This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft File: rMGajH8XQRRJx9SP-TCNJIMulSs.mft (raw, json) Hash identifier: U4vW/cAZh/UTVcqZy5I0VJoILlnu8kg3tokdiPCQ3+g= Subject key identifier: D5:E4:EC:06:2E:A7:96:C0:66:7A:F8:FF:79:2D:9C:C0:13:5A:E8:5C Authority key identifier: AC:C1:9A:8C:7F:17:41:14:49:C7:D4:8F:F9:30:8D:24:83:2E:95:2B Certificate issuer: /CN=acc19a8c7f17411449c7d48ff9308d24832e952b Certificate serial: 019B2D0C693A7A9F3C57F094B077A320BE6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rMGajH8XQRRJx9SP-TCNJIMulSs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft Manifest number: 1781 Signing time: Wed 17 Dec 2025 16:02:26 +0000 Manifest this update: Wed 17 Dec 2025 16:02:26 +0000 Manifest next update: Thu 18 Dec 2025 16:02:26 +0000 Files and hashes: 1: Qwfm7iyTFcUFA4cP-BGJUr6nVGo.roa (hash: cGT3x4JJQpP+f+7JmlJEaoJ5r1uUvYJMBAOOSckaWRE=) 2: rMGajH8XQRRJx9SP-TCNJIMulSs.crl (hash: SG5oKQNE7a6YOSA/Lxpj4GanhTfp4sXmUFmWqhnCoB0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft rsync://rpki.ripe.net/repository/DEFAULT/rMGajH8XQRRJx9SP-TCNJIMulSs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:0c:69:3a:7a:9f:3c:57:f0:94:b0:77:a3:20:be:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=acc19a8c7f17411449c7d48ff9308d24832e952b Validity Not Before: Dec 17 16:02:26 2025 GMT Not After : Dec 18 16:02:26 2025 GMT Subject: CN=d5e4ec062ea796c0667af8ff792d9cc0135ae85c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:91:e0:22:91:ed:3f:b4:cd:2d:5f:89:c6:ee: 06:e3:35:d3:10:2a:ce:c7:ba:28:6a:8a:57:d4:1e: 34:22:0c:42:c0:97:3e:db:e7:11:07:62:f8:8a:69: e4:b8:60:ba:8f:4a:cb:af:d6:8c:9e:26:9a:3f:17: b6:a3:27:62:96:b0:3c:7b:1e:d3:46:fe:77:2d:a2: 38:fd:5a:fd:7f:dc:da:96:19:b6:93:c9:53:63:49: c7:d7:ce:b6:9e:a9:b3:6d:15:07:58:d2:be:db:03: 16:b2:41:03:74:ad:89:f9:1b:37:5d:c6:9a:dd:5c: 9f:1c:05:ee:ff:ee:71:27:d7:15:3b:4c:e3:f3:6b: e9:22:35:8d:dd:3e:b2:dc:6e:33:a4:a2:5c:00:ec: a6:30:a4:c6:aa:a3:11:4c:6a:ab:18:c4:4d:8e:2c: 6f:96:d2:2a:06:22:d6:50:6c:1c:4c:4c:77:0a:20: d0:92:35:70:0b:68:77:3d:61:0c:cc:f6:b0:37:1a: bd:3a:8b:70:c8:92:90:5d:2a:4a:4d:f6:1a:ee:5c: 5f:77:d4:38:a0:2b:e2:95:4e:b4:46:31:b7:42:8a: 52:9d:81:c6:56:23:25:f4:f9:d2:b7:74:54:03:6f: c4:e0:f2:29:d9:59:e0:3f:7b:58:54:04:94:58:18: ec:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:E4:EC:06:2E:A7:96:C0:66:7A:F8:FF:79:2D:9C:C0:13:5A:E8:5C X509v3 Authority Key Identifier: keyid:AC:C1:9A:8C:7F:17:41:14:49:C7:D4:8F:F9:30:8D:24:83:2E:95:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMGajH8XQRRJx9SP-TCNJIMulSs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:6a:31:bb:e6:e6:32:4d:40:72:04:37:c0:69:2b:ea:94:0b: b6:46:be:b8:b3:24:61:ba:ec:bd:82:3c:f5:2a:87:38:dd:44: b1:62:d3:4d:e2:41:a8:1a:55:71:29:06:94:49:59:0a:25:c4: 6b:30:82:97:98:0f:c4:ef:83:fc:60:47:57:d4:ce:ec:6f:4e: 2a:b8:6b:f2:d4:be:cb:71:27:d2:31:a2:4b:1d:18:3b:55:75: 91:6f:4d:23:27:9a:b2:9f:12:c3:5a:ba:f1:db:bf:00:c5:4a: d6:4e:9c:ac:f5:b4:00:b5:37:a7:45:a9:b4:04:33:5f:b8:b8: ba:78:41:1e:40:01:a7:d6:22:6e:f0:1c:a2:ae:d6:3d:f3:7d: 34:63:5a:70:12:5b:52:f5:fa:ee:db:b5:f0:6f:87:60:0f:3c: f4:2b:4d:a6:29:6f:1f:99:cb:a2:eb:c3:37:15:04:91:14:5b: 7f:ee:ce:85:3f:71:a7:21:3d:51:70:d7:30:e7:33:85:3b:77: 77:90:61:a4:91:92:fb:75:62:fc:bc:d8:89:43:96:af:3e:0d: 2d:97:5b:f9:f2:da:c0:a1:b4:b6:ad:64:c5:a5:98:70:f5:01: ce:d4:e1:1a:25:b4:c3:93:d3:7f:67:cb:29:fa:b1:db:6b:ed: 21:fe:0b:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstDGk6ep88V/CUsHejIL5tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjYzE5YThjN2YxNzQxMTQ0OWM3ZDQ4ZmY5MzA4ZDI0ODMy ZTk1MmIwHhcNMjUxMjE3MTYwMjI2WhcNMjUxMjE4MTYwMjI2WjAzMTEwLwYDVQQD EyhkNWU0ZWMwNjJlYTc5NmMwNjY3YWY4ZmY3OTJkOWNjMDEzNWFlODVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpHgIpHtP7TNLV+Jxu4G4zXTECrO x7ooaopX1B40IgxCwJc+2+cRB2L4imnkuGC6j0rLr9aMniaaPxe2oydilrA8ex7T Rv53LaI4/Vr9f9zalhm2k8lTY0nH1862nqmzbRUHWNK+2wMWskEDdK2J+Rs3Xcaa 3VyfHAXu/+5xJ9cVO0zj82vpIjWN3T6y3G4zpKJcAOymMKTGqqMRTGqrGMRNjixv ltIqBiLWUGwcTEx3CiDQkjVwC2h3PWEMzPawNxq9OotwyJKQXSpKTfYa7lxfd9Q4 oCvilU60RjG3QopSnYHGViMl9PnSt3RUA2/E4PIp2VngP3tYVASUWBjs/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNXk7AYup5bAZnr4/3ktnMATWuhcMB8GA1UdIwQY MBaAFKzBmox/F0EUScfUj/kwjSSDLpUrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvck1HYWpIOFhRUlJKeDlTUC1UQ05KSU11bFNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9mNDA1YTItNGUzZS00NjIxLTk3MWQt YmY4ZjNkNDM4ODRmLzEvck1HYWpIOFhRUlJKeDlTUC1UQ05KSU11bFNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9mNDA1YTItNGUzZS00NjIxLTk3MWQtYmY4ZjNkNDM4ODRm LzEvck1HYWpIOFhRUlJKeDlTUC1UQ05KSU11bFNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb2oxu+bm Mk1AcgQ3wGkr6pQLtka+uLMkYbrsvYI89SqHON1EsWLTTeJBqBpVcSkGlElZCiXE azCCl5gPxO+D/GBHV9TO7G9OKrhr8tS+y3En0jGiSx0YO1V1kW9NIyeasp8Sw1q6 8du/AMVK1k6crPW0ALU3p0WptAQzX7i4unhBHkABp9YibvAcoq7WPfN9NGNacBJb UvX67tu18G+HYA889CtNpilvH5nLouvDNxUEkRRbf+7OhT9xpyE9UXDXMOczhTt3 d5BhpJGS+3Vi/LzYiUOWrz4NLZdb+fLawKG0tq1kxaWYcPUBztThGiW0w5PTf2fL Kfqx22vtIf4LBQ== -----END CERTIFICATE-----Generated at Wed Dec 17 18:38:45 2025 by rpki-client