This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/855ad6-a84f-4f01-bfc8-d3fd91ac7c9f/1/MSUs4wd4HQMZ_NdJT6ZPJgRQFqw.mft File: MSUs4wd4HQMZ_NdJT6ZPJgRQFqw.mft (raw, json) Hash identifier: D9t1Tm//yC1zylVC7y8TBYeOWaspx6Njiiv2A695hic= Subject key identifier: 8C:18:BC:E9:4E:79:B7:EF:E7:68:9A:63:11:E2:6E:5D:A9:7D:D0:13 Authority key identifier: 31:25:2C:E3:07:78:1D:03:19:FC:D7:49:4F:A6:4F:26:04:50:16:AC Certificate issuer: /CN=31252ce307781d0319fcd7494fa64f26045016ac Certificate serial: 019AF31D00D0819EC1514D2E6898522D9579 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MSUs4wd4HQMZ_NdJT6ZPJgRQFqw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/855ad6-a84f-4f01-bfc8-d3fd91ac7c9f/1/MSUs4wd4HQMZ_NdJT6ZPJgRQFqw.mft Manifest number: 17 Signing time: Sat 06 Dec 2025 10:02:35 +0000 Manifest this update: Sat 06 Dec 2025 10:02:35 +0000 Manifest next update: Sun 07 Dec 2025 10:02:35 +0000 Files and hashes: 1: MSUs4wd4HQMZ_NdJT6ZPJgRQFqw.crl (hash: KhUVc6gMSmOZkDys5E5TVJiK59g+/5HmK/69KW4rOs0=) 2: eLWZPqIlPOZugeCN_1jMsaC5Ajw.roa (hash: 2hQ1O4JERwzA+kKepYWa1+J0iuXK/3gxUZureCZHKIk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/855ad6-a84f-4f01-bfc8-d3fd91ac7c9f/1/MSUs4wd4HQMZ_NdJT6ZPJgRQFqw.crl rsync://rpki.ripe.net/repository/DEFAULT/53/855ad6-a84f-4f01-bfc8-d3fd91ac7c9f/1/MSUs4wd4HQMZ_NdJT6ZPJgRQFqw.mft rsync://rpki.ripe.net/repository/DEFAULT/MSUs4wd4HQMZ_NdJT6ZPJgRQFqw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:00:d0:81:9e:c1:51:4d:2e:68:98:52:2d:95:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31252ce307781d0319fcd7494fa64f26045016ac Validity Not Before: Dec 6 10:02:35 2025 GMT Not After : Dec 7 10:02:35 2025 GMT Subject: CN=8c18bce94e79b7efe7689a6311e26e5da97dd013 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:5a:57:61:ff:cd:fa:0e:7e:dd:79:14:00:10: 6e:84:27:2e:84:50:30:cd:ad:42:37:3b:aa:52:47: 14:c4:59:e7:f6:88:05:93:3c:43:56:6b:87:e0:6f: 0b:96:92:95:4e:00:0c:38:f0:47:d1:75:d8:08:af: 75:b2:06:bf:a9:21:28:7e:75:de:9d:e3:3c:3d:4c: ad:80:ad:38:91:51:8b:ff:8b:81:cf:ac:68:9a:cd: d4:8b:d2:41:97:ea:c1:95:12:e4:b3:3e:50:f4:59: 47:a0:b2:c7:c7:2d:a4:88:1f:ea:51:4f:7b:03:cc: 0b:b1:9b:04:bd:e3:b9:26:c5:f9:c7:19:03:c5:38: 05:51:19:a5:db:a8:01:33:8b:5d:a5:b3:63:15:ea: b1:5e:15:86:a6:62:6d:b8:e1:47:a0:0b:64:98:7b: 77:4b:18:67:ae:f5:34:95:7f:c1:74:11:9f:85:94: 16:da:ae:91:3f:17:f5:1a:ef:b7:b8:bd:30:2d:0f: 90:26:2d:4a:4f:21:5b:1d:a5:10:35:9c:7a:d1:3c: b7:2f:6d:77:f1:83:e4:21:af:02:b6:ab:06:c6:5b: 72:1b:73:06:7e:be:f6:48:7e:10:a4:f3:bc:f9:c4: 44:cb:f5:52:2c:06:a2:f5:fe:52:47:e9:4d:f0:98: a6:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:18:BC:E9:4E:79:B7:EF:E7:68:9A:63:11:E2:6E:5D:A9:7D:D0:13 X509v3 Authority Key Identifier: