This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/30f34e-e2ad-4b8d-8ce0-011878255ba7/1/MGY7W3BEIyuYmBjRLMkEkCElJN8.mft File: MGY7W3BEIyuYmBjRLMkEkCElJN8.mft (raw, json) Hash identifier: DPsNF/s8L5uW7cAtdM48mR1C1iuvFCEkF5GZCOARFRM= Subject key identifier: CC:DC:59:7E:BB:69:88:F3:27:DB:57:27:B0:7D:0E:F1:C0:46:0E:11 Authority key identifier: 30:66:3B:5B:70:44:23:2B:98:98:18:D1:2C:C9:04:90:21:25:24:DF Certificate issuer: /CN=30663b5b7044232b989818d12cc90490212524df Certificate serial: 019AF50B891E082997AB538A6ACF04EDA830 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGY7W3BEIyuYmBjRLMkEkCElJN8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/30f34e-e2ad-4b8d-8ce0-011878255ba7/1/MGY7W3BEIyuYmBjRLMkEkCElJN8.mft Manifest number: 0278 Signing time: Sat 06 Dec 2025 19:02:44 +0000 Manifest this update: Sat 06 Dec 2025 19:02:44 +0000 Manifest next update: Sun 07 Dec 2025 19:02:44 +0000 Files and hashes: 1: MGY7W3BEIyuYmBjRLMkEkCElJN8.crl (hash: kZ7BE9Vp8XcZkZJIQ/26qyAQnrLQPlml0J2rN8Wl8vg=) 2: jl5BGicOacjnQYcT0f92Ohaidfk.roa (hash: 2+8T//3NgApFzgg77XKjZhpHy2WC3GoSuHjoqbCDjuc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/30f34e-e2ad-4b8d-8ce0-011878255ba7/1/MGY7W3BEIyuYmBjRLMkEkCElJN8.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/30f34e-e2ad-4b8d-8ce0-011878255ba7/1/MGY7W3BEIyuYmBjRLMkEkCElJN8.mft rsync://rpki.ripe.net/repository/DEFAULT/MGY7W3BEIyuYmBjRLMkEkCElJN8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:02:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:89:1e:08:29:97:ab:53:8a:6a:cf:04:ed:a8:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30663b5b7044232b989818d12cc90490212524df Validity Not Before: Dec 6 19:02:44 2025 GMT Not After : Dec 7 19:02:44 2025 GMT Subject: CN=ccdc597ebb6988f327db5727b07d0ef1c0460e11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:c0:fb:52:8d:67:3e:fe:40:f6:e3:54:6b:8d: 7d:c8:85:7a:19:5b:4e:77:ff:f2:b8:46:1a:96:c7: ce:a3:da:cb:eb:d5:9f:72:9d:20:4c:23:f3:43:06: 3c:1c:92:20:70:ce:c2:ef:98:55:d0:00:cf:bd:48: 1e:28:5c:d6:97:37:6b:65:9c:87:e3:1c:bd:d2:74: 20:1b:ef:33:ec:16:0a:29:e8:37:0c:95:dd:38:93: 9a:ce:fa:27:4b:e8:c2:52:92:49:b2:5d:87:8b:65: 25:2d:fb:98:04:7a:98:97:e2:69:9d:12:05:4d:a4: 8c:c9:b5:15:b5:13:ea:8c:9e:bb:48:59:97:45:dd: 40:1d:43:c6:1d:4c:98:f9:68:c4:14:63:6a:b5:6d: 28:a8:d6:c0:9a:e5:d0:a9:e8:93:85:c7:b4:89:5c: 24:80:8b:52:04:79:28:da:0b:67:cf:20:e0:3b:26: 59:ee:2f:f9:fc:9b:14:88:6c:dc:1c:0e:5f:5d:76: 57:08:23:1b:21:94:04:6e:a7:04:f4:c0:94:33:a0: 95:94:33:15:64:e8:54:a3:ee:fa:44:8e:91:f8:3a: ca:7c:69:60:5e:97:3c:a9:55:37:fc:cf:54:25:db: cd:d7:ce:1f:ab:71:50:7c:fe:4c:71:70:aa:a0:be: f4:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:DC:59:7E:BB:69:88:F3:27:DB:57:27:B0:7D:0E:F1:C0:46:0E:11 X509v3 Authority Key Identifier: keyid:30:66:3B:5B:70:44:23:2B:98:98:18:D1:2C:C9:04:90:21:25:24:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGY7W3BEIyuYmBjRLMkEkCElJN8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/30f34e-e2ad-4b8d-8ce0-011878255ba7/1/MGY7W3BEIyuYmBjRLMkEkCElJN8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/30f34e-e2ad-4b8d-8ce0-011878255ba7/1/MGY7W3BEIyuYmBjRLMkEkCElJN8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:7f:e9:03:d2:54:35:1a:b4:b6:1a:fa:95:aa:61:38:6f:cf: 18:c3:95:d4:eb:00:0f:fb:52:1d:6a:ef:b7:2f:2d:6a:75:98: 17:75:d1:da:bd:40:d8:5d:0a:18:e9:da:9d:2b:c9:f3:3a:98: 1d:ce:ce:c7:68:46:31:00:9e:d3:65:96:39:c2:80:e8:c0:f9: 36:d5:9e:d3:57:12:de:58:91:81:60:ed:53:4a:68:34:4a:3c: 2b:ae:5f:dd:c1:4b:0b:0e:67:62:7a:50:2c:3f:2f:51:a6:80: 64:51:57:30:ed:77:58:97:5e:9a:f5:30:3a:39:43:de:d6:f4: f6:51:9d:90:da:73:da:d3:d8:ac:18:86:ef:38:22:c6:d8:fd: 86:e2:21:ea:dd:40:d0:3a:bc:f0:75:fe:08:f6:50:9e:a4:58: d3:b0:d8:5f:2a:1f:97:a5:39:57:78:fa:15:eb:8c:8c:7b:6d: fb:a6:a2:49:66:ec:cf:99:d3:61:50:a6:16:b0:eb:10:50:ff: ec:46:b9:64:53:66:00:e7:89:5f:57:62:72:ef:4f:35:7c:79: 9b:7e:5e:70:9e:d1:85:39:16:c5:f9:4d:c6:7d:bf:6f:09:2c: 7c:87:1f:f0:5f:0e:b4:80:57:cf:1b:bb:96:8e:34:b4:64:00: 1b:c1:c3:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1C4keCCmXq1OKas8E7agwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwNjYzYjViNzA0NDIzMmI5ODk4MThkMTJjYzkwNDkwMjEy NTI0ZGYwHhcNMjUxMjA2MTkwMjQ0WhcNMjUxMjA3MTkwMjQ0WjAzMTEwLwYDVQQD EyhjY2RjNTk3ZWJiNjk4OGYzMjdkYjU3MjdiMDdkMGVmMWMwNDYwZTExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMD7Uo1nPv5A9uNUa419yIV6GVtO d//yuEYalsfOo9rL69Wfcp0gTCPzQwY8HJIgcM7C75hV0ADPvUgeKFzWlzdrZZyH 4xy90nQgG+8z7BYKKeg3DJXdOJOazvonS+jCUpJJsl2Hi2UlLfuYBHqYl+JpnRIF TaSMybUVtRPqjJ67SFmXRd1AHUPGHUyY+WjEFGNqtW0oqNbAmuXQqeiThce0iVwk gItSBHko2gtnzyDgOyZZ7i/5/JsUiGzcHA5fXXZXCCMbIZQEbqcE9MCUM6CVlDMV ZOhUo+76RI6R+DrKfGlgXpc8qVU3/M9UJdvN184fq3FQfP5McXCqoL70fQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMzcWX67aYjzJ9tXJ7B9DvHARg4RMB8GA1UdIwQY MBaAFDBmO1twRCMrmJgY0SzJBJAhJSTfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUdZN1czQkVJeXVZbUJqUkxNa0VrQ0VsSk44LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8zMGYzNGUtZTJhZC00YjhkLThjZTAt MDExODc4MjU1YmE3LzEvTUdZN1czQkVJeXVZbUJqUkxNa0VrQ0VsSk44Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi8zMGYzNGUtZTJhZC00YjhkLThjZTAtMDExODc4MjU1YmE3 LzEvTUdZN1czQkVJeXVZbUJqUkxNa0VrQ0VsSk44LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIX/pA9JU NRq0thr6laphOG/PGMOV1OsAD/tSHWrvty8tanWYF3XR2r1A2F0KGOnanSvJ8zqY Hc7Ox2hGMQCe02WWOcKA6MD5NtWe01cS3liRgWDtU0poNEo8K65f3cFLCw5nYnpQ LD8vUaaAZFFXMO13WJdemvUwOjlD3tb09lGdkNpz2tPYrBiG7zgixtj9huIh6t1A 0Dq88HX+CPZQnqRY07DYXyofl6U5V3j6FeuMjHtt+6aiSWbsz5nTYVCmFrDrEFD/ 7Ea5ZFNmAOeJX1dicu9PNXx5m35ecJ7RhTkWxflNxn2/bwksfIcf8F8OtIBXzxu7 lo40tGQAG8HDzw== -----END CERTIFICATE-----Generated at Sun Dec 7 03:55:43 2025 by rpki-client