This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/9062e2-95ae-4656-b2ee-984a8eb51e45/1/Mss8BdaixRwv9S3Z3LnitVxASPk.mft File: Mss8BdaixRwv9S3Z3LnitVxASPk.mft (raw, json) Hash identifier: czLYrTKP7WuxTB8ZgFdhWrkbz0EpPh4JhnbIKVoWFsg= Subject key identifier: AF:3C:13:70:2E:49:87:07:65:03:5F:CD:EC:64:70:BF:60:54:9A:A7 Authority key identifier: 32:CB:3C:05:D6:A2:C5:1C:2F:F5:2D:D9:DC:B9:E2:B5:5C:40:48:F9 Certificate issuer: /CN=32cb3c05d6a2c51c2ff52dd9dcb9e2b55c4048f9 Certificate serial: 019B522A0EDF1AAC7EE4D82BA5E4A520FBDD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mss8BdaixRwv9S3Z3LnitVxASPk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/9062e2-95ae-4656-b2ee-984a8eb51e45/1/Mss8BdaixRwv9S3Z3LnitVxASPk.mft Manifest number: 1791 Signing time: Wed 24 Dec 2025 21:00:46 +0000 Manifest this update: Wed 24 Dec 2025 21:00:46 +0000 Manifest next update: Thu 25 Dec 2025 21:00:46 +0000 Files and hashes: 1: Mss8BdaixRwv9S3Z3LnitVxASPk.crl (hash: +mvLseyA0qbwTt8ziTcx8zMa5wz2M7ortDpNOGcXv6g=) 2: pkl1dG1Tn-y8sIzafCzQdaxLGO0.roa (hash: +t+HSalevZKgrBOwo+A1WYwHvxUsDh9dx8CrhAZYnCE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/9062e2-95ae-4656-b2ee-984a8eb51e45/1/Mss8BdaixRwv9S3Z3LnitVxASPk.crl rsync://rpki.ripe.net/repository/DEFAULT/33/9062e2-95ae-4656-b2ee-984a8eb51e45/1/Mss8BdaixRwv9S3Z3LnitVxASPk.mft rsync://rpki.ripe.net/repository/DEFAULT/Mss8BdaixRwv9S3Z3LnitVxASPk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:2a:0e:df:1a:ac:7e:e4:d8:2b:a5:e4:a5:20:fb:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32cb3c05d6a2c51c2ff52dd9dcb9e2b55c4048f9 Validity Not Before: Dec 24 21:00:46 2025 GMT Not After : Dec 25 21:00:46 2025 GMT Subject: CN=af3c13702e49870765035fcdec6470bf60549aa7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:d2:d2:85:82:27:b9:ba:0a:5c:aa:ec:e2:0b: bb:89:2c:3b:f8:cb:59:1c:e1:57:7b:e2:c0:1c:70: 4a:f1:b4:26:9d:e3:85:70:a0:21:32:29:ec:f9:4e: b6:1a:b5:68:36:63:56:2c:11:d7:60:42:a1:0e:3d: 6f:87:1e:0d:51:34:5a:84:a1:7e:b4:55:a9:23:eb: 4e:78:88:51:26:7a:13:89:81:32:c8:31:c7:cb:af: fd:72:f8:a6:ae:ea:0b:1e:b0:75:35:82:91:a2:a6: 42:dc:a5:ef:2e:e7:f9:1f:b6:24:55:25:83:19:4c: 24:53:ab:3e:d0:8a:fc:e2:31:27:28:4f:18:5c:cc: 11:cd:f9:9d:da:e1:ea:1a:a0:99:f0:d4:03:97:ac: dd:9d:65:06:50:fc:bf:68:5e:e4:f3:3a:47:c4:17: b1:0e:04:de:75:7e:a8:00:3d:e8:3f:3f:ad:f4:97: e4:de:6f:ac:79:45:41:fa:64:7e:4a:cf:1a:6a:ce: 87:5d:e4:18:b7:b8:c2:ba:a0:7e:1e:1d:7a:d3:0d: 17:48:e6:70:e7:c2:8b:7d:16:41:b1:c7:2e:72:5e: 25:8c:30:d3:ea:c4:be:6f:c3:8b:f9:9b:f7:71:5f: 5b:f0:a9:32:da:89:5f:4e:06:c6:37:c6:7d:84:f8: ae:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:3C:13:70:2E:49:87:07:65:03:5F:CD:EC:64:70:BF:60:54:9A:A7 X509v3 Authority Key Identifier: keyid:32:CB:3C:05:D6:A2:C5:1C:2F:F5:2D:D9:DC:B9:E2:B5:5C:40:48:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mss8BdaixRwv9S3Z3LnitVxASPk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/9062e2-95ae-4656-b2ee-984a8eb51e45/1/Mss8BdaixRwv9S3Z3LnitVxASPk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/9062e2-95ae-4656-b2ee-984a8eb51e45/1/Mss8BdaixRwv9S3Z3LnitVxASPk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:fb:1e:dd:2c:4a:11:f4:a0:32:ba:75:fa:88:d4:7d:d6:93: c8:03:84:bc:a7:fc:ae:39:9b:51:fc:00:b5:a0:76:6f:c5:2d: fd:5f:55:41:17:be:db:9d:cf:3f:09:97:38:12:52:d2:16:81: 48:b1:75:a6:de:02:b9:a8:c9:20:44:fb:fc:48:f8:77:04:32: 93:05:07:a9:07:74:40:aa:bd:e6:75:67:f9:b6:5e:f8:b1:74: 41:24:fe:7e:0f:2b:d7:23:96:ea:97:70:e3:e7:6e:02:b6:09: ae:8e:98:b9:9a:24:52:28:32:57:20:28:d7:54:1f:7c:21:b0: c5:86:3c:1e:5e:5f:9f:ac:00:f5:e7:d2:b9:05:99:55:5c:9a: 5c:09:19:2e:af:50:b7:5d:d2:5f:44:5a:c7:49:ca:61:c9:fb: bc:62:78:28:02:49:8e:f2:f3:84:09:a3:6d:f0:fa:4f:18:bf: ea:fc:1b:6b:ae:84:db:1a:83:f1:67:4f:1b:ff:f9:72:b0:35: 2e:fa:6c:1a:a6:4a:38:7e:9e:2a:ce:34:1d:8d:b6:16:c1:d0: 3a:4d:05:04:45:12:48:cd:de:79:dc:bd:da:70:03:d0:b3:13: 3f:62:30:ad:d7:4c:e3:58:7f:9e:8d:69:b2:ce:2a:bf:09:e7: e9:d9:10:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSKg7fGqx+5NgrpeSlIPvdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyY2IzYzA1ZDZhMmM1MWMyZmY1MmRkOWRjYjllMmI1NWM0 MDQ4ZjkwHhcNMjUxMjI0MjEwMDQ2WhcNMjUxMjI1MjEwMDQ2WjAzMTEwLwYDVQQD EyhhZjNjMTM3MDJlNDk4NzA3NjUwMzVmY2RlYzY0NzBiZjYwNTQ5YWE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgtLShYInuboKXKrs4gu7iSw7+MtZ HOFXe+LAHHBK8bQmneOFcKAhMins+U62GrVoNmNWLBHXYEKhDj1vhx4NUTRahKF+ tFWpI+tOeIhRJnoTiYEyyDHHy6/9cvimruoLHrB1NYKRoqZC3KXvLuf5H7YkVSWD GUwkU6s+0Ir84jEnKE8YXMwRzfmd2uHqGqCZ8NQDl6zdnWUGUPy/aF7k8zpHxBex DgTedX6oAD3oPz+t9Jfk3m+seUVB+mR+Ss8aas6HXeQYt7jCuqB+Hh160w0XSOZw 58KLfRZBsccucl4ljDDT6sS+b8OL+Zv3cV9b8Kky2olfTgbGN8Z9hPiuWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK88E3AuSYcHZQNfzexkcL9gVJqnMB8GA1UdIwQY MBaAFDLLPAXWosUcL/Ut2dy54rVcQEj5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXNzOEJkYWl4Und2OVMzWjNMbml0VnhBU1BrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy85MDYyZTItOTVhZS00NjU2LWIyZWUt OTg0YThlYjUxZTQ1LzEvTXNzOEJkYWl4Und2OVMzWjNMbml0VnhBU1BrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy85MDYyZTItOTVhZS00NjU2LWIyZWUtOTg0YThlYjUxZTQ1 LzEvTXNzOEJkYWl4Und2OVMzWjNMbml0VnhBU1BrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIfse3SxK EfSgMrp1+ojUfdaTyAOEvKf8rjmbUfwAtaB2b8Ut/V9VQRe+253PPwmXOBJS0haB SLF1pt4CuajJIET7/Ej4dwQykwUHqQd0QKq95nVn+bZe+LF0QST+fg8r1yOW6pdw 4+duArYJro6YuZokUigyVyAo11QffCGwxYY8Hl5fn6wA9efSuQWZVVyaXAkZLq9Q t13SX0Rax0nKYcn7vGJ4KAJJjvLzhAmjbfD6Txi/6vwba66E2xqD8WdPG//5crA1 LvpsGqZKOH6eKs40HY22FsHQOk0FBEUSSM3eedy92nAD0LMTP2IwrddM41h/no1p ss4qvwnn6dkQEw== -----END CERTIFICATE-----Generated at Thu Dec 25 01:19:23 2025 by rpki-client