This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft File: MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft (raw, json) Hash identifier: lHk+mwfvJVnMgUaRA5ObPhA+swATFlYWUaII3DUI4CY= Subject key identifier: 4B:9B:C4:96:67:BB:36:DE:4B:7A:27:D3:06:8B:96:BC:17:96:E7:F2 Authority key identifier: 32:C8:46:F1:91:43:32:30:D9:73:CB:C8:FD:A0:6B:60:2E:BF:CB:5B Certificate issuer: /CN=32c846f191433230d973cbc8fda06b602ebfcb5b Certificate serial: 019AF19B1D5CBC6537D4C6804FE2F268321D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MshG8ZFDMjDZc8vI_aBrYC6_y1s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft Manifest number: 1104 Signing time: Sat 06 Dec 2025 03:01:05 +0000 Manifest this update: Sat 06 Dec 2025 03:01:05 +0000 Manifest next update: Sun 07 Dec 2025 03:01:05 +0000 Files and hashes: 1: MshG8ZFDMjDZc8vI_aBrYC6_y1s.crl (hash: jy/9mYuVPsvqhPgMAbgGWuUhgZr43mlXT0nJVob2Y5o=) 2: TBM-WxKs_JnUU_yCd07gs-SEpTM.roa (hash: ITKz1rUEY27fZS9fRQNAXZm00rkbdJk7GbuSl5tqJwg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.crl rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft rsync://rpki.ripe.net/repository/DEFAULT/MshG8ZFDMjDZc8vI_aBrYC6_y1s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:1d:5c:bc:65:37:d4:c6:80:4f:e2:f2:68:32:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32c846f191433230d973cbc8fda06b602ebfcb5b Validity Not Before: Dec 6 03:01:05 2025 GMT Not After : Dec 7 03:01:05 2025 GMT Subject: CN=4b9bc49667bb36de4b7a27d3068b96bc1796e7f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0e:dc:1a:c1:da:c9:0d:36:e0:53:74:6a:fd: a6:30:ab:e5:fc:07:d3:82:31:a6:f5:8c:09:ac:83: 49:9a:e6:fe:d9:ce:41:75:76:69:04:15:fa:5c:89: c8:97:10:4c:01:99:7f:65:3a:f9:e0:41:b5:53:b9: f9:74:76:01:52:c0:a4:6c:7c:8e:de:af:d9:f0:0a: 7a:64:19:b1:3a:4a:23:33:32:c1:4f:ef:84:9c:00: 83:a5:81:07:a7:5f:e7:54:bd:0b:33:b1:19:6e:6e: a0:c9:d8:5f:8e:56:88:94:02:66:8b:f4:0a:a0:b4: f7:be:fb:b5:27:21:9f:c1:96:c3:3a:1f:ff:05:71: ab:98:7b:4e:19:76:5d:ed:26:a4:6c:c6:38:81:07: 8d:d5:50:00:8e:ed:40:8b:4a:2e:39:8d:5f:1e:9f: 2d:49:de:e6:d8:f3:54:2a:72:54:cc:ec:87:26:d1: 60:98:6b:7a:18:c4:76:d0:f4:ba:f7:3c:79:19:36: 59:82:bd:1e:64:36:54:66:05:38:18:0e:dc:36:b5: 03:47:c3:cf:77:98:f0:26:0e:9c:08:5c:81:02:0c: 8c:f5:98:17:eb:15:8a:01:7f:2c:05:1e:a7:cb:ac: fb:42:5c:23:44:8e:2f:a2:39:85:0a:8d:54:91:be: ee:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:9B:C4:96:67:BB:36:DE:4B:7A:27:D3:06:8B:96:BC:17:96:E7:F2 X509v3 Authority Key Identifier: keyid:32:C8:46:F1:91:43:32:30:D9:73:CB:C8:FD:A0:6B:60:2E:BF:CB:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MshG8ZFDMjDZc8vI_aBrYC6_y1s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:4d:f8:5b:0f:4a:0f:97:53:5d:2c:0f:d3:0a:4d:2b:7c:ea: 0c:f8:80:7c:f2:f5:ef:89:48:60:18:a2:f7:37:9f:b4:cf:18: 20:d8:81:90:d1:a0:2d:8e:3e:df:0f:aa:ad:dc:37:ee:c5:04: f6:29:5f:ad:09:8b:15:2e:c7:8a:4c:81:0b:fb:3a:7d:a8:5f: 24:82:72:ec:7f:43:c5:21:1c:62:08:98:70:67:0d:82:2b:fe: d4:ba:1d:8f:0d:57:79:42:24:67:16:22:1f:ec:cf:c7:dc:1a: 01:06:ef:cd:f2:c2:a2:48:47:e5:ff:e4:40:9e:df:84:f5:60: 99:8e:e7:64:72:16:e1:85:45:85:e7:0a:56:7f:d1:92:40:02: c2:89:f3:82:43:d0:ae:24:5b:47:86:f9:72:53:76:5b:9c:89: 21:50:32:1b:2f:f2:9b:a5:c4:14:c1:92:1d:cf:59:34:58:05: 59:1a:d1:62:d5:aa:87:ca:9f:89:7e:c5:44:a8:22:28:20:3c: 08:f5:da:9e:27:81:f6:b8:de:e4:df:fd:80:c4:88:f4:ad:40: bd:e5:3c:8a:65:35:90:b6:4e:e1:5d:a7:33:30:fc:61:e7:1b: a7:37:b3:16:9d:5e:62:ca:38:60:61:10:59:24:15:59:cd:b5: 2a:55:70:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmx1cvGU31MaAT+LyaDIdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyYzg0NmYxOTE0MzMyMzBkOTczY2JjOGZkYTA2YjYwMmVi ZmNiNWIwHhcNMjUxMjA2MDMwMTA1WhcNMjUxMjA3MDMwMTA1WjAzMTEwLwYDVQQD Eyg0YjliYzQ5NjY3YmIzNmRlNGI3YTI3ZDMwNjhiOTZiYzE3OTZlN2YyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsg7cGsHayQ024FN0av2mMKvl/AfT gjGm9YwJrINJmub+2c5BdXZpBBX6XInIlxBMAZl/ZTr54EG1U7n5dHYBUsCkbHyO 3q/Z8Ap6ZBmxOkojMzLBT++EnACDpYEHp1/nVL0LM7EZbm6gydhfjlaIlAJmi/QK oLT3vvu1JyGfwZbDOh//BXGrmHtOGXZd7SakbMY4gQeN1VAAju1Ai0ouOY1fHp8t Sd7m2PNUKnJUzOyHJtFgmGt6GMR20PS69zx5GTZZgr0eZDZUZgU4GA7cNrUDR8PP d5jwJg6cCFyBAgyM9ZgX6xWKAX8sBR6ny6z7QlwjRI4vojmFCo1Ukb7uRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEubxJZnuzbeS3on0waLlrwXlufyMB8GA1UdIwQY MBaAFDLIRvGRQzIw2XPLyP2ga2Auv8tbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXNoRzhaRkRNakRaYzh2SV9hQnJZQzZfeTFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9lNTc1NmUtMTMxNy00NDcyLTgzMDIt YTIzNDFkM2JiMDUzLzEvTXNoRzhaRkRNakRaYzh2SV9hQnJZQzZfeTFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9lNTc1NmUtMTMxNy00NDcyLTgzMDItYTIzNDFkM2JiMDUz LzEvTXNoRzhaRkRNakRaYzh2SV9hQnJZQzZfeTFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASU34Ww9K D5dTXSwP0wpNK3zqDPiAfPL174lIYBii9zeftM8YINiBkNGgLY4+3w+qrdw37sUE 9ilfrQmLFS7HikyBC/s6fahfJIJy7H9DxSEcYgiYcGcNgiv+1Lodjw1XeUIkZxYi H+zPx9waAQbvzfLCokhH5f/kQJ7fhPVgmY7nZHIW4YVFhecKVn/RkkACwonzgkPQ riRbR4b5clN2W5yJIVAyGy/ym6XEFMGSHc9ZNFgFWRrRYtWqh8qfiX7FRKgiKCA8 CPXanieB9rje5N/9gMSI9K1AveU8imU1kLZO4V2nMzD8YecbpzezFp1eYso4YGEQ WSQVWc21KlVwYg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:06:18 2025 by rpki-client