This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.mft File: MGatYcFi3wZQ7gq2DGgHWymiEcg.mft (raw, json) Hash identifier: T0DmSUFoVU7vq75DZTTrJ7w/5atqg30gY8BRoPsp6Og= Subject key identifier: 67:E2:AF:AF:17:19:7E:D8:C8:46:4E:89:EF:3D:13:8F:0D:2F:5A:BB Authority key identifier: 30:66:AD:61:C1:62:DF:06:50:EE:0A:B6:0C:68:07:5B:29:A2:11:C8 Certificate issuer: /CN=3066ad61c162df0650ee0ab60c68075b29a211c8 Certificate serial: 019B3D59FBDF988BF8FB58EB0E143B01DAE7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGatYcFi3wZQ7gq2DGgHWymiEcg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.mft Manifest number: 178A Signing time: Sat 20 Dec 2025 20:01:05 +0000 Manifest this update: Sat 20 Dec 2025 20:01:05 +0000 Manifest next update: Sun 21 Dec 2025 20:01:05 +0000 Files and hashes: 1: MGatYcFi3wZQ7gq2DGgHWymiEcg.crl (hash: gelwVGXc+J12p/UWJWSM9t8IDr8vc2LU/pBCV8Rt4vU=) 2: akH_-GUofRi3IR9WY9DWc-MBUHc.roa (hash: GH7ew6e0VLPyvTO+mxXZge5TTd6Djbt+GfnJ/q6zgIU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.mft rsync://rpki.ripe.net/repository/DEFAULT/MGatYcFi3wZQ7gq2DGgHWymiEcg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:fb:df:98:8b:f8:fb:58:eb:0e:14:3b:01:da:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3066ad61c162df0650ee0ab60c68075b29a211c8 Validity Not Before: Dec 20 20:01:05 2025 GMT Not After : Dec 21 20:01:05 2025 GMT Subject: CN=67e2afaf17197ed8c8464e89ef3d138f0d2f5abb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:b2:6f:a8:60:9d:6f:ac:8e:bc:9a:26:a5:30: c0:e3:ae:7d:1c:16:c9:07:e5:07:30:3e:0b:85:9b: be:0e:22:14:c2:6b:32:39:97:04:f3:bf:64:20:19: 53:6d:c6:12:14:42:15:29:11:8f:cf:3a:b1:d7:da: a7:e1:7f:35:3b:c6:f8:8a:ee:53:5d:d1:7c:69:1e: 6f:4a:b3:92:1b:44:07:af:c6:7c:4a:7d:3a:ef:88: 6b:a8:1a:96:c8:0b:f2:cd:77:43:ed:0e:ca:fb:14: 27:f2:4f:65:6c:56:3d:1f:f0:0f:6b:f5:42:f2:f7: b7:7f:44:45:20:11:2f:86:57:43:f8:5a:30:89:a1: a6:98:65:8d:96:be:27:7a:fe:a4:e7:ef:b4:3f:20: 4d:d5:cf:88:5c:c4:10:2b:96:29:76:c4:00:55:e6: 8a:80:03:9b:a1:38:e1:77:a4:c5:1d:18:4b:02:aa: fd:82:81:cc:c8:db:5f:b0:a9:da:31:09:e4:3a:1c: da:66:10:f4:4f:99:17:65:3c:3e:7d:73:ee:83:10: 38:2f:56:30:7b:61:f4:0d:de:ca:e9:72:a0:05:ec: 1e:d3:40:0c:ae:f2:bd:63:2f:09:d0:10:03:92:e2: 0e:f0:12:31:b3:c3:e0:20:e6:9a:31:34:88:47:47: ce:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:E2:AF:AF:17:19:7E:D8:C8:46:4E:89:EF:3D:13:8F:0D:2F:5A:BB X509v3 Authority Key Identifier: