This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.mft File: MksgMsOPsX9C-IMqTCHh8NXxnuA.mft (raw, json) Hash identifier: 7PBQyGP6D2v6bdbsTAQB51t8SJWDykJ/3SR2f47vI1s= Subject key identifier: 70:C0:F1:8E:1D:40:5D:F7:9D:50:1F:BF:3E:3D:1F:75:44:74:9C:85 Authority key identifier: 32:4B:20:32:C3:8F:B1:7F:42:F8:83:2A:4C:21:E1:F0:D5:F1:9E:E0 Certificate issuer: /CN=324b2032c38fb17f42f8832a4c21e1f0d5f19ee0 Certificate serial: 019B668C9FE221908E5094030C05FA7A5104 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MksgMsOPsX9C-IMqTCHh8NXxnuA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.mft Manifest number: 0443 Signing time: Sun 28 Dec 2025 20:00:50 +0000 Manifest this update: Sun 28 Dec 2025 20:00:50 +0000 Manifest next update: Mon 29 Dec 2025 20:00:50 +0000 Files and hashes: 1: 1-5n0KWaGHCDQYhl2aLfMjhVyMRI.roa (hash: KATmxtMp2ikC0o4XIGyQU9bJkWtT8ILR3+Dm38ZRLnA=) 2: MksgMsOPsX9C-IMqTCHh8NXxnuA.crl (hash: oD/XHi9z1rUvhw1DOIiFRq2QfMbfY4DdpKOKKSL5N7Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.crl rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.mft rsync://rpki.ripe.net/repository/DEFAULT/MksgMsOPsX9C-IMqTCHh8NXxnuA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 20:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:66:8c:9f:e2:21:90:8e:50:94:03:0c:05:fa:7a:51:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=324b2032c38fb17f42f8832a4c21e1f0d5f19ee0 Validity Not Before: Dec 28 20:00:50 2025 GMT Not After : Dec 29 20:00:50 2025 GMT Subject: CN=70c0f18e1d405df79d501fbf3e3d1f7544749c85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:30:ff:f8:b9:21:23:48:ec:36:bf:b3:64:7a: 08:de:21:06:ec:d7:6c:a5:62:cb:21:0c:da:d6:26: 58:ab:7a:6f:98:65:38:50:4b:a5:cb:aa:4d:f2:59: 75:1b:27:6b:f8:e0:60:0d:4d:5b:09:5a:26:16:73: 25:49:7b:b0:50:d7:7f:e0:5e:d2:2d:75:6e:b3:8c: 84:7b:4c:08:e9:31:59:8c:0f:17:c2:7e:4e:ec:d6: 5f:3f:3e:70:52:d8:6a:0c:d8:9f:4d:4c:72:5c:63: b5:99:43:c9:93:3a:b7:ac:ff:31:9b:83:93:06:f4: 1d:0c:7c:a7:16:13:e2:4c:9d:cc:c4:ab:c6:d8:f6: 80:4a:11:41:33:3f:a6:83:84:e8:4c:ce:74:01:ac: 45:08:12:7c:63:d0:57:35:7c:19:42:89:44:7a:18: 93:d0:e0:58:ad:47:e8:1e:6d:22:6b:31:5e:da:07: 99:37:37:d6:da:af:f6:51:00:c9:30:8b:e4:f9:1a: ef:7d:ed:79:02:9c:c2:50:33:68:69:99:a6:fe:44: 71:6a:48:5b:b5:e8:76:49:96:43:6d:38:c9:c3:b6: f0:7f:bb:42:f4:6f:d4:98:21:e2:f2:c2:d0:c1:c6: 96:7c:99:6a:24:b7:8b:e2:0e:f8:48:1f:2b:52:96: f0:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:C0:F1:8E:1D:40:5D:F7:9D:50:1F:BF:3E:3D:1F:75:44:74:9C:85 X509v3 Authority Key Identifier: