This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/6536f9-87dd-4edd-b01c-b23172eb81fb/1/mSAfYJ56iT2obPDrvKS79HJ51hc.mft File: mSAfYJ56iT2obPDrvKS79HJ51hc.mft (raw, json) Hash identifier: Pxj8/4tiEH9DxqJ/AggaydE84vOticsCMiKezM4yNPc= Subject key identifier: 48:8C:70:C6:68:AB:A8:70:3C:14:8F:B0:77:A1:91:A9:DA:AA:6A:BC Authority key identifier: 99:20:1F:60:9E:7A:89:3D:A8:6C:F0:EB:BC:A4:BB:F4:72:79:D6:17 Certificate issuer: /CN=99201f609e7a893da86cf0ebbca4bbf47279d617 Certificate serial: 019AF23FB247521E4F619FB5EC4D52BBCD7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSAfYJ56iT2obPDrvKS79HJ51hc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/6536f9-87dd-4edd-b01c-b23172eb81fb/1/mSAfYJ56iT2obPDrvKS79HJ51hc.mft Manifest number: 05FD Signing time: Sat 06 Dec 2025 06:00:51 +0000 Manifest this update: Sat 06 Dec 2025 06:00:51 +0000 Manifest next update: Sun 07 Dec 2025 06:00:51 +0000 Files and hashes: 1: mSAfYJ56iT2obPDrvKS79HJ51hc.crl (hash: hTyiCkKZ0120XbPmM+jR2fup99riknJWCjDMDo8gC7w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/6536f9-87dd-4edd-b01c-b23172eb81fb/1/mSAfYJ56iT2obPDrvKS79HJ51hc.crl rsync://rpki.ripe.net/repository/DEFAULT/56/6536f9-87dd-4edd-b01c-b23172eb81fb/1/mSAfYJ56iT2obPDrvKS79HJ51hc.mft rsync://rpki.ripe.net/repository/DEFAULT/mSAfYJ56iT2obPDrvKS79HJ51hc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:b2:47:52:1e:4f:61:9f:b5:ec:4d:52:bb:cd:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99201f609e7a893da86cf0ebbca4bbf47279d617 Validity Not Before: Dec 6 06:00:51 2025 GMT Not After : Dec 7 06:00:51 2025 GMT Subject: CN=488c70c668aba8703c148fb077a191a9daaa6abc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ce:40:95:21:9b:a4:67:cb:08:ab:cf:45:51: 05:a8:47:41:9b:dd:1e:2d:e8:af:3f:8f:2d:90:63: 2d:86:37:b7:e3:62:fc:39:1f:91:bd:3a:92:8b:d3: 91:56:f0:a2:04:bc:2d:16:93:ec:a4:54:5e:05:f9: 5d:a0:eb:72:1c:5a:3b:4e:49:38:a8:96:6e:c7:5f: 83:26:bb:99:de:e7:67:bb:b6:33:c5:7a:10:39:53: 99:c2:2a:61:9e:0c:50:71:b9:9a:b8:18:57:49:40: ac:0b:72:54:19:8e:fd:8d:35:67:a5:06:b6:73:45: 78:4f:61:d1:a9:f5:ca:a5:6d:00:54:02:fb:f3:69: f1:13:bd:84:38:77:ec:8d:12:26:5d:21:a6:09:fd: 11:ae:1a:1e:e3:ae:67:4a:d0:f4:d0:7d:c6:48:d7: 7c:47:67:44:16:46:07:c3:78:c7:87:f1:4a:d2:b0: 6d:d3:bf:cb:81:84:5f:83:92:0a:46:6c:10:68:f2: 7e:69:6f:70:1e:25:c8:f4:85:81:84:7b:0b:4f:bb: 25:6d:8a:40:9f:ac:be:fd:b5:ba:61:69:a9:04:58: 74:0c:91:09:cf:3c:ec:9a:1c:61:d3:c8:97:15:e8: de:b9:da:ae:6d:c7:66:64:2f:12:56:85:8c:22:9a: 27:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:8C:70:C6:68:AB:A8:70:3C:14:8F:B0:77:A1:91:A9:DA:AA:6A:BC X509v3 Authority Key Identifier: keyid:99:20:1F:60:9E:7A:89:3D:A8:6C:F0:EB:BC:A4:BB:F4:72:79:D6:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSAfYJ56iT2obPDrvKS79HJ51hc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6536f9-87dd-4edd-b01c-b23172eb81fb/1/mSAfYJ56iT2obPDrvKS79HJ51hc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6536f9-87dd-4edd-b01c-b23172eb81fb/1/mSAfYJ56iT2obPDrvKS79HJ51hc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:10:00:0e:4a:d4:da:d7:88:10:a9:3d:81:58:85:88:ca:97: 8e:ed:d3:51:d7:2a:8c:f4:d5:7c:17:51:f6:c2:1d:6b:2b:a8: f1:71:68:42:24:44:36:c4:9a:51:80:ac:c4:31:40:58:c3:8a: 30:b7:a8:a6:35:90:bb:23:3d:d2:bc:18:61:dd:25:0f:2d:60: c4:e5:99:aa:d7:d7:34:7c:54:ef:5c:01:5e:5a:5b:e4:17:bd: c2:d7:60:58:15:10:e4:77:c6:8d:50:40:43:5c:e0:79:5f:0c: 02:1b:d7:93:d3:40:7a:d6:a4:a0:0d:f7:ba:1c:51:ed:b0:75: 7e:eb:11:84:90:5f:df:02:71:a5:fb:13:2e:35:fa:78:90:7f: 0b:a0:6c:78:36:c9:e8:14:88:ed:32:ef:8b:a7:cd:be:49:e5: c7:a5:b6:b2:1b:83:8f:21:f5:1f:59:f8:2c:9e:30:f9:72:b0: bf:61:20:e9:7b:b7:64:b2:64:79:27:4b:1a:fd:ca:a4:7c:ca: dc:61:8a:eb:98:6d:58:cd:90:a2:67:16:5a:b2:7a:d6:f7:0c: d9:4b:4f:6e:fb:4f:ae:fa:4e:1a:1c:8c:15:f1:08:13:79:1d: b0:7f:f0:59:a8:46:05:df:c7:b9:87:94:b4:7e:7b:18:65:bb: 7a:9f:27:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP7JHUh5PYZ+17E1Su818MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5MjAxZjYwOWU3YTg5M2RhODZjZjBlYmJjYTRiYmY0NzI3 OWQ2MTcwHhcNMjUxMjA2MDYwMDUxWhcNMjUxMjA3MDYwMDUxWjAzMTEwLwYDVQQD Eyg0ODhjNzBjNjY4YWJhODcwM2MxNDhmYjA3N2ExOTFhOWRhYWE2YWJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs85AlSGbpGfLCKvPRVEFqEdBm90e LeivP48tkGMthje342L8OR+RvTqSi9ORVvCiBLwtFpPspFReBfldoOtyHFo7Tkk4 qJZux1+DJruZ3udnu7YzxXoQOVOZwiphngxQcbmauBhXSUCsC3JUGY79jTVnpQa2 c0V4T2HRqfXKpW0AVAL782nxE72EOHfsjRImXSGmCf0Rrhoe465nStD00H3GSNd8 R2dEFkYHw3jHh/FK0rBt07/LgYRfg5IKRmwQaPJ+aW9wHiXI9IWBhHsLT7slbYpA n6y+/bW6YWmpBFh0DJEJzzzsmhxh08iXFejeudqubcdmZC8SVoWMIponuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEiMcMZoq6hwPBSPsHehkanaqmq8MB8GA1UdIwQY MBaAFJkgH2Ceeok9qGzw67yku/RyedYXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVNBZllKNTZpVDJvYlBEcnZLUzc5SEo1MWhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni82NTM2ZjktODdkZC00ZWRkLWIwMWMt YjIzMTcyZWI4MWZiLzEvbVNBZllKNTZpVDJvYlBEcnZLUzc5SEo1MWhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni82NTM2ZjktODdkZC00ZWRkLWIwMWMtYjIzMTcyZWI4MWZi LzEvbVNBZllKNTZpVDJvYlBEcnZLUzc5SEo1MWhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGxAADkrU 2teIEKk9gViFiMqXju3TUdcqjPTVfBdR9sIdayuo8XFoQiRENsSaUYCsxDFAWMOK MLeopjWQuyM90rwYYd0lDy1gxOWZqtfXNHxU71wBXlpb5Be9wtdgWBUQ5HfGjVBA Q1zgeV8MAhvXk9NAetakoA33uhxR7bB1fusRhJBf3wJxpfsTLjX6eJB/C6BseDbJ 6BSI7TLvi6fNvknlx6W2shuDjyH1H1n4LJ4w+XKwv2Eg6Xu3ZLJkeSdLGv3KpHzK 3GGK65htWM2QomcWWrJ61vcM2UtPbvtPrvpOGhyMFfEIE3kdsH/wWahGBd/HuYeU tH57GGW7ep8nXw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:18:44 2025 by rpki-client