This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/512313-afcd-4e9a-bb70-71005f7f02a8/1/mGkK8GLqmzrl9kz5qf6lYyTGvZc.mft File: mGkK8GLqmzrl9kz5qf6lYyTGvZc.mft (raw, json) Hash identifier: 7Evg07H59PsAVXu6p3IIkZZJckCb+PAqwBjObSm3nc4= Subject key identifier: CB:78:05:FA:FD:EA:D0:D7:60:36:3D:70:CD:A6:5E:7E:21:4A:04:FA Authority key identifier: 98:69:0A:F0:62:EA:9B:3A:E5:F6:4C:F9:A9:FE:A5:63:24:C6:BD:97 Certificate issuer: /CN=98690af062ea9b3ae5f64cf9a9fea56324c6bd97 Certificate serial: 019AF31B66A06140B5C4708B5E58C25DAB4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGkK8GLqmzrl9kz5qf6lYyTGvZc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/512313-afcd-4e9a-bb70-71005f7f02a8/1/mGkK8GLqmzrl9kz5qf6lYyTGvZc.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 10:00:50 +0000 Manifest this update: Sat 06 Dec 2025 10:00:50 +0000 Manifest next update: Sun 07 Dec 2025 10:00:50 +0000 Files and hashes: 1: CxGOoBY5YoTyd6Nu8KyBbb6HwB4.roa (hash: W6T/EKpt1B07PivG7xwB9X1O2PEBzOLgzqiyKvlh3q4=) 2: mGkK8GLqmzrl9kz5qf6lYyTGvZc.crl (hash: tmaPi6ovE4Ku07MHmQ14M4YVfFMyH6x+Ov+MKppqPMI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/512313-afcd-4e9a-bb70-71005f7f02a8/1/mGkK8GLqmzrl9kz5qf6lYyTGvZc.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/512313-afcd-4e9a-bb70-71005f7f02a8/1/mGkK8GLqmzrl9kz5qf6lYyTGvZc.mft rsync://rpki.ripe.net/repository/DEFAULT/mGkK8GLqmzrl9kz5qf6lYyTGvZc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:66:a0:61:40:b5:c4:70:8b:5e:58:c2:5d:ab:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98690af062ea9b3ae5f64cf9a9fea56324c6bd97 Validity Not Before: Dec 6 10:00:50 2025 GMT Not After : Dec 7 10:00:50 2025 GMT Subject: CN=cb7805fafdead0d760363d70cda65e7e214a04fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:22:6d:df:5b:aa:4d:83:ae:17:72:da:50:e3: 7a:5a:e6:76:0f:5b:a1:0f:20:c8:5b:18:a4:8a:16: 82:35:b8:4e:a3:5a:19:e8:07:24:28:5f:9e:a2:b4: ae:77:dc:9a:a7:86:8b:b0:fc:c5:9e:a2:56:7a:85: 23:ed:e2:fe:cb:53:09:2c:92:14:ff:e0:11:17:f5: bf:a7:44:64:d2:a5:69:b9:9c:20:9f:bc:d3:ee:86: 71:94:3e:d9:cd:63:68:fd:c9:33:a5:a7:84:7a:3c: 67:5d:fa:a3:b5:f7:0d:1e:80:58:01:9e:a6:73:dc: c7:2c:e6:80:2e:24:ad:7c:fe:74:9d:df:8d:0b:85: 33:f9:03:27:86:24:13:47:72:d6:33:d9:28:9d:6f: 0f:db:a9:5d:07:6a:fc:0a:b7:9c:46:dd:da:ca:8d: 66:cb:6a:ea:60:32:16:42:d2:42:6b:92:32:fe:cc: 56:a5:30:e6:d0:af:81:d6:63:8a:79:9c:4b:13:74: d0:72:4e:1a:25:56:59:a9:59:1d:cd:c4:98:b6:e4: 74:8b:c7:bb:ce:7c:2d:7a:7b:e6:f1:80:9b:a2:63: 93:d8:43:a7:63:d7:3d:57:c9:b6:9c:2a:e5:88:e3: 6d:b1:c5:93:bc:d7:4d:53:07:44:a5:f0:d6:c8:d7: 5e:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:78:05:FA:FD:EA:D0:D7:60:36:3D:70:CD:A6:5E:7E:21:4A:04:FA X509v3 Authority Key Identifier: keyid:98:69:0A:F0:62:EA:9B:3A:E5:F6:4C:F9:A9:FE:A5:63:24:C6:BD:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGkK8GLqmzrl9kz5qf6lYyTGvZc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/512313-afcd-4e9a-bb70-71005f7f02a8/1/mGkK8GLqmzrl9kz5qf6lYyTGvZc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/512313-afcd-4e9a-bb70-71005f7f02a8/1/mGkK8GLqmzrl9kz5qf6lYyTGvZc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:20:79:42:b4:a8:79:b0:4f:06:7b:f5:75:92:bb:38:cb:ba: d9:89:a4:64:e9:db:ec:f7:2d:a1:0a:8c:a8:af:52:fc:3a:2a: d5:c4:b6:f1:63:b7:f7:2b:87:4f:1f:79:c9:bb:68:70:a7:f4: 06:c8:4a:17:e3:74:b0:36:bf:ab:ac:b2:88:cd:cf:47:db:a7: b0:60:ca:80:b3:5e:5b:a9:0c:ac:2f:ea:36:6f:32:be:47:b7: 00:c8:89:4b:ec:d5:01:5d:67:bd:59:c2:34:d9:ec:1a:de:c0: 93:81:d2:1f:8a:0d:b5:24:28:12:7c:8a:22:01:c3:76:7d:9e: c7:ba:42:0b:8f:85:5a:c7:db:a2:43:61:09:ae:af:ea:48:bb: f3:53:7d:39:6e:5d:1a:4d:b8:87:4a:3b:48:99:a9:4c:36:92: 05:07:b8:4b:90:41:95:10:a3:2f:d9:d3:0c:a5:a2:49:67:41: ec:ab:aa:2b:be:bc:f6:d5:32:fb:58:82:4e:6f:50:9e:b2:a3: 22:fd:a7:e9:a3:9b:be:34:f2:98:9d:f0:fb:eb:35:8f:b4:c8: 45:f2:7b:14:04:b7:a0:c0:c7:6f:c9:05:38:e8:c0:0d:dd:b1: f1:c1:2c:f7:43:83:87:03:6f:c3:5e:83:28:85:18:13:ea:37: 79:93:7e:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG2agYUC1xHCLXljCXatNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4NjkwYWYwNjJlYTliM2FlNWY2NGNmOWE5ZmVhNTYzMjRj NmJkOTcwHhcNMjUxMjA2MTAwMDUwWhcNMjUxMjA3MTAwMDUwWjAzMTEwLwYDVQQD EyhjYjc4MDVmYWZkZWFkMGQ3NjAzNjNkNzBjZGE2NWU3ZTIxNGEwNGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5CJt31uqTYOuF3LaUON6WuZ2D1uh DyDIWxikihaCNbhOo1oZ6AckKF+eorSud9yap4aLsPzFnqJWeoUj7eL+y1MJLJIU /+ARF/W/p0Rk0qVpuZwgn7zT7oZxlD7ZzWNo/ckzpaeEejxnXfqjtfcNHoBYAZ6m c9zHLOaALiStfP50nd+NC4Uz+QMnhiQTR3LWM9konW8P26ldB2r8CrecRt3ayo1m y2rqYDIWQtJCa5Iy/sxWpTDm0K+B1mOKeZxLE3TQck4aJVZZqVkdzcSYtuR0i8e7 znwtenvm8YCbomOT2EOnY9c9V8m2nCrliONtscWTvNdNUwdEpfDWyNdeWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMt4Bfr96tDXYDY9cM2mXn4hSgT6MB8GA1UdIwQY MBaAFJhpCvBi6ps65fZM+an+pWMkxr2XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUdrSzhHTHFtenJsOWt6NXFmNmxZeVRHdlpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC81MTIzMTMtYWZjZC00ZTlhLWJiNzAt NzEwMDVmN2YwMmE4LzEvbUdrSzhHTHFtenJsOWt6NXFmNmxZeVRHdlpjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC81MTIzMTMtYWZjZC00ZTlhLWJiNzAtNzEwMDVmN2YwMmE4 LzEvbUdrSzhHTHFtenJsOWt6NXFmNmxZeVRHdlpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdiB5QrSo ebBPBnv1dZK7OMu62YmkZOnb7PctoQqMqK9S/Doq1cS28WO39yuHTx95ybtocKf0 BshKF+N0sDa/q6yyiM3PR9unsGDKgLNeW6kMrC/qNm8yvke3AMiJS+zVAV1nvVnC NNnsGt7Ak4HSH4oNtSQoEnyKIgHDdn2ex7pCC4+FWsfbokNhCa6v6ki781N9OW5d Gk24h0o7SJmpTDaSBQe4S5BBlRCjL9nTDKWiSWdB7KuqK7689tUy+1iCTm9QnrKj Iv2n6aObvjTymJ3w++s1j7TIRfJ7FAS3oMDHb8kFOOjADd2x8cEs90ODhwNvw16D KIUYE+o3eZN+FA== -----END CERTIFICATE-----Generated at Sat Dec 6 15:40:29 2025 by rpki-client