keyid:32:4B:20:32:C3:8F:B1:7F:42:F8:83:2A:4C:21:E1:F0:D5:F1:9E:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MksgMsOPsX9C-IMqTCHh8NXxnuA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:5d:2e:86:5b:7a:ac:f3:66:68:28:27:fa:67:79:54:15:6a: 0b:c4:9a:7a:c7:0f:2c:7c:44:84:15:04:3f:a0:6c:ed:86:da: e1:51:31:ff:89:e1:3d:9e:d9:08:5c:87:e5:8d:ea:d1:b7:58: 90:93:94:43:76:7d:c0:e2:56:14:06:41:42:dc:4b:92:a5:38: b5:87:88:a4:c2:a8:24:78:30:85:c1:06:12:99:c4:c9:6d:ec: c2:0b:29:f7:52:91:02:d5:ec:a6:12:95:fe:83:c4:6d:96:2c: df:f3:58:d1:83:e6:68:4f:8f:9e:41:02:6d:ad:a4:d9:8a:3f: 68:5b:83:10:f6:70:a1:47:f6:23:0b:05:bf:de:39:69:92:df: 42:a8:2d:d0:19:48:a0:f8:cb:d7:91:ad:18:e9:2f:bc:32:bc: c8:92:4f:51:f7:c1:ca:09:8d:84:ec:fa:de:cc:f1:65:00:c9: f0:4d:b0:50:62:9e:a3:bf:e6:ec:7b:11:cb:4f:58:94:46:0c: 10:4c:1d:61:3b:b7:a5:a1:ff:49:85:1f:e7:db:fa:e4:f8:aa: d9:1c:c5:64:b7:37:a6:20:ad:71:5f:01:17:55:40:cd:02:91: 4e:17:c5:da:f5:a1:3b:86:9f:d8:9c:b5:51:a8:74:ab:59:85: 6e:48:35:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtmjJ/iIZCOUJQDDAX6elEEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNGIyMDMyYzM4ZmIxN2Y0MmY4ODMyYTRjMjFlMWYwZDVm MTllZTAwHhcNMjUxMjI4MjAwMDUwWhcNMjUxMjI5MjAwMDUwWjAzMTEwLwYDVQQD Eyg3MGMwZjE4ZTFkNDA1ZGY3OWQ1MDFmYmYzZTNkMWY3NTQ0NzQ5Yzg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2zD/+LkhI0jsNr+zZHoI3iEG7Nds pWLLIQza1iZYq3pvmGU4UEuly6pN8ll1Gydr+OBgDU1bCVomFnMlSXuwUNd/4F7S LXVus4yEe0wI6TFZjA8Xwn5O7NZfPz5wUthqDNifTUxyXGO1mUPJkzq3rP8xm4OT BvQdDHynFhPiTJ3MxKvG2PaAShFBMz+mg4ToTM50AaxFCBJ8Y9BXNXwZQolEehiT 0OBYrUfoHm0iazFe2geZNzfW2q/2UQDJMIvk+Rrvfe15ApzCUDNoaZmm/kRxakhb teh2SZZDbTjJw7bwf7tC9G/UmCHi8sLQwcaWfJlqJLeL4g74SB8rUpbwbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHDA8Y4dQF33nVAfvz49H3VEdJyFMB8GA1UdIwQY MBaAFDJLIDLDj7F/QviDKkwh4fDV8Z7gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWtzZ01zT1BzWDlDLUlNcVRDSGg4Tlh4bnVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC83OWViYzYtNjE3Yi00ZWE5LWI0NTMt NDM2MGVlMDZhMjJjLzEvTWtzZ01zT1BzWDlDLUlNcVRDSGg4Tlh4bnVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC83OWViYzYtNjE3Yi00ZWE5LWI0NTMtNDM2MGVlMDZhMjJj LzEvTWtzZ01zT1BzWDlDLUlNcVRDSGg4Tlh4bnVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiF0uhlt6 rPNmaCgn+md5VBVqC8SaescPLHxEhBUEP6Bs7Yba4VEx/4nhPZ7ZCFyH5Y3q0bdY kJOUQ3Z9wOJWFAZBQtxLkqU4tYeIpMKoJHgwhcEGEpnEyW3swgsp91KRAtXsphKV /oPEbZYs3/NY0YPmaE+PnkECba2k2Yo/aFuDEPZwoUf2IwsFv945aZLfQqgt0BlI oPjL15GtGOkvvDK8yJJPUffBygmNhOz63szxZQDJ8E2wUGKeo7/m7HsRy09YlEYM EEwdYTu3paH/SYUf59v65Piq2RzFZLc3piCtcV8BF1VAzQKRThfF2vWhO4af2Jy1 Uah0q1mFbkg1hw== -----END CERTIFICATE-----Generated at Mon Dec 29 00:47:37 2025 by rpki-client