This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/40e57e-c627-4b9b-9577-596fa8c0a57a/1/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.mft File: MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.mft (raw, json) Hash identifier: CWNNHm/7LGE01++g67BIuctRexLEAIV7FfWdnguxw0E= Subject key identifier: F6:AB:72:D3:BD:D6:8F:5B:DB:3E:64:CB:16:60:4C:2A:B4:5B:E0:C4 Authority key identifier: 30:62:8D:92:38:E2:3D:6B:F4:C7:35:99:5C:9E:2D:EA:00:50:F0:0C Certificate issuer: /CN=30628d9238e23d6bf4c735995c9e2dea0050f00c Certificate serial: 019AF1D1E4B515AB1ADD1C181465DC8A85F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/40e57e-c627-4b9b-9577-596fa8c0a57a/1/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.mft Manifest number: 07C7 Signing time: Sat 06 Dec 2025 04:00:55 +0000 Manifest this update: Sat 06 Dec 2025 04:00:55 +0000 Manifest next update: Sun 07 Dec 2025 04:00:55 +0000 Files and hashes: 1: MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.crl (hash: ZpdHYy8ouG5CLem5DBHF/xdACA2PZ1Y9NfUFUqvOxCk=) 2: gVZpy_aU2P0Pr-2EJHA1HwKJhRU.roa (hash: P5u1LpZGGtQaGv/FeFmSXhXnEGgm7B33JQ+aoyUNOOk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/40e57e-c627-4b9b-9577-596fa8c0a57a/1/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/40e57e-c627-4b9b-9577-596fa8c0a57a/1/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.mft rsync://rpki.ripe.net/repository/DEFAULT/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:e4:b5:15:ab:1a:dd:1c:18:14:65:dc:8a:85:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30628d9238e23d6bf4c735995c9e2dea0050f00c Validity Not Before: Dec 6 04:00:55 2025 GMT Not After : Dec 7 04:00:55 2025 GMT Subject: CN=f6ab72d3bdd68f5bdb3e64cb16604c2ab45be0c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:dd:f6:7e:31:20:12:96:aa:f9:22:fc:89:f4: d3:8a:e9:17:9d:81:91:8d:42:d2:d3:6d:c1:72:e7: 81:86:ac:53:74:a4:be:cc:09:8c:20:08:ef:e6:a2: c9:92:87:9c:6a:94:08:81:8a:92:6c:b6:cc:94:e9: d8:2e:a3:40:e6:f9:29:af:a9:f2:a1:b7:db:24:94: 96:bc:9c:cb:19:d7:58:38:f0:8f:12:56:70:b9:c4: a5:fd:b4:90:a6:35:4e:af:25:49:27:04:42:fa:d6: de:4b:66:63:5f:39:a8:48:a0:81:51:22:2b:11:09: ba:78:b2:10:d2:e8:5d:9d:54:cf:c4:55:a3:3c:a7: 3b:a9:32:fb:81:ab:80:22:f5:f8:8c:bb:cd:3c:e2: ea:59:d8:a6:22:7e:2b:46:49:f3:a6:cb:be:98:4a: 84:30:8d:6b:67:a2:9f:e5:27:19:61:5c:ee:2b:4e: de:ad:9c:43:b7:78:98:8b:68:59:15:b9:97:f2:75: 83:c6:bf:da:af:38:58:d1:49:93:f5:c0:d8:23:ee: 8e:87:e9:f3:02:18:72:14:2a:94:ef:8c:0f:d0:3f: 02:eb:75:21:f1:6b:15:e4:00:96:e6:64:14:43:27: d6:ee:85:72:dc:25:1c:0b:14:ee:64:fd:c5:66:d7: b3:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:AB:72:D3:BD:D6:8F:5B:DB:3E:64:CB:16:60:4C:2A:B4:5B:E0:C4 X509v3 Authority Key Identifier: