This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/416aaf-8602-4196-b51d-41d087b3828b/1/MsAnS8F_nHXNP8EPi1gloZOCq08.mft File: MsAnS8F_nHXNP8EPi1gloZOCq08.mft (raw, json) Hash identifier: qsNrfZdAE2QOxSMZYAs3r7Z19wcf/S/aUpjW6gRBB/E= Subject key identifier: 1C:6C:6B:87:21:36:52:17:D2:E1:78:0A:A4:13:1C:04:7C:47:65:1A Authority key identifier: 32:C0:27:4B:C1:7F:9C:75:CD:3F:C1:0F:8B:58:25:A1:93:82:AB:4F Certificate issuer: /CN=32c0274bc17f9c75cd3fc10f8b5825a19382ab4f Certificate serial: 019AF2ADD06A16C5DF3935745276969557C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MsAnS8F_nHXNP8EPi1gloZOCq08.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/416aaf-8602-4196-b51d-41d087b3828b/1/MsAnS8F_nHXNP8EPi1gloZOCq08.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 08:01:08 +0000 Manifest this update: Sat 06 Dec 2025 08:01:08 +0000 Manifest next update: Sun 07 Dec 2025 08:01:08 +0000 Files and hashes: 1: MsAnS8F_nHXNP8EPi1gloZOCq08.crl (hash: pLMsanWmynJqzV28ELfUae93gFo1zXdFcWaNrJIajz8=) 2: TOIzNWX91Fklg3hNSjJLHCHMbgY.roa (hash: vI/ydx27fqpwXcKYk7mipA2wZEP7zEBHHuwYkt7nRa0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/416aaf-8602-4196-b51d-41d087b3828b/1/MsAnS8F_nHXNP8EPi1gloZOCq08.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/416aaf-8602-4196-b51d-41d087b3828b/1/MsAnS8F_nHXNP8EPi1gloZOCq08.mft rsync://rpki.ripe.net/repository/DEFAULT/MsAnS8F_nHXNP8EPi1gloZOCq08.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:d0:6a:16:c5:df:39:35:74:52:76:96:95:57:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32c0274bc17f9c75cd3fc10f8b5825a19382ab4f Validity Not Before: Dec 6 08:01:08 2025 GMT Not After : Dec 7 08:01:08 2025 GMT Subject: CN=1c6c6b8721365217d2e1780aa4131c047c47651a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:9f:6a:65:15:dc:6c:22:6c:1f:32:7e:50:ff: 0c:ef:6a:dc:24:01:91:29:e0:61:a0:e0:31:e2:af: 52:32:2d:e7:43:3d:62:e4:49:28:55:80:49:f4:c8: c4:74:66:f7:28:dd:13:5d:57:eb:5f:84:56:27:62: 0a:5d:e0:8d:f0:22:c1:fe:30:b9:00:99:e1:a7:6f: f4:2c:12:bf:25:1b:ce:35:3a:ca:58:f9:b2:c2:30: f4:a6:06:f9:b4:12:58:13:ee:53:d2:a9:8d:95:06: 93:1c:40:de:b0:4e:46:99:27:63:34:5e:c7:c4:f9: 64:30:a7:fb:2c:dc:53:af:58:a4:51:51:60:49:56: 51:b0:1f:75:32:17:15:59:f1:db:43:21:4b:e2:f0: bd:a8:2d:47:03:4d:15:a3:55:91:e1:87:f3:ec:1b: 6d:03:d5:da:a4:59:46:01:b0:6d:cb:62:37:50:45: 57:a8:55:63:1a:50:e0:40:04:cb:bb:c7:55:0e:11: d4:70:f4:f8:2c:e5:12:7d:2f:87:8a:c2:11:e1:34: b7:ff:5a:07:e5:c8:9c:56:9c:90:b5:d2:0c:27:17: d8:d1:ff:2d:6b:4a:ea:8b:a2:91:d8:13:ef:e6:3f: 9e:9d:ad:7d:57:65:a9:33:bd:07:8a:d4:76:08:5f: d1:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:6C:6B:87:21:36:52:17:D2:E1:78:0A:A4:13:1C:04:7C:47:65:1A X509v3 Authority Key Identifier: keyid:32:C0:27:4B:C1:7F:9C:75:CD:3F:C1:0F:8B:58:25:A1:93:82:AB:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MsAnS8F_nHXNP8EPi1gloZOCq08.