This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/232cfd-76dc-49e9-a94d-5188ea17d9a9/1/MGavc-_zrCH_F6CVL_Nw5gykS10.mft File: MGavc-_zrCH_F6CVL_Nw5gykS10.mft (raw, json) Hash identifier: vBVHyXRN2cf0oykdx2TDTA0RhTDtF0Hdsx1zNUJBvTA= Subject key identifier: EE:45:22:F1:B9:65:B7:80:C7:99:74:34:F1:8D:D8:1C:9D:C4:5D:83 Authority key identifier: 30:66:AF:73:EF:F3:AC:21:FF:17:A0:95:2F:F3:70:E6:0C:A4:4B:5D Certificate issuer: /CN=3066af73eff3ac21ff17a0952ff370e60ca44b5d Certificate serial: 019B4DE0AF08786CAC0D181A8F9DBAA23BD8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGavc-_zrCH_F6CVL_Nw5gykS10.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/232cfd-76dc-49e9-a94d-5188ea17d9a9/1/MGavc-_zrCH_F6CVL_Nw5gykS10.mft Manifest number: 1790 Signing time: Wed 24 Dec 2025 01:02:09 +0000 Manifest this update: Wed 24 Dec 2025 01:02:09 +0000 Manifest next update: Thu 25 Dec 2025 01:02:09 +0000 Files and hashes: 1: MGavc-_zrCH_F6CVL_Nw5gykS10.crl (hash: esQkIuIMpZ7rHaswP75W3fzeY7HDOuXeQrzjGKLo4TQ=) 2: iic_3MWvnXwRjdS-4rnJnbVlZdw.roa (hash: ft3o3Jhs8krX+yoAKh9srXW+5Ly/fpaA/Ux+H2kgUMA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/232cfd-76dc-49e9-a94d-5188ea17d9a9/1/MGavc-_zrCH_F6CVL_Nw5gykS10.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/232cfd-76dc-49e9-a94d-5188ea17d9a9/1/MGavc-_zrCH_F6CVL_Nw5gykS10.mft rsync://rpki.ripe.net/repository/DEFAULT/MGavc-_zrCH_F6CVL_Nw5gykS10.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 19:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:e0:af:08:78:6c:ac:0d:18:1a:8f:9d:ba:a2:3b:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3066af73eff3ac21ff17a0952ff370e60ca44b5d Validity Not Before: Dec 24 01:02:09 2025 GMT Not After : Dec 25 01:02:09 2025 GMT Subject: CN=ee4522f1b965b780c7997434f18dd81c9dc45d83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a8:8a:85:0f:8a:c4:b2:11:57:af:e2:46:e7: 06:d8:24:af:7c:2f:c0:fe:10:d8:ba:af:aa:9b:8e: 78:63:bb:5d:b1:07:e4:f2:47:67:30:0a:25:21:ec: 9d:62:8e:5f:a8:d1:3e:ed:d5:73:20:15:d0:ba:ce: 3a:33:7d:d0:04:14:c1:47:80:25:8e:4a:7b:92:7b: 14:b7:65:45:2a:d4:e7:e8:d7:9d:ac:61:31:a3:10: 30:a5:03:25:cb:ac:aa:8c:30:0b:3b:ff:67:46:40: 95:33:b0:a0:ec:2c:93:46:bd:ed:ad:a2:27:5e:59: 55:e9:6b:1b:c1:09:ca:b2:f7:ea:1e:b1:0b:c3:7c: b9:cf:56:78:8c:21:bc:63:ad:83:8e:98:63:f5:6f: d3:ae:47:d5:12:ab:d5:dc:1f:ab:41:af:d0:8b:ea: 46:25:96:55:85:e1:eb:f8:c9:9c:86:77:40:29:ca: 2d:ad:a2:d6:23:3d:03:b6:8c:c9:71:aa:4f:1f:36: c1:71:37:2c:65:ce:63:f8:f9:e0:33:83:5c:2d:9f: 98:f1:42:a8:ea:63:aa:1c:66:40:8e:bf:2b:85:45: e4:3b:06:9e:04:0a:f4:01:8b:3b:9b:4b:8e:47:1e: fb:52:a5:3e:9c:e7:62:c6:83:51:60:d2:87:19:7c: e2:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:45:22:F1:B9:65:B7:80:C7:99:74:34:F1:8D:D8:1C:9D:C4:5D:83 X509v3 Authority Key Identifier: keyid:30:66:AF:73:EF:F3:AC:21:FF:17:A0:95:2F:F3:70:E6:0C:A4:4B:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGavc-_zrCH_F6CVL_Nw5gykS10.