keyid:30:62:8D:92:38:E2:3D:6B:F4:C7:35:99:5C:9E:2D:EA:00:50:F0:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/40e57e-c627-4b9b-9577-596fa8c0a57a/1/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/40e57e-c627-4b9b-9577-596fa8c0a57a/1/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:08:34:25:a1:df:65:25:65:fb:58:30:6b:03:67:84:ad:13: 8e:3f:47:61:07:3c:d3:0f:45:78:bc:eb:e2:a9:64:6e:b7:8a: 38:96:d2:53:61:84:4c:d7:1f:6b:82:e9:02:0d:5d:14:1a:14: 9c:db:2c:e3:94:61:75:6b:42:7c:9f:bd:c8:5c:09:b7:c0:1b: 47:75:52:38:e4:19:ee:fa:89:8c:39:2e:b1:aa:d8:0d:ea:7d: a1:2f:11:62:69:37:2c:3e:09:79:7f:79:4b:a5:4e:54:88:21: 7b:b3:0e:87:bd:2c:5e:1a:95:2b:96:b7:ef:a7:df:5c:83:44: 76:29:61:b3:ec:3a:f5:a5:86:f4:0c:6c:b8:ec:98:36:6b:56: a8:86:1a:98:98:1c:a1:6c:3b:cb:d9:8b:af:b4:5f:16:75:9c: 68:42:4e:08:5c:de:96:df:77:36:45:8c:90:9d:34:93:af:f3: 10:c6:b1:30:56:eb:0c:f7:8a:04:16:99:0f:fc:13:f1:a2:32: 00:8e:be:f1:6f:78:dd:7c:2d:98:c3:27:e7:6c:96:04:29:72: 9b:2b:f7:fe:a7:47:4f:46:95:52:59:8b:da:e3:d1:8f:b8:8b: a5:64:59:61:8b:eb:68:6b:7d:c5:49:62:6e:60:67:54:58:cc: 7b:d8:bc:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0eS1Fasa3RwYFGXcioXwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwNjI4ZDkyMzhlMjNkNmJmNGM3MzU5OTVjOWUyZGVhMDA1 MGYwMGMwHhcNMjUxMjA2MDQwMDU1WhcNMjUxMjA3MDQwMDU1WjAzMTEwLwYDVQQD EyhmNmFiNzJkM2JkZDY4ZjViZGIzZTY0Y2IxNjYwNGMyYWI0NWJlMGM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnt32fjEgEpaq+SL8ifTTiukXnYGR jULS023BcueBhqxTdKS+zAmMIAjv5qLJkoecapQIgYqSbLbMlOnYLqNA5vkpr6ny obfbJJSWvJzLGddYOPCPElZwucSl/bSQpjVOryVJJwRC+tbeS2ZjXzmoSKCBUSIr EQm6eLIQ0uhdnVTPxFWjPKc7qTL7gauAIvX4jLvNPOLqWdimIn4rRknzpsu+mEqE MI1rZ6Kf5ScZYVzuK07erZxDt3iYi2hZFbmX8nWDxr/arzhY0UmT9cDYI+6Oh+nz AhhyFCqU74wP0D8C63Uh8WsV5ACW5mQUQyfW7oVy3CUcCxTuZP3FZtezTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFParctO91o9b2z5kyxZgTCq0W+DEMB8GA1UdIwQY MBaAFDBijZI44j1r9Mc1mVyeLeoAUPAMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUdLTmtqamlQV3YweHpXWlhKNHQ2Z0JROEF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS80MGU1N2UtYzYyNy00YjliLTk1Nzct NTk2ZmE4YzBhNTdhLzEvTUdLTmtqamlQV3YweHpXWlhKNHQ2Z0JROEF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS80MGU1N2UtYzYyNy00YjliLTk1NzctNTk2ZmE4YzBhNTdh LzEvTUdLTmtqamlQV3YweHpXWlhKNHQ2Z0JROEF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmQg0JaHf ZSVl+1gwawNnhK0Tjj9HYQc80w9FeLzr4qlkbreKOJbSU2GETNcfa4LpAg1dFBoU nNss45RhdWtCfJ+9yFwJt8AbR3VSOOQZ7vqJjDkusarYDep9oS8RYmk3LD4JeX95 S6VOVIghe7MOh70sXhqVK5a376ffXINEdilhs+w69aWG9AxsuOyYNmtWqIYamJgc oWw7y9mLr7RfFnWcaEJOCFzelt93NkWMkJ00k6/zEMaxMFbrDPeKBBaZD/wT8aIy AI6+8W943XwtmMMn52yWBClymyv3/qdHT0aVUlmL2uPRj7iLpWRZYYvraGt9xUli bmBnVFjMe9i8dw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:00:15 2025 by rpki-client