This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/b60b69-2e42-483d-8e71-b7428487ab3d/1/MSJY70M2DehMJcJvn7V6t-ePkWI.mft File: MSJY70M2DehMJcJvn7V6t-ePkWI.mft (raw, json) Hash identifier: xQpppMQ/lhvKE+yxb/xGZgOyVoTODvE8EkoUZ0aX+vU= Subject key identifier: 02:BC:A8:B0:35:39:2F:4E:38:8A:DE:EF:91:1D:10:AD:FB:05:55:16 Authority key identifier: 31:22:58:EF:43:36:0D:E8:4C:25:C2:6F:9F:B5:7A:B7:E7:8F:91:62 Certificate issuer: /CN=312258ef43360de84c25c26f9fb57ab7e78f9162 Certificate serial: 019AF163EE1BB9D87BA1538FFF2362C29D9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MSJY70M2DehMJcJvn7V6t-ePkWI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/b60b69-2e42-483d-8e71-b7428487ab3d/1/MSJY70M2DehMJcJvn7V6t-ePkWI.mft Manifest number: 33 Signing time: Sat 06 Dec 2025 02:00:49 +0000 Manifest this update: Sat 06 Dec 2025 02:00:49 +0000 Manifest next update: Sun 07 Dec 2025 02:00:49 +0000 Files and hashes: 1: 95ojNrCRHrkw3Lw0A9w7F9KN3K4.roa (hash: sfSKA+1SpVw/MDk+oNTr+sF8VTzQjSJ1fbmRWnJ6h44=) 2: MSJY70M2DehMJcJvn7V6t-ePkWI.crl (hash: FB/eYoKP0BfweQ8yw1aPzEoWQIr9MNIReyE6EJFnH28=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/b60b69-2e42-483d-8e71-b7428487ab3d/1/MSJY70M2DehMJcJvn7V6t-ePkWI.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/b60b69-2e42-483d-8e71-b7428487ab3d/1/MSJY70M2DehMJcJvn7V6t-ePkWI.mft rsync://rpki.ripe.net/repository/DEFAULT/MSJY70M2DehMJcJvn7V6t-ePkWI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:ee:1b:b9:d8:7b:a1:53:8f:ff:23:62:c2:9d:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=312258ef43360de84c25c26f9fb57ab7e78f9162 Validity Not Before: Dec 6 02:00:49 2025 GMT Not After : Dec 7 02:00:49 2025 GMT Subject: CN=02bca8b035392f4e388adeef911d10adfb055516 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:b8:44:3b:58:b9:19:ac:e4:2f:c3:34:57:29: 40:9c:f3:9b:bf:c1:83:34:04:e8:e3:38:5c:f7:af: 37:d0:54:7c:f9:8c:28:82:69:7d:6b:1c:71:a3:ee: ba:21:2b:27:7e:04:69:aa:a6:e1:7d:46:60:19:75: 09:e2:be:6c:a8:ad:af:7c:33:f1:4f:02:ec:11:26: ca:6c:30:78:2f:a2:94:43:3e:33:ec:a8:79:96:26: 59:c6:e8:29:9c:80:7f:b0:06:ee:3d:9f:eb:7d:5e: ee:11:e7:6e:4c:05:ad:52:3f:ff:7f:fa:f8:ae:20: a3:4d:a4:0e:fd:f4:18:18:aa:d3:59:90:be:97:3a: c2:3f:3d:d6:ff:b9:90:41:cb:b8:bb:f1:e1:2e:13: 37:61:48:35:d8:d3:9f:38:97:86:63:79:a7:61:0c: 07:25:93:95:9a:bf:8c:46:0f:a8:e5:e0:bf:08:72: f1:7e:d2:83:a5:8f:9f:38:bd:62:ca:88:6a:9d:03: 4b:70:b0:4c:c3:cc:0e:93:53:d6:3c:b3:9f:41:0a: 40:c1:9a:3f:8a:e1:3e:70:89:0e:81:0e:76:fe:59: a7:a9:0c:c3:1b:0e:4d:96:3b:2c:58:2b:9e:49:b2: db:81:c5:06:8f:09:12:66:13:95:32:a6:24:b7:8f: 5f:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:BC:A8:B0:35:39:2F:4E:38:8A:DE:EF:91:1D:10:AD:FB:05:55:16 X509v3 Authority Key Identifier: