This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/30f34e-e2ad-4b8d-8ce0-011878255ba7/1/MGY7W3BEIyuYmBjRLMkEkCElJN8.mft File: MGY7W3BEIyuYmBjRLMkEkCElJN8.mft (raw, json) Hash identifier: t21zEcWElTo9434SXR7r6xk6gFl5QbHG5j/r0Culpdg= Subject key identifier: FE:20:EF:0D:70:5E:32:E4:8E:79:55:42:4C:5F:1B:2C:EB:23:63:59 Authority key identifier: 30:66:3B:5B:70:44:23:2B:98:98:18:D1:2C:C9:04:90:21:25:24:DF Certificate issuer: /CN=30663b5b7044232b989818d12cc90490212524df Certificate serial: 019B3E6C8F2F191BEECD2F4824DF7587A89E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGY7W3BEIyuYmBjRLMkEkCElJN8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/30f34e-e2ad-4b8d-8ce0-011878255ba7/1/MGY7W3BEIyuYmBjRLMkEkCElJN8.mft Manifest number: 029E Signing time: Sun 21 Dec 2025 01:01:00 +0000 Manifest this update: Sun 21 Dec 2025 01:01:00 +0000 Manifest next update: Mon 22 Dec 2025 01:01:00 +0000 Files and hashes: 1: MGY7W3BEIyuYmBjRLMkEkCElJN8.crl (hash: LZdOMm65PSLtyfz5TRrBrVN1vXOuVKjr0wLzGGDA6Hg=) 2: jl5BGicOacjnQYcT0f92Ohaidfk.roa (hash: 2+8T//3NgApFzgg77XKjZhpHy2WC3GoSuHjoqbCDjuc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/30f34e-e2ad-4b8d-8ce0-011878255ba7/1/MGY7W3BEIyuYmBjRLMkEkCElJN8.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/30f34e-e2ad-4b8d-8ce0-011878255ba7/1/MGY7W3BEIyuYmBjRLMkEkCElJN8.mft rsync://rpki.ripe.net/repository/DEFAULT/MGY7W3BEIyuYmBjRLMkEkCElJN8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:8f:2f:19:1b:ee:cd:2f:48:24:df:75:87:a8:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30663b5b7044232b989818d12cc90490212524df Validity Not Before: Dec 21 01:01:00 2025 GMT Not After : Dec 22 01:01:00 2025 GMT Subject: CN=fe20ef0d705e32e48e7955424c5f1b2ceb236359 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f5:dc:af:d9:63:53:09:76:41:69:d0:3c:e8: d4:e3:3b:d1:6c:56:e9:dc:41:57:e8:ef:14:5b:10: 1a:e1:d6:a7:df:90:01:82:ce:da:e4:91:84:ea:d7: 9a:35:e4:6e:fc:2b:1d:a7:9e:ba:f8:6e:ba:bc:28: 6c:41:9c:8a:09:48:ad:3a:a3:89:63:3d:a1:cc:8a: d5:9c:14:20:23:40:7e:8b:f0:8a:14:f2:41:de:1f: 5c:65:34:a6:e4:8c:92:2d:84:37:9e:2a:87:21:82: 61:43:dc:26:8a:b8:da:de:9e:af:6a:c3:5e:62:e9: 39:b0:86:7f:ed:f4:d8:40:72:42:f4:1f:55:20:fd: 02:00:d3:05:c3:ad:b3:a9:e1:53:c1:e9:9e:f2:52: 35:6f:c7:d9:56:af:09:68:14:1b:ef:0b:56:f1:a2: 02:4a:b1:d9:4e:ca:18:3f:d8:f1:38:1d:5c:b6:9d: aa:bf:ae:40:2a:71:9c:53:13:01:16:80:fc:73:c2: d7:fb:d6:6d:4b:9f:7e:3a:4d:26:1b:5f:1e:24:47: b9:fb:93:2d:8b:13:89:a5:c8:b7:5a:4c:b9:36:45: 42:e9:85:dc:87:f6:f5:ec:2c:7a:b8:d3:25:fd:8b: b1:ae:5e:f3:05:e1:c0:70:c7:9d:8d:66:1b:94:6a: c1:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:20:EF:0D:70:5E:32:E4:8E:79:55:42:4C:5F:1B:2C:EB:23:63:59 X509v3 Authority Key Identifier: keyid:30:66:3B:5B:70:44:23:2B:98:98:18:D1:2C:C9:04:90:21:25:24:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGY7W3BEIyuYmBjRLMkEkCElJN8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/30f34e-e2ad-4b8d-8ce0-011878255ba7/1/MGY7W3BEIyuYmBjRLMkEkCElJN8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/30f34e-e2ad-4b8d-8ce0-011878255ba7/1/MGY7W3BEIyuYmBjRLMkEkCElJN8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:cc:bf:d5:ba:52:37:0a:f2:9f:c6:76:bb:0a:67:37:ee:a1: ab:bd:ba:9a:22:cb:f5:5e:46:cc:77:e3:15:df:a2:c4:bc:54: 4c:fa:0c:5b:cc:42:b5:61:e6:1b:af:a7:76:a9:4d:3d:93:42: ab:d2:58:4b:6a:10:d5:64:22:85:25:27:5f:f8:15:ab:f0:18: 97:56:75:6c:be:72:f0:01:01:50:d4:cd:4d:c4:9d:05:db:b5: 0c:54:33:c2:b6:01:22:bc:7c:9f:8e:1d:00:c0:7a:7d:bd:f1: 66:77:a6:c8:bc:64:84:64:d1:97:ab:8a:c5:e1:93:88:50:bd: d8:0a:14:5a:ef:70:4c:39:2a:f3:17:cd:d6:28:2e:e2:48:9e: d1:4f:17:ce:54:ef:e5:e0:54:da:02:f5:b6:a5:90:19:44:70: ff:59:30:c6:13:af:6d:25:ef:58:24:61:a6:5b:2d:1c:89:3b: 8c:9e:5b:c8:97:d6:f3:a8:d2:57:16:e4:5d:8a:6d:1a:c0:ca: 17:88:3b:18:df:88:2a:54:b0:1f:b9:03:5f:27:dd:69:a6:74: 92:0f:02:a1:b2:f6:ff:5a:19:73:c3:d0:e9:80:9e:f7:c2:40: 56:3c:9e:69:98:a4:17:18:ee:67:7b:f7:48:eb:7c:9c:be:a6: 0c:be:1f:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bI8vGRvuzS9IJN91h6ieMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwNjYzYjViNzA0NDIzMmI5ODk4MThkMTJjYzkwNDkwMjEy NTI0ZGYwHhcNMjUxMjIxMDEwMTAwWhcNMjUxMjIyMDEwMTAwWjAzMTEwLwYDVQQD EyhmZTIwZWYwZDcwNWUzMmU0OGU3OTU1NDI0YzVmMWIyY2ViMjM2MzU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPXcr9ljUwl2QWnQPOjU4zvRbFbp 3EFX6O8UWxAa4dan35ABgs7a5JGE6teaNeRu/Csdp566+G66vChsQZyKCUitOqOJ Yz2hzIrVnBQgI0B+i/CKFPJB3h9cZTSm5IySLYQ3niqHIYJhQ9wmirja3p6vasNe Yuk5sIZ/7fTYQHJC9B9VIP0CANMFw62zqeFTweme8lI1b8fZVq8JaBQb7wtW8aIC SrHZTsoYP9jxOB1ctp2qv65AKnGcUxMBFoD8c8LX+9ZtS59+Ok0mG18eJEe5+5Mt ixOJpci3Wky5NkVC6YXch/b17Cx6uNMl/Yuxrl7zBeHAcMedjWYblGrB5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP4g7w1wXjLkjnlVQkxfGyzrI2NZMB8GA1UdIwQY MBaAFDBmO1twRCMrmJgY0SzJBJAhJSTfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUdZN1czQkVJeXVZbUJqUkxNa0VrQ0VsSk44LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8zMGYzNGUtZTJhZC00YjhkLThjZTAt MDExODc4MjU1YmE3LzEvTUdZN1czQkVJeXVZbUJqUkxNa0VrQ0VsSk44Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi8zMGYzNGUtZTJhZC00YjhkLThjZTAtMDExODc4MjU1YmE3 LzEvTUdZN1czQkVJeXVZbUJqUkxNa0VrQ0VsSk44LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcMy/1bpS Nwryn8Z2uwpnN+6hq726miLL9V5GzHfjFd+ixLxUTPoMW8xCtWHmG6+ndqlNPZNC q9JYS2oQ1WQihSUnX/gVq/AYl1Z1bL5y8AEBUNTNTcSdBdu1DFQzwrYBIrx8n44d AMB6fb3xZnemyLxkhGTRl6uKxeGTiFC92AoUWu9wTDkq8xfN1igu4kie0U8XzlTv 5eBU2gL1tqWQGURw/1kwxhOvbSXvWCRhplstHIk7jJ5byJfW86jSVxbkXYptGsDK F4g7GN+IKlSwH7kDXyfdaaZ0kg8CobL2/1oZc8PQ6YCe98JAVjyeaZikFxjuZ3v3 SOt8nL6mDL4fVQ== -----END CERTIFICATE-----Generated at Sun Dec 21 04:42:40 2025 by rpki-client