This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/0f2682-9878-416b-965c-40aac6396777/1/mjgMVcRhF_nQ-fifiF_YrFhMcuc.mft File: mjgMVcRhF_nQ-fifiF_YrFhMcuc.mft (raw, json) Hash identifier: q8U3AZnTujjaaWIgk0VEEfNjcYwWqLwger/7+NE9v7g= Subject key identifier: D6:26:15:3E:CF:EB:7B:57:B3:5E:49:AB:AF:47:46:77:09:5E:0C:97 Authority key identifier: 9A:38:0C:55:C4:61:17:F9:D0:F9:F8:9F:88:5F:D8:AC:58:4C:72:E7 Certificate issuer: /CN=9a380c55c46117f9d0f9f89f885fd8ac584c72e7 Certificate serial: 019B6D6A78076E00D634C0A0D17A6786FC4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mjgMVcRhF_nQ-fifiF_YrFhMcuc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/0f2682-9878-416b-965c-40aac6396777/1/mjgMVcRhF_nQ-fifiF_YrFhMcuc.mft Manifest number: 06C5 Signing time: Tue 30 Dec 2025 04:00:52 +0000 Manifest this update: Tue 30 Dec 2025 04:00:52 +0000 Manifest next update: Wed 31 Dec 2025 04:00:52 +0000 Files and hashes: 1: 0Xa-Nei_d95pLvklAjjCcq4wB50.roa (hash: IPQHZLb7lkBMMEnjRg8Zyo+jCG1PIyAJca8gIl7Nyqw=) 2: mjgMVcRhF_nQ-fifiF_YrFhMcuc.crl (hash: iFIajhq2ZXxHk5K/fDIZr2UlxakHHhaow946TujEwFw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/0f2682-9878-416b-965c-40aac6396777/1/mjgMVcRhF_nQ-fifiF_YrFhMcuc.crl rsync://rpki.ripe.net/repository/DEFAULT/31/0f2682-9878-416b-965c-40aac6396777/1/mjgMVcRhF_nQ-fifiF_YrFhMcuc.mft rsync://rpki.ripe.net/repository/DEFAULT/mjgMVcRhF_nQ-fifiF_YrFhMcuc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 04:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6d:6a:78:07:6e:00:d6:34:c0:a0:d1:7a:67:86:fc:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a380c55c46117f9d0f9f89f885fd8ac584c72e7 Validity Not Before: Dec 30 04:00:52 2025 GMT Not After : Dec 31 04:00:52 2025 GMT Subject: CN=d626153ecfeb7b57b35e49abaf474677095e0c97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:43:1b:b7:fa:fa:d5:67:45:37:a3:03:cb:66: 1a:c6:06:07:21:9a:e4:d0:5b:ea:d8:1f:f3:b5:a6: eb:21:40:93:3f:18:7e:4c:58:d8:93:dc:2d:2f:28: 8a:e7:0f:1d:c6:9d:f0:22:2f:15:18:6b:14:3c:4c: 83:6e:bf:9b:f7:81:7c:ab:51:7e:e5:74:58:bd:09: fa:34:8b:90:7f:13:53:88:00:f6:76:37:1c:52:e1: fb:81:19:13:db:8d:43:96:03:3e:90:4b:bd:b2:21: 17:cd:c5:28:78:f6:a2:72:81:1d:6d:b9:5a:ec:59: 10:ae:22:09:2c:35:ff:0a:fd:00:47:6a:f0:85:97: a1:b2:0c:db:57:d7:0e:65:87:4f:95:68:0f:41:8f: 39:95:99:1b:24:39:bc:3e:2b:a6:6b:07:35:60:c1: ad:56:d2:6b:ce:4e:3f:0c:a4:56:de:06:42:db:ba: 89:24:19:65:1f:ac:f0:f6:a4:15:ff:01:34:db:4d: 1f:49:8d:b3:14:7f:37:99:48:48:f1:03:b3:4e:88: 8a:4e:64:5f:50:51:89:6e:01:83:92:db:b3:17:0b: 36:29:b1:5c:a1:4c:3b:3f:50:bb:a1:e2:85:16:e7: 08:4c:f3:9a:aa:48:ed:d0:4c:0b:6f:22:77:49:34: ad:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:26:15:3E:CF:EB:7B:57:B3:5E:49:AB:AF:47:46:77:09:5E:0C:97 X509v3 Authority Key Identifier: keyid:9A:38:0C:55:C4:61:17:F9:D0:F9:F8:9F:88:5F:D8:AC:58:4C:72:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mjgMVcRhF_nQ-fifiF_YrFhMcuc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0f2682-9878-416b-965c-40aac6396777/1/mjgMVcRhF_nQ-fifiF_YrFhMcuc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0f2682-9878-416b-965c-40aac6396777/1/mjgMVcRhF_nQ-fifiF_YrFhMcuc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:29:de:b6:e9:89:c9:5d:91:92:83:63:b4:e9:00:ce:84:ec: e1:5b:87:90:bd:17:d9:3b:d6:83:8a:32:f3:ea:83:79:68:eb: 12:8f:aa:6a:72:53:2b:18:28:64:b2:26:ad:30:51:ee:7d:88: d0:5f:73:c5:16:cc:e3:3a:75:65:3e:42:6a:9c:61:ed:ba:79: 07:3f:3c:07:85:88:e6:8e:db:36:d8:3b:a4:5a:bf:31:d4:b8: c1:b5:c9:04:55:d3:85:70:23:bf:77:ea:0c:c9:74:ac:cc:33: a6:e4:3b:43:4c:e9:d4:cc:92:48:51:90:87:40:17:7b:bb:63: 3a:68:e4:fa:56:94:b0:13:9b:4c:7d:05:3f:04:29:51:ac:8b: fa:29:56:5b:62:59:db:13:72:af:a1:b4:fe:ac:51:4b:f8:79: 38:ef:f8:40:3f:57:69:21:e5:c4:3c:81:26:87:43:e7:6d:60: 03:2d:98:6a:c9:fd:83:da:da:66:31:c6:38:67:a7:60:2a:a1: c7:56:13:21:ff:1a:8b:42:eb:4f:91:86:4a:34:bf:13:e2:9f: 9d:d4:9f:fc:07:88:64:2a:9b:fd:b5:7e:16:bd:96:3a:5b:1d: 04:d0:51:06:ca:33:9e:a0:91:2b:62:22:dd:3a:87:4c:a9:5f: 21:24:be:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZttangHbgDWNMCg0XpnhvxMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhMzgwYzU1YzQ2MTE3ZjlkMGY5Zjg5Zjg4NWZkOGFjNTg0 YzcyZTcwHhcNMjUxMjMwMDQwMDUyWhcNMjUxMjMxMDQwMDUyWjAzMTEwLwYDVQQD EyhkNjI2MTUzZWNmZWI3YjU3YjM1ZTQ5YWJhZjQ3NDY3NzA5NWUwYzk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0Mbt/r61WdFN6MDy2YaxgYHIZrk 0Fvq2B/ztabrIUCTPxh+TFjYk9wtLyiK5w8dxp3wIi8VGGsUPEyDbr+b94F8q1F+ 5XRYvQn6NIuQfxNTiAD2djccUuH7gRkT241DlgM+kEu9siEXzcUoePaicoEdbbla 7FkQriIJLDX/Cv0AR2rwhZehsgzbV9cOZYdPlWgPQY85lZkbJDm8Piumawc1YMGt VtJrzk4/DKRW3gZC27qJJBllH6zw9qQV/wE0200fSY2zFH83mUhI8QOzToiKTmRf UFGJbgGDktuzFws2KbFcoUw7P1C7oeKFFucITPOaqkjt0EwLbyJ3STStAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNYmFT7P63tXs15Jq69HRncJXgyXMB8GA1UdIwQY MBaAFJo4DFXEYRf50Pn4n4hf2KxYTHLnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWpnTVZjUmhGX25RLWZpZmlGX1lyRmhNY3VjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8wZjI2ODItOTg3OC00MTZiLTk2NWMt NDBhYWM2Mzk2Nzc3LzEvbWpnTVZjUmhGX25RLWZpZmlGX1lyRmhNY3VjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS8wZjI2ODItOTg3OC00MTZiLTk2NWMtNDBhYWM2Mzk2Nzc3 LzEvbWpnTVZjUmhGX25RLWZpZmlGX1lyRmhNY3VjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqinetumJ yV2RkoNjtOkAzoTs4VuHkL0X2TvWg4oy8+qDeWjrEo+qanJTKxgoZLImrTBR7n2I 0F9zxRbM4zp1ZT5Capxh7bp5Bz88B4WI5o7bNtg7pFq/MdS4wbXJBFXThXAjv3fq DMl0rMwzpuQ7Q0zp1MySSFGQh0AXe7tjOmjk+laUsBObTH0FPwQpUayL+ilWW2JZ 2xNyr6G0/qxRS/h5OO/4QD9XaSHlxDyBJodD521gAy2Yasn9g9raZjHGOGenYCqh x1YTIf8ai0LrT5GGSjS/E+KfndSf/AeIZCqb/bV+Fr2WOlsdBNBRBsoznqCRK2Ii 3TqHTKlfISS+qA== -----END CERTIFICATE-----Generated at Tue Dec 30 12:13:54 2025 by rpki-client