This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/512313-afcd-4e9a-bb70-71005f7f02a8/1/mGkK8GLqmzrl9kz5qf6lYyTGvZc.mft File: mGkK8GLqmzrl9kz5qf6lYyTGvZc.mft (raw, json) Hash identifier: A97vu7OMa5Z8Sf7YDMn+IywUqSLg+fu+oWItYHtWI3s= Subject key identifier: E5:18:E0:7F:2D:64:88:55:24:E3:50:79:19:38:3A:DD:64:8F:58:D1 Authority key identifier: 98:69:0A:F0:62:EA:9B:3A:E5:F6:4C:F9:A9:FE:A5:63:24:C6:BD:97 Certificate issuer: /CN=98690af062ea9b3ae5f64cf9a9fea56324c6bd97 Certificate serial: 019B7291DD4D1C80555BDE40B7CEDC2144F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGkK8GLqmzrl9kz5qf6lYyTGvZc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/512313-afcd-4e9a-bb70-71005f7f02a8/1/mGkK8GLqmzrl9kz5qf6lYyTGvZc.mft Manifest number: 17A6 Signing time: Wed 31 Dec 2025 04:02:00 +0000 Manifest this update: Wed 31 Dec 2025 04:02:00 +0000 Manifest next update: Thu 01 Jan 2026 04:02:00 +0000 Files and hashes: 1: CxGOoBY5YoTyd6Nu8KyBbb6HwB4.roa (hash: W6T/EKpt1B07PivG7xwB9X1O2PEBzOLgzqiyKvlh3q4=) 2: mGkK8GLqmzrl9kz5qf6lYyTGvZc.crl (hash: kNSglHR8rkOa9o+hLzFOy8dCT24pDc09ZePBwkMRN68=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/512313-afcd-4e9a-bb70-71005f7f02a8/1/mGkK8GLqmzrl9kz5qf6lYyTGvZc.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/512313-afcd-4e9a-bb70-71005f7f02a8/1/mGkK8GLqmzrl9kz5qf6lYyTGvZc.mft rsync://rpki.ripe.net/repository/DEFAULT/mGkK8GLqmzrl9kz5qf6lYyTGvZc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:72:91:dd:4d:1c:80:55:5b:de:40:b7:ce:dc:21:44:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98690af062ea9b3ae5f64cf9a9fea56324c6bd97 Validity Not Before: Dec 31 04:02:00 2025 GMT Not After : Jan 1 04:02:00 2026 GMT Subject: CN=e518e07f2d64885524e3507919383add648f58d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:5f:24:fd:ef:93:77:06:fb:c4:14:bf:d2:38: 47:8b:42:81:cb:06:84:ca:aa:5d:f1:f0:7c:2d:3e: 7a:bb:ac:36:cd:1a:ef:4a:e1:e6:de:51:c1:43:5a: cf:e5:f9:db:cd:77:e1:5d:58:4b:77:3b:91:15:5c: a6:0d:be:ce:46:de:a8:2d:53:9f:f8:a9:3d:6d:02: 42:03:f3:7d:d2:3c:ba:5f:cc:75:25:e1:07:97:e7: 10:46:e3:09:da:e4:20:90:9e:bb:cc:ba:73:e8:63: 18:db:0d:5d:15:c1:bf:72:ec:11:72:42:9a:2b:69: 18:47:ff:bf:4b:1a:31:53:00:dc:e1:3a:9d:6a:39: f2:91:56:27:6b:cd:89:0f:5f:90:22:08:31:6a:43: 01:12:a2:1b:ab:87:34:b6:92:8d:4c:0a:b0:bc:83: 99:3b:51:a7:c4:a6:47:bd:ae:66:55:8e:ac:1e:34: 6c:b8:eb:72:9b:a0:34:98:04:ad:88:00:d8:a0:0f: 89:01:5b:11:80:77:19:9a:fa:f1:3e:d8:cb:66:26: fa:01:7e:ba:7f:0f:ea:3c:57:64:bf:e8:f3:43:cd: 7d:5d:5a:95:ce:97:73:7a:86:b4:63:95:62:ac:fb: bf:87:d7:4a:67:5d:48:c6:d2:d8:93:f4:26:4c:75: 31:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:18:E0:7F:2D:64:88:55:24:E3:50:79:19:38:3A:DD:64:8F:58:D1 X509v3 Authority Key Identifier: keyid:98:69:0A:F0:62:EA:9B:3A:E5:F6:4C:F9:A9:FE:A5:63:24:C6:BD:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGkK8GLqmzrl9kz5qf6lYyTGvZc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/512313-afcd-4e9a-bb70-71005f7f02a8/1/mGkK8GLqmzrl9kz5qf6lYyTGvZc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/512313-afcd-4e9a-bb70-71005f7f02a8/1/mGkK8GLqmzrl9kz5qf6lYyTGvZc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:a8:6e:ed:a8:77:39:b9:1d:14:be:39:cc:fc:f7:21:35:d9: 97:2b:c9:9e:22:ec:fa:4b:46:c8:b3:97:a2:41:73:a3:23:96: 8d:f8:a9:4e:bb:34:15:ae:20:d0:46:0e:a7:bf:7b:a7:1b:0b: 96:01:a0:b8:e6:d5:b0:71:53:29:ca:66:b6:cc:bb:c2:76:c2: e1:7f:54:67:33:1e:fb:a0:14:7b:eb:e9:4e:aa:11:7f:8e:cf: f6:80:81:65:be:d9:6f:97:17:b5:da:63:5a:17:26:dd:68:cf: ae:27:c6:20:53:12:ac:73:a7:c3:b8:fb:07:6e:9a:58:8b:aa: 53:7a:fc:f0:f4:bb:bd:69:7f:16:5d:82:f1:92:68:bd:2b:ac: 2d:46:12:96:9f:e6:bd:68:60:4c:ab:56:df:9d:51:3e:3e:d8: 35:b6:6b:0e:74:d0:6e:a3:c1:a8:e1:68:46:0c:c1:a0:a4:cc: 20:4c:40:02:05:ca:d0:41:d5:5d:89:c6:53:4c:bc:82:d1:c6: 9f:72:98:d7:b0:33:ad:d4:64:cc:5d:26:16:aa:93:95:d1:2d: 80:f4:ad:04:b9:51:2e:9d:66:a4:4d:2c:ce:67:73:a1:96:c6: fd:1a:7a:8b:f8:34:69:de:03:7e:e4:cd:69:c3:6b:39:19:54: db:53:7a:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtykd1NHIBVW95At87cIUT5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4NjkwYWYwNjJlYTliM2FlNWY2NGNmOWE5ZmVhNTYzMjRj NmJkOTcwHhcNMjUxMjMxMDQwMjAwWhcNMjYwMTAxMDQwMjAwWjAzMTEwLwYDVQQD EyhlNTE4ZTA3ZjJkNjQ4ODU1MjRlMzUwNzkxOTM4M2FkZDY0OGY1OGQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxV8k/e+Tdwb7xBS/0jhHi0KBywaE yqpd8fB8LT56u6w2zRrvSuHm3lHBQ1rP5fnbzXfhXVhLdzuRFVymDb7ORt6oLVOf +Kk9bQJCA/N90jy6X8x1JeEHl+cQRuMJ2uQgkJ67zLpz6GMY2w1dFcG/cuwRckKa K2kYR/+/SxoxUwDc4TqdajnykVYna82JD1+QIggxakMBEqIbq4c0tpKNTAqwvIOZ O1GnxKZHva5mVY6sHjRsuOtym6A0mAStiADYoA+JAVsRgHcZmvrxPtjLZib6AX66 fw/qPFdkv+jzQ819XVqVzpdzeoa0Y5VirPu/h9dKZ11IxtLYk/QmTHUxRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOUY4H8tZIhVJONQeRk4Ot1kj1jRMB8GA1UdIwQY MBaAFJhpCvBi6ps65fZM+an+pWMkxr2XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUdrSzhHTHFtenJsOWt6NXFmNmxZeVRHdlpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC81MTIzMTMtYWZjZC00ZTlhLWJiNzAt NzEwMDVmN2YwMmE4LzEvbUdrSzhHTHFtenJsOWt6NXFmNmxZeVRHdlpjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC81MTIzMTMtYWZjZC00ZTlhLWJiNzAtNzEwMDVmN2YwMmE4 LzEvbUdrSzhHTHFtenJsOWt6NXFmNmxZeVRHdlpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbqhu7ah3 ObkdFL45zPz3ITXZlyvJniLs+ktGyLOXokFzoyOWjfipTrs0Fa4g0EYOp797pxsL lgGguObVsHFTKcpmtsy7wnbC4X9UZzMe+6AUe+vpTqoRf47P9oCBZb7Zb5cXtdpj Whcm3WjPrifGIFMSrHOnw7j7B26aWIuqU3r88PS7vWl/Fl2C8ZJovSusLUYSlp/m vWhgTKtW351RPj7YNbZrDnTQbqPBqOFoRgzBoKTMIExAAgXK0EHVXYnGU0y8gtHG n3KY17AzrdRkzF0mFqqTldEtgPStBLlRLp1mpE0szmdzoZbG/Rp6i/g0ad4DfuTN acNrORlU21N67A== -----END CERTIFICATE-----Generated at Wed Dec 31 09:02:45 2025 by rpki-client