This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/ff00c4-b728-44a0-962d-973db9ce68b5/1/MsK-SD_ye7jw3AnOD3HyqI6vfgc.mft File: MsK-SD_ye7jw3AnOD3HyqI6vfgc.mft (raw, json) Hash identifier: Lq702rB0b730tq6bzikQs7rJuqvMsLVGq/+8tU2xWAs= Subject key identifier: 41:DB:A5:E7:2E:31:1E:54:26:93:80:02:63:51:F0:9D:12:3C:5F:B0 Authority key identifier: 32:C2:BE:48:3F:F2:7B:B8:F0:DC:09:CE:0F:71:F2:A8:8E:AF:7E:07 Certificate issuer: /CN=32c2be483ff27bb8f0dc09ce0f71f2a88eaf7e07 Certificate serial: 019AF23F87AAC71427B37D1E62354CFAC059 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MsK-SD_ye7jw3AnOD3HyqI6vfgc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/ff00c4-b728-44a0-962d-973db9ce68b5/1/MsK-SD_ye7jw3AnOD3HyqI6vfgc.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 06:00:41 +0000 Manifest this update: Sat 06 Dec 2025 06:00:41 +0000 Manifest next update: Sun 07 Dec 2025 06:00:41 +0000 Files and hashes: 1: 3Ld3_xMK0PlfZFY-qBwXca5iVGM.roa (hash: CjU6hi/Jh6Zo5sGQ2UDjZfEn9Czpv8lCLYgvh/6NOKs=) 2: MsK-SD_ye7jw3AnOD3HyqI6vfgc.crl (hash: 3Yy9bMT0P0XNcVg5xUlGO6EHl4rkX+B3HNidYxWrLeg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/ff00c4-b728-44a0-962d-973db9ce68b5/1/MsK-SD_ye7jw3AnOD3HyqI6vfgc.crl rsync://rpki.ripe.net/repository/DEFAULT/40/ff00c4-b728-44a0-962d-973db9ce68b5/1/MsK-SD_ye7jw3AnOD3HyqI6vfgc.mft rsync://rpki.ripe.net/repository/DEFAULT/MsK-SD_ye7jw3AnOD3HyqI6vfgc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 06:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:87:aa:c7:14:27:b3:7d:1e:62:35:4c:fa:c0:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32c2be483ff27bb8f0dc09ce0f71f2a88eaf7e07 Validity Not Before: Dec 6 06:00:41 2025 GMT Not After : Dec 7 06:00:41 2025 GMT Subject: CN=41dba5e72e311e54269380026351f09d123c5fb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5a:00:bb:d2:ce:e6:13:e6:60:a2:9b:97:3b: b9:ac:d5:d5:28:02:d0:e8:89:01:39:0d:98:b0:ad: fe:23:4c:59:bc:fc:88:c5:10:90:21:23:d8:28:f0: 3c:26:cb:35:56:1e:87:a4:8b:fd:8e:b0:b6:c6:08: 74:b5:07:ed:4c:84:41:1d:ee:4b:fb:d1:c2:69:15: 9d:33:fb:3c:e5:0e:6f:54:94:24:be:b3:0f:2e:95: 1e:6e:1e:12:84:1a:a2:71:ef:17:78:56:10:e8:4a: 33:81:4f:5f:d6:85:fe:12:ff:8d:78:2b:45:e9:0b: 73:29:6d:8d:f2:07:f2:b4:1a:12:88:88:c8:27:8d: e9:54:38:75:5b:69:fc:bb:a3:2d:56:fb:e6:a5:52: d3:5e:66:94:35:4f:49:b1:34:ad:a8:39:1f:69:e5: 26:87:54:85:d8:13:64:71:28:1c:8b:a5:90:9f:57: a9:e8:6c:44:3c:da:76:a4:40:55:c7:f9:a2:e6:c0: 09:31:83:f6:43:6a:b3:40:c4:e5:45:90:ea:ed:45: f4:0c:14:36:f0:94:b6:ea:e1:b5:e5:e9:e9:53:77: 16:4c:cd:f6:fb:e6:a7:3a:8a:63:6d:76:13:c9:ae: 53:68:fc:1b:fe:3d:48:b4:2e:7c:38:a9:a6:d0:5e: 5c:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:DB:A5:E7:2E:31:1E:54:26:93:80:02:63:51:F0:9D:12:3C:5F:B0 X509v3 Authority Key Identifier: keyid:32:C2:BE:48:3F:F2:7B:B8:F0:DC:09:CE:0F:71:F2:A8:8E:AF:7E:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MsK-SD_ye7jw3AnOD3HyqI6vfgc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/ff00c4-b728-44a0-962d-973db9ce68b5/1/MsK-SD_ye7jw3AnOD3HyqI6vfgc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/ff00c4-b728-44a0-962d-973db9ce68b5/1/MsK-SD_ye7jw3AnOD3HyqI6vfgc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:d1:fb:c6:c0:95:ec:05:e0:11:d8:a5:57:38:07:17:2c:39: 48:fa:53:90:11:1b:50:f9:80:af:a4:6b:ed:1e:d6:dc:5c:c0: 1d:4c:b3:78:44:66:70:53:d2:c9:12:05:81:ea:e0:c2:20:e3: 03:a0:75:ec:66:0a:11:5b:0f:0b:18:cc:11:e1:44:a3:71:d6: 75:7f:c4:8a:9b:ab:bf:87:e8:13:72:59:91:c9:18:4d:10:2c: d4:7a:b1:92:91:68:fb:c9:b1:15:da:a4:45:aa:d3:fc:9e:dc: 1d:5d:63:24:4c:11:f2:a5:0b:49:b4:f3:5b:4c:36:78:79:1a: bc:13:26:b3:1b:dd:fb:cf:07:31:41:31:9a:97:38:04:49:2d: e3:5d:2e:e8:f0:2a:c1:cf:2c:57:e3:5d:d1:d9:a4:e2:50:4c: 7f:26:22:aa:f5:3c:bb:9f:b6:f2:fb:3c:33:4d:61:86:ca:4d: 49:35:98:54:44:03:7d:a0:e7:c1:e7:e7:f8:b2:07:06:a6:6e: e5:74:49:0d:72:91:92:41:01:a9:9b:c9:ce:93:22:47:d1:86: 07:dd:2c:bb:a6:da:68:5f:af:a3:7c:d3:af:c5:0c:07:a2:ec: 58:47:d3:a4:d2:c2:62:3c:35:7a:ed:e8:fc:c5:a9:73:8e:38: 7c:b2:09:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP4eqxxQns30eYjVM+sBZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyYzJiZTQ4M2ZmMjdiYjhmMGRjMDljZTBmNzFmMmE4OGVh ZjdlMDcwHhcNMjUxMjA2MDYwMDQxWhcNMjUxMjA3MDYwMDQxWjAzMTEwLwYDVQQD Eyg0MWRiYTVlNzJlMzExZTU0MjY5MzgwMDI2MzUxZjA5ZDEyM2M1ZmIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArloAu9LO5hPmYKKblzu5rNXVKALQ 6IkBOQ2YsK3+I0xZvPyIxRCQISPYKPA8Jss1Vh6HpIv9jrC2xgh0tQftTIRBHe5L +9HCaRWdM/s85Q5vVJQkvrMPLpUebh4ShBqice8XeFYQ6EozgU9f1oX+Ev+NeCtF 6QtzKW2N8gfytBoSiIjIJ43pVDh1W2n8u6MtVvvmpVLTXmaUNU9JsTStqDkfaeUm h1SF2BNkcSgci6WQn1ep6GxEPNp2pEBVx/mi5sAJMYP2Q2qzQMTlRZDq7UX0DBQ2 8JS26uG15enpU3cWTM32++anOopjbXYTya5TaPwb/j1ItC58OKmm0F5cTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEHbpecuMR5UJpOAAmNR8J0SPF+wMB8GA1UdIwQY MBaAFDLCvkg/8nu48NwJzg9x8qiOr34HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXNLLVNEX3llN2p3M0FuT0QzSHlxSTZ2ZmdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9mZjAwYzQtYjcyOC00NGEwLTk2MmQt OTczZGI5Y2U2OGI1LzEvTXNLLVNEX3llN2p3M0FuT0QzSHlxSTZ2ZmdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC9mZjAwYzQtYjcyOC00NGEwLTk2MmQtOTczZGI5Y2U2OGI1 LzEvTXNLLVNEX3llN2p3M0FuT0QzSHlxSTZ2ZmdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd9H7xsCV 7AXgEdilVzgHFyw5SPpTkBEbUPmAr6Rr7R7W3FzAHUyzeERmcFPSyRIFgergwiDj A6B17GYKEVsPCxjMEeFEo3HWdX/Eipurv4foE3JZkckYTRAs1HqxkpFo+8mxFdqk RarT/J7cHV1jJEwR8qULSbTzW0w2eHkavBMmsxvd+88HMUExmpc4BEkt410u6PAq wc8sV+Nd0dmk4lBMfyYiqvU8u5+28vs8M01hhspNSTWYVEQDfaDnwefn+LIHBqZu 5XRJDXKRkkEBqZvJzpMiR9GGB90su6baaF+vo3zTr8UMB6LsWEfTpNLCYjw1eu3o /MWpc444fLIJPw== -----END CERTIFICATE-----Generated at Sat Dec 6 16:09:11 2025 by rpki-client