This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/4d05cf-63b0-46af-9e2c-206e82336cde/1/mSPRBAwF8Jn7T-20mLtKFIMnmPo.mft File: mSPRBAwF8Jn7T-20mLtKFIMnmPo.mft (raw, json) Hash identifier: m2dB9nXcXZAKf30szRhqCzcLnV5+cdlBOOE08oywnHM= Subject key identifier: 73:72:C2:39:69:6B:94:CD:69:63:3B:54:A2:D5:88:03:C4:B6:53:9C Authority key identifier: 99:23:D1:04:0C:05:F0:99:FB:4F:ED:B4:98:BB:4A:14:83:27:98:FA Certificate issuer: /CN=9923d1040c05f099fb4fedb498bb4a14832798fa Certificate serial: 019AF31BBBF6CA9F2DC2B70AD250998EE47A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSPRBAwF8Jn7T-20mLtKFIMnmPo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/4d05cf-63b0-46af-9e2c-206e82336cde/1/mSPRBAwF8Jn7T-20mLtKFIMnmPo.mft Manifest number: 065E Signing time: Sat 06 Dec 2025 10:01:12 +0000 Manifest this update: Sat 06 Dec 2025 10:01:12 +0000 Manifest next update: Sun 07 Dec 2025 10:01:12 +0000 Files and hashes: 1: 6X834B5gcsNjXymrQMfROjTj6Pc.roa (hash: eUjrS9xR0GNckSwbqncq7fyluCC422BD9P+h/ci+z+8=) 2: mSPRBAwF8Jn7T-20mLtKFIMnmPo.crl (hash: U4ziZHRfwfr5rZnlCBo0XZEYsLn3K71cVzkr/dvFeX4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/4d05cf-63b0-46af-9e2c-206e82336cde/1/mSPRBAwF8Jn7T-20mLtKFIMnmPo.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/4d05cf-63b0-46af-9e2c-206e82336cde/1/mSPRBAwF8Jn7T-20mLtKFIMnmPo.mft rsync://rpki.ripe.net/repository/DEFAULT/mSPRBAwF8Jn7T-20mLtKFIMnmPo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:bb:f6:ca:9f:2d:c2:b7:0a:d2:50:99:8e:e4:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9923d1040c05f099fb4fedb498bb4a14832798fa Validity Not Before: Dec 6 10:01:12 2025 GMT Not After : Dec 7 10:01:12 2025 GMT Subject: CN=7372c239696b94cd69633b54a2d58803c4b6539c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:05:ec:19:60:56:4e:f3:92:a2:1d:d1:73:0c: 9a:a7:b0:d8:41:16:0b:8c:57:8a:5c:f0:04:6c:4f: b9:88:bb:39:67:2e:6f:14:7b:fd:17:b3:9d:03:6a: 82:2d:de:bf:64:0d:fd:70:d5:e9:d2:81:df:f7:d8: d3:96:26:8c:cb:b1:de:d4:69:4e:c8:0a:76:db:21: d8:c5:21:69:b3:5f:df:ed:59:f7:64:e2:fa:8f:d1: 76:ec:9b:a0:45:c4:78:df:1a:1b:b1:e0:e0:4f:1e: 47:52:e9:b0:23:50:5c:3f:c8:a9:72:53:78:7d:7a: af:c6:d2:93:4c:c3:eb:73:dd:e9:c9:62:e3:5a:e6: 35:67:e5:cd:7e:ef:27:ab:1a:dd:6f:98:af:0c:5c: b9:ca:a6:37:52:28:24:9c:92:12:81:3c:86:51:f1: 3a:17:b1:e2:0a:f3:04:91:b2:c9:f5:b3:54:b4:64: d7:38:46:25:bb:87:d4:ce:76:2d:8e:3e:20:bd:a2: 08:92:05:e0:1b:6e:40:95:2b:dd:61:fe:78:41:8f: 29:d4:30:08:0f:48:69:5a:79:2a:91:09:85:54:a0: 7c:b2:15:f4:9e:a9:ea:dc:ec:f1:2f:71:58:79:2d: 25:dc:17:b8:c6:aa:bc:3c:88:6d:0e:27:9a:64:cd: 7e:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:72:C2:39:69:6B:94:CD:69:63:3B:54:A2:D5:88:03:C4:B6:53:9C X509v3 Authority Key Identifier: keyid:99:23:D1:04:0C:05:F0:99:FB:4F:ED:B4:98:BB:4A:14:83:27:98:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSPRBAwF8Jn7T-20mLtKFIMnmPo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/4d05cf-63b0-46af-9e2c-206e82336cde/1/mSPRBAwF8Jn7T-20mLtKFIMnmPo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/4d05cf-63b0-46af-9e2c-206e82336cde/1/mSPRBAwF8Jn7T-20mLtKFIMnmPo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:e0:70:c9:69:3a:94:46:4a:e3:4a:88:d6:3f:3f:a5:0d:63: 27:08:2c:df:ac:97:0d:72:45:33:d2:dd:cb:cd:9b:ea:e0:16: d7:b7:94:a9:9c:9a:ad:fd:f7:eb:27:2f:29:b6:37:65:48:7c: ce:87:1b:fa:59:5e:98:26:bb:48:a0:ac:51:b3:4e:83:e2:d2: 49:0e:4c:94:1b:21:aa:dd:79:c7:35:99:46:a2:ab:ed:15:8d: a8:03:20:62:ec:38:ac:ef:a2:5a:b5:12:1b:d7:ea:be:c3:4a: fd:1a:e4:b8:99:fc:25:d9:21:60:8f:32:47:84:e6:cf:09:01: b8:2f:65:f2:f3:b9:7c:97:3b:0a:22:2a:a4:3b:51:14:7b:ac: 9c:8c:5c:49:5a:b2:2b:ff:5c:d7:dc:73:9f:ef:18:5a:57:44: 3b:4b:f0:07:05:0d:96:aa:3b:eb:89:2f:c4:69:02:1a:2d:5e: 14:3c:c0:a9:e3:65:99:07:f6:39:a8:e3:a1:3e:91:b3:85:b7: 15:3b:b9:ab:64:d5:22:98:99:cb:9b:42:30:f8:5f:99:5a:3d: 61:ae:16:52:bd:7a:d0:69:8d:73:79:1d:f2:32:cb:1c:b2:e4: da:e1:62:91:20:59:fa:c3:05:d2:73:ed:4d:b1:c2:1b:24:39: f1:bf:13:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG7v2yp8twrcK0lCZjuR6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5MjNkMTA0MGMwNWYwOTlmYjRmZWRiNDk4YmI0YTE0ODMy Nzk4ZmEwHhcNMjUxMjA2MTAwMTEyWhcNMjUxMjA3MTAwMTEyWjAzMTEwLwYDVQQD Eyg3MzcyYzIzOTY5NmI5NGNkNjk2MzNiNTRhMmQ1ODgwM2M0YjY1MzljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgXsGWBWTvOSoh3Rcwyap7DYQRYL jFeKXPAEbE+5iLs5Zy5vFHv9F7OdA2qCLd6/ZA39cNXp0oHf99jTliaMy7He1GlO yAp22yHYxSFps1/f7Vn3ZOL6j9F27JugRcR43xobseDgTx5HUumwI1BcP8ipclN4 fXqvxtKTTMPrc93pyWLjWuY1Z+XNfu8nqxrdb5ivDFy5yqY3UigknJISgTyGUfE6 F7HiCvMEkbLJ9bNUtGTXOEYlu4fUznYtjj4gvaIIkgXgG25AlSvdYf54QY8p1DAI D0hpWnkqkQmFVKB8shX0nqnq3OzxL3FYeS0l3Be4xqq8PIhtDieaZM1+EQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHNywjlpa5TNaWM7VKLViAPEtlOcMB8GA1UdIwQY MBaAFJkj0QQMBfCZ+0/ttJi7ShSDJ5j6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVNQUkJBd0Y4Sm43VC0yMG1MdEtGSU1ubVBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy80ZDA1Y2YtNjNiMC00NmFmLTllMmMt MjA2ZTgyMzM2Y2RlLzEvbVNQUkJBd0Y4Sm43VC0yMG1MdEtGSU1ubVBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy80ZDA1Y2YtNjNiMC00NmFmLTllMmMtMjA2ZTgyMzM2Y2Rl LzEvbVNQUkJBd0Y4Sm43VC0yMG1MdEtGSU1ubVBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAOBwyWk6 lEZK40qI1j8/pQ1jJwgs36yXDXJFM9Ldy82b6uAW17eUqZyarf336ycvKbY3ZUh8 zocb+llemCa7SKCsUbNOg+LSSQ5MlBshqt15xzWZRqKr7RWNqAMgYuw4rO+iWrUS G9fqvsNK/RrkuJn8JdkhYI8yR4TmzwkBuC9l8vO5fJc7CiIqpDtRFHusnIxcSVqy K/9c19xzn+8YWldEO0vwBwUNlqo764kvxGkCGi1eFDzAqeNlmQf2OajjoT6Rs4W3 FTu5q2TVIpiZy5tCMPhfmVo9Ya4WUr160GmNc3kd8jLLHLLk2uFikSBZ+sMF0nPt TbHCGyQ58b8TCg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:14:20 2025 by rpki-client