This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c26199-3303-4223-9f0f-5dafc634ccd6/1/MgrQyxyPq9KnFycj8utT6gLoSmk.mft File: MgrQyxyPq9KnFycj8utT6gLoSmk.mft (raw, json) Hash identifier: 8UrTBQxd6z1z1ZD5QA/rwZ/27sLITPePUfHj0+7VCeM= Subject key identifier: F8:B3:5B:3A:B2:8C:18:05:B3:A4:C2:86:4C:B0:64:7C:CB:BD:4B:33 Authority key identifier: 32:0A:D0:CB:1C:8F:AB:D2:A7:17:27:23:F2:EB:53:EA:02:E8:4A:69 Certificate issuer: /CN=320ad0cb1c8fabd2a7172723f2eb53ea02e84a69 Certificate serial: 019AF051B7DCF115233845247D4163F3A807 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MgrQyxyPq9KnFycj8utT6gLoSmk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c26199-3303-4223-9f0f-5dafc634ccd6/1/MgrQyxyPq9KnFycj8utT6gLoSmk.mft Manifest number: 03CE Signing time: Fri 05 Dec 2025 21:01:18 +0000 Manifest this update: Fri 05 Dec 2025 21:01:18 +0000 Manifest next update: Sat 06 Dec 2025 21:01:18 +0000 Files and hashes: 1: JUrgcpIbkD2s0Xwl5MPFsKClBSA.roa (hash: h68v76M+ZVUfqYetcYYdqqWMVphcDkEUG23cxVpEUw4=) 2: MgrQyxyPq9KnFycj8utT6gLoSmk.crl (hash: c1x2QdlybXmvzhKnnF2+Ebed2H2Jt0UEoUFuqJGtXYU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c26199-3303-4223-9f0f-5dafc634ccd6/1/MgrQyxyPq9KnFycj8utT6gLoSmk.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/c26199-3303-4223-9f0f-5dafc634ccd6/1/MgrQyxyPq9KnFycj8utT6gLoSmk.mft rsync://rpki.ripe.net/repository/DEFAULT/MgrQyxyPq9KnFycj8utT6gLoSmk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 21:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:51:b7:dc:f1:15:23:38:45:24:7d:41:63:f3:a8:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=320ad0cb1c8fabd2a7172723f2eb53ea02e84a69 Validity Not Before: Dec 5 21:01:18 2025 GMT Not After : Dec 6 21:01:18 2025 GMT Subject: CN=f8b35b3ab28c1805b3a4c2864cb0647ccbbd4b33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:1c:8f:9a:9f:2f:ba:32:fb:ee:bc:e4:d3:60: 01:79:b4:85:54:1c:a9:14:54:be:cb:10:23:ff:2c: 92:27:fb:db:91:f5:f7:ee:fc:02:b6:63:ab:ab:49: 1d:d5:35:3c:82:90:31:77:ae:c0:93:54:e5:6b:29: 26:06:6c:c4:92:90:27:73:fa:27:e7:ff:6e:a3:16: 8f:78:f7:c5:f5:a0:2c:fd:6e:43:b7:f8:46:c3:8e: a1:d4:3b:27:7e:89:0c:17:81:5a:9e:4c:14:f6:37: a1:1b:5c:f7:7a:3a:02:78:3c:d8:ab:16:ef:3d:7b: 64:76:ce:e8:f4:ed:62:50:b2:29:f6:ab:4a:71:c3: 55:f2:44:a2:36:7f:b5:3a:29:25:0e:a4:a2:28:80: 76:7c:a7:fe:35:c2:a6:c6:9b:74:41:0e:60:63:90: 8d:9e:1b:b4:82:2d:c8:88:27:c9:db:3f:60:5f:3d: f5:86:73:54:97:ec:83:54:ad:b4:09:34:79:47:e0: 2c:ea:14:e6:8d:bd:a4:97:d5:d1:25:a9:fa:b8:48: 8f:a9:a0:27:bd:c6:08:f5:2e:fb:bc:43:5f:ba:e9: 8c:fb:b0:4d:3e:8a:dd:d9:df:24:90:fc:e5:f2:e9: e2:cd:f4:c1:af:b4:2d:2e:b1:8a:73:6d:16:ea:b3: 23:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:B3:5B:3A:B2:8C:18:05:B3:A4:C2:86:4C:B0:64:7C:CB:BD:4B:33 X509v3 Authority Key Identifier: keyid:32:0A:D0:CB:1C:8F:AB:D2:A7:17:27:23:F2:EB:53:EA:02:E8:4A:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MgrQyxyPq9KnFycj8utT6gLoSmk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c26199-3303-4223-9f0f-5dafc634ccd6/1/MgrQyxyPq9KnFycj8utT6gLoSmk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c26199-3303-4223-9f0f-5dafc634ccd6/1/MgrQyxyPq9KnFycj8utT6gLoSmk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:fd:d0:3d:3e:1c:db:df:e4:04:0e:89:53:f6:4b:1a:b6:9a: 88:50:27:c1:4d:4c:4b:c5:c4:13:04:8a:c4:da:30:da:e1:5c: 31:12:01:ee:9c:ee:0c:b5:14:07:06:4b:ce:b8:cf:8a:30:c3: 96:3f:35:aa:17:e7:35:22:c0:73:4a:1a:bc:77:18:60:45:73: 09:33:96:25:29:de:80:01:da:ea:ab:30:8d:a6:27:c9:19:86: ba:ff:8c:2d:fe:5a:2b:62:e7:56:c7:fa:e5:b6:da:72:74:ce: f6:05:53:73:1a:1a:2c:a3:d2:c6:f8:78:f2:88:6f:75:36:fa: 7f:f8:9c:36:7e:cd:6d:6b:31:36:9e:d4:a6:7c:29:d2:14:63: d6:23:19:e9:21:69:cb:62:85:fc:1f:e9:4b:36:8c:35:4f:a1: 94:ca:ab:2c:5b:80:8d:1d:b1:44:da:38:84:61:51:57:7c:2f: 5d:5e:6b:91:99:25:c6:8b:ba:49:7a:32:5b:54:82:a9:00:68: e8:5e:b2:1f:53:40:d9:c0:21:91:08:93:61:71:2b:31:b6:45: d2:40:cf:66:f7:88:62:1c:1b:28:21:91:79:79:3e:b9:0b:41: 0e:9e:31:f4:33:30:93:50:1d:91:0a:a2:ec:90:20:56:45:5f: d3:8f:52:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwUbfc8RUjOEUkfUFj86gHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyMGFkMGNiMWM4ZmFiZDJhNzE3MjcyM2YyZWI1M2VhMDJl ODRhNjkwHhcNMjUxMjA1MjEwMTE4WhcNMjUxMjA2MjEwMTE4WjAzMTEwLwYDVQQD EyhmOGIzNWIzYWIyOGMxODA1YjNhNGMyODY0Y2IwNjQ3Y2NiYmQ0YjMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhyPmp8vujL77rzk02ABebSFVByp FFS+yxAj/yySJ/vbkfX37vwCtmOrq0kd1TU8gpAxd67Ak1TlaykmBmzEkpAnc/on 5/9uoxaPePfF9aAs/W5Dt/hGw46h1DsnfokMF4FankwU9jehG1z3ejoCeDzYqxbv PXtkds7o9O1iULIp9qtKccNV8kSiNn+1OiklDqSiKIB2fKf+NcKmxpt0QQ5gY5CN nhu0gi3IiCfJ2z9gXz31hnNUl+yDVK20CTR5R+As6hTmjb2kl9XRJan6uEiPqaAn vcYI9S77vENfuumM+7BNPord2d8kkPzl8unizfTBr7QtLrGKc20W6rMjzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPizWzqyjBgFs6TChkywZHzLvUszMB8GA1UdIwQY MBaAFDIK0Mscj6vSpxcnI/LrU+oC6EppMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWdyUXl4eVBxOUtuRnljajh1dFQ2Z0xvU21rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9jMjYxOTktMzMwMy00MjIzLTlmMGYt NWRhZmM2MzRjY2Q2LzEvTWdyUXl4eVBxOUtuRnljajh1dFQ2Z0xvU21rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9jMjYxOTktMzMwMy00MjIzLTlmMGYtNWRhZmM2MzRjY2Q2 LzEvTWdyUXl4eVBxOUtuRnljajh1dFQ2Z0xvU21rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa/3QPT4c 29/kBA6JU/ZLGraaiFAnwU1MS8XEEwSKxNow2uFcMRIB7pzuDLUUBwZLzrjPijDD lj81qhfnNSLAc0oavHcYYEVzCTOWJSnegAHa6qswjaYnyRmGuv+MLf5aK2LnVsf6 5bbacnTO9gVTcxoaLKPSxvh48ohvdTb6f/icNn7NbWsxNp7Upnwp0hRj1iMZ6SFp y2KF/B/pSzaMNU+hlMqrLFuAjR2xRNo4hGFRV3wvXV5rkZklxou6SXoyW1SCqQBo 6F6yH1NA2cAhkQiTYXErMbZF0kDPZveIYhwbKCGReXk+uQtBDp4x9DMwk1AdkQqi 7JAgVkVf049SLw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:06:43 2025 by rpki-client