This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.mft File: MGm6frw7Zy3QnsA0Th-AqhEx79A.mft (raw, json) Hash identifier: A6tKvFHmru2wL/HFUDCku/AIiDi420e4snPxK3SBoKM= Subject key identifier: 16:5A:BC:13:63:CE:3B:08:F9:E6:FF:9D:6D:CF:52:CD:F4:81:E7:9B Authority key identifier: 30:69:BA:7E:BC:3B:67:2D:D0:9E:C0:34:4E:1F:80:AA:11:31:EF:D0 Certificate issuer: /CN=3069ba7ebc3b672dd09ec0344e1f80aa1131efd0 Certificate serial: 019B3DFEA442F59FE5EECA634224F8C00532 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGm6frw7Zy3QnsA0Th-AqhEx79A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 23:00:56 +0000 Manifest this update: Sat 20 Dec 2025 23:00:56 +0000 Manifest next update: Sun 21 Dec 2025 23:00:56 +0000 Files and hashes: 1: MGm6frw7Zy3QnsA0Th-AqhEx79A.crl (hash: mA89gKdnzygoKQnRW3zm1zsn+QKCQYjPI7vm2e0Zhic=) 2: eqJAEOy6NaY4mZwa5RQJfzteBn0.roa (hash: 4ycDfdQF4RJy7Cm3II/1bQM7j6qQFueYRHKWr/2hsvQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.mft rsync://rpki.ripe.net/repository/DEFAULT/MGm6frw7Zy3QnsA0Th-AqhEx79A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:a4:42:f5:9f:e5:ee:ca:63:42:24:f8:c0:05:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3069ba7ebc3b672dd09ec0344e1f80aa1131efd0 Validity Not Before: Dec 20 23:00:56 2025 GMT Not After : Dec 21 23:00:56 2025 GMT Subject: CN=165abc1363ce3b08f9e6ff9d6dcf52cdf481e79b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:de:90:4c:5e:e2:66:32:1b:66:7f:d7:4a:83: 4f:f6:f3:33:e1:78:c9:70:55:81:96:dc:7a:33:d7: c7:f3:fb:82:1f:ca:e2:b2:93:5f:35:78:76:a8:50: 3e:2f:1b:ba:be:a6:63:73:29:35:78:60:94:bc:b7: 12:ff:05:a6:6c:c4:c6:de:75:b4:2a:ea:98:ca:2d: 0b:9b:ac:d1:22:3b:0c:55:02:4a:e5:be:65:6b:38: 0f:ed:0f:18:74:24:d4:3f:a2:7e:14:8b:f7:2f:ef: cf:af:aa:4c:f3:d2:08:82:27:88:87:72:80:a7:0d: 7a:3f:c9:9c:5f:4c:f8:fc:5e:2b:c5:f5:92:81:56: ba:67:dc:2e:24:b2:d0:d0:d4:fc:c2:d3:74:59:d6: 32:f5:25:32:71:e1:29:a5:19:48:69:46:09:31:28: 9a:b5:e3:0e:4c:53:eb:a6:28:c4:08:02:c3:f7:ba: 3e:c5:98:f3:8d:84:29:54:f0:e6:14:d6:ec:af:e3: e9:94:82:bb:a8:7c:92:93:91:f8:6c:d6:e7:79:80: 9b:c9:86:81:2a:ef:0f:62:14:e9:c9:a9:56:6e:fe: aa:e2:32:0e:af:f7:d8:ed:d8:df:e7:c6:e9:10:77: db:bf:c8:cb:a5:95:9c:0e:0c:f8:d2:44:8e:70:18: 94:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:5A:BC:13:63:CE:3B:08:F9:E6:FF:9D:6D:CF:52:CD:F4:81:E7:9B X509v3 Authority Key Identifier: keyid:30:69:BA:7E:BC:3B:67:2D:D0:9E:C0:34:4E:1F:80:AA:11:31:EF:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGm6frw7Zy3QnsA0Th-AqhEx79A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:08:ef:03:5f:cc:e9:45:e6:5c:1f:68:c1:81:4b:e4:db:3a: a9:dc:90:52:57:8d:cb:c1:6b:9f:e1:b9:36:d0:d6:f2:63:24: a9:a2:0a:e2:03:45:37:cb:cf:56:d8:2e:c4:6b:35:3b:f6:f5: 62:1d:a5:41:75:68:16:fc:b1:05:30:cf:72:3d:ea:13:e4:71: 1b:39:92:d5:15:9e:a8:89:a0:cc:30:ef:dd:89:60:62:18:4f: 01:72:e8:28:14:99:b0:34:96:c1:0e:6a:54:9f:aa:d8:b1:48: 85:7b:a4:d6:25:46:79:70:ae:76:a2:55:8f:43:3b:72:0a:57: 8e:d8:4e:2d:3e:c7:a8:ab:26:51:2f:57:10:d7:ab:ad:07:e8: 14:f2:90:a1:68:3a:85:92:93:d1:5d:d9:89:30:77:f6:8e:39: f5:da:fe:4f:b1:da:e7:6b:e4:e6:79:ea:04:49:8d:9a:96:15: 8a:45:d9:f4:95:60:cd:4f:c4:ec:fb:a1:60:d3:68:59:64:34: 30:3c:ed:51:fa:0c:24:d2:25:d0:de:0b:7b:86:58:3a:f1:8f: e9:a0:ce:63:6d:ce:b1:7b:d0:8d:cc:e8:4c:34:0c:0d:e9:33: 16:b1:f7:61:b1:ea:55:ca:32:b9:10:8b:c3:4e:c9:2b:30:04: 1e:2a:c6:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/qRC9Z/l7spjQiT4wAUyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwNjliYTdlYmMzYjY3MmRkMDllYzAzNDRlMWY4MGFhMTEz MWVmZDAwHhcNMjUxMjIwMjMwMDU2WhcNMjUxMjIxMjMwMDU2WjAzMTEwLwYDVQQD EygxNjVhYmMxMzYzY2UzYjA4ZjllNmZmOWQ2ZGNmNTJjZGY0ODFlNzliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtd6QTF7iZjIbZn/XSoNP9vMz4XjJ cFWBltx6M9fH8/uCH8rispNfNXh2qFA+Lxu6vqZjcyk1eGCUvLcS/wWmbMTG3nW0 KuqYyi0Lm6zRIjsMVQJK5b5lazgP7Q8YdCTUP6J+FIv3L+/Pr6pM89IIgieIh3KA pw16P8mcX0z4/F4rxfWSgVa6Z9wuJLLQ0NT8wtN0WdYy9SUyceEppRlIaUYJMSia teMOTFPrpijECALD97o+xZjzjYQpVPDmFNbsr+PplIK7qHySk5H4bNbneYCbyYaB Ku8PYhTpyalWbv6q4jIOr/fY7djf58bpEHfbv8jLpZWcDgz40kSOcBiU1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBZavBNjzjsI+eb/nW3PUs30geebMB8GA1UdIwQY MBaAFDBpun68O2ct0J7ANE4fgKoRMe/QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUdtNmZydzdaeTNRbnNBMFRoLUFxaEV4NzlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi80Y2JhMmYtNGE1Yi00NDM1LThhZWMt OTIzY2I1MGFiZTJlLzEvTUdtNmZydzdaeTNRbnNBMFRoLUFxaEV4NzlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi80Y2JhMmYtNGE1Yi00NDM1LThhZWMtOTIzY2I1MGFiZTJl LzEvTUdtNmZydzdaeTNRbnNBMFRoLUFxaEV4NzlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYQjvA1/M 6UXmXB9owYFL5Ns6qdyQUleNy8Frn+G5NtDW8mMkqaIK4gNFN8vPVtguxGs1O/b1 Yh2lQXVoFvyxBTDPcj3qE+RxGzmS1RWeqImgzDDv3YlgYhhPAXLoKBSZsDSWwQ5q VJ+q2LFIhXuk1iVGeXCudqJVj0M7cgpXjthOLT7HqKsmUS9XENerrQfoFPKQoWg6 hZKT0V3ZiTB39o459dr+T7Ha52vk5nnqBEmNmpYVikXZ9JVgzU/E7PuhYNNoWWQ0 MDztUfoMJNIl0N4Le4ZYOvGP6aDOY23OsXvQjczoTDQMDekzFrH3YbHqVcoyuRCL w07JKzAEHirGzQ== -----END CERTIFICATE-----Generated at Sun Dec 21 02:28:41 2025 by rpki-client