This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/5c0b4a-2da4-43a5-9289-1937bde8cd6f/1/mpGLgMuzJzekayRIaaatVQlUP6E.mft File: mpGLgMuzJzekayRIaaatVQlUP6E.mft (raw, json) Hash identifier: cQ+f6v1tdvjihtMM4/cToCNwRdk3B2uAoWSTghz/FrU= Subject key identifier: EA:00:C9:DE:72:0C:19:DD:44:6B:91:C7:79:60:C1:96:7C:90:68:3B Authority key identifier: 9A:91:8B:80:CB:B3:27:37:A4:6B:24:48:69:A6:AD:55:09:54:3F:A1 Certificate issuer: /CN=9a918b80cbb32737a46b244869a6ad5509543fa1 Certificate serial: 019B3343ED1E37173554984F1E61C81DF7BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mpGLgMuzJzekayRIaaatVQlUP6E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/5c0b4a-2da4-43a5-9289-1937bde8cd6f/1/mpGLgMuzJzekayRIaaatVQlUP6E.mft Manifest number: 0B2A Signing time: Thu 18 Dec 2025 21:00:48 +0000 Manifest this update: Thu 18 Dec 2025 21:00:48 +0000 Manifest next update: Fri 19 Dec 2025 21:00:48 +0000 Files and hashes: 1: _sJ1gEKp9zcUkmdoEUiL1Hgw__4.roa (hash: QNXdCikQmuLlbojTN81QhJiEfrR2COSucqfmF6ZaSHQ=) 2: mpGLgMuzJzekayRIaaatVQlUP6E.crl (hash: RfnfJnOMpaY/0ZbDw2TfuEyIhTt06ivlHwm4cgLjCF4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/5c0b4a-2da4-43a5-9289-1937bde8cd6f/1/mpGLgMuzJzekayRIaaatVQlUP6E.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/5c0b4a-2da4-43a5-9289-1937bde8cd6f/1/mpGLgMuzJzekayRIaaatVQlUP6E.mft rsync://rpki.ripe.net/repository/DEFAULT/mpGLgMuzJzekayRIaaatVQlUP6E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:43:ed:1e:37:17:35:54:98:4f:1e:61:c8:1d:f7:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a918b80cbb32737a46b244869a6ad5509543fa1 Validity Not Before: Dec 18 21:00:48 2025 GMT Not After : Dec 19 21:00:48 2025 GMT Subject: CN=ea00c9de720c19dd446b91c77960c1967c90683b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f2:56:bc:03:17:b7:9a:8c:a0:a1:3a:ac:0d: c9:df:a8:e8:01:21:b3:7a:2b:ef:f4:3e:cd:88:63: 9a:c0:9e:35:d9:8e:bf:61:98:03:a3:ac:0a:0c:0f: f0:24:6f:7a:ef:84:5e:08:1a:a9:6c:7b:6f:22:b2: 2b:16:11:4a:69:40:94:2b:4b:8f:cf:a5:ef:ed:a2: 22:80:a5:fd:18:89:58:b6:f3:d0:c9:c1:b1:dc:81: 5e:18:2c:f1:8e:f2:76:f9:0f:c0:d6:72:e2:6c:c1: 50:15:5b:b2:f4:85:5a:cb:5d:cd:c4:25:21:79:61: 94:98:42:f8:f6:ad:62:f0:3d:2e:cb:18:54:7b:36: 3e:e2:3b:fa:6a:c9:31:e1:72:fa:8d:45:76:e7:4e: 08:4c:78:df:28:cd:38:93:2b:c2:5f:de:b8:95:8c: f0:34:fc:4c:6b:4a:b9:79:78:79:d5:2e:c6:68:ba: 4f:ce:2a:91:41:e2:e4:4b:dc:5a:e0:0f:26:71:4e: 02:1e:3d:99:0d:3a:d8:1c:43:68:8e:34:18:18:b3: 75:5d:a5:08:9c:53:d4:90:3b:47:3b:10:b0:28:25: 3f:e3:b5:2e:70:b9:3d:63:e9:f4:2f:88:cc:2c:7d: 7c:6b:09:57:71:83:d9:e0:f5:11:84:1f:45:a1:46: aa:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:00:C9:DE:72:0C:19:DD:44:6B:91:C7:79:60:C1:96:7C:90:68:3B X509v3 Authority Key Identifier: keyid:9A:91:8B:80:CB:B3:27:37:A4:6B:24:48:69:A6:AD:55:09:54:3F:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpGLgMuzJzekayRIaaatVQlUP6E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5c0b4a-2da4-43a5-9289-1937bde8cd6f/1/mpGLgMuzJzekayRIaaatVQlUP6E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5c0b4a-2da4-43a5-9289-1937bde8cd6f/1/mpGLgMuzJzekayRIaaatVQlUP6E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:e3:63:8c:57:a0:16:da:58:c7:0c:ad:bb:e0:aa:25:52:6a: f3:73:5a:d2:4e:8c:fb:cb:eb:10:b7:42:e6:da:b5:59:c3:72: 15:05:9d:22:f5:fe:d4:a0:a4:b3:e6:35:5f:57:84:95:0c:48: 46:4e:ba:19:e5:5a:6e:b6:8c:e6:3b:13:c7:a8:6b:c2:2b:20: 8c:39:89:b9:48:41:5a:7e:b7:70:c5:09:f6:1f:be:a2:1d:fc: fe:c3:af:84:0a:00:74:6a:e0:01:50:2e:95:84:18:b0:dd:50: 2b:4d:c1:f3:06:c8:9c:91:74:47:c0:ab:91:11:24:bd:fe:47: ed:21:7b:16:ed:b3:58:e1:6d:b4:15:93:44:8f:4a:5e:e5:d2: f6:d2:8b:d3:a2:ce:63:62:61:10:53:1d:70:46:fc:2b:70:fb: dc:f2:32:8b:88:31:11:ec:28:7d:c0:57:b7:6a:ed:d2:db:64: f1:24:a3:fa:22:5c:78:81:e4:d3:80:b5:be:e5:d5:f0:17:c4: a2:53:1e:9a:5c:56:03:eb:ac:52:7f:82:bc:78:02:26:aa:59: b1:68:61:b4:10:98:ed:9d:64:93:83:c8:de:db:44:53:21:0b: b1:25:d5:99:4e:3e:b6:43:f2:96:c2:63:da:d6:e5:4e:c2:d6: e9:90:6e:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszQ+0eNxc1VJhPHmHIHfe6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhOTE4YjgwY2JiMzI3MzdhNDZiMjQ0ODY5YTZhZDU1MDk1 NDNmYTEwHhcNMjUxMjE4MjEwMDQ4WhcNMjUxMjE5MjEwMDQ4WjAzMTEwLwYDVQQD EyhlYTAwYzlkZTcyMGMxOWRkNDQ2YjkxYzc3OTYwYzE5NjdjOTA2ODNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPJWvAMXt5qMoKE6rA3J36joASGz eivv9D7NiGOawJ412Y6/YZgDo6wKDA/wJG9674ReCBqpbHtvIrIrFhFKaUCUK0uP z6Xv7aIigKX9GIlYtvPQycGx3IFeGCzxjvJ2+Q/A1nLibMFQFVuy9IVay13NxCUh eWGUmEL49q1i8D0uyxhUezY+4jv6askx4XL6jUV2504ITHjfKM04kyvCX964lYzw NPxMa0q5eXh51S7GaLpPziqRQeLkS9xa4A8mcU4CHj2ZDTrYHENojjQYGLN1XaUI nFPUkDtHOxCwKCU/47UucLk9Y+n0L4jMLH18awlXcYPZ4PURhB9FoUaq1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOoAyd5yDBndRGuRx3lgwZZ8kGg7MB8GA1UdIwQY MBaAFJqRi4DLsyc3pGskSGmmrVUJVD+hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXBHTGdNdXpKemVrYXlSSWFhYXRWUWxVUDZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi81YzBiNGEtMmRhNC00M2E1LTkyODkt MTkzN2JkZThjZDZmLzEvbXBHTGdNdXpKemVrYXlSSWFhYXRWUWxVUDZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi81YzBiNGEtMmRhNC00M2E1LTkyODktMTkzN2JkZThjZDZm LzEvbXBHTGdNdXpKemVrYXlSSWFhYXRWUWxVUDZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjeNjjFeg FtpYxwytu+CqJVJq83Na0k6M+8vrELdC5tq1WcNyFQWdIvX+1KCks+Y1X1eElQxI Rk66GeVabraM5jsTx6hrwisgjDmJuUhBWn63cMUJ9h++oh38/sOvhAoAdGrgAVAu lYQYsN1QK03B8wbInJF0R8CrkREkvf5H7SF7Fu2zWOFttBWTRI9KXuXS9tKL06LO Y2JhEFMdcEb8K3D73PIyi4gxEewofcBXt2rt0ttk8SSj+iJceIHk04C1vuXV8BfE olMemlxWA+usUn+CvHgCJqpZsWhhtBCY7Z1kk4PI3ttEUyELsSXVmU4+tkPylsJj 2tblTsLW6ZBuuw== -----END CERTIFICATE-----Generated at Fri Dec 19 01:28:02 2025 by rpki-client