This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/d58401-a67c-4583-b9b6-64166c695378/1/MGHmFV4_NfiOa0TNNV5uk26SGmw.mft File: MGHmFV4_NfiOa0TNNV5uk26SGmw.mft (raw, json) Hash identifier: XHUsaoOZbG8ukmKzPzDP/kFBj+/qRBuinbCS5ipXh3E= Subject key identifier: A4:2A:D7:47:68:E7:5B:0A:6D:24:A3:28:D8:44:99:7B:B3:CB:26:17 Authority key identifier: 30:61:E6:15:5E:3F:35:F8:8E:6B:44:CD:35:5E:6E:93:6E:92:1A:6C Certificate issuer: /CN=3061e6155e3f35f88e6b44cd355e6e936e921a6c Certificate serial: 019AF276B1402D0BA9898923E7AF868A07E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGHmFV4_NfiOa0TNNV5uk26SGmw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/d58401-a67c-4583-b9b6-64166c695378/1/MGHmFV4_NfiOa0TNNV5uk26SGmw.mft Manifest number: 32 Signing time: Sat 06 Dec 2025 07:00:56 +0000 Manifest this update: Sat 06 Dec 2025 07:00:56 +0000 Manifest next update: Sun 07 Dec 2025 07:00:56 +0000 Files and hashes: 1: L0Wgt6xy2_efOy0o9WcyrAyNUp4.roa (hash: yeLYvznrSt7d+qJl0WN+vNuuMTz+k0iTPIwg6DAcL4g=) 2: MGHmFV4_NfiOa0TNNV5uk26SGmw.crl (hash: pSATJ7X4IsYdy73EYCZi7HyJcnJOjTOkuDd+oFpR5Ao=) 3: v3biHIz9iCACLZeXN_eg8uesj-Q.roa (hash: ujw9A7xfx5scenbbuXNKapwY0W4NLiOl0vr5ahhGLQY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/d58401-a67c-4583-b9b6-64166c695378/1/MGHmFV4_NfiOa0TNNV5uk26SGmw.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/d58401-a67c-4583-b9b6-64166c695378/1/MGHmFV4_NfiOa0TNNV5uk26SGmw.mft rsync://rpki.ripe.net/repository/DEFAULT/MGHmFV4_NfiOa0TNNV5uk26SGmw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:b1:40:2d:0b:a9:89:89:23:e7:af:86:8a:07:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3061e6155e3f35f88e6b44cd355e6e936e921a6c Validity Not Before: Dec 6 07:00:56 2025 GMT Not After : Dec 7 07:00:56 2025 GMT Subject: CN=a42ad74768e75b0a6d24a328d844997bb3cb2617 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e1:4f:24:5e:b5:9c:c9:f5:4d:3d:5e:8f:26: cf:40:b5:67:c0:8e:c2:89:6d:24:a5:7d:94:0f:e1: 42:b8:31:3b:3a:88:a7:72:94:db:de:cf:06:b3:84: b0:03:1c:55:c5:cc:69:43:ee:44:81:50:12:1d:38: 3a:c6:c7:b7:eb:11:e6:f3:08:2d:ef:3e:21:dd:2d: 78:5d:17:30:cc:ba:21:56:4a:b7:4d:c9:8a:34:43: cf:00:3b:38:fa:31:be:9d:7a:eb:19:1a:a3:83:6e: 97:9c:a2:54:f1:b1:37:7b:bb:ef:0f:50:76:88:ec: ff:2b:88:5e:d2:a8:04:e3:be:ca:95:6c:1d:9e:c4: 6a:db:f7:33:02:86:94:6e:0b:b3:6f:37:6c:2c:dd: 23:c3:00:67:c4:1f:7c:22:39:cc:b1:30:67:f8:27: eb:c6:85:24:5d:1d:a7:e9:79:b8:3e:02:5c:83:a3: 48:9c:c3:3d:12:cf:b1:a3:df:a9:00:c3:3b:67:60: 2a:20:35:bd:63:70:bc:9a:18:32:95:cd:af:4a:7b: b0:30:f4:c0:5f:0f:3b:71:1a:d6:4d:7e:8b:da:d9: 1d:67:28:c1:2c:e4:a5:50:50:95:b6:44:92:3d:76: 57:10:85:99:26:4d:31:88:44:d7:41:9d:97:1d:2f: 03:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:2A:D7:47:68:E7:5B:0A:6D:24:A3:28:D8:44:99:7B:B3:CB:26:17 X509v3 Authority Key Identifier: keyid:30:61:E6:15:5E:3F:35:F8:8E:6B:44:CD:35:5E:6E:93:6E:92:1A:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGHmFV4_NfiOa0TNNV5uk26SGmw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d58401-a67c-4583-b9b6-64166c695378/1/MGHmFV4_NfiOa0TNNV5uk26SGmw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d58401-a67c-4583-b9b6-64166c695378/1/MGHmFV4_NfiOa0TNNV5uk26SGmw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:6a:8b:19:28:7f:89:74:af:81:f3:74:b9:3a:b0:90:00:b3: 11:62:85:c1:b9:9a:89:8f:d5:ee:8c:9c:92:57:df:de:b0:e2: 1b:85:ec:1e:7c:d6:c1:21:1f:49:08:61:fc:12:22:c2:92:a1: 48:4d:f7:e7:04:0e:55:9a:2c:e1:de:ae:a4:05:92:df:ef:cc: 1f:65:85:90:ec:67:e3:f1:75:e8:07:13:f3:f9:92:bd:a9:35: 1e:42:0f:6a:e0:5a:7b:d1:1b:b4:16:81:83:51:56:84:bc:f4: 69:2e:51:af:74:02:94:dd:ab:6b:87:74:6f:12:9e:a8:f7:74: 50:c8:29:b5:3b:b4:d3:f4:94:03:a8:12:66:76:97:de:6d:d9: 35:64:49:67:9e:de:b1:f6:4a:ae:9a:fe:b4:a0:4a:f7:da:0a: c1:a4:7a:b4:56:06:d9:ec:f8:bc:74:31:51:28:28:f9:12:c7: 22:30:54:f1:ae:d1:58:ee:1f:d5:4a:da:b9:50:53:78:bd:38: 90:00:0c:4c:50:c4:55:c4:ce:72:03:1c:e3:f3:6f:a3:1a:17: dc:af:dd:aa:a3:8c:91:b5:ce:53:ba:15:df:e2:07:6b:61:bd: 26:08:4f:98:d7:71:15:d8:0b:5a:df:e1:c2:ac:63:b2:c8:ab: c5:2f:e5:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydrFALQupiYkj56+GigfhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwNjFlNjE1NWUzZjM1Zjg4ZTZiNDRjZDM1NWU2ZTkzNmU5 MjFhNmMwHhcNMjUxMjA2MDcwMDU2WhcNMjUxMjA3MDcwMDU2WjAzMTEwLwYDVQQD EyhhNDJhZDc0NzY4ZTc1YjBhNmQyNGEzMjhkODQ0OTk3YmIzY2IyNjE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquFPJF61nMn1TT1ejybPQLVnwI7C iW0kpX2UD+FCuDE7OoincpTb3s8Gs4SwAxxVxcxpQ+5EgVASHTg6xse36xHm8wgt 7z4h3S14XRcwzLohVkq3TcmKNEPPADs4+jG+nXrrGRqjg26XnKJU8bE3e7vvD1B2 iOz/K4he0qgE477KlWwdnsRq2/czAoaUbguzbzdsLN0jwwBnxB98IjnMsTBn+Cfr xoUkXR2n6Xm4PgJcg6NInMM9Es+xo9+pAMM7Z2AqIDW9Y3C8mhgylc2vSnuwMPTA Xw87cRrWTX6L2tkdZyjBLOSlUFCVtkSSPXZXEIWZJk0xiETXQZ2XHS8DKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKQq10do51sKbSSjKNhEmXuzyyYXMB8GA1UdIwQY MBaAFDBh5hVePzX4jmtEzTVebpNukhpsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUdIbUZWNF9OZmlPYTBUTk5WNXVrMjZTR213LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9kNTg0MDEtYTY3Yy00NTgzLWI5YjYt NjQxNjZjNjk1Mzc4LzEvTUdIbUZWNF9OZmlPYTBUTk5WNXVrMjZTR213Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9kNTg0MDEtYTY3Yy00NTgzLWI5YjYtNjQxNjZjNjk1Mzc4 LzEvTUdIbUZWNF9OZmlPYTBUTk5WNXVrMjZTR213LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwGqLGSh/ iXSvgfN0uTqwkACzEWKFwbmaiY/V7oycklff3rDiG4XsHnzWwSEfSQhh/BIiwpKh SE335wQOVZos4d6upAWS3+/MH2WFkOxn4/F16AcT8/mSvak1HkIPauBae9EbtBaB g1FWhLz0aS5Rr3QClN2ra4d0bxKeqPd0UMgptTu00/SUA6gSZnaX3m3ZNWRJZ57e sfZKrpr+tKBK99oKwaR6tFYG2ez4vHQxUSgo+RLHIjBU8a7RWO4f1UrauVBTeL04 kAAMTFDEVcTOcgMc4/NvoxoX3K/dqqOMkbXOU7oV3+IHa2G9JghPmNdxFdgLWt/h wqxjssirxS/lZQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:02:17 2025 by rpki-client