This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft File: MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft (raw, json) Hash identifier: vKWNhPYyaEuOK+YAEhGbzCyA2pKZZKuvYHiSaA26QD4= Subject key identifier: D7:FA:2D:C1:31:D3:6B:E4:76:42:22:A4:C1:9F:A9:99:24:05:33:25 Authority key identifier: 30:6D:61:83:55:BD:89:37:F7:5B:B4:65:0B:B5:C1:AF:70:F9:A1:2E Certificate issuer: /CN=306d618355bd8937f75bb4650bb5c1af70f9a12e Certificate serial: 019B3A90C8940F596C8273D4CD6831C8E0B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MG1hg1W9iTf3W7RlC7XBr3D5oS4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft Manifest number: 1325 Signing time: Sat 20 Dec 2025 07:02:05 +0000 Manifest this update: Sat 20 Dec 2025 07:02:05 +0000 Manifest next update: Sun 21 Dec 2025 07:02:05 +0000 Files and hashes: 1: 3jZVmIYXRpFGaUpKFxmxg6yk0v4.roa (hash: DxwsnC6ETAvm52TcakM8AMF0oIdLtUXLvOU8uNsDQAw=) 2: MG1hg1W9iTf3W7RlC7XBr3D5oS4.crl (hash: 0bL+BK8HLdVTbGeNDxYTPEWzsMuiI15Kt6WWDfGVkqM=) 3: OhFs8ELf0BkBqUqSta-UtJTxxOY.roa (hash: eORqJrZ4eHwt+ZtqWQMblZ7ybIDSjazTPoe3DTl1tC8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.crl rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft rsync://rpki.ripe.net/repository/DEFAULT/MG1hg1W9iTf3W7RlC7XBr3D5oS4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:02:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:90:c8:94:0f:59:6c:82:73:d4:cd:68:31:c8:e0:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=306d618355bd8937f75bb4650bb5c1af70f9a12e Validity Not Before: Dec 20 07:02:05 2025 GMT Not After : Dec 21 07:02:05 2025 GMT Subject: CN=d7fa2dc131d36be4764222a4c19fa99924053325 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:dc:f2:bb:69:e8:16:ec:e4:d6:43:54:a4:81: f6:20:77:6b:78:87:ee:d8:25:6f:f3:39:75:10:c4: 4c:30:77:70:78:15:1d:c2:af:54:06:bf:57:c2:34: 8d:75:1d:79:2f:d6:3f:e2:0a:c1:69:00:75:89:ad: 89:8c:a3:57:a0:ff:ba:95:38:c7:aa:3e:8a:78:40: 19:c9:f6:28:02:1f:92:50:27:fb:bb:36:24:d1:84: bc:b5:85:c2:2c:3f:ad:d4:5e:ea:c8:65:a6:b2:da: e5:a8:0e:3c:50:3d:63:70:fa:fd:35:49:d5:9c:7e: 0d:41:9d:ae:0f:ee:1d:d9:5c:e9:7c:62:e2:ca:eb: e7:87:fc:f0:a9:6c:7b:17:c2:9e:7b:59:04:28:64: f0:7d:c3:4f:d1:bb:ed:2d:73:48:93:74:7d:b2:24: 3e:81:9b:ed:de:76:39:69:d8:a0:c3:c2:ed:13:ad: 3e:90:1d:ac:9e:ff:7a:63:d8:dd:e3:81:9b:f6:f9: 0b:e0:c7:7a:d0:15:ef:73:43:00:7e:67:e6:a2:91: cf:99:ca:d3:ba:00:dd:38:62:f3:b8:10:d5:97:1b: 0c:a1:1a:7b:23:be:df:a8:c1:27:af:b3:7b:3b:23: 02:10:de:38:f7:7d:62:df:9f:0d:30:85:44:26:d2: 42:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:FA:2D:C1:31:D3:6B:E4:76:42:22:A4:C1:9F:A9:99:24:05:33:25 X509v3 Authority Key Identifier: keyid:30:6D:61:83:55:BD:89:37:F7:5B:B4:65:0B:B5:C1:AF:70:F9:A1:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MG1hg1W9iTf3W7RlC7XBr3D5oS4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:ef:d3:21:ec:e2:fa:f5:4d:8c:de:ed:a4:7f:82:9a:bb:40: 12:e2:ef:b5:b2:b5:34:c9:f7:06:2f:c0:2f:62:a8:c2:df:7f: 22:6e:46:37:5f:10:5a:6f:a3:43:92:a2:11:87:b7:d5:ea:11: 5b:98:ae:3b:57:1d:c3:ae:f2:37:73:67:a1:52:3a:d1:69:47: 7d:ef:f5:f1:2f:43:09:22:59:27:66:58:bf:f2:5d:60:dd:cb: d0:f7:e1:19:60:1b:ff:ab:ac:e5:5c:e2:d2:a4:66:55:6b:f9: 8f:40:32:a8:5c:34:8b:3e:9a:f1:d4:f0:89:5f:7a:b2:7a:96: dc:29:9d:ad:2f:7c:3e:9c:92:b1:76:15:cd:f2:46:56:b5:0a: 2e:04:01:81:10:18:33:b1:33:78:c8:64:cf:88:25:40:b5:87: 5a:f6:be:85:87:45:40:9c:5f:b7:ec:30:92:e2:f3:95:55:21: 97:5d:f5:cc:19:86:32:eb:2c:76:00:7f:16:97:7c:b2:fb:4a: 06:e5:1a:0b:28:d7:54:45:87:53:26:da:80:34:be:96:99:a8: 01:8a:5e:6f:5a:c6:04:ad:b5:c8:00:e7:87:6c:7d:55:f1:fe: 05:f4:e4:5f:85:f3:23:a2:f1:95:1f:0c:1c:dc:78:73:4f:6c: 3b:19:76:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kMiUD1lsgnPUzWgxyOC4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwNmQ2MTgzNTViZDg5MzdmNzViYjQ2NTBiYjVjMWFmNzBm OWExMmUwHhcNMjUxMjIwMDcwMjA1WhcNMjUxMjIxMDcwMjA1WjAzMTEwLwYDVQQD EyhkN2ZhMmRjMTMxZDM2YmU0NzY0MjIyYTRjMTlmYTk5OTI0MDUzMzI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzdzyu2noFuzk1kNUpIH2IHdreIfu 2CVv8zl1EMRMMHdweBUdwq9UBr9XwjSNdR15L9Y/4grBaQB1ia2JjKNXoP+6lTjH qj6KeEAZyfYoAh+SUCf7uzYk0YS8tYXCLD+t1F7qyGWmstrlqA48UD1jcPr9NUnV nH4NQZ2uD+4d2VzpfGLiyuvnh/zwqWx7F8Kee1kEKGTwfcNP0bvtLXNIk3R9siQ+ gZvt3nY5adigw8LtE60+kB2snv96Y9jd44Gb9vkL4Md60BXvc0MAfmfmopHPmcrT ugDdOGLzuBDVlxsMoRp7I77fqMEnr7N7OyMCEN44931i358NMIVEJtJCUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNf6LcEx02vkdkIipMGfqZkkBTMlMB8GA1UdIwQY MBaAFDBtYYNVvYk391u0ZQu1wa9w+aEuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUcxaGcxVzlpVGYzVzdSbEM3WEJyM0Q1b1M0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi8zY2RlOWItMzcwNS00ZGMzLThkN2Ut NTE2ZmZkODczNzZjLzEvTUcxaGcxVzlpVGYzVzdSbEM3WEJyM0Q1b1M0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi8zY2RlOWItMzcwNS00ZGMzLThkN2UtNTE2ZmZkODczNzZj LzEvTUcxaGcxVzlpVGYzVzdSbEM3WEJyM0Q1b1M0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG+/TIezi +vVNjN7tpH+CmrtAEuLvtbK1NMn3Bi/AL2Kowt9/Im5GN18QWm+jQ5KiEYe31eoR W5iuO1cdw67yN3NnoVI60WlHfe/18S9DCSJZJ2ZYv/JdYN3L0PfhGWAb/6us5Vzi 0qRmVWv5j0AyqFw0iz6a8dTwiV96snqW3CmdrS98PpySsXYVzfJGVrUKLgQBgRAY M7EzeMhkz4glQLWHWva+hYdFQJxft+wwkuLzlVUhl131zBmGMussdgB/Fpd8svtK BuUaCyjXVEWHUybagDS+lpmoAYpeb1rGBK21yADnh2x9VfH+BfTkX4XzI6LxlR8M HNx4c09sOxl2AQ== -----END CERTIFICATE-----Generated at Sat Dec 20 14:09:50 2025 by rpki-client