keyid:31:25:2C:E3:07:78:1D:03:19:FC:D7:49:4F:A6:4F:26:04:50:16:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MSUs4wd4HQMZ_NdJT6ZPJgRQFqw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/855ad6-a84f-4f01-bfc8-d3fd91ac7c9f/1/MSUs4wd4HQMZ_NdJT6ZPJgRQFqw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/855ad6-a84f-4f01-bfc8-d3fd91ac7c9f/1/MSUs4wd4HQMZ_NdJT6ZPJgRQFqw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:70:b0:4c:0d:65:74:56:ea:0c:c8:6e:0e:39:2e:f2:19:4c: 1b:42:23:b5:72:44:70:4c:48:8e:4b:ff:6e:56:3b:92:b1:2c: db:d6:cb:59:f7:1a:5f:75:b8:4d:fb:d9:5a:0a:08:77:53:7e: 67:43:af:3e:a2:61:93:3e:55:f8:c5:55:70:3f:c1:83:69:09: 93:a9:34:01:c5:75:5c:f0:7f:17:ab:72:f0:4c:d4:1e:64:b0: 04:6f:69:f6:b1:d2:b4:27:e9:38:b6:4d:11:20:9f:9f:e6:cf: 27:8a:35:bf:ff:97:a8:d7:a6:8d:52:89:a3:87:01:e9:1d:52: 91:ee:c4:27:4f:41:92:dc:4f:90:d4:a5:9a:8a:28:3e:7b:ed: e3:c1:b0:ce:50:e8:9d:2e:e3:12:db:80:f0:b8:50:9c:71:3c: 71:f9:0b:10:ad:5d:ac:f3:9b:2a:50:4e:2a:5d:dd:21:1a:d4: 37:eb:d0:93:dc:5b:48:93:e8:a4:64:03:66:9a:86:a6:4b:51: 9f:27:b7:98:f4:42:65:dc:e6:bc:03:5f:3d:24:eb:d1:36:13: 81:5e:ea:af:fa:9d:7e:d9:ba:ca:20:ae:3e:84:d3:35:33:37: fc:40:7f:f9:c2:23:5b:36:4a:60:c2:b8:5b:cd:e1:8e:03:4e: 36:0a:44:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHQDQgZ7BUU0uaJhSLZV5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxMjUyY2UzMDc3ODFkMDMxOWZjZDc0OTRmYTY0ZjI2MDQ1 MDE2YWMwHhcNMjUxMjA2MTAwMjM1WhcNMjUxMjA3MTAwMjM1WjAzMTEwLwYDVQQD Eyg4YzE4YmNlOTRlNzliN2VmZTc2ODlhNjMxMWUyNmU1ZGE5N2RkMDEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFpXYf/N+g5+3XkUABBuhCcuhFAw za1CNzuqUkcUxFnn9ogFkzxDVmuH4G8LlpKVTgAMOPBH0XXYCK91sga/qSEofnXe neM8PUytgK04kVGL/4uBz6xoms3Ui9JBl+rBlRLksz5Q9FlHoLLHxy2kiB/qUU97 A8wLsZsEveO5JsX5xxkDxTgFURml26gBM4tdpbNjFeqxXhWGpmJtuOFHoAtkmHt3 SxhnrvU0lX/BdBGfhZQW2q6RPxf1Gu+3uL0wLQ+QJi1KTyFbHaUQNZx60Ty3L213 8YPkIa8CtqsGxltyG3MGfr72SH4QpPO8+cREy/VSLAai9f5SR+lN8JimYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIwYvOlOebfv52iaYxHibl2pfdATMB8GA1UdIwQY MBaAFDElLOMHeB0DGfzXSU+mTyYEUBasMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVNVczR3ZDRIUU1aX05kSlQ2WlBKZ1JRRnF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My84NTVhZDYtYTg0Zi00ZjAxLWJmYzgt ZDNmZDkxYWM3YzlmLzEvTVNVczR3ZDRIUU1aX05kSlQ2WlBKZ1JRRnF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My84NTVhZDYtYTg0Zi00ZjAxLWJmYzgtZDNmZDkxYWM3Yzlm LzEvTVNVczR3ZDRIUU1aX05kSlQ2WlBKZ1JRRnF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf3CwTA1l dFbqDMhuDjku8hlMG0IjtXJEcExIjkv/blY7krEs29bLWfcaX3W4TfvZWgoId1N+ Z0OvPqJhkz5V+MVVcD/Bg2kJk6k0AcV1XPB/F6ty8EzUHmSwBG9p9rHStCfpOLZN ESCfn+bPJ4o1v/+XqNemjVKJo4cB6R1Ske7EJ09BktxPkNSlmoooPnvt48GwzlDo nS7jEtuA8LhQnHE8cfkLEK1drPObKlBOKl3dIRrUN+vQk9xbSJPopGQDZpqGpktR nye3mPRCZdzmvANfPSTr0TYTgV7qr/qdftm6yiCuPoTTNTM3/EB/+cIjWzZKYMK4 W83hjgNONgpEtw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:44:48 2025 by rpki-client