This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/40e57e-c627-4b9b-9577-596fa8c0a57a/1/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.mft File: MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.mft (raw, json) Hash identifier: KTiHt3W0FXGY2M0iNj2/MZhoOeexuj6y8JP0Qo1Z8Kk= Subject key identifier: A0:4F:8D:72:1E:9A:7F:0D:66:B1:8B:1D:71:3E:42:75:50:AF:F5:B2 Authority key identifier: 30:62:8D:92:38:E2:3D:6B:F4:C7:35:99:5C:9E:2D:EA:00:50:F0:0C Certificate issuer: /CN=30628d9238e23d6bf4c735995c9e2dea0050f00c Certificate serial: 019B5072EC537BCF9F116687F862BAD0AAA3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/40e57e-c627-4b9b-9577-596fa8c0a57a/1/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.mft Manifest number: 07F8 Signing time: Wed 24 Dec 2025 13:01:07 +0000 Manifest this update: Wed 24 Dec 2025 13:01:07 +0000 Manifest next update: Thu 25 Dec 2025 13:01:07 +0000 Files and hashes: 1: MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.crl (hash: rJNB+dyIlFb1QPobssCx0EIUUH5btRB+in8ZXae/k9Y=) 2: gVZpy_aU2P0Pr-2EJHA1HwKJhRU.roa (hash: P5u1LpZGGtQaGv/FeFmSXhXnEGgm7B33JQ+aoyUNOOk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/40e57e-c627-4b9b-9577-596fa8c0a57a/1/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/40e57e-c627-4b9b-9577-596fa8c0a57a/1/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.mft rsync://rpki.ripe.net/repository/DEFAULT/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:72:ec:53:7b:cf:9f:11:66:87:f8:62:ba:d0:aa:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30628d9238e23d6bf4c735995c9e2dea0050f00c Validity Not Before: Dec 24 13:01:07 2025 GMT Not After : Dec 25 13:01:07 2025 GMT Subject: CN=a04f8d721e9a7f0d66b18b1d713e427550aff5b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:35:9d:6b:80:19:b5:9d:34:f7:0e:d6:79:b2: 22:84:74:f3:fd:3e:72:cd:15:e1:55:11:0f:e9:dd: bd:d1:a5:d6:03:f0:84:ba:73:96:42:92:38:3e:89: 69:a6:ad:37:91:54:e8:4f:0e:20:2d:c0:15:3f:01: 75:5f:5a:69:dd:80:e3:01:aa:31:12:7f:c7:9c:76: dd:f2:ad:3b:76:c0:25:89:f4:84:b0:e6:c5:90:b2: 77:3f:0a:3a:44:70:e0:af:a6:0d:f1:55:8b:f0:ac: 42:a0:dc:92:9c:43:3a:48:f8:7e:6e:cc:3d:8b:7f: fd:6b:25:68:e5:cc:51:e4:21:cd:56:f7:db:27:35: 78:6a:e0:ab:89:ff:3a:9a:00:a2:bd:15:57:e0:61: 80:72:41:67:9b:92:b0:ae:1a:3b:62:3a:11:d5:8f: 69:39:d8:3d:33:fd:4a:95:51:03:54:47:ec:c2:84: 53:ac:39:9a:47:35:30:02:2c:f6:b4:43:0d:1e:22: af:21:4a:fb:73:c4:e9:8c:58:4b:26:14:b2:09:36: 15:e2:2d:3b:27:1b:91:37:a1:df:0c:88:94:aa:95: ad:b4:ba:50:df:45:9a:88:68:06:b9:68:69:bf:1d: 68:41:a9:4d:db:d6:3e:8d:fb:9b:6c:46:7b:1f:ed: 42:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:4F:8D:72:1E:9A:7F:0D:66:B1:8B:1D:71:3E:42:75:50:AF:F5:B2 X509v3 Authority Key Identifier: keyid:30:62:8D:92:38:E2:3D:6B:F4:C7:35:99:5C:9E:2D:EA:00:50:F0:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/40e57e-c627-4b9b-9577-596fa8c0a57a/1/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/40e57e-c627-4b9b-9577-596fa8c0a57a/1/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:2e:be:6a:a7:86:58:60:90:e1:34:26:ed:b4:5f:ee:0e:d3: 92:72:02:fe:5c:90:bd:61:fe:e3:9d:8c:96:17:25:b7:d6:04: 80:4c:21:89:cc:b0:26:1a:8c:be:3f:f9:7c:fa:99:1f:c8:0e: 2e:75:d0:1c:24:8a:93:b8:50:fe:cf:3f:0b:1f:79:d0:3b:c0: ea:1b:fd:8a:9d:8c:9f:41:68:98:b9:f8:e7:32:b8:cf:e4:d2: ea:92:e4:0a:fe:94:66:c1:97:c2:80:4d:11:9f:8c:5f:70:88: 07:73:50:03:43:25:90:1b:15:10:33:ca:26:0c:b7:01:63:09: ab:40:e1:77:ef:85:58:dd:18:f1:bf:16:a3:be:c0:6d:6c:29: 61:51:aa:99:85:83:bc:26:bb:ac:85:6b:2b:f2:90:79:dd:8c: 5a:3d:47:3e:37:88:19:6d:8b:02:01:9e:fc:86:98:ea:1e:4c: 73:d2:55:1d:d6:d8:32:71:23:30:e3:cf:9b:9e:9a:18:72:e7: 7a:04:1a:af:62:0a:62:92:fc:b7:0f:ca:bc:1f:c3:6c:3f:24: f7:94:6a:ff:9d:09:15:14:ed:e5:6b:5b:c1:58:86:08:8e:3b: a9:88:9d:d8:43:83:0e:66:e1:04:fe:98:b9:53:a2:5d:a7:63: f1:2f:43:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQcuxTe8+fEWaH+GK60KqjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwNjI4ZDkyMzhlMjNkNmJmNGM3MzU5OTVjOWUyZGVhMDA1 MGYwMGMwHhcNMjUxMjI0MTMwMTA3WhcNMjUxMjI1MTMwMTA3WjAzMTEwLwYDVQQD EyhhMDRmOGQ3MjFlOWE3ZjBkNjZiMThiMWQ3MTNlNDI3NTUwYWZmNWIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDWda4AZtZ009w7WebIihHTz/T5y zRXhVREP6d290aXWA/CEunOWQpI4Polppq03kVToTw4gLcAVPwF1X1pp3YDjAaox En/HnHbd8q07dsAlifSEsObFkLJ3Pwo6RHDgr6YN8VWL8KxCoNySnEM6SPh+bsw9 i3/9ayVo5cxR5CHNVvfbJzV4auCrif86mgCivRVX4GGAckFnm5Kwrho7YjoR1Y9p Odg9M/1KlVEDVEfswoRTrDmaRzUwAiz2tEMNHiKvIUr7c8TpjFhLJhSyCTYV4i07 JxuRN6HfDIiUqpWttLpQ30WaiGgGuWhpvx1oQalN29Y+jfubbEZ7H+1CuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKBPjXIemn8NZrGLHXE+QnVQr/WyMB8GA1UdIwQY MBaAFDBijZI44j1r9Mc1mVyeLeoAUPAMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUdLTmtqamlQV3YweHpXWlhKNHQ2Z0JROEF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS80MGU1N2UtYzYyNy00YjliLTk1Nzct NTk2ZmE4YzBhNTdhLzEvTUdLTmtqamlQV3YweHpXWlhKNHQ2Z0JROEF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS80MGU1N2UtYzYyNy00YjliLTk1NzctNTk2ZmE4YzBhNTdh LzEvTUdLTmtqamlQV3YweHpXWlhKNHQ2Z0JROEF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAri6+aqeG WGCQ4TQm7bRf7g7TknIC/lyQvWH+452Mlhclt9YEgEwhicywJhqMvj/5fPqZH8gO LnXQHCSKk7hQ/s8/Cx950DvA6hv9ip2Mn0FomLn45zK4z+TS6pLkCv6UZsGXwoBN EZ+MX3CIB3NQA0MlkBsVEDPKJgy3AWMJq0Dhd++FWN0Y8b8Wo77AbWwpYVGqmYWD vCa7rIVrK/KQed2MWj1HPjeIGW2LAgGe/IaY6h5Mc9JVHdbYMnEjMOPPm56aGHLn egQar2IKYpL8tw/KvB/DbD8k95Rq/50JFRTt5WtbwViGCI47qYid2EODDmbhBP6Y uVOiXadj8S9DuQ== -----END CERTIFICATE-----Generated at Wed Dec 24 18:30:44 2025 by rpki-client