This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c26199-3303-4223-9f0f-5dafc634ccd6/1/MgrQyxyPq9KnFycj8utT6gLoSmk.mft File: MgrQyxyPq9KnFycj8utT6gLoSmk.mft (raw, json) Hash identifier: ssi4WGtQWvzefQC2ArNMG9xWqUvbp/VPSVw6WuA1b8I= Subject key identifier: B7:06:63:DC:41:07:CD:DB:67:F1:C8:4E:EB:81:6A:41:01:A2:F5:94 Authority key identifier: 32:0A:D0:CB:1C:8F:AB:D2:A7:17:27:23:F2:EB:53:EA:02:E8:4A:69 Certificate issuer: /CN=320ad0cb1c8fabd2a7172723f2eb53ea02e84a69 Certificate serial: 019B5E658A10C281043E33DC8CC4517E82CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MgrQyxyPq9KnFycj8utT6gLoSmk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c26199-3303-4223-9f0f-5dafc634ccd6/1/MgrQyxyPq9KnFycj8utT6gLoSmk.mft Manifest number: 0407 Signing time: Sat 27 Dec 2025 06:01:11 +0000 Manifest this update: Sat 27 Dec 2025 06:01:11 +0000 Manifest next update: Sun 28 Dec 2025 06:01:11 +0000 Files and hashes: 1: JUrgcpIbkD2s0Xwl5MPFsKClBSA.roa (hash: h68v76M+ZVUfqYetcYYdqqWMVphcDkEUG23cxVpEUw4=) 2: MgrQyxyPq9KnFycj8utT6gLoSmk.crl (hash: b+IZpwqcjrqUxJvepQ8XeCcgSrviWeG8y3ug1lRlOkw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c26199-3303-4223-9f0f-5dafc634ccd6/1/MgrQyxyPq9KnFycj8utT6gLoSmk.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/c26199-3303-4223-9f0f-5dafc634ccd6/1/MgrQyxyPq9KnFycj8utT6gLoSmk.mft rsync://rpki.ripe.net/repository/DEFAULT/MgrQyxyPq9KnFycj8utT6gLoSmk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 06:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5e:65:8a:10:c2:81:04:3e:33:dc:8c:c4:51:7e:82:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=320ad0cb1c8fabd2a7172723f2eb53ea02e84a69 Validity Not Before: Dec 27 06:01:11 2025 GMT Not After : Dec 28 06:01:11 2025 GMT Subject: CN=b70663dc4107cddb67f1c84eeb816a4101a2f594 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:fc:0c:e7:67:ae:bd:0c:b3:75:b2:d4:fa:27: 65:e6:1f:6e:05:ce:39:5f:0f:89:2d:0b:09:49:2c: f8:65:52:fb:18:a7:5b:84:bc:d0:e3:24:90:17:32: c0:ca:de:0f:1b:6b:f2:f2:58:3c:ab:fa:ba:a3:88: 31:64:b3:df:ce:6d:ec:6f:26:14:6c:3b:b8:8c:92: a6:12:21:96:c0:a9:f5:0e:74:86:37:b1:3d:8e:79: d5:42:6e:3f:5a:d5:3a:f7:5e:a4:b3:9e:19:40:98: 31:f3:8a:4f:a1:20:70:3f:2c:bc:85:82:6f:0d:4e: 99:dd:f6:3e:a8:9d:61:80:dc:39:7e:c4:61:82:c0: 24:fc:39:3a:73:fb:11:a8:aa:16:6c:5c:1f:d0:0f: f7:9b:9b:3d:ed:65:5b:2d:92:43:df:bf:30:33:76: 4e:10:9d:e3:f1:ca:68:ad:d0:9c:06:8c:db:33:e5: d5:4f:57:7f:fc:2e:3f:45:5b:67:ab:92:95:7a:b8: 96:38:23:11:05:8a:b0:14:83:40:d7:7f:5c:77:ff: 0d:24:ac:52:24:57:b5:11:87:cc:8e:4c:2b:39:88: 2c:f5:21:d5:d1:60:f7:c8:43:69:2b:28:c2:2c:a4: de:43:4f:47:a1:42:29:22:f5:cc:1d:60:85:23:5e: a7:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:06:63:DC:41:07:CD:DB:67:F1:C8:4E:EB:81:6A:41:01:A2:F5:94 X509v3 Authority Key Identifier: keyid:32:0A:D0:CB:1C:8F:AB:D2:A7:17:27:23:F2:EB:53:EA:02:E8:4A:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MgrQyxyPq9KnFycj8utT6gLoSmk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c26199-3303-4223-9f0f-5dafc634ccd6/1/MgrQyxyPq9KnFycj8utT6gLoSmk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c26199-3303-4223-9f0f-5dafc634ccd6/1/MgrQyxyPq9KnFycj8utT6gLoSmk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:3b:37:8f:74:c2:41:f5:b8:5a:04:0f:11:50:dc:a8:dd:0a: d9:2b:27:43:1b:f4:94:98:91:6b:1a:5d:c8:50:25:8f:41:03: e2:8e:9d:a3:e1:1a:da:f4:ca:26:2a:9d:e4:43:df:e0:bb:53: 88:66:b7:20:45:c2:b7:0f:e3:b1:fc:33:c3:1e:bf:5e:ab:4a: 44:4f:4c:37:c4:45:b1:c3:f2:98:d4:48:da:1f:2f:be:a4:45: 42:49:34:b9:02:2e:c7:b5:7f:ce:4f:6d:6f:e1:01:ae:36:f3: a0:7b:f1:6f:39:4a:f1:3c:07:3e:51:36:5c:46:0c:2a:c6:84: e3:62:7b:15:be:ed:5b:4f:c2:b0:cd:3c:35:13:87:e1:b4:70: 69:ce:5b:97:94:f0:eb:da:73:af:da:43:8a:7e:37:cd:0b:09: 4f:9b:f5:3b:42:ad:2e:5c:37:e3:d2:48:20:1e:56:e9:fe:6a: a0:2f:33:38:4f:07:25:15:b6:59:09:26:bc:93:41:8d:89:98: 3c:9f:a9:11:9d:3e:06:2d:57:04:67:4f:cf:04:19:95:d0:be: 06:be:53:db:b1:db:da:a1:72:57:6a:77:12:9b:4a:37:fe:a3: f2:a7:1a:ff:4d:ad:11:1f:cc:25:34:38:7b:eb:de:a8:50:17: f1:87:0a:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZteZYoQwoEEPjPcjMRRfoLMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyMGFkMGNiMWM4ZmFiZDJhNzE3MjcyM2YyZWI1M2VhMDJl ODRhNjkwHhcNMjUxMjI3MDYwMTExWhcNMjUxMjI4MDYwMTExWjAzMTEwLwYDVQQD EyhiNzA2NjNkYzQxMDdjZGRiNjdmMWM4NGVlYjgxNmE0MTAxYTJmNTk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2PwM52euvQyzdbLU+idl5h9uBc45 Xw+JLQsJSSz4ZVL7GKdbhLzQ4ySQFzLAyt4PG2vy8lg8q/q6o4gxZLPfzm3sbyYU bDu4jJKmEiGWwKn1DnSGN7E9jnnVQm4/WtU6916ks54ZQJgx84pPoSBwPyy8hYJv DU6Z3fY+qJ1hgNw5fsRhgsAk/Dk6c/sRqKoWbFwf0A/3m5s97WVbLZJD378wM3ZO EJ3j8cpordCcBozbM+XVT1d//C4/RVtnq5KVeriWOCMRBYqwFINA139cd/8NJKxS JFe1EYfMjkwrOYgs9SHV0WD3yENpKyjCLKTeQ09HoUIpIvXMHWCFI16nRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLcGY9xBB83bZ/HITuuBakEBovWUMB8GA1UdIwQY MBaAFDIK0Mscj6vSpxcnI/LrU+oC6EppMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWdyUXl4eVBxOUtuRnljajh1dFQ2Z0xvU21rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9jMjYxOTktMzMwMy00MjIzLTlmMGYt NWRhZmM2MzRjY2Q2LzEvTWdyUXl4eVBxOUtuRnljajh1dFQ2Z0xvU21rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9jMjYxOTktMzMwMy00MjIzLTlmMGYtNWRhZmM2MzRjY2Q2 LzEvTWdyUXl4eVBxOUtuRnljajh1dFQ2Z0xvU21rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASTs3j3TC QfW4WgQPEVDcqN0K2SsnQxv0lJiRaxpdyFAlj0ED4o6do+Ea2vTKJiqd5EPf4LtT iGa3IEXCtw/jsfwzwx6/XqtKRE9MN8RFscPymNRI2h8vvqRFQkk0uQIux7V/zk9t b+EBrjbzoHvxbzlK8TwHPlE2XEYMKsaE42J7Fb7tW0/CsM08NROH4bRwac5bl5Tw 69pzr9pDin43zQsJT5v1O0KtLlw349JIIB5W6f5qoC8zOE8HJRW2WQkmvJNBjYmY PJ+pEZ0+Bi1XBGdPzwQZldC+Br5T27Hb2qFyV2p3EptKN/6j8qca/02tER/MJTQ4 e+veqFAX8YcKMQ== -----END CERTIFICATE-----Generated at Sat Dec 27 11:07:19 2025 by rpki-client