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/416aaf-8602-4196-b51d-41d087b3828b/1/MsAnS8F_nHXNP8EPi1gloZOCq08.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/416aaf-8602-4196-b51d-41d087b3828b/1/MsAnS8F_nHXNP8EPi1gloZOCq08.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:49:fd:2d:01:1b:be:b0:22:f5:c5:45:52:4a:8d:4b:33:0e: 79:be:f1:64:cc:a3:0f:11:7c:a3:01:bc:e2:a0:76:99:7b:1b: 4b:e3:10:21:a7:67:65:8e:58:94:97:e0:9c:21:b3:d0:27:cb: 54:bb:00:84:44:98:5c:9f:7a:6c:10:ab:ae:d7:a3:5c:00:a3: e1:6e:b4:89:87:7b:94:88:eb:7c:e3:6d:86:31:ed:93:7f:37: 6f:a6:e8:fb:8e:e7:70:6e:eb:5b:c7:84:1d:20:1f:23:d7:de: 5c:19:6d:c7:57:8b:c6:e2:a9:07:da:50:5a:c7:d0:be:ff:87: 08:2f:2b:85:91:0d:d2:05:9f:be:8f:9e:b5:91:53:c8:75:18: b4:31:ac:88:d5:c4:1c:1a:7b:bf:e2:34:45:d6:ab:e0:aa:ba: 47:5c:3b:d8:dc:e5:93:5e:85:1f:1f:0f:b9:80:61:05:df:da: 70:63:20:e1:f9:9b:f2:82:6a:9e:f5:8a:be:7e:a4:fe:39:f4: 1d:32:47:3e:1e:7e:cd:0d:78:cc:56:90:1c:13:4b:d9:b8:bc: b9:48:e0:f5:86:6c:6b:1b:21:f6:33:c0:c4:26:6d:ee:d8:1e: 4f:94:da:2d:42:bb:1d:c8:cd:53:1f:9a:64:71:c9:ff:dd:c5: 89:8e:6f:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrdBqFsXfOTV0UnaWlVfBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyYzAyNzRiYzE3ZjljNzVjZDNmYzEwZjhiNTgyNWExOTM4 MmFiNGYwHhcNMjUxMjA2MDgwMTA4WhcNMjUxMjA3MDgwMTA4WjAzMTEwLwYDVQQD EygxYzZjNmI4NzIxMzY1MjE3ZDJlMTc4MGFhNDEzMWMwNDdjNDc2NTFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZ9qZRXcbCJsHzJ+UP8M72rcJAGR KeBhoOAx4q9SMi3nQz1i5EkoVYBJ9MjEdGb3KN0TXVfrX4RWJ2IKXeCN8CLB/jC5 AJnhp2/0LBK/JRvONTrKWPmywjD0pgb5tBJYE+5T0qmNlQaTHEDesE5GmSdjNF7H xPlkMKf7LNxTr1ikUVFgSVZRsB91MhcVWfHbQyFL4vC9qC1HA00Vo1WR4Yfz7Btt A9XapFlGAbBty2I3UEVXqFVjGlDgQATLu8dVDhHUcPT4LOUSfS+HisIR4TS3/1oH 5cicVpyQtdIMJxfY0f8ta0rqi6KR2BPv5j+ena19V2WpM70HitR2CF/RfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBxsa4chNlIX0uF4CqQTHAR8R2UaMB8GA1UdIwQY MBaAFDLAJ0vBf5x1zT/BD4tYJaGTgqtPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXNBblM4Rl9uSFhOUDhFUGkxZ2xvWk9DcTA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS80MTZhYWYtODYwMi00MTk2LWI1MWQt NDFkMDg3YjM4MjhiLzEvTXNBblM4Rl9uSFhOUDhFUGkxZ2xvWk9DcTA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS80MTZhYWYtODYwMi00MTk2LWI1MWQtNDFkMDg3YjM4Mjhi LzEvTXNBblM4Rl9uSFhOUDhFUGkxZ2xvWk9DcTA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFEn9LQEb vrAi9cVFUkqNSzMOeb7xZMyjDxF8owG84qB2mXsbS+MQIadnZY5YlJfgnCGz0CfL VLsAhESYXJ96bBCrrtejXACj4W60iYd7lIjrfONthjHtk383b6bo+47ncG7rW8eE HSAfI9feXBltx1eLxuKpB9pQWsfQvv+HCC8rhZEN0gWfvo+etZFTyHUYtDGsiNXE HBp7v+I0Rdar4Kq6R1w72Nzlk16FHx8PuYBhBd/acGMg4fmb8oJqnvWKvn6k/jn0 HTJHPh5+zQ14zFaQHBNL2bi8uUjg9YZsaxsh9jPAxCZt7tgeT5TaLUK7HcjNUx+a ZHHJ/93FiY5vLQ== -----END CERTIFICATE-----Generated at Sat Dec 6 15:00:53 2025 by rpki-client