f:e3:9e:6e:ab:af:42:13:af:98:3e:de:e6:2e:09:d1:68:17: ae:bf:23:b7:f9:06:fc:33:14:97:cb:e5:c5:67:46:72:36:fd: 91:33:c0:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmxW5zsmU7PijmUkDUfIsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhMDM1MjVmNjhlYjZiMjM1ZjFkZTIyYjYwYjFiYWVkMmZj N2ZmODMwHhcNMjUxMjA2MDMwMTAzWhcNMjUxMjA3MDMwMTAzWjAzMTEwLwYDVQQD EygzM2M0YjEyYzI5MDhjY2QzZmZkYjU4ZDk3NmIxZjQ5YWI4MjgyMzQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGlq0NfWwqO9fKC6qd3NzWTYupYt PR0KfksH/EYyCTguEla1tg8BxWXt72yGt3IDPoOO9JcxqTeqlI+JHHlOsNIMa4Ok Swg6dDtzppKXWIckBcS1O20pvLYvtk41bbEubugGdQ+zW2R3cHEW3A0pidDv2HtC TuTMtkFDhSMwuyRp7JO9d2ZryY/YUSjjTHMwzomTHpgENqzJ6xBb58e2H1wHUcRk 2wIpw5TcLsmqDbrdqhEH66fUQ4jUvtQkUATsHW6HCT3cGVglcr6jkpomb743X0uQ OY0gp2oUrerMd00Fyg/Tr7/ZBxrprU7HNQZDj2BLtNs9iatT0G1N/Gg0/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDPEsSwpCMzT/9tY2Xax9Jq4KCNJMB8GA1UdIwQY MBaAFJoDUl9o62sjXx3iK2Cxuu0vx/+DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWdOU1gyanJheU5mSGVJcllMRzY3U19IXzRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy81YTdlNDYtY2UxYi00OTU1LTlmMzkt NGIzMTEzMjZjMjMwLzEvbWdOU1gyanJheU5mSGVJcllMRzY3U19IXzRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy81YTdlNDYtY2UxYi00OTU1LTlmMzktNGIzMTEzMjZjMjMw LzEvbWdOU1gyanJheU5mSGVJcllMRzY3U19IXzRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA42FbMclw zxFQMgX7FA20RWGAEfta0h9oxqg3BVqF0qlbgk1BRAoPp3SiM+mmkiduUfXNaofe Sas+lBGFfxsBtPgMLDsamLlkF7A6xVC0Nf58Q55RxYATAubcHzYit95jPIlVWX/Z RIv8E+xgsB0W2+V7KxfOvTBroNbZClGjV5l66rannFXQNPsPqpjtPkPq+UfVn96z /k7Zpdf1Lu1sPyLjQCmJuUuQLeDYkGz6cteVNfq8fIDwSLPsnRUPtAIHwYijR2pp Ddk9bqOxSlbYbQ4afgMoB1UrH+OebquvQhOvmD7e5i4J0WgXrr8jt/kG/DMUl8vl xWdGcjb9kTPAIg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:21:53 2025 by rpki-client