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/232cfd-76dc-49e9-a94d-5188ea17d9a9/1/MGavc-_zrCH_F6CVL_Nw5gykS10.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/232cfd-76dc-49e9-a94d-5188ea17d9a9/1/MGavc-_zrCH_F6CVL_Nw5gykS10.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:a7:ec:a2:8f:aa:9f:e8:53:47:ad:12:75:30:30:c8:29:d5: 8c:df:ea:17:12:6e:1c:44:d5:fc:b0:23:02:9e:d7:01:fb:5c: e2:b8:4f:1a:b8:01:b4:17:70:aa:df:87:ed:b8:c4:e8:0b:37: ae:68:70:7b:8a:f0:92:5d:69:59:47:cf:ba:1a:ff:d4:76:e0: a3:e5:5b:58:57:17:d2:a3:21:ca:5c:c4:9f:57:90:c3:f0:04: eb:36:e6:e6:89:c1:7e:c2:93:ef:79:84:36:86:9f:f9:e4:fd: b6:a2:b1:7f:1f:7d:b2:4d:24:bc:e0:2a:fd:b5:a8:79:1b:ff: 7f:48:33:9d:9c:48:ac:62:f0:b8:88:52:26:1f:47:d9:a4:94: 00:41:3b:7b:af:74:1c:7f:cc:f4:2a:cf:96:4d:51:6f:4d:2e: 3c:40:8b:5a:a6:de:0d:de:5c:d5:7c:6b:01:8b:d1:65:dc:47: 45:1e:20:83:5a:61:a4:a0:36:34:89:cc:29:2d:6f:5d:6a:ae: b8:5d:47:b4:82:02:21:b3:94:87:79:30:99:7b:3a:48:44:3c: 7b:31:d4:fa:8a:96:94:64:02:82:bb:3f:7f:81:e6:66:a9:90: e1:05:9a:2e:b9:b3:1f:48:b6:b1:e9:35:dd:dc:6c:e2:e2:6f: 8a:33:1f:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtN4K8IeGysDRgaj526ojvYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwNjZhZjczZWZmM2FjMjFmZjE3YTA5NTJmZjM3MGU2MGNh NDRiNWQwHhcNMjUxMjI0MDEwMjA5WhcNMjUxMjI1MDEwMjA5WjAzMTEwLwYDVQQD EyhlZTQ1MjJmMWI5NjViNzgwYzc5OTc0MzRmMThkZDgxYzlkYzQ1ZDgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqiKhQ+KxLIRV6/iRucG2CSvfC/A /hDYuq+qm454Y7tdsQfk8kdnMAolIeydYo5fqNE+7dVzIBXQus46M33QBBTBR4Al jkp7knsUt2VFKtTn6NedrGExoxAwpQMly6yqjDALO/9nRkCVM7Cg7CyTRr3traIn XllV6WsbwQnKsvfqHrELw3y5z1Z4jCG8Y62Djphj9W/TrkfVEqvV3B+rQa/Qi+pG JZZVheHr+MmchndAKcotraLWIz0DtozJcapPHzbBcTcsZc5j+PngM4NcLZ+Y8UKo 6mOqHGZAjr8rhUXkOwaeBAr0AYs7m0uORx77UqU+nOdixoNRYNKHGXziowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO5FIvG5ZbeAx5l0NPGN2BydxF2DMB8GA1UdIwQY MBaAFDBmr3Pv86wh/xeglS/zcOYMpEtdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUdhdmMtX3pyQ0hfRjZDVkxfTnc1Z3lrUzEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8yMzJjZmQtNzZkYy00OWU5LWE5NGQt NTE4OGVhMTdkOWE5LzEvTUdhdmMtX3pyQ0hfRjZDVkxfTnc1Z3lrUzEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC8yMzJjZmQtNzZkYy00OWU5LWE5NGQtNTE4OGVhMTdkOWE5 LzEvTUdhdmMtX3pyQ0hfRjZDVkxfTnc1Z3lrUzEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdafsoo+q n+hTR60SdTAwyCnVjN/qFxJuHETV/LAjAp7XAftc4rhPGrgBtBdwqt+H7bjE6As3 rmhwe4rwkl1pWUfPuhr/1Hbgo+VbWFcX0qMhylzEn1eQw/AE6zbm5onBfsKT73mE Noaf+eT9tqKxfx99sk0kvOAq/bWoeRv/f0gznZxIrGLwuIhSJh9H2aSUAEE7e690 HH/M9CrPlk1Rb00uPECLWqbeDd5c1XxrAYvRZdxHRR4gg1phpKA2NInMKS1vXWqu uF1HtIICIbOUh3kwmXs6SEQ8ezHU+oqWlGQCgrs/f4HmZqmQ4QWaLrmzH0i2sek1 3dxs4uJvijMfOw== -----END CERTIFICATE-----Generated at Wed Dec 24 02:59:26 2025 by rpki-client