This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d8679e-46bb-44f5-ba52-b52b3a236fa7/1/rMSPelkSBYjUFw6igV5q5RvmvP8.mft File: rMSPelkSBYjUFw6igV5q5RvmvP8.mft (raw, json) Hash identifier: FfXvmu/ZuHxlOWbPEw1M2fhlyoK5q10CeHrjdJSf1Oc= Subject key identifier: C2:A1:BE:A1:68:C0:E9:60:F2:2D:E8:DA:4D:4C:C3:11:32:11:1A:EC Authority key identifier: AC:C4:8F:7A:59:12:05:88:D4:17:0E:A2:81:5E:6A:E5:1B:E6:BC:FF Certificate issuer: /CN=acc48f7a59120588d4170ea2815e6ae51be6bcff Certificate serial: 019B3D5A096F2BD931E1ABDBB4781C26BFEE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rMSPelkSBYjUFw6igV5q5RvmvP8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d8679e-46bb-44f5-ba52-b52b3a236fa7/1/rMSPelkSBYjUFw6igV5q5RvmvP8.mft Manifest number: 081F Signing time: Sat 20 Dec 2025 20:01:09 +0000 Manifest this update: Sat 20 Dec 2025 20:01:09 +0000 Manifest next update: Sun 21 Dec 2025 20:01:09 +0000 Files and hashes: 1: 9aHsA3_Ynggs276_sCFsSz4MycM.roa (hash: qPhn5WBiWKeIsNs1cjOrwQopHwGcYtGq0upChF7kDvI=) 2: B0641shvDQ9p2BIgOLZHHAVjZSw.roa (hash: bvzmPdErYhIKPNksHZ+/ri9guEtRIMbmfasCvweNx4w=) 3: XrEnfRZ_aS_v253DnFB44a25MQg.roa (hash: cz7gfFsvOBuR8Jx82WCxw05R+M3PHvihU0+XIidI9k8=) 4: rMSPelkSBYjUFw6igV5q5RvmvP8.crl (hash: t9fs9FwisyjxTcIxnr1rLjMq2psWPDOhIOkICWC9aq4=) 5: sGNKOVYjDTSby3HV0d5UrQif03o.roa (hash: fEt1u0Pnd1OgLhD2ZLaC3l+U/rkH+wDu1pDtZ8ZNq+Q=) 6: xspPEiEQGiUUjQNMRrR4LTirJ8g.roa (hash: ij24ceO8VLn5TPnpgS1+UFG8iPy5YqTgJqLC4WCf/eM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d8679e-46bb-44f5-ba52-b52b3a236fa7/1/rMSPelkSBYjUFw6igV5q5RvmvP8.crl rsync://rpki.ripe.net/repository/DEFAULT/34/d8679e-46bb-44f5-ba52-b52b3a236fa7/1/rMSPelkSBYjUFw6igV5q5RvmvP8.mft rsync://rpki.ripe.net/repository/DEFAULT/rMSPelkSBYjUFw6igV5q5RvmvP8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:5a:09:6f:2b:d9:31:e1:ab:db:b4:78:1c:26:bf:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=acc48f7a59120588d4170ea2815e6ae51be6bcff Validity Not Before: Dec 20 20:01:09 2025 GMT Not After : Dec 21 20:01:09 2025 GMT Subject: CN=c2a1bea168c0e960f22de8da4d4cc31132111aec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:cc:2b:ea:86:68:51:16:cd:2c:87:63:ce:b0: 57:c1:52:4a:0e:02:c6:1d:b9:bd:36:05:79:39:0d: 9c:77:8e:b4:65:d9:4c:4d:4d:90:50:4e:7c:35:e4: 36:e1:2f:76:2e:c2:54:23:9a:34:63:82:5a:98:8c: 2f:35:7d:62:cc:b1:e7:bf:76:23:a4:37:8a:d2:d0: 6a:61:a7:16:70:c2:6f:97:6d:e5:87:99:c8:7d:61: 8d:aa:14:5c:1e:9a:ec:a9:8d:49:41:48:9b:0f:8b: c2:29:fc:33:7a:34:f2:8a:d9:88:98:dc:f1:e0:6a: 19:da:a3:b5:14:54:48:e2:b5:4b:8c:dd:5f:b7:dc: a6:91:fd:4f:61:41:7f:d9:e1:60:26:29:2f:7f:4c: 5a:8c:48:c7:db:60:81:c1:87:41:ac:4e:bb:9b:b7: fb:4e:0a:82:e3:d3:85:b1:e4:1d:dd:e1:42:32:d9: cc:07:f9:08:0a:69:33:cd:34:b9:f8:39:ca:f1:8b: c3:78:77:ec:28:bc:b3:f9:0f:ee:7a:e2:53:b5:71: c5:08:4c:37:c7:6d:50:be:f1:36:93:76:20:56:51: 34:79:52:ed:92:69:e4:6e:b4:55:ad:2c:5f:57:6a: fb:1e:e6:31:4f:1a:81:b8:32:01:c4:af:4f:1d:29: f6:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:A1:BE:A1:68:C0:E9:60:F2:2D:E8:DA:4D:4C:C3:11:32:11:1A:EC X509v3 Authority Key Identifier: keyid:AC:C4:8F:7A:59:12:05:88:D4:17:0E:A2:81:5E:6A:E5:1B:E6:BC:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMSPelkSBYjUFw6igV5q5RvmvP8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d8679e-46bb-44f5-ba52-b52b3a236fa7/1/rMSPelkSBYjUFw6igV5q5RvmvP8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d8679e-46bb-44f5-ba52-b52b3a236fa7/1/rMSPelkSBYjUFw6igV5q5RvmvP8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:df:57:32:fb:28:30:16:1c:f1:e1:e3:65:14:0e:e7:63:09: 80:41:90:c0:d9:2d:3e:eb:9f:9d:10:56:8e:7a:f2:49:4b:74: 25:b2:ec:cd:c3:6c:2c:14:73:fc:e1:e8:3a:80:f2:03:0c:7a: 60:8e:cc:8f:36:d7:ce:48:7c:6c:b3:ff:8f:42:cb:b0:c6:f8: df:f3:a1:3f:16:a3:6e:58:03:2e:b3:1e:da:fb:04:ec:b9:2f: 0e:e5:22:02:5a:4b:50:d0:89:df:7f:99:6c:49:5d:65:5c:d8: 6c:de:0e:ac:b0:b9:3e:65:1a:e3:81:f4:ce:6c:47:70:f6:28: 91:f0:53:af:74:50:b8:55:50:47:2f:49:02:25:79:04:c1:14: 88:11:68:32:03:87:fe:a6:e9:91:af:42:1f:d2:cd:03:94:80: bc:9a:73:a5:04:3f:13:21:b5:74:5a:1f:52:91:fa:de:00:9f: 72:0c:ed:04:05:d2:42:47:bb:b0:7b:8e:68:7f:e5:b0:27:01: d7:c3:66:12:9e:70:b0:15:8c:4f:25:c0:ea:fd:64:55:09:c8: 04:43:7b:61:04:ea:a6:5b:8a:ff:d2:b7:ff:6e:93:09:80:a9: d0:8c:4b:97:5e:e6:71:d9:42:12:0c:e1:97:92:c2:6e:85:81: 89:cf:0c:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WglvK9kx4avbtHgcJr/uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjYzQ4ZjdhNTkxMjA1ODhkNDE3MGVhMjgxNWU2YWU1MWJl NmJjZmYwHhcNMjUxMjIwMjAwMTA5WhcNMjUxMjIxMjAwMTA5WjAzMTEwLwYDVQQD EyhjMmExYmVhMTY4YzBlOTYwZjIyZGU4ZGE0ZDRjYzMxMTMyMTExYWVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocwr6oZoURbNLIdjzrBXwVJKDgLG Hbm9NgV5OQ2cd460ZdlMTU2QUE58NeQ24S92LsJUI5o0Y4JamIwvNX1izLHnv3Yj pDeK0tBqYacWcMJvl23lh5nIfWGNqhRcHprsqY1JQUibD4vCKfwzejTyitmImNzx 4GoZ2qO1FFRI4rVLjN1ft9ymkf1PYUF/2eFgJikvf0xajEjH22CBwYdBrE67m7f7 TgqC49OFseQd3eFCMtnMB/kICmkzzTS5+DnK8YvDeHfsKLyz+Q/ueuJTtXHFCEw3 x21QvvE2k3YgVlE0eVLtkmnkbrRVrSxfV2r7HuYxTxqBuDIBxK9PHSn2VwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMKhvqFowOlg8i3o2k1MwxEyERrsMB8GA1UdIwQY MBaAFKzEj3pZEgWI1BcOooFeauUb5rz/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvck1TUGVsa1NCWWpVRnc2aWdWNXE1UnZtdlA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kODY3OWUtNDZiYi00NGY1LWJhNTIt YjUyYjNhMjM2ZmE3LzEvck1TUGVsa1NCWWpVRnc2aWdWNXE1UnZtdlA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9kODY3OWUtNDZiYi00NGY1LWJhNTItYjUyYjNhMjM2ZmE3 LzEvck1TUGVsa1NCWWpVRnc2aWdWNXE1UnZtdlA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqt9XMvso MBYc8eHjZRQO52MJgEGQwNktPuufnRBWjnrySUt0JbLszcNsLBRz/OHoOoDyAwx6 YI7MjzbXzkh8bLP/j0LLsMb43/OhPxajblgDLrMe2vsE7LkvDuUiAlpLUNCJ33+Z bEldZVzYbN4OrLC5PmUa44H0zmxHcPYokfBTr3RQuFVQRy9JAiV5BMEUiBFoMgOH /qbpka9CH9LNA5SAvJpzpQQ/EyG1dFofUpH63gCfcgztBAXSQke7sHuOaH/lsCcB 18NmEp5wsBWMTyXA6v1kVQnIBEN7YQTqpluK/9K3/26TCYCp0IxLl17mcdlCEgzh l5LCboWBic8MDw== -----END CERTIFICATE-----Generated at Sun Dec 21 00:45:33 2025 by rpki-client