This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.mft File: mgheBvLiouMEJW-IE1_xPectBzY.mft (raw, json) Hash identifier: 4isNvGsu9/m7QHVzhrHMOoAAN3u6XrODjhvof2AljL0= Subject key identifier: 9A:FA:1B:AC:E2:AB:F7:5D:5D:39:F4:C9:B4:DC:2C:67:A5:65:5A:D0 Authority key identifier: 9A:08:5E:06:F2:E2:A2:E3:04:25:6F:88:13:5F:F1:3D:E7:2D:07:36 Certificate issuer: /CN=9a085e06f2e2a2e304256f88135ff13de72d0736 Certificate serial: 019B3EA36BFD43CB3192B798F410D5EF1A82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mgheBvLiouMEJW-IE1_xPectBzY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.mft Manifest number: 0E67 Signing time: Sun 21 Dec 2025 02:00:55 +0000 Manifest this update: Sun 21 Dec 2025 02:00:55 +0000 Manifest next update: Mon 22 Dec 2025 02:00:55 +0000 Files and hashes: 1: 9Dg6tOo6O44yr7jeWe1ba9VjCFs.roa (hash: 26YW4jX+yyct0IS6KpfO0MNuSdKZWiF48vsQnmBErMk=) 2: mgheBvLiouMEJW-IE1_xPectBzY.crl (hash: EE/yEtM/VDiRa5IfYSF94MmPf+yDbI6zQahQz2UJcWU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.crl rsync://rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.mft rsync://rpki.ripe.net/repository/DEFAULT/mgheBvLiouMEJW-IE1_xPectBzY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:a3:6b:fd:43:cb:31:92:b7:98:f4:10:d5:ef:1a:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a085e06f2e2a2e304256f88135ff13de72d0736 Validity Not Before: Dec 21 02:00:55 2025 GMT Not After : Dec 22 02:00:55 2025 GMT Subject: CN=9afa1bace2abf75d5d39f4c9b4dc2c67a5655ad0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:9e:56:b4:42:34:90:3b:27:87:00:66:ec:e7: 89:1d:04:e2:3b:cc:69:13:0c:de:f4:df:0b:f5:04: be:42:9d:3a:9a:52:28:41:5f:d9:d1:ab:65:5a:89: ab:12:01:29:a2:55:02:bd:f7:f7:4d:4f:84:93:82: ec:54:cc:22:f6:c1:48:32:b5:55:3b:73:3c:52:b4: 9d:c6:75:7e:0c:fa:89:68:d8:e7:6b:fd:c5:fe:f3: 97:af:7d:0a:2e:5e:c5:2c:64:b1:a0:f2:7d:51:76: 84:42:77:c1:49:28:59:f1:ae:12:aa:e5:61:e9:50: f8:70:85:62:ca:91:b3:d1:de:33:5f:2d:65:22:a0: 9d:b4:3d:88:69:b4:1b:d6:e3:18:1d:7e:7c:85:e3: ae:2c:42:a0:34:9d:ca:52:96:45:c2:4f:54:c2:33: a5:8b:61:c8:6f:c4:02:a7:1f:ba:ef:30:45:08:82: da:94:54:5c:b6:37:c6:9b:af:25:1a:c8:76:1e:91: ae:aa:6b:95:bb:27:03:78:aa:a3:c6:3b:9e:f0:fc: b0:4c:8f:b0:37:45:ac:79:c5:35:14:b8:36:50:a3: 05:86:c2:5d:ef:50:28:11:86:d5:73:1d:fc:5d:52: da:68:a9:7b:71:5e:83:60:24:a3:bf:c8:61:c3:c2: 9b:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:FA:1B:AC:E2:AB:F7:5D:5D:39:F4:C9:B4:DC:2C:67:A5:65:5A:D0 X509v3 Authority Key Identifier: keyid:9A:08:5E:06:F2:E2:A2:E3:04:25:6F:88:13:5F:F1:3D:E7:2D:07:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mgheBvLiouMEJW-IE1_xPectBzY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:87:67:8f:e9:3c:57:82:08:93:63:41:4e:1a:d8:5c:be:aa: ac:f7:9e:c5:38:76:a5:54:bb:c7:29:05:4f:21:ed:e1:85:45: 4b:58:04:50:85:d9:63:fa:69:3a:23:c6:77:2c:19:23:9a:4f: f1:6a:40:f5:ee:58:38:7c:77:fd:95:6c:5b:fe:30:f1:b9:98: 78:18:e8:a1:fc:54:cf:a3:3b:c3:3c:15:2f:a8:9c:9a:15:ce: fe:8c:61:99:e1:23:af:26:36:06:8d:f0:0f:7d:7b:96:1f:70: f2:5e:ec:a1:ff:43:5c:95:04:4c:4a:70:1c:4d:0f:09:ac:57: ba:9a:68:ec:68:dd:fb:c7:99:09:99:22:37:91:1d:80:88:53: 79:40:97:1d:b9:c8:8a:92:b7:3e:a6:c4:84:03:4f:10:67:7a: 49:71:83:ab:63:48:82:c0:39:0c:78:7b:3e:9d:54:26:32:12: 13:70:ef:4a:ad:c4:75:71:63:5c:fb:45:a6:4c:b0:4a:cb:7a: 62:6e:36:e7:83:ad:b8:9f:40:c1:b5:fa:76:9f:52:1a:c6:1c: 6e:ba:44:db:37:dd:92:fe:a5:3a:e8:22:1c:d5:2c:46:09:82: c3:29:03:82:3b:77:d8:18:8b:64:27:c2:3f:57:7e:a4:35:fc: 0e:fb:a3:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+o2v9Q8sxkreY9BDV7xqCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhMDg1ZTA2ZjJlMmEyZTMwNDI1NmY4ODEzNWZmMTNkZTcy ZDA3MzYwHhcNMjUxMjIxMDIwMDU1WhcNMjUxMjIyMDIwMDU1WjAzMTEwLwYDVQQD Eyg5YWZhMWJhY2UyYWJmNzVkNWQzOWY0YzliNGRjMmM2N2E1NjU1YWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZ5WtEI0kDsnhwBm7OeJHQTiO8xp Ewze9N8L9QS+Qp06mlIoQV/Z0atlWomrEgEpolUCvff3TU+Ek4LsVMwi9sFIMrVV O3M8UrSdxnV+DPqJaNjna/3F/vOXr30KLl7FLGSxoPJ9UXaEQnfBSShZ8a4SquVh 6VD4cIViypGz0d4zXy1lIqCdtD2IabQb1uMYHX58heOuLEKgNJ3KUpZFwk9UwjOl i2HIb8QCpx+67zBFCILalFRctjfGm68lGsh2HpGuqmuVuycDeKqjxjue8PywTI+w N0WsecU1FLg2UKMFhsJd71AoEYbVcx38XVLaaKl7cV6DYCSjv8hhw8KbvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJr6G6ziq/ddXTn0ybTcLGelZVrQMB8GA1UdIwQY MBaAFJoIXgby4qLjBCVviBNf8T3nLQc2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWdoZUJ2TGlvdU1FSlctSUUxX3hQZWN0QnpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8xMGZjZTAtZWU0Ny00ZWQ0LWEwM2Qt MGQ0NTQyOTIwYmNiLzEvbWdoZUJ2TGlvdU1FSlctSUUxX3hQZWN0QnpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC8xMGZjZTAtZWU0Ny00ZWQ0LWEwM2QtMGQ0NTQyOTIwYmNi LzEvbWdoZUJ2TGlvdU1FSlctSUUxX3hQZWN0QnpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfYdnj+k8 V4IIk2NBThrYXL6qrPeexTh2pVS7xykFTyHt4YVFS1gEUIXZY/ppOiPGdywZI5pP 8WpA9e5YOHx3/ZVsW/4w8bmYeBjoofxUz6M7wzwVL6icmhXO/oxhmeEjryY2Bo3w D317lh9w8l7sof9DXJUETEpwHE0PCaxXuppo7Gjd+8eZCZkiN5EdgIhTeUCXHbnI ipK3PqbEhANPEGd6SXGDq2NIgsA5DHh7Pp1UJjISE3DvSq3EdXFjXPtFpkywSst6 Ym4254OtuJ9AwbX6dp9SGsYcbrpE2zfdkv6lOugiHNUsRgmCwykDgjt32BiLZCfC P1d+pDX8Dvujuw== -----END CERTIFICATE-----Generated at Sun Dec 21 07:40:19 2025 by rpki-client