This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/a8941a-7250-48ec-aaf8-6d8ea9d1cd73/1/MGE0vPWfWB1rdmMM-oeGeHaikhU.mft File: MGE0vPWfWB1rdmMM-oeGeHaikhU.mft (raw, json) Hash identifier: eMIL16XTrZ3rYjQrLY3m2Z4DsO2qOEuRQxPusGY5HRw= Subject key identifier: 3E:A7:66:10:BC:97:3C:7D:BC:36:D2:3B:33:04:1E:50:3B:0A:C5:BB Authority key identifier: 30:61:34:BC:F5:9F:58:1D:6B:76:63:0C:FA:87:86:78:76:A2:92:15 Certificate issuer: /CN=306134bcf59f581d6b76630cfa87867876a29215 Certificate serial: 019B6CC56BAF32B40BE3C6D75992B95E1D4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGE0vPWfWB1rdmMM-oeGeHaikhU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/a8941a-7250-48ec-aaf8-6d8ea9d1cd73/1/MGE0vPWfWB1rdmMM-oeGeHaikhU.mft Manifest number: 1340 Signing time: Tue 30 Dec 2025 01:00:36 +0000 Manifest this update: Tue 30 Dec 2025 01:00:36 +0000 Manifest next update: Wed 31 Dec 2025 01:00:36 +0000 Files and hashes: 1: MGE0vPWfWB1rdmMM-oeGeHaikhU.crl (hash: +qOyXww6iScGkgNY+EKvxRdd7d+nxnpbDiQBNReWsIg=) 2: iyT2rEaTLGTQJtoCzDixmDHk4q8.roa (hash: DJdcXuwOyrFSr66rkLo/Y+8lRD0xwqdql+52mCZmuDA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/a8941a-7250-48ec-aaf8-6d8ea9d1cd73/1/MGE0vPWfWB1rdmMM-oeGeHaikhU.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/a8941a-7250-48ec-aaf8-6d8ea9d1cd73/1/MGE0vPWfWB1rdmMM-oeGeHaikhU.mft rsync://rpki.ripe.net/repository/DEFAULT/MGE0vPWfWB1rdmMM-oeGeHaikhU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 23:52:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6c:c5:6b:af:32:b4:0b:e3:c6:d7:59:92:b9:5e:1d:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=306134bcf59f581d6b76630cfa87867876a29215 Validity Not Before: Dec 30 01:00:36 2025 GMT Not After : Dec 31 01:00:36 2025 GMT Subject: CN=3ea76610bc973c7dbc36d23b33041e503b0ac5bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:24:0d:11:eb:f1:9e:cb:d4:a1:bb:89:67:80: b9:79:15:fb:dc:90:ae:6c:fd:13:a6:0a:a2:7d:bd: 9f:5c:9d:60:7b:ae:e6:34:56:a1:40:a1:68:8a:96: 52:bd:01:4a:20:be:25:2f:86:6e:61:a9:06:d5:17: 3c:45:52:62:8f:5b:ca:92:a6:b6:1c:d3:19:9e:5b: f3:5e:da:c3:8e:0d:3a:fc:1d:2f:15:32:66:f1:6a: 88:7b:0d:73:22:5a:31:04:9e:74:27:d4:24:e0:ec: 33:63:17:d8:04:82:2b:04:05:8a:61:d2:93:20:a0: fb:1f:75:ac:9c:50:ab:b5:ed:de:2b:6a:61:e7:fa: f0:93:ee:fb:9b:b2:db:7a:ee:a9:51:31:b9:4b:7d: ec:9e:26:33:49:b1:cc:a3:a5:a4:eb:fc:2f:9e:e4: b4:90:9c:7a:63:d5:53:92:73:93:97:ad:ce:51:43: 4c:6a:32:80:8a:ed:62:fd:dc:9d:ab:70:5d:7c:d5: 2d:34:e2:ee:b3:40:a8:3d:95:89:59:e4:b0:23:79: 25:b3:e1:b5:d2:f6:68:f2:f8:39:c5:33:d1:15:7c: cd:15:5b:88:5b:9f:82:b7:81:e1:46:61:0d:9c:b6: f9:d6:27:85:00:d5:1e:bd:81:ef:c1:58:c7:b3:ea: 40:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:A7:66:10:BC:97:3C:7D:BC:36:D2:3B:33:04:1E:50:3B:0A:C5:BB X509v3 Authority Key Identifier: keyid:30:61:34:BC:F5:9F:58:1D:6B:76:63:0C:FA:87:86:78:76:A2:92:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGE0vPWfWB1rdmMM-oeGeHaikhU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a8941a-7250-48ec-aaf8-6d8ea9d1cd73/1/MGE0vPWfWB1rdmMM-oeGeHaikhU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a8941a-7250-48ec-aaf8-6d8ea9d1cd73/1/MGE0vPWfWB1rdmMM-oeGeHaikhU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:b7:80:f1:86:e1:12:71:3f:c6:f8:02:61:b6:3b:07:d3:20: 83:87:aa:5e:ff:59:69:67:10:69:b2:66:21:8c:07:12:af:8e: 12:ad:5e:45:db:f4:fa:a1:a8:59:11:42:05:b3:73:a0:c7:c2: a5:88:99:ee:88:ce:51:27:d1:49:fe:a7:b6:05:34:dd:f0:e6: fc:cd:be:4d:b5:50:54:4b:84:c5:a2:49:e6:40:be:1d:32:b2: 7a:46:fe:0b:20:f3:87:eb:cd:08:ac:9f:5a:66:47:50:17:4c: 88:ba:65:1f:28:74:7a:45:12:be:64:4c:40:9f:96:af:e1:30: e4:13:14:4c:b7:0f:5f:32:51:d7:a5:d1:a3:2c:17:68:8a:f4: 9a:9b:38:52:bd:d4:4d:5f:b0:5f:1f:a2:bd:5e:35:b7:e7:5b: 38:4d:8e:54:9c:04:3c:f8:11:1a:ac:46:af:9c:fc:88:a7:64: b7:34:2b:a9:07:88:ad:00:2f:09:27:15:4e:1a:bd:29:de:7f: c5:b0:be:b6:9b:a9:09:30:c5:f2:ff:b4:94:49:b3:03:29:0b: cd:2e:1d:ed:dc:52:40:0a:a9:a2:f7:96:6f:e9:45:81:ab:c9: 37:0e:82:17:b1:6b:92:b3:47:d7:a3:03:ec:9d:2d:a4:a8:e7: 1b:e6:85:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtsxWuvMrQL48bXWZK5Xh1OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwNjEzNGJjZjU5ZjU4MWQ2Yjc2NjMwY2ZhODc4Njc4NzZh MjkyMTUwHhcNMjUxMjMwMDEwMDM2WhcNMjUxMjMxMDEwMDM2WjAzMTEwLwYDVQQD EygzZWE3NjYxMGJjOTczYzdkYmMzNmQyM2IzMzA0MWU1MDNiMGFjNWJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCQNEevxnsvUobuJZ4C5eRX73JCu bP0Tpgqifb2fXJ1ge67mNFahQKFoipZSvQFKIL4lL4ZuYakG1Rc8RVJij1vKkqa2 HNMZnlvzXtrDjg06/B0vFTJm8WqIew1zIloxBJ50J9Qk4OwzYxfYBIIrBAWKYdKT IKD7H3WsnFCrte3eK2ph5/rwk+77m7Lbeu6pUTG5S33sniYzSbHMo6Wk6/wvnuS0 kJx6Y9VTknOTl63OUUNMajKAiu1i/dydq3BdfNUtNOLus0CoPZWJWeSwI3kls+G1 0vZo8vg5xTPRFXzNFVuIW5+Ct4HhRmENnLb51ieFANUevYHvwVjHs+pA6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD6nZhC8lzx9vDbSOzMEHlA7CsW7MB8GA1UdIwQY MBaAFDBhNLz1n1gda3ZjDPqHhnh2opIVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUdFMHZQV2ZXQjFyZG1NTS1vZUdlSGFpa2hVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9hODk0MWEtNzI1MC00OGVjLWFhZjgt NmQ4ZWE5ZDFjZDczLzEvTUdFMHZQV2ZXQjFyZG1NTS1vZUdlSGFpa2hVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9hODk0MWEtNzI1MC00OGVjLWFhZjgtNmQ4ZWE5ZDFjZDcz LzEvTUdFMHZQV2ZXQjFyZG1NTS1vZUdlSGFpa2hVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy7eA8Ybh EnE/xvgCYbY7B9Mgg4eqXv9ZaWcQabJmIYwHEq+OEq1eRdv0+qGoWRFCBbNzoMfC pYiZ7ojOUSfRSf6ntgU03fDm/M2+TbVQVEuExaJJ5kC+HTKyekb+CyDzh+vNCKyf WmZHUBdMiLplHyh0ekUSvmRMQJ+Wr+Ew5BMUTLcPXzJR16XRoywXaIr0mps4Ur3U TV+wXx+ivV41t+dbOE2OVJwEPPgRGqxGr5z8iKdktzQrqQeIrQAvCScVThq9Kd5/ xbC+tpupCTDF8v+0lEmzAykLzS4d7dxSQAqpoveWb+lFgavJNw6CF7FrkrNH16MD 7J0tpKjnG+aFfw== -----END CERTIFICATE-----Generated at Tue Dec 30 03:16:31 2025 by rpki-client