This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft File: MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft (raw, json) Hash identifier: VMTEqHWhbddiAfTQRA0er/FU+c/tl/TNEPo/D6q+ud4= Subject key identifier: 73:7F:68:AE:EE:D8:22:76:CD:96:9C:CD:F4:57:EA:2A:CE:9B:8E:85 Authority key identifier: 32:C8:46:F1:91:43:32:30:D9:73:CB:C8:FD:A0:6B:60:2E:BF:CB:5B Certificate issuer: /CN=32c846f191433230d973cbc8fda06b602ebfcb5b Certificate serial: 019B3AFD7AE22A3908B1BCB51890657AC1D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MshG8ZFDMjDZc8vI_aBrYC6_y1s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft Manifest number: 112A Signing time: Sat 20 Dec 2025 09:00:49 +0000 Manifest this update: Sat 20 Dec 2025 09:00:49 +0000 Manifest next update: Sun 21 Dec 2025 09:00:49 +0000 Files and hashes: 1: MshG8ZFDMjDZc8vI_aBrYC6_y1s.crl (hash: gzoiwSXZygbISgZPDhMpBgXADJQ3m54SAb7+MW7Wgas=) 2: TBM-WxKs_JnUU_yCd07gs-SEpTM.roa (hash: ITKz1rUEY27fZS9fRQNAXZm00rkbdJk7GbuSl5tqJwg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.crl rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft rsync://rpki.ripe.net/repository/DEFAULT/MshG8ZFDMjDZc8vI_aBrYC6_y1s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fd:7a:e2:2a:39:08:b1:bc:b5:18:90:65:7a:c1:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32c846f191433230d973cbc8fda06b602ebfcb5b Validity Not Before: Dec 20 09:00:49 2025 GMT Not After : Dec 21 09:00:49 2025 GMT Subject: CN=737f68aeeed82276cd969ccdf457ea2ace9b8e85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a9:bf:f3:19:3a:48:99:0f:65:6c:69:68:66: 70:cd:62:b8:b8:1d:08:51:63:4a:2e:02:dc:ee:cf: bd:db:50:1f:21:ad:e3:2e:10:e6:66:85:9e:48:f5: eb:76:f2:3d:07:00:2f:40:32:47:3c:70:73:f6:41: fd:59:26:98:cb:f4:5c:b8:43:95:0d:71:b9:ac:a9: 0c:56:23:57:91:63:12:20:fc:7d:8e:79:9a:57:f3: be:39:d3:be:ef:19:eb:7a:46:2c:ee:53:12:3f:15: 32:bb:e8:44:f3:39:43:3c:8e:6b:23:12:b9:df:61: 7d:1a:e1:e1:03:1a:ab:1c:ae:5c:c5:72:db:05:62: 40:fa:57:72:dc:26:cd:de:20:1d:7b:df:84:00:89: d7:c8:90:66:13:a7:1c:3e:aa:da:f9:88:77:86:62: 5b:d4:87:17:fd:cd:82:c5:a3:46:67:f6:6d:13:58: 48:f8:8d:70:db:6b:bb:71:19:5d:02:4a:d6:ab:51: 5a:43:2c:f9:59:8b:e6:d7:44:83:14:a9:9e:39:0f: c4:32:72:a3:fb:6f:ff:0c:b7:77:eb:1a:b1:39:02: 9d:4e:8b:0a:c0:13:3b:42:f2:a2:06:0e:7d:94:92: 04:70:