This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/a8941a-7250-48ec-aaf8-6d8ea9d1cd73/1/MGE0vPWfWB1rdmMM-oeGeHaikhU.mft File: MGE0vPWfWB1rdmMM-oeGeHaikhU.mft (raw, json) Hash identifier: 4bJjBAFYEjkuCc9wxDyTTU4YnmdN62kofc1639TPNRM= Subject key identifier: 40:E4:1D:46:AB:7D:69:2A:05:A7:7F:32:77:6B:02:F4:39:45:78:BC Authority key identifier: 30:61:34:BC:F5:9F:58:1D:6B:76:63:0C:FA:87:86:78:76:A2:92:15 Certificate issuer: /CN=306134bcf59f581d6b76630cfa87867876a29215 Certificate serial: 019AF12D53C770722F63BCF2D33EB410E8D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGE0vPWfWB1rdmMM-oeGeHaikhU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/a8941a-7250-48ec-aaf8-6d8ea9d1cd73/1/MGE0vPWfWB1rdmMM-oeGeHaikhU.mft Manifest number: 1300 Signing time: Sat 06 Dec 2025 01:01:10 +0000 Manifest this update: Sat 06 Dec 2025 01:01:10 +0000 Manifest next update: Sun 07 Dec 2025 01:01:10 +0000 Files and hashes: 1: MGE0vPWfWB1rdmMM-oeGeHaikhU.crl (hash: qfJIVJTZE37GDaaxLjMY3kwCnQH5wydsDjmjoVZKWa4=) 2: iyT2rEaTLGTQJtoCzDixmDHk4q8.roa (hash: DJdcXuwOyrFSr66rkLo/Y+8lRD0xwqdql+52mCZmuDA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/a8941a-7250-48ec-aaf8-6d8ea9d1cd73/1/MGE0vPWfWB1rdmMM-oeGeHaikhU.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/a8941a-7250-48ec-aaf8-6d8ea9d1cd73/1/MGE0vPWfWB1rdmMM-oeGeHaikhU.mft rsync://rpki.ripe.net/repository/DEFAULT/MGE0vPWfWB1rdmMM-oeGeHaikhU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:53:c7:70:72:2f:63:bc:f2:d3:3e:b4:10:e8:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=306134bcf59f581d6b76630cfa87867876a29215 Validity Not Before: Dec 6 01:01:10 2025 GMT Not After : Dec 7 01:01:10 2025 GMT Subject: CN=40e41d46ab7d692a05a77f32776b02f4394578bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a4:69:f8:f5:4d:bf:60:5c:d3:c7:86:14:00: c3:f0:f9:7b:22:06:ad:71:5b:63:b8:27:d1:b6:b2: 00:12:c8:fc:2f:92:bf:8a:cf:fb:66:8b:d0:7f:1d: 24:74:fa:54:02:41:a5:c0:69:35:14:00:e7:12:5b: 21:85:c5:2f:87:48:e0:07:cf:e3:06:72:55:c6:8a: 9a:e7:7d:cd:f5:e1:c6:5a:da:3d:dc:86:e2:d6:3c: 0f:9f:04:3a:b1:fb:f7:19:02:11:d4:f9:1f:3e:a9: 9d:48:7c:9f:32:01:d0:95:8f:68:45:46:87:3d:0d: fa:36:a2:8d:10:73:96:a9:2b:cc:03:f2:ec:29:64: a3:de:73:45:68:c1:c9:e8:43:c4:53:63:56:ea:6f: 13:b6:56:1f:35:3e:c0:eb:e6:46:26:70:7f:b5:ed: e7:4b:a3:40:85:97:98:0a:ec:f8:07:8c:0f:78:93: 8a:ac:28:b6:75:3b:2b:18:1c:fd:06:9d:07:66:5b: cc:27:70:da:96:93:02:ab:25:1b:a2:be:ef:0a:15: b5:d6:28:06:fc:fd:15:f4:48:21:e5:1e:2d:8c:b9: b2:5a:c4:71:32:ca:7e:54:94:73:9c:a1:26:b7:97: cc:56:15:80:2a:1a:5e:dd:76:a2:99:fe:ca:f1:4b: f2:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:E4:1D:46:AB:7D:69:2A:05:A7:7F:32:77:6B:02:F4:39:45:78:BC X509v3 Authority Key Identifier: keyid:30:61:34:BC:F5:9F:58:1D:6B:76:63:0C:FA:87:86:78:76:A2:92:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGE0vPWfWB1rdmMM-oeGeHaikhU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a8941a-7250-48ec-aaf8-6d8ea9d1cd73/1/MGE0vPWfWB1rdmMM-oeGeHaikhU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a8941a-7250-48ec-aaf8-6d8ea9d1cd73/1/MGE0vPWfWB1rdmMM-oeGeHaikhU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:1d:4c:a1:54:48:a7:cc:59:57:d7:ca:75:4f:f9:c3:ff:9b: 19:36:87:3d:c6:9e:2b:45:2f:7f:10:05:1b:bf:2f:bf:2c:48: 0b:12:b0:7f:70:d0:73:d3:4d:7a:58:ab:91:ba:ed:57:67:5d: 07:7c:d7:a7:89:23:71:77:df:08:be:98:67:32:b3:ab:ae:39: d9:1d:ae:65:c0:f4:a1:3a:fc:b0:bf:4f:99:ef:cc:63:70:d9: 78:ec:03:29:b5:ca:77:fa:70:79:92:31:20:55:04:43:fb:e7: 55:50:21:66:5b:56:08:6a:23:4a:0c:1c:c1:a5:62:d9:e4:2f: 9d:e4:0c:87:6d:8c:8a:38:cf:8a:1a:49:a1:5d:bb:0e:3d:54: fb:9c:4f:03:dd:33:81:d7:5e:df:ba:61:a5:ae:22:7b:b1:41: ea:92:ab:d9:c4:42:3d:be:eb:4b:b5:68:df:5d:85:eb:a7:a1: 41:2b:30:3b:1b:18:60:56:e7:03:69:38:6e:1c:03:7c:35:b9: c0:9c:75:39:96:4d:05:0f:b4:e4:28:3e:92:ef:3e:d1:f4:29: e0:9c:45:8d:a0:0d:2f:10:c2:d6:92:cb:39:2c:fc:c4:53:f5: 61:0d:24:2e:31:f5:9f:5c:8b:1d:a1:e2:c1:23:05:c7:d7:d9: fa:e6:19:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLVPHcHIvY7zy0z60EOjRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwNjEzNGJjZjU5ZjU4MWQ2Yjc2NjMwY2ZhODc4Njc4NzZh MjkyMTUwHhcNMjUxMjA2MDEwMTEwWhcNMjUxMjA3MDEwMTEwWjAzMTEwLwYDVQQD Eyg0MGU0MWQ0NmFiN2Q2OTJhMDVhNzdmMzI3NzZiMDJmNDM5NDU3OGJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6Rp+PVNv2Bc08eGFADD8Pl7Igat cVtjuCfRtrIAEsj8L5K/is/7ZovQfx0kdPpUAkGlwGk1FADnElshhcUvh0jgB8/j BnJVxoqa533N9eHGWto93Ibi1jwPnwQ6sfv3GQIR1PkfPqmdSHyfMgHQlY9oRUaH PQ36NqKNEHOWqSvMA/LsKWSj3nNFaMHJ6EPEU2NW6m8TtlYfNT7A6+ZGJnB/te3n S6NAhZeYCuz4B4wPeJOKrCi2dTsrGBz9Bp0HZlvMJ3DalpMCqyUbor7vChW11igG /P0V9Egh5R4tjLmyWsRxMsp+VJRznKEmt5fMVhWAKhpe3Xaimf7K8UvyXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEDkHUarfWkqBad/MndrAvQ5RXi8MB8GA1UdIwQY MBaAFDBhNLz1n1gda3ZjDPqHhnh2opIVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUdFMHZQV2ZXQjFyZG1NTS1vZUdlSGFpa2hVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9hODk0MWEtNzI1MC00OGVjLWFhZjgt NmQ4ZWE5ZDFjZDczLzEvTUdFMHZQV2ZXQjFyZG1NTS1vZUdlSGFpa2hVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9hODk0MWEtNzI1MC00OGVjLWFhZjgtNmQ4ZWE5ZDFjZDcz LzEvTUdFMHZQV2ZXQjFyZG1NTS1vZUdlSGFpa2hVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmR1MoVRI p8xZV9fKdU/5w/+bGTaHPcaeK0UvfxAFG78vvyxICxKwf3DQc9NNelirkbrtV2dd B3zXp4kjcXffCL6YZzKzq6452R2uZcD0oTr8sL9Pme/MY3DZeOwDKbXKd/pweZIx IFUEQ/vnVVAhZltWCGojSgwcwaVi2eQvneQMh22MijjPihpJoV27Dj1U+5xPA90z gdde37phpa4ie7FB6pKr2cRCPb7rS7Vo312F66ehQSswOxsYYFbnA2k4bhwDfDW5 wJx1OZZNBQ+05Cg+ku8+0fQp4JxFjaANLxDC1pLLOSz8xFP1YQ0kLjH1n1yLHaHi wSMFx9fZ+uYZAQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:21:16 2025 by rpki-client