This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/3d2031-f4a1-437a-9a7e-97c4bbaf4676/1/MJAbMGF-hmq8nOULrb6IRl048Dc.mft File: MJAbMGF-hmq8nOULrb6IRl048Dc.mft (raw, json) Hash identifier: xbprEgLdNgEmy4G4kx0uWmIA/mTs2e97o60xNsvElBs= Subject key identifier: 33:93:9D:27:83:B8:3A:35:52:49:FE:7F:7C:89:3A:D9:B8:98:CD:B9 Authority key identifier: 30:90:1B:30:61:7E:86:6A:BC:9C:E5:0B:AD:BE:88:46:5D:38:F0:37 Certificate issuer: /CN=30901b30617e866abc9ce50badbe88465d38f037 Certificate serial: 019B3C7EB115768E1C457D5C00C8ABBFF098 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MJAbMGF-hmq8nOULrb6IRl048Dc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/3d2031-f4a1-437a-9a7e-97c4bbaf4676/1/MJAbMGF-hmq8nOULrb6IRl048Dc.mft Manifest number: 0627 Signing time: Sat 20 Dec 2025 16:01:34 +0000 Manifest this update: Sat 20 Dec 2025 16:01:34 +0000 Manifest next update: Sun 21 Dec 2025 16:01:34 +0000 Files and hashes: 1: 2qX7OdgapT1BAlqvcn-h20H3SjY.roa (hash: mYdYSfl5U26j0DpruXdVtTOn2QH2B7ImuHJ/Oabup60=) 2: MJAbMGF-hmq8nOULrb6IRl048Dc.crl (hash: UBU7pYSXXd08ywhwFHObxEoa9tVDUXJCurwp9IpjXqY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/3d2031-f4a1-437a-9a7e-97c4bbaf4676/1/MJAbMGF-hmq8nOULrb6IRl048Dc.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/3d2031-f4a1-437a-9a7e-97c4bbaf4676/1/MJAbMGF-hmq8nOULrb6IRl048Dc.mft rsync://rpki.ripe.net/repository/DEFAULT/MJAbMGF-hmq8nOULrb6IRl048Dc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:b1:15:76:8e:1c:45:7d:5c:00:c8:ab:bf:f0:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30901b30617e866abc9ce50badbe88465d38f037 Validity Not Before: Dec 20 16:01:34 2025 GMT Not After : Dec 21 16:01:34 2025 GMT Subject: CN=33939d2783b83a355249fe7f7c893ad9b898cdb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a8:fa:af:c7:24:e4:21:b4:12:ea:5b:59:ac: cb:d6:9d:0a:44:e5:50:a8:f5:98:87:c0:47:a1:5f: 1d:56:85:42:94:5a:74:de:0d:94:1c:6f:a7:40:56: f9:71:54:04:a6:41:8c:c7:80:8d:bb:d1:e7:90:f6: a2:52:4c:2c:56:d6:0d:cf:aa:51:16:fa:b2:e1:29: 8a:2d:f5:c0:10:65:c7:c4:82:93:31:d5:62:7c:1a: 18:e7:5e:8d:2c:31:44:4b:ce:c1:4b:0f:c1:16:09: 2e:fe:56:df:de:c1:5b:34:0b:1d:00:da:22:c2:fb: 5b:3d:cb:55:66:55:73:95:4b:3b:a8:de:5d:1e:30: 52:2c:0d:0a:33:ce:66:67:19:e1:fa:67:2f:6c:f0: fe:82:10:9a:7e:27:07:3e:4b:b7:e9:6d:af:b0:1b: f6:85:8d:7d:91:60:19:82:97:06:87:f9:9f:6f:33: ee:1f:32:f8:f8:e9:c5:f9:b0:fc:36:b7:d3:51:14: d5:fc:3b:16:b4:05:44:ce:48:1f:59:6d:f7:0d:89: e7:a2:1f:d7:61:89:96:5e:6d:34:84:c3:88:9e:43: 78:06:46:33:f3:61:fd:12:3d:5c:1b:85:14:5e:51: db:37:b3:7b:ee:ce:9d:7f:f7:97:6c:26:97:f3:3c: f5:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:93:9D:27:83:B8:3A:35:52:49:FE:7F:7C:89:3A:D9:B8:98:CD:B9 X509v3 Authority Key Identifier: keyid:30:90:1B:30:61:7E:86:6A:BC:9C:E5:0B:AD:BE:88:46:5D:38:F0:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MJAbMGF-hmq8nOULrb6IRl048Dc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/3d2031-f4a1-437a-9a7e-97c4bbaf4676/1/MJAbMGF-hmq8nOULrb6IRl048Dc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/3d2031-f4a1-437a-9a7e-97c4bbaf4676/1/MJAbMGF-hmq8nOULrb6IRl048Dc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:d6:01:37:7b:43:22:50:5f:84:9b:ec:54:a6:3c:f4:f5:cb: b8:b8:bf:db:86:b0:bd:0a:d7:61:68:46:55:37:84:01:05:48: ab:5f:a3:e9:cc:a0:04:41:16:ce:52:c7:5e:0e:fb:38:9f:0d: 32:4f:db:b9:50:62:c9:c7:c0:ae:9e:dd:92:96:9a:7d:ce:61: 2a:36:35:50:d6:22:69:b7:e0:ea:b5:26:6a:90:a6:35:f4:71: b3:d6:0e:67:2a:de:d4:6a:b0:df:39:94:b7:a7:40:28:d0:61: 93:f5:b3:69:3a:eb:df:be:8e:f1:9b:6e:b4:96:28:27:70:d2: 69:4b:75:64:b1:e2:7c:99:a8:0c:2a:4c:16:23:a6:7b:b4:5d: 3f:66:5f:e3:42:4e:cc:dc:06:6a:b5:a9:8f:a8:53:c3:f9:8a: c2:24:47:98:34:e4:d2:9f:bb:e9:76:5a:2a:2c:0b:37:8f:f2: 9b:f2:f3:41:8d:bb:33:9d:af:02:f1:44:10:8b:fe:79:a9:dd: e5:b2:19:55:ef:fe:be:24:8a:69:5d:f7:fa:5c:cb:25:8c:71: 6b:b4:72:c3:f0:0a:dd:0c:3e:e2:19:c0:37:4c:ed:0b:2a:0d: 5a:9c:dd:50:dc:7d:f0:39:9b:c0:a5:2d:b5:59:94:57:23:74: fe:a7:b1:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8frEVdo4cRX1cAMirv/CYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwOTAxYjMwNjE3ZTg2NmFiYzljZTUwYmFkYmU4ODQ2NWQz OGYwMzcwHhcNMjUxMjIwMTYwMTM0WhcNMjUxMjIxMTYwMTM0WjAzMTEwLwYDVQQD EygzMzkzOWQyNzgzYjgzYTM1NTI0OWZlN2Y3Yzg5M2FkOWI4OThjZGI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqj6r8ck5CG0EupbWazL1p0KROVQ qPWYh8BHoV8dVoVClFp03g2UHG+nQFb5cVQEpkGMx4CNu9HnkPaiUkwsVtYNz6pR Fvqy4SmKLfXAEGXHxIKTMdVifBoY516NLDFES87BSw/BFgku/lbf3sFbNAsdANoi wvtbPctVZlVzlUs7qN5dHjBSLA0KM85mZxnh+mcvbPD+ghCaficHPku36W2vsBv2 hY19kWAZgpcGh/mfbzPuHzL4+OnF+bD8NrfTURTV/DsWtAVEzkgfWW33DYnnoh/X YYmWXm00hMOInkN4BkYz82H9Ej1cG4UUXlHbN7N77s6df/eXbCaX8zz1FQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDOTnSeDuDo1Ukn+f3yJOtm4mM25MB8GA1UdIwQY MBaAFDCQGzBhfoZqvJzlC62+iEZdOPA3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUpBYk1HRi1obXE4bk9VTHJiNklSbDA0OERjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8zZDIwMzEtZjRhMS00MzdhLTlhN2Ut OTdjNGJiYWY0Njc2LzEvTUpBYk1HRi1obXE4bk9VTHJiNklSbDA0OERjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi8zZDIwMzEtZjRhMS00MzdhLTlhN2UtOTdjNGJiYWY0Njc2 LzEvTUpBYk1HRi1obXE4bk9VTHJiNklSbDA0OERjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwdYBN3tD IlBfhJvsVKY89PXLuLi/24awvQrXYWhGVTeEAQVIq1+j6cygBEEWzlLHXg77OJ8N Mk/buVBiycfArp7dkpaafc5hKjY1UNYiabfg6rUmapCmNfRxs9YOZyre1Gqw3zmU t6dAKNBhk/WzaTrr376O8ZtutJYoJ3DSaUt1ZLHifJmoDCpMFiOme7RdP2Zf40JO zNwGarWpj6hTw/mKwiRHmDTk0p+76XZaKiwLN4/ym/LzQY27M52vAvFEEIv+eand 5bIZVe/+viSKaV33+lzLJYxxa7Ryw/AK3Qw+4hnAN0ztCyoNWpzdUNx98DmbwKUt tVmUVyN0/qexAg== -----END CERTIFICATE-----Generated at Sat Dec 20 22:20:21 2025 by rpki-client