This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/9062e2-95ae-4656-b2ee-984a8eb51e45/1/Mss8BdaixRwv9S3Z3LnitVxASPk.mft File: Mss8BdaixRwv9S3Z3LnitVxASPk.mft (raw, json) Hash identifier: F/qcb8y0//RTk29oROClPAdAt3sLx3sm64gmgxg2ppo= Subject key identifier: 1C:5D:77:71:E3:23:F6:77:7F:11:2E:A7:54:A4:26:77:4D:31:43:8A Authority key identifier: 32:CB:3C:05:D6:A2:C5:1C:2F:F5:2D:D9:DC:B9:E2:B5:5C:40:48:F9 Certificate issuer: /CN=32cb3c05d6a2c51c2ff52dd9dcb9e2b55c4048f9 Certificate serial: 019B3155798B2B6FFF5B5C10A969D17FCE9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mss8BdaixRwv9S3Z3LnitVxASPk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/9062e2-95ae-4656-b2ee-984a8eb51e45/1/Mss8BdaixRwv9S3Z3LnitVxASPk.mft Manifest number: 1780 Signing time: Thu 18 Dec 2025 12:00:43 +0000 Manifest this update: Thu 18 Dec 2025 12:00:43 +0000 Manifest next update: Fri 19 Dec 2025 12:00:43 +0000 Files and hashes: 1: Mss8BdaixRwv9S3Z3LnitVxASPk.crl (hash: mWvQ6VDXqNr69kO9St7c0CKEWQZofj/mx8XrBD5jxPE=) 2: pkl1dG1Tn-y8sIzafCzQdaxLGO0.roa (hash: +t+HSalevZKgrBOwo+A1WYwHvxUsDh9dx8CrhAZYnCE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/9062e2-95ae-4656-b2ee-984a8eb51e45/1/Mss8BdaixRwv9S3Z3LnitVxASPk.crl rsync://rpki.ripe.net/repository/DEFAULT/33/9062e2-95ae-4656-b2ee-984a8eb51e45/1/Mss8BdaixRwv9S3Z3LnitVxASPk.mft rsync://rpki.ripe.net/repository/DEFAULT/Mss8BdaixRwv9S3Z3LnitVxASPk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 12:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:55:79:8b:2b:6f:ff:5b:5c:10:a9:69:d1:7f:ce:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32cb3c05d6a2c51c2ff52dd9dcb9e2b55c4048f9 Validity Not Before: Dec 18 12:00:43 2025 GMT Not After : Dec 19 12:00:43 2025 GMT Subject: CN=1c5d7771e323f6777f112ea754a426774d31438a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:eb:07:ac:85:8a:3d:ec:b3:20:d7:c9:e2:1d: 67:95:d6:75:fb:08:18:5f:9c:f1:1c:1c:f1:8a:6a: 59:e3:79:dc:54:ac:95:4e:23:f0:80:7a:75:06:f2: db:90:15:14:c9:f1:d5:28:35:57:be:fd:49:8f:af: 1d:b5:ea:7b:d6:4a:d1:e5:50:3d:60:e2:7b:b2:9e: 8f:55:6a:bc:4b:25:f5:77:ad:a8:db:7b:5a:72:72: a2:d8:bc:12:91:3d:fe:1f:9f:6e:c3:25:84:df:d1: b3:1b:f5:e8:fa:7b:d6:92:40:2c:ef:80:71:a0:75: d1:63:4b:d6:30:4f:31:52:1c:d9:bf:22:e6:24:5a: 79:3e:22:2f:f1:12:95:3b:91:2e:3a:64:6c:71:89: 0f:9e:bb:c0:64:8e:b8:0a:5f:15:8a:e6:93:75:54: cb:29:ac:28:85:e9:db:65:0b:01:67:d2:fe:7c:0e: 26:58:23:56:88:e2:21:98:ba:88:76:13:3a:c1:11: 9b:e4:4a:d4:97:f8:63:0d:3a:ec:9e:91:d3:fb:c4: fe:86:8a:df:a0:dc:a8:ec:1e:bf:82:96:f2:99:56: 43:92:e9:60:64:6a:44:9c:ab:41:31:cc:bd:02:18: c2:f2:4d:c7:16:8a:84:fc:1a:0a:e9:df:a3:92:aa: 8b:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:5D:77:71:E3:23:F6:77:7F:11:2E:A7:54:A4:26:77:4D:31:43:8A X509v3 Authority Key Identifier: keyid:32:CB:3C:05:D6:A2:C5:1C:2F:F5:2D:D9:DC:B9:E2:B5:5C:40:48:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mss8BdaixRwv9S3Z3LnitVxASPk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/9062e2-95ae-4656-b2ee-984a8eb51e45/1/Mss8BdaixRwv9S3Z3LnitVxASPk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/9062e2-95ae-4656-b2ee-984a8eb51e45/1/Mss8BdaixRwv9S3Z3LnitVxASPk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:26:dd:4b:50:20:17:be:14:aa:27:9f:e3:8e:56:9f:9c:b5: 55:fc:a4:ac:06:eb:fd:6c:8a:1c:5a:01:db:a6:e2:d4:a5:ae: 93:0a:73:bb:16:89:4e:88:e3:ee:35:a3:39:43:88:86:4b:4a: 04:4e:d4:2d:07:1d:5f:95:48:3c:01:3b:8c:95:9f:97:58:c7: 5e:7f:63:66:d3:5a:93:99:f0:52:cf:cc:9e:11:9a:09:99:04: 20:b7:8b:e5:cf:15:28:09:d6:1c:1f:56:44:43:11:95:8e:9b: c4:26:bc:8e:4f:93:71:5d:e9:37:75:eb:a1:dc:fa:45:dd:50: 1e:5d:5a:d2:d9:02:cc:4d:a4:8b:56:a9:be:bc:47:e2:e6:06: d8:2f:6d:d8:58:55:5d:8f:4e:1c:af:91:ab:b3:e1:35:64:61: 09:5c:fa:61:05:fa:d3:3d:5e:d6:dd:c3:2d:30:5d:b5:11:45: e1:f1:cb:8c:40:12:70:68:62:e2:a3:94:31:2a:f0:c8:c6:27: 0b:66:94:ef:fd:b3:7e:78:4a:e6:63:49:2d:7e:17:2d:bb:63: 13:6f:9d:82:d0:87:11:68:23:f8:37:aa:dc:c9:0d:cb:47:d9: 2f:60:9b:e2:73:37:de:01:50:95:7f:82:bb:07:11:6c:cf:53: 6f:6e:8f:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxVXmLK2//W1wQqWnRf86dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyY2IzYzA1ZDZhMmM1MWMyZmY1MmRkOWRjYjllMmI1NWM0 MDQ4ZjkwHhcNMjUxMjE4MTIwMDQzWhcNMjUxMjE5MTIwMDQzWjAzMTEwLwYDVQQD EygxYzVkNzc3MWUzMjNmNjc3N2YxMTJlYTc1NGE0MjY3NzRkMzE0MzhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+sHrIWKPeyzINfJ4h1nldZ1+wgY X5zxHBzximpZ43ncVKyVTiPwgHp1BvLbkBUUyfHVKDVXvv1Jj68dtep71krR5VA9 YOJ7sp6PVWq8SyX1d62o23tacnKi2LwSkT3+H59uwyWE39GzG/Xo+nvWkkAs74Bx oHXRY0vWME8xUhzZvyLmJFp5PiIv8RKVO5EuOmRscYkPnrvAZI64Cl8ViuaTdVTL KawohenbZQsBZ9L+fA4mWCNWiOIhmLqIdhM6wRGb5ErUl/hjDTrsnpHT+8T+horf oNyo7B6/gpbymVZDkulgZGpEnKtBMcy9AhjC8k3HFoqE/BoK6d+jkqqLnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBxdd3HjI/Z3fxEup1SkJndNMUOKMB8GA1UdIwQY MBaAFDLLPAXWosUcL/Ut2dy54rVcQEj5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXNzOEJkYWl4Und2OVMzWjNMbml0VnhBU1BrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy85MDYyZTItOTVhZS00NjU2LWIyZWUt OTg0YThlYjUxZTQ1LzEvTXNzOEJkYWl4Und2OVMzWjNMbml0VnhBU1BrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy85MDYyZTItOTVhZS00NjU2LWIyZWUtOTg0YThlYjUxZTQ1 LzEvTXNzOEJkYWl4Und2OVMzWjNMbml0VnhBU1BrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZSbdS1Ag F74Uqief445Wn5y1VfykrAbr/WyKHFoB26bi1KWukwpzuxaJTojj7jWjOUOIhktK BE7ULQcdX5VIPAE7jJWfl1jHXn9jZtNak5nwUs/MnhGaCZkEILeL5c8VKAnWHB9W REMRlY6bxCa8jk+TcV3pN3Xrodz6Rd1QHl1a0tkCzE2ki1apvrxH4uYG2C9t2FhV XY9OHK+Rq7PhNWRhCVz6YQX60z1e1t3DLTBdtRFF4fHLjEAScGhi4qOUMSrwyMYn C2aU7/2zfnhK5mNJLX4XLbtjE2+dgtCHEWgj+Deq3MkNy0fZL2Cb4nM33gFQlX+C uwcRbM9Tb26PKA== -----END CERTIFICATE-----Generated at Thu Dec 18 22:12:06 2025 by rpki-client