keyid:31:22:58:EF:43:36:0D:E8:4C:25:C2:6F:9F:B5:7A:B7:E7:8F:91:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MSJY70M2DehMJcJvn7V6t-ePkWI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b60b69-2e42-483d-8e71-b7428487ab3d/1/MSJY70M2DehMJcJvn7V6t-ePkWI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b60b69-2e42-483d-8e71-b7428487ab3d/1/MSJY70M2DehMJcJvn7V6t-ePkWI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:f5:f5:1c:f5:e2:57:23:3b:b3:6a:2f:96:97:5a:e0:58:6b: 44:70:6f:99:f1:82:8a:a3:64:35:af:b8:ff:4d:c7:54:fb:e8: cc:37:cb:26:74:f9:6f:04:79:4b:06:37:4f:1b:ac:85:9b:a0: 47:30:3d:ee:ef:b1:6a:8d:4d:a5:d5:e3:f8:3c:95:86:df:80: 40:17:da:69:85:2b:5b:d6:6c:4c:27:8b:98:e1:31:c7:53:9a: c1:8c:70:16:06:87:9c:de:05:ab:e9:48:3e:65:34:a7:5c:37: e3:8d:82:d0:c8:59:00:cc:53:b8:aa:45:89:44:74:8a:96:79: e0:90:7e:e2:06:25:78:1d:06:7f:a7:4b:93:08:17:f8:25:fd: aa:d1:02:dd:ab:23:75:10:e3:45:7e:b6:ed:66:c2:6b:b0:6d: 31:ff:02:e7:c8:a8:04:63:77:4a:5b:d0:9f:bb:f7:46:4e:a1: 85:84:00:a5:32:d0:3c:ef:26:77:55:6f:d9:97:fb:d8:13:ae: d0:b3:1a:bf:d9:cd:30:e7:d7:81:8b:20:e2:37:14:e2:23:2e: b3:e2:06:7d:ab:51:6d:05:08:d7:a8:07:77:c4:e8:9e:92:2e: 9c:6d:71:4f:54:db:95:0f:30:fa:5d:a6:25:c1:af:c8:79:08: d9:3b:3a:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY+4budh7oVOP/yNiwp2eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxMjI1OGVmNDMzNjBkZTg0YzI1YzI2ZjlmYjU3YWI3ZTc4 ZjkxNjIwHhcNMjUxMjA2MDIwMDQ5WhcNMjUxMjA3MDIwMDQ5WjAzMTEwLwYDVQQD EygwMmJjYThiMDM1MzkyZjRlMzg4YWRlZWY5MTFkMTBhZGZiMDU1NTE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbhEO1i5GazkL8M0VylAnPObv8GD NATo4zhc96830FR8+Ywogml9axxxo+66ISsnfgRpqqbhfUZgGXUJ4r5sqK2vfDPx TwLsESbKbDB4L6KUQz4z7Kh5liZZxugpnIB/sAbuPZ/rfV7uEeduTAWtUj//f/r4 riCjTaQO/fQYGKrTWZC+lzrCPz3W/7mQQcu4u/HhLhM3YUg12NOfOJeGY3mnYQwH JZOVmr+MRg+o5eC/CHLxftKDpY+fOL1iyohqnQNLcLBMw8wOk1PWPLOfQQpAwZo/ iuE+cIkOgQ52/lmnqQzDGw5NljssWCueSbLbgcUGjwkSZhOVMqYkt49fGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAK8qLA1OS9OOIre75EdEK37BVUWMB8GA1UdIwQY MBaAFDEiWO9DNg3oTCXCb5+1erfnj5FiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVNKWTcwTTJEZWhNSmNKdm43VjZ0LWVQa1dJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9iNjBiNjktMmU0Mi00ODNkLThlNzEt Yjc0Mjg0ODdhYjNkLzEvTVNKWTcwTTJEZWhNSmNKdm43VjZ0LWVQa1dJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9iNjBiNjktMmU0Mi00ODNkLThlNzEtYjc0Mjg0ODdhYjNk LzEvTVNKWTcwTTJEZWhNSmNKdm43VjZ0LWVQa1dJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOfX1HPXi VyM7s2ovlpda4FhrRHBvmfGCiqNkNa+4/03HVPvozDfLJnT5bwR5SwY3TxushZug RzA97u+xao1NpdXj+DyVht+AQBfaaYUrW9ZsTCeLmOExx1OawYxwFgaHnN4Fq+lI PmU0p1w3442C0MhZAMxTuKpFiUR0ipZ54JB+4gYleB0Gf6dLkwgX+CX9qtEC3asj dRDjRX627WbCa7BtMf8C58ioBGN3SlvQn7v3Rk6hhYQApTLQPO8md1Vv2Zf72BOu 0LMav9nNMOfXgYsg4jcU4iMus+IGfatRbQUI16gHd8TonpIunG1xT1TblQ8w+l2m JcGvyHkI2Ts6Bg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:02:43 2025 by rpki-client