This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/863c04-b07e-4c3a-9f45-fe2474d2f07c/1/mgGl7N4ueVkyWREG0II9DRVPcAI.mft File: mgGl7N4ueVkyWREG0II9DRVPcAI.mft (raw, json) Hash identifier: z4u4k72uDhJh3OfqwzzPJl7eyxrKGpxRSePkr238IKI= Subject key identifier: 0A:02:4B:90:C7:CC:38:43:D2:E3:46:21:7E:E8:E3:F5:E7:83:9A:F5 Authority key identifier: 9A:01:A5:EC:DE:2E:79:59:32:59:11:06:D0:82:3D:0D:15:4F:70:02 Certificate issuer: /CN=9a01a5ecde2e795932591106d0823d0d154f7002 Certificate serial: 019AF12D8813418D7AE17BBDF2D5981FB629 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mgGl7N4ueVkyWREG0II9DRVPcAI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/863c04-b07e-4c3a-9f45-fe2474d2f07c/1/mgGl7N4ueVkyWREG0II9DRVPcAI.mft Manifest number: 088D Signing time: Sat 06 Dec 2025 01:01:24 +0000 Manifest this update: Sat 06 Dec 2025 01:01:24 +0000 Manifest next update: Sun 07 Dec 2025 01:01:24 +0000 Files and hashes: 1: mgGl7N4ueVkyWREG0II9DRVPcAI.crl (hash: 8s2LFYHnKO460MqoErGNtZs4vVuAFFMnlWnO+hHUeis=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/863c04-b07e-4c3a-9f45-fe2474d2f07c/1/mgGl7N4ueVkyWREG0II9DRVPcAI.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/863c04-b07e-4c3a-9f45-fe2474d2f07c/1/mgGl7N4ueVkyWREG0II9DRVPcAI.mft rsync://rpki.ripe.net/repository/DEFAULT/mgGl7N4ueVkyWREG0II9DRVPcAI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:88:13:41:8d:7a:e1:7b:bd:f2:d5:98:1f:b6:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a01a5ecde2e795932591106d0823d0d154f7002 Validity Not Before: Dec 6 01:01:24 2025 GMT Not After : Dec 7 01:01:24 2025 GMT Subject: CN=0a024b90c7cc3843d2e346217ee8e3f5e7839af5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:60:23:fa:38:40:df:bc:04:f6:65:3f:19:cc: e6:e7:94:9d:b3:92:da:f7:28:ef:a4:d2:6a:3c:d2: be:a4:e4:8f:55:ba:00:6e:73:90:59:6a:2c:50:c7: c4:63:7f:7a:2c:a7:c6:fb:03:18:50:7d:a4:2e:7e: 7b:21:45:21:39:2f:2e:33:71:62:49:d6:c5:06:c6: 5a:22:33:69:f9:45:bd:89:86:d8:f6:83:21:69:2b: ac:86:96:c8:6b:83:50:ec:ef:6f:1a:f2:96:4f:9e: f9:01:1d:1c:30:19:a7:8b:b9:e2:b0:d8:2a:d4:7f: 57:1c:d3:af:79:e9:13:c3:a8:b1:90:09:55:eb:ed: 9c:42:41:f8:c5:66:96:72:d5:c7:32:a6:d0:39:8f: 51:cc:89:98:df:32:92:88:b1:bf:0a:e9:b6:bb:30: dc:78:90:a5:b9:fa:bc:99:73:4c:47:7c:74:b7:13: 66:c6:e4:5c:49:94:f8:47:58:d0:cc:6d:90:cc:f9: 23:3a:e0:3c:87:62:71:05:d8:3b:19:01:fa:3a:e2: ee:47:a8:5e:6a:c6:05:be:70:49:bf:05:f4:d5:63: 5d:bf:d0:9e:09:b3:84:b7:2f:27:86:f4:b4:5a:d7: c4:1b:a4:1d:c2:2a:de:38:9e:d9:66:39:66:68:d4: a2:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:02:4B:90:C7:CC:38:43:D2:E3:46:21:7E:E8:E3:F5:E7:83:9A:F5 X509v3 Authority Key Identifier: keyid:9A:01:A5:EC:DE:2E:79:59:32:59:11:06:D0:82:3D:0D:15:4F:70:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mgGl7N4ueVkyWREG0II9DRVPcAI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/863c04-b07e-4c3a-9f45-fe2474d2f07c/1/mgGl7N4ueVkyWREG0II9DRVPcAI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/863c04-b07e-4c3a-9f45-fe2474d2f07c/1/mgGl7N4ueVkyWREG0II9DRVPcAI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:0b:8b:98:2e:9f:20:0a:85:28:29:ae:98:c1:f9:e0:cd:b2: f0:4e:af:c0:a2:65:0f:3b:54:55:61:c4:f7:aa:e4:ff:72:70: 46:91:c6:03:fa:4d:04:20:ce:34:9e:72:25:f7:0a:05:79:2a: 09:9b:be:66:97:ea:15:16:57:43:26:2f:2c:86:5e:bd:18:5d: b1:d0:1b:b9:01:b9:02:83:f2:0f:77:e3:84:d9:f9:ca:48:02: 1e:66:d5:d9:8f:f8:a1:5d:a0:d7:ab:e4:4f:b3:37:1d:be:12: 6c:0f:51:9f:df:41:cf:b4:a1:b6:d2:8b:d7:f6:b2:e4:ff:42: 2d:de:30:27:89:f1:36:cb:94:52:da:3b:ce:e6:b6:9e:ff:90: 1f:65:ca:9a:0e:59:34:86:7e:f5:6e:05:17:2e:e4:1a:fb:61: 8f:ec:a7:8f:5e:c5:e6:ae:b4:12:0a:ae:ae:53:c8:1e:fc:04: 3f:7f:b3:03:16:ea:04:d5:4c:1c:7b:cd:6b:8a:55:8f:39:93: c1:f8:51:2c:6f:fe:e8:8e:8d:1d:33:fc:45:8c:52:45:a9:c5: 4d:b8:18:ff:14:cc:18:2d:16:58:37:3d:17:f3:b8:f2:23:1a: 5b:55:80:69:56:0a:e8:6c:c8:05:82:aa:45:c0:d4:b9:44:3b: e9:c5:af:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLYgTQY164Xu98tWYH7YpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhMDFhNWVjZGUyZTc5NTkzMjU5MTEwNmQwODIzZDBkMTU0 ZjcwMDIwHhcNMjUxMjA2MDEwMTI0WhcNMjUxMjA3MDEwMTI0WjAzMTEwLwYDVQQD EygwYTAyNGI5MGM3Y2MzODQzZDJlMzQ2MjE3ZWU4ZTNmNWU3ODM5YWY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGAj+jhA37wE9mU/Gczm55Sds5La 9yjvpNJqPNK+pOSPVboAbnOQWWosUMfEY396LKfG+wMYUH2kLn57IUUhOS8uM3Fi SdbFBsZaIjNp+UW9iYbY9oMhaSushpbIa4NQ7O9vGvKWT575AR0cMBmni7nisNgq 1H9XHNOveekTw6ixkAlV6+2cQkH4xWaWctXHMqbQOY9RzImY3zKSiLG/Cum2uzDc eJClufq8mXNMR3x0txNmxuRcSZT4R1jQzG2QzPkjOuA8h2JxBdg7GQH6OuLuR6he asYFvnBJvwX01WNdv9CeCbOEty8nhvS0WtfEG6QdwireOJ7ZZjlmaNSiMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAoCS5DHzDhD0uNGIX7o4/Xng5r1MB8GA1UdIwQY MBaAFJoBpezeLnlZMlkRBtCCPQ0VT3ACMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWdHbDdONHVlVmt5V1JFRzBJSTlEUlZQY0FJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy84NjNjMDQtYjA3ZS00YzNhLTlmNDUt ZmUyNDc0ZDJmMDdjLzEvbWdHbDdONHVlVmt5V1JFRzBJSTlEUlZQY0FJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy84NjNjMDQtYjA3ZS00YzNhLTlmNDUtZmUyNDc0ZDJmMDdj LzEvbWdHbDdONHVlVmt5V1JFRzBJSTlEUlZQY0FJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACguLmC6f IAqFKCmumMH54M2y8E6vwKJlDztUVWHE96rk/3JwRpHGA/pNBCDONJ5yJfcKBXkq CZu+ZpfqFRZXQyYvLIZevRhdsdAbuQG5AoPyD3fjhNn5ykgCHmbV2Y/4oV2g16vk T7M3Hb4SbA9Rn99Bz7ShttKL1/ay5P9CLd4wJ4nxNsuUUto7zua2nv+QH2XKmg5Z NIZ+9W4FFy7kGvthj+ynj17F5q60EgqurlPIHvwEP3+zAxbqBNVMHHvNa4pVjzmT wfhRLG/+6I6NHTP8RYxSRanFTbgY/xTMGC0WWDc9F/O48iMaW1WAaVYK6GzIBYKq RcDUuUQ76cWv0A== -----END CERTIFICATE-----Generated at Sat Dec 6 06:57:13 2025 by rpki-client