keyid:30:66:AD:61:C1:62:DF:06:50:EE:0A:B6:0C:68:07:5B:29:A2:11:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGatYcFi3wZQ7gq2DGgHWymiEcg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:d3:ca:54:f2:6b:4d:7e:40:90:3f:da:53:13:14:9c:ec:b8: d2:b8:ce:1b:13:a1:1b:63:97:b7:e5:5f:19:66:76:33:bc:65: a4:ae:4e:ab:98:97:76:a5:51:17:f4:da:72:29:0d:4c:39:81: 52:73:86:62:32:f7:fd:8a:b4:04:d2:4a:c2:96:54:04:06:b8: ae:1a:d3:af:55:22:48:a0:1e:23:3e:62:cb:1d:48:38:79:45: 4f:41:64:fe:0d:3e:63:2c:3e:6c:59:a2:37:f0:bd:6f:3a:c9: 21:6f:da:8c:f1:bb:f3:b8:e0:83:f1:27:96:e3:7b:d6:60:ae: b2:ec:57:27:30:c9:4b:14:14:98:80:05:78:f9:fc:8b:0b:9f: b7:1a:a3:51:80:dd:0e:21:27:f2:88:aa:3f:59:b0:fd:24:17: 4a:20:04:10:36:bb:4a:5d:32:c4:ae:81:84:9b:cd:7e:98:15: 8f:50:81:9b:b6:b3:7a:85:9c:05:75:78:14:0c:b7:85:87:f7: d1:d9:fb:ae:89:49:5b:78:88:55:b8:09:a1:73:61:3e:f9:b3: 65:11:f8:36:7f:63:57:82:9c:ca:03:36:74:65:d2:cf:82:9c: 47:70:ef:54:90:6e:fb:4a:89:73:1e:6e:bf:68:2c:31:94:5d: 53:75:b5:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WfvfmIv4+1jrDhQ7AdrnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwNjZhZDYxYzE2MmRmMDY1MGVlMGFiNjBjNjgwNzViMjlh MjExYzgwHhcNMjUxMjIwMjAwMTA1WhcNMjUxMjIxMjAwMTA1WjAzMTEwLwYDVQQD Eyg2N2UyYWZhZjE3MTk3ZWQ4Yzg0NjRlODllZjNkMTM4ZjBkMmY1YWJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5rJvqGCdb6yOvJompTDA4659HBbJ B+UHMD4LhZu+DiIUwmsyOZcE879kIBlTbcYSFEIVKRGPzzqx19qn4X81O8b4iu5T XdF8aR5vSrOSG0QHr8Z8Sn0674hrqBqWyAvyzXdD7Q7K+xQn8k9lbFY9H/APa/VC 8ve3f0RFIBEvhldD+FowiaGmmGWNlr4nev6k5++0PyBN1c+IXMQQK5YpdsQAVeaK gAOboTjhd6TFHRhLAqr9goHMyNtfsKnaMQnkOhzaZhD0T5kXZTw+fXPugxA4L1Yw e2H0Dd7K6XKgBewe00AMrvK9Yy8J0BADkuIO8BIxs8PgIOaaMTSIR0fOYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGfir68XGX7YyEZOie89E48NL1q7MB8GA1UdIwQY MBaAFDBmrWHBYt8GUO4KtgxoB1spohHIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUdhdFljRmkzd1pRN2dxMkRHZ0hXeW1pRWNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC85YjM0YjAtMzAxYS00MWEyLWI0YzUt YTg4NjZhYTk1YzcxLzEvTUdhdFljRmkzd1pRN2dxMkRHZ0hXeW1pRWNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC85YjM0YjAtMzAxYS00MWEyLWI0YzUtYTg4NjZhYTk1Yzcx LzEvTUdhdFljRmkzd1pRN2dxMkRHZ0hXeW1pRWNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAldPKVPJr TX5AkD/aUxMUnOy40rjOGxOhG2OXt+VfGWZ2M7xlpK5Oq5iXdqVRF/TacikNTDmB UnOGYjL3/Yq0BNJKwpZUBAa4rhrTr1UiSKAeIz5iyx1IOHlFT0Fk/g0+Yyw+bFmi N/C9bzrJIW/ajPG787jgg/EnluN71mCusuxXJzDJSxQUmIAFePn8iwuftxqjUYDd DiEn8oiqP1mw/SQXSiAEEDa7Sl0yxK6BhJvNfpgVj1CBm7azeoWcBXV4FAy3hYf3 0dn7rolJW3iIVbgJoXNhPvmzZRH4Nn9jV4KcygM2dGXSz4KcR3DvVJBu+0qJcx5u v2gsMZRdU3W1Rw== -----END CERTIFICATE-----Generated at Sat Dec 20 22:55:13 2025 by rpki-client