This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/2d9929-4eff-4798-a538-c018bd7ed480/1/mSi4EuLp9HLux9Iz9gSvJj6FDzE.mft File: mSi4EuLp9HLux9Iz9gSvJj6FDzE.mft (raw, json) Hash identifier: Nn+OeK3RoRxtnrOLqIy+Mq1xhxXsZwLwk08vSjfR304= Subject key identifier: 10:8E:70:73:14:35:95:BB:3A:01:BE:CC:D5:6E:A6:CC:BC:C0:81:46 Authority key identifier: 99:28:B8:12:E2:E9:F4:72:EE:C7:D2:33:F6:04:AF:26:3E:85:0F:31 Certificate issuer: /CN=9928b812e2e9f472eec7d233f604af263e850f31 Certificate serial: 019B3E6C23B582A4F1349FD13E15D9F85CAA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSi4EuLp9HLux9Iz9gSvJj6FDzE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/2d9929-4eff-4798-a538-c018bd7ed480/1/mSi4EuLp9HLux9Iz9gSvJj6FDzE.mft Manifest number: 0CC1 Signing time: Sun 21 Dec 2025 01:00:32 +0000 Manifest this update: Sun 21 Dec 2025 01:00:32 +0000 Manifest next update: Mon 22 Dec 2025 01:00:32 +0000 Files and hashes: 1: mSi4EuLp9HLux9Iz9gSvJj6FDzE.crl (hash: bOyYCDKXalkcRoCaIw+ACcelMg4TSaApXU6jtFmWL8Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/2d9929-4eff-4798-a538-c018bd7ed480/1/mSi4EuLp9HLux9Iz9gSvJj6FDzE.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/2d9929-4eff-4798-a538-c018bd7ed480/1/mSi4EuLp9HLux9Iz9gSvJj6FDzE.mft rsync://rpki.ripe.net/repository/DEFAULT/mSi4EuLp9HLux9Iz9gSvJj6FDzE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:23:b5:82:a4:f1:34:9f:d1:3e:15:d9:f8:5c:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9928b812e2e9f472eec7d233f604af263e850f31 Validity Not Before: Dec 21 01:00:32 2025 GMT Not After : Dec 22 01:00:32 2025 GMT Subject: CN=108e7073143595bb3a01beccd56ea6ccbcc08146 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:1f:5c:1b:36:76:94:d5:98:3e:d1:9e:7d:ef: 60:8a:0f:c3:59:65:43:30:d7:0e:1d:70:b7:94:e0: cb:b0:3b:df:66:d1:66:ba:11:ee:a6:ac:be:18:b1: b2:f7:29:68:99:f5:16:f2:3e:8b:76:00:dd:0a:18: cf:ca:fb:fb:27:66:af:e9:a1:55:18:47:f1:ed:a7: ea:f9:61:71:b5:eb:34:8a:cd:78:19:19:54:e0:70: 88:c4:cd:37:57:bb:bd:73:43:ba:fe:9d:29:65:f7: e1:0c:5c:0e:53:3b:7d:45:5f:11:dd:64:51:ac:07: 87:51:c2:0b:91:9f:71:d2:59:a0:cb:f0:e5:54:7a: ac:f5:e2:79:86:0b:e7:b7:ea:ae:a6:b0:e5:c9:86: 17:9a:1a:de:7e:41:8b:2b:90:30:21:f5:55:82:b0: 49:60:90:a5:b0:bd:85:f7:01:fb:9c:3a:2b:5c:e3: 51:7b:eb:1c:50:33:2b:e2:4d:11:05:04:b8:fe:a4: 4e:0b:e7:ab:71:5e:80:a8:2d:8c:4a:1f:cf:f3:a6: 31:f3:32:3f:6c:ad:85:fe:ce:f4:b8:5d:62:d4:ed: 68:60:b6:45:8a:d6:a3:ea:d8:61:f1:ea:1f:59:37: 6d:b6:8c:2d:1b:25:0b:7b:84:e6:49:0b:c0:c8:94: c8:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:8E:70:73:14:35:95:BB:3A:01:BE:CC:D5:6E:A6:CC:BC:C0:81:46 X509v3 Authority Key Identifier: keyid:99:28:B8:12:E2:E9:F4:72:EE:C7:D2:33:F6:04:AF:26:3E:85:0F:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSi4EuLp9HLux9Iz9gSvJj6FDzE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/2d9929-4eff-4798-a538-c018bd7ed480/1/mSi4EuLp9HLux9Iz9gSvJj6FDzE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/2d9929-4eff-4798-a538-c018bd7ed480/1/mSi4EuLp9HLux9Iz9gSvJj6FDzE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:89:72:ca:d4:9d:5d:a8:1a:8b:81:8d:95:9a:fc:cd:7c:28: 53:41:27:94:da:a9:8c:63:a0:6d:ba:f3:00:7e:dd:63:91:9d: b8:2f:7f:20:7a:48:a2:b5:b2:04:ed:0e:d1:5e:67:6e:70:33: 11:5c:ad:40:20:0f:d7:24:e8:d6:be:cf:13:1d:17:ee:92:df: 3f:fb:75:d7:d0:31:cf:da:38:1d:22:48:62:a0:99:67:5b:b3: f5:38:d9:78:da:f8:a6:2d:a6:70:e4:a7:1c:3c:a9:c7:dc:4c: 27:ed:9a:b5:43:06:b5:37:90:6d:9e:f0:40:a8:03:3d:86:fe: 17:07:31:65:82:9a:b4:91:2e:cc:06:6f:fb:0a:81:ec:c4:f4: a7:db:af:de:5a:e1:8b:9c:a5:d0:ef:b6:40:c3:65:41:ad:67: ff:da:89:cd:f5:31:1c:d3:2b:e2:4e:ae:aa:32:9b:e1:92:db: a9:7a:76:7a:ac:fa:f1:3a:ad:ab:79:6e:2a:f0:46:b8:cc:e2: 0c:f9:9c:9a:ed:eb:45:06:98:2e:64:22:99:fd:62:f7:51:3a: 88:53:77:71:82:91:02:e4:36:2e:f1:08:69:27:a6:1e:bc:12: db:4d:4a:38:00:f7:7f:ad:bd:d9:b9:33:89:6d:ed:dd:1e:32: d5:a8:8e:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bCO1gqTxNJ/RPhXZ+FyqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5MjhiODEyZTJlOWY0NzJlZWM3ZDIzM2Y2MDRhZjI2M2U4 NTBmMzEwHhcNMjUxMjIxMDEwMDMyWhcNMjUxMjIyMDEwMDMyWjAzMTEwLwYDVQQD EygxMDhlNzA3MzE0MzU5NWJiM2EwMWJlY2NkNTZlYTZjY2JjYzA4MTQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApx9cGzZ2lNWYPtGefe9gig/DWWVD MNcOHXC3lODLsDvfZtFmuhHupqy+GLGy9ylomfUW8j6LdgDdChjPyvv7J2av6aFV GEfx7afq+WFxtes0is14GRlU4HCIxM03V7u9c0O6/p0pZffhDFwOUzt9RV8R3WRR rAeHUcILkZ9x0lmgy/DlVHqs9eJ5hgvnt+quprDlyYYXmhrefkGLK5AwIfVVgrBJ YJClsL2F9wH7nDorXONRe+scUDMr4k0RBQS4/qROC+ercV6AqC2MSh/P86Yx8zI/ bK2F/s70uF1i1O1oYLZFitaj6thh8eofWTdttowtGyULe4TmSQvAyJTIEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBCOcHMUNZW7OgG+zNVupsy8wIFGMB8GA1UdIwQY MBaAFJkouBLi6fRy7sfSM/YEryY+hQ8xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVNpNEV1THA5SEx1eDlJejlnU3ZKajZGRHpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi8yZDk5MjktNGVmZi00Nzk4LWE1Mzgt YzAxOGJkN2VkNDgwLzEvbVNpNEV1THA5SEx1eDlJejlnU3ZKajZGRHpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi8yZDk5MjktNGVmZi00Nzk4LWE1MzgtYzAxOGJkN2VkNDgw LzEvbVNpNEV1THA5SEx1eDlJejlnU3ZKajZGRHpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHYlyytSd Xagai4GNlZr8zXwoU0EnlNqpjGOgbbrzAH7dY5GduC9/IHpIorWyBO0O0V5nbnAz EVytQCAP1yTo1r7PEx0X7pLfP/t119Axz9o4HSJIYqCZZ1uz9TjZeNr4pi2mcOSn HDypx9xMJ+2atUMGtTeQbZ7wQKgDPYb+FwcxZYKatJEuzAZv+wqB7MT0p9uv3lrh i5yl0O+2QMNlQa1n/9qJzfUxHNMr4k6uqjKb4ZLbqXp2eqz68Tqtq3luKvBGuMzi DPmcmu3rRQaYLmQimf1i91E6iFN3cYKRAuQ2LvEIaSemHrwS201KOAD3f6292bkz iW3t3R4y1aiOYQ== -----END CERTIFICATE-----Generated at Sun Dec 21 05:20:52 2025 by rpki-client