This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/MGwIZtwlII5sB9SiHX2AULUI1qI.mft File: MGwIZtwlII5sB9SiHX2AULUI1qI.mft (raw, json) Hash identifier: zSSSKM7Yx3TqDgPsXv2eIuqQydfsmiCHFN4sNePd4jE= Subject key identifier: E6:5A:53:6F:DF:1C:AC:FF:B0:BB:83:A0:C0:33:43:BD:BE:3F:3F:FE Authority key identifier: 30:6C:08:66:DC:25:20:8E:6C:07:D4:A2:1D:7D:80:50:B5:08:D6:A2 Certificate issuer: /CN=306c0866dc25208e6c07d4a21d7d8050b508d6a2 Certificate serial: 019B36CB4588997023411F01214D2277BA79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGwIZtwlII5sB9SiHX2AULUI1qI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/MGwIZtwlII5sB9SiHX2AULUI1qI.mft Manifest number: 1600 Signing time: Fri 19 Dec 2025 13:27:29 +0000 Manifest this update: Fri 19 Dec 2025 13:27:29 +0000 Manifest next update: Sat 20 Dec 2025 13:27:29 +0000 Files and hashes: 1: HdR6Ah0Qe32r7472JEBtQ7R-uic.roa (hash: 9q8qH00PICKWGR7GNHvqSbuGck7QEOPOmn1zpnijT28=) 2: MGwIZtwlII5sB9SiHX2AULUI1qI.crl (hash: Vkjh7uXktFDruBxT5qM8JEEB721sWqJ9HCuWpXft9xw=) 3: Sw6DObPFj3054KXQBFZeQB7wzMY.roa (hash: 9m0sNp12uy0l53c9ggycSG+pMrm4n1CEHsd/2IPjAns=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/MGwIZtwlII5sB9SiHX2AULUI1qI.crl rsync://rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/MGwIZtwlII5sB9SiHX2AULUI1qI.mft rsync://rpki.ripe.net/repository/DEFAULT/MGwIZtwlII5sB9SiHX2AULUI1qI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 13:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:cb:45:88:99:70:23:41:1f:01:21:4d:22:77:ba:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=306c0866dc25208e6c07d4a21d7d8050b508d6a2 Validity Not Before: Dec 19 13:27:29 2025 GMT Not After : Dec 20 13:27:29 2025 GMT Subject: CN=e65a536fdf1cacffb0bb83a0c03343bdbe3f3ffe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:56:ec:2e:22:58:84:e9:9b:4c:b3:fa:2c:07: f5:7d:14:cb:d5:5d:b0:74:1b:5a:34:a5:70:da:a6: 63:78:fa:c7:1f:8e:5e:fa:57:03:cf:82:42:2b:7b: d6:0b:95:80:de:8a:d4:bc:4c:e9:25:eb:e4:c2:20: 1f:c0:8e:ff:f3:12:27:ec:ad:fe:46:c2:34:91:2d: 6d:3d:cc:99:d4:7b:58:20:ac:8f:e6:07:08:de:b4: bd:35:72:e4:35:91:cd:06:0c:bc:75:b4:32:3d:a5: 6f:88:7b:cb:ad:4b:6d:7d:52:17:22:79:20:7d:02: 95:d3:85:bd:31:a1:37:c7:db:86:d2:39:d1:36:03: 60:31:ed:4b:f3:bd:69:43:99:f2:00:4c:01:19:ca: fa:06:0c:ab:a5:cb:ee:63:7d:b0:80:dd:68:5a:1e: cb:83:b1:36:ea:cd:33:6f:9f:73:9b:5f:97:a3:6f: 2f:68:b5:a6:17:a1:fe:5d:67:7a:78:76:74:07:04: c2:21:18:55:08:96:5d:5e:18:23:6a:84:79:c0:2e: 02:a0:26:d9:26:14:f4:30:d7:6e:56:b5:43:eb:6c: d3:a3:cf:e0:f8:ce:04:15:48:9a:16:e5:6a:bc:e8: cf:fd:0a:85:c5:02:9d:14:48:4e:f6:22:39:b7:c4: 56:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:5A:53:6F:DF:1C:AC:FF:B0:BB:83:A0:C0:33:43:BD:BE:3F:3F:FE X509v3 Authority Key Identifier: keyid:30:6C:08:66:DC:25:20:8E:6C:07:D4:A2:1D:7D:80:50:B5:08:D6:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGwIZtwlII5sB9SiHX2AULUI1qI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/MGwIZtwlII5sB9SiHX2AULUI1qI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/MGwIZtwlII5sB9SiHX2AULUI1qI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:88:ad:ba:2b:49:31:bc:ba:2a:b5:00:81:ab:d4:28:81:8d: 17:d8:be:2a:74:f8:26:a0:9a:95:04:b5:17:28:49:9c:8b:c7: 1c:80:5a:70:75:04:1e:69:f4:14:38:5a:07:a7:71:d4:fe:55: 88:27:ef:36:9d:87:6a:33:86:52:34:35:e5:d1:ca:42:cd:bd: 64:71:07:0f:b2:c1:bd:ef:7c:a2:33:a0:54:36:ad:15:7e:e6: 5e:a2:d2:54:fb:4c:36:53:91:4b:d0:26:14:1f:c9:76:1d:da: 43:8c:96:69:ee:0b:b9:94:7d:3b:bd:55:27:82:e0:26:80:3a: dc:d5:ef:27:cc:81:ae:eb:3b:df:a6:be:17:f8:9d:27:e4:11: 19:e2:4e:0e:6d:fd:40:4e:bf:81:95:b4:24:db:f4:1f:42:69: bf:77:db:dd:c9:79:ff:d6:86:96:62:8e:35:8d:6e:46:a8:f7: 20:86:2d:f1:df:95:12:10:ee:51:82:7d:32:0b:49:00:cb:a8: ea:92:b2:73:07:bb:f1:63:bd:c5:17:b6:ec:6a:84:88:22:e0: 75:33:81:79:1b:98:90:5a:2a:a6:37:d8:5e:9a:5f:cb:90:2c: c3:67:2d:51:5c:b3:d8:5b:01:62:5e:98:0a:7c:0b:6b:4e:a9: d4:a2:aa:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2y0WImXAjQR8BIU0id7p5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwNmMwODY2ZGMyNTIwOGU2YzA3ZDRhMjFkN2Q4MDUwYjUw OGQ2YTIwHhcNMjUxMjE5MTMyNzI5WhcNMjUxMjIwMTMyNzI5WjAzMTEwLwYDVQQD EyhlNjVhNTM2ZmRmMWNhY2ZmYjBiYjgzYTBjMDMzNDNiZGJlM2YzZmZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlbsLiJYhOmbTLP6LAf1fRTL1V2w dBtaNKVw2qZjePrHH45e+lcDz4JCK3vWC5WA3orUvEzpJevkwiAfwI7/8xIn7K3+ RsI0kS1tPcyZ1HtYIKyP5gcI3rS9NXLkNZHNBgy8dbQyPaVviHvLrUttfVIXInkg fQKV04W9MaE3x9uG0jnRNgNgMe1L871pQ5nyAEwBGcr6BgyrpcvuY32wgN1oWh7L g7E26s0zb59zm1+Xo28vaLWmF6H+XWd6eHZ0BwTCIRhVCJZdXhgjaoR5wC4CoCbZ JhT0MNduVrVD62zTo8/g+M4EFUiaFuVqvOjP/QqFxQKdFEhO9iI5t8RW8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOZaU2/fHKz/sLuDoMAzQ72+Pz/+MB8GA1UdIwQY MBaAFDBsCGbcJSCObAfUoh19gFC1CNaiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUd3SVp0d2xJSTVzQjlTaUhYMkFVTFVJMXFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9iYWRlZGYtZDBlOS00NWE5LWFmNzUt MTBlZGI1NDFlNmZmLzEvTUd3SVp0d2xJSTVzQjlTaUhYMkFVTFVJMXFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC9iYWRlZGYtZDBlOS00NWE5LWFmNzUtMTBlZGI1NDFlNmZm LzEvTUd3SVp0d2xJSTVzQjlTaUhYMkFVTFVJMXFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn4ituitJ Mby6KrUAgavUKIGNF9i+KnT4JqCalQS1FyhJnIvHHIBacHUEHmn0FDhaB6dx1P5V iCfvNp2HajOGUjQ15dHKQs29ZHEHD7LBve98ojOgVDatFX7mXqLSVPtMNlORS9Am FB/Jdh3aQ4yWae4LuZR9O71VJ4LgJoA63NXvJ8yBrus736a+F/idJ+QRGeJODm39 QE6/gZW0JNv0H0Jpv3fb3cl5/9aGlmKONY1uRqj3IIYt8d+VEhDuUYJ9MgtJAMuo 6pKycwe78WO9xRe27GqEiCLgdTOBeRuYkFoqpjfYXppfy5Asw2ctUVyz2FsBYl6Y CnwLa06p1KKqcg== -----END CERTIFICATE-----Generated at Fri Dec 19 20:25:36 2025 by rpki-client