This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/93dd43-9933-42ca-afc2-2c1891cacac7/1/mSxuCcGSxVgKSh0pQVDWI3q4kl0.mft File: mSxuCcGSxVgKSh0pQVDWI3q4kl0.mft (raw, json) Hash identifier: 3cM1s77xZvEMYx2ZKjQRGM2IOb52BP0Wh2txdP1+SE0= Subject key identifier: 8A:CD:F9:07:2E:43:5F:09:8A:B0:63:06:35:84:57:DB:27:FE:60:42 Authority key identifier: 99:2C:6E:09:C1:92:C5:58:0A:4A:1D:29:41:50:D6:23:7A:B8:92:5D Certificate issuer: /CN=992c6e09c192c5580a4a1d294150d6237ab8925d Certificate serial: 019B3FB6788F7C3BBC3AA03A2249372A297F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSxuCcGSxVgKSh0pQVDWI3q4kl0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/93dd43-9933-42ca-afc2-2c1891cacac7/1/mSxuCcGSxVgKSh0pQVDWI3q4kl0.mft Manifest number: 178B Signing time: Sun 21 Dec 2025 07:01:21 +0000 Manifest this update: Sun 21 Dec 2025 07:01:21 +0000 Manifest next update: Mon 22 Dec 2025 07:01:21 +0000 Files and hashes: 1: djCZyDS3Av-3n9Oi3QzE4yqgYHQ.roa (hash: umRqAsXCH4x+gTRMItrAG7erZAX903krnPo4zn0Ncs0=) 2: kIauAKAEPDGUiqRzZKf1-zzLViU.roa (hash: ajO4l/6tIJY/grZz1/mU3dymnv+IkFvwXNVUf7Kw9ao=) 3: mSxuCcGSxVgKSh0pQVDWI3q4kl0.crl (hash: 3gAqFvH9GDWez+2Ultdh3yy4GbPBbZSoiHc/TgItZ7Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/93dd43-9933-42ca-afc2-2c1891cacac7/1/mSxuCcGSxVgKSh0pQVDWI3q4kl0.crl rsync://rpki.ripe.net/repository/DEFAULT/54/93dd43-9933-42ca-afc2-2c1891cacac7/1/mSxuCcGSxVgKSh0pQVDWI3q4kl0.mft rsync://rpki.ripe.net/repository/DEFAULT/mSxuCcGSxVgKSh0pQVDWI3q4kl0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:b6:78:8f:7c:3b:bc:3a:a0:3a:22:49:37:2a:29:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=992c6e09c192c5580a4a1d294150d6237ab8925d Validity Not Before: Dec 21 07:01:21 2025 GMT Not After : Dec 22 07:01:21 2025 GMT Subject: CN=8acdf9072e435f098ab06306358457db27fe6042 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:00:76:6c:d8:41:9a:7a:3b:6f:ea:01:82:ed: 36:1c:8e:0f:0b:2b:01:57:af:fb:4b:d5:a8:f8:d3: 74:d6:d0:a5:d0:1d:e6:b3:d1:bc:50:d6:17:c7:8d: b6:17:bc:a5:ef:5b:3c:24:cf:01:4b:cb:eb:cb:1b: e2:ff:b6:c0:b2:23:34:d0:34:28:d9:a8:c8:6c:2b: 59:d6:1b:9d:24:59:37:42:87:17:36:70:fb:ae:7c: 70:e7:06:a8:c5:7e:3a:10:ca:9d:3a:51:a7:50:88: a2:ff:44:da:ce:8a:e4:64:5b:97:f3:f6:74:19:3b: 14:1b:b2:e1:02:22:50:80:3d:a4:d3:69:58:bf:47: e9:a9:17:d1:7a:c0:cb:9b:94:85:6e:49:f7:56:44: d6:35:91:c3:0a:80:a7:51:72:6b:86:76:59:95:64: 2f:35:9f:23:65:6a:38:9e:02:bc:7a:f9:55:73:ce: d6:84:68:5d:d4:f2:63:a1:1a:d2:2f:ee:49:f6:1f: 0a:01:f1:80:9f:4f:55:28:29:d6:70:d5:c0:9a:10: f1:80:b1:ec:35:68:4c:f9:33:6b:1a:08:df:86:46: 75:76:58:2c:b5:d2:85:26:28:fb:0d:d2:01:b1:d0: b1:01:72:32:32:02:6d:8d:dc:0a:31:61:2a:94:bb: 61:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:CD:F9:07:2E:43:5F:09:8A:B0:63:06:35:84:57:DB:27:FE:60:42 X509v3 Authority Key Identifier: keyid:99:2C:6E:09:C1:92:C5:58:0A:4A:1D:29:41:50:D6:23:7A:B8:92:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSxuCcGSxVgKSh0pQVDWI3q4kl0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/93dd43-9933-42ca-afc2-2c1891cacac7/1/mSxuCcGSxVgKSh0pQVDWI3q4kl0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/93dd43-9933-42ca-afc2-2c1891cacac7/1/mSxuCcGSxVgKSh0pQVDWI3q4kl0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:63:af:d7:b8:fa:2b:58:2e:30:88:d8:c2:05:93:29:7b:49: c5:30:ce:34:43:93:7d:ff:a0:fe:ff:9e:65:73:74:9e:74:5e: ec:80:12:e7:e9:5a:de:52:59:f3:9b:96:52:a3:e0:c3:7f:ea: 0a:b5:8e:b2:52:5f:92:1e:0b:d8:5a:9b:08:92:c2:14:2f:3e: e2:e5:87:f1:ee:c5:09:cf:eb:0e:19:3d:b5:66:90:39:a4:03: 1c:43:79:a1:c1:fc:51:87:05:0e:8c:a8:b7:e8:24:ae:ad:05: 17:f5:73:57:d8:a7:72:91:e0:ea:00:d9:fb:c2:1c:4a:7f:ec: ed:93:a4:0c:03:9e:79:f2:46:06:f6:76:23:34:79:a1:62:e8: 2e:c0:c2:5f:59:24:08:3c:e8:3b:ba:04:80:37:52:d8:33:0c: 72:be:c9:83:84:57:d6:4b:f4:e9:1d:04:de:c4:ea:4c:ff:1b: 23:10:48:d1:1a:b2:20:d0:30:fb:13:70:c5:c8:3f:94:53:98: 8c:f5:fc:0d:aa:24:ed:cb:e1:ca:8b:41:e6:56:ea:17:70:b3: 42:cb:2d:ca:dc:64:95:91:40:8f:1a:9b:7d:06:e2:1d:51:91: fa:05:2c:65:29:6e:40:82:62:49:db:13:3e:62:96:3a:1a:75: 39:8e:a8:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/tniPfDu8OqA6Ikk3Kil/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5MmM2ZTA5YzE5MmM1NTgwYTRhMWQyOTQxNTBkNjIzN2Fi ODkyNWQwHhcNMjUxMjIxMDcwMTIxWhcNMjUxMjIyMDcwMTIxWjAzMTEwLwYDVQQD Eyg4YWNkZjkwNzJlNDM1ZjA5OGFiMDYzMDYzNTg0NTdkYjI3ZmU2MDQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5gB2bNhBmno7b+oBgu02HI4PCysB V6/7S9Wo+NN01tCl0B3ms9G8UNYXx422F7yl71s8JM8BS8vryxvi/7bAsiM00DQo 2ajIbCtZ1hudJFk3QocXNnD7rnxw5waoxX46EMqdOlGnUIii/0TazorkZFuX8/Z0 GTsUG7LhAiJQgD2k02lYv0fpqRfResDLm5SFbkn3VkTWNZHDCoCnUXJrhnZZlWQv NZ8jZWo4ngK8evlVc87WhGhd1PJjoRrSL+5J9h8KAfGAn09VKCnWcNXAmhDxgLHs NWhM+TNrGgjfhkZ1dlgstdKFJij7DdIBsdCxAXIyMgJtjdwKMWEqlLthcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIrN+QcuQ18JirBjBjWEV9sn/mBCMB8GA1UdIwQY MBaAFJksbgnBksVYCkodKUFQ1iN6uJJdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVN4dUNjR1N4VmdLU2gwcFFWRFdJM3E0a2wwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC85M2RkNDMtOTkzMy00MmNhLWFmYzIt MmMxODkxY2FjYWM3LzEvbVN4dUNjR1N4VmdLU2gwcFFWRFdJM3E0a2wwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC85M2RkNDMtOTkzMy00MmNhLWFmYzItMmMxODkxY2FjYWM3 LzEvbVN4dUNjR1N4VmdLU2gwcFFWRFdJM3E0a2wwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG2Ov17j6 K1guMIjYwgWTKXtJxTDONEOTff+g/v+eZXN0nnRe7IAS5+la3lJZ85uWUqPgw3/q CrWOslJfkh4L2FqbCJLCFC8+4uWH8e7FCc/rDhk9tWaQOaQDHEN5ocH8UYcFDoyo t+gkrq0FF/VzV9incpHg6gDZ+8IcSn/s7ZOkDAOeefJGBvZ2IzR5oWLoLsDCX1kk CDzoO7oEgDdS2DMMcr7Jg4RX1kv06R0E3sTqTP8bIxBI0RqyINAw+xNwxcg/lFOY jPX8Daok7cvhyotB5lbqF3CzQsstytxklZFAjxqbfQbiHVGR+gUsZSluQIJiSdsT PmKWOhp1OY6o6A== -----END CERTIFICATE-----Generated at Sun Dec 21 11:16:21 2025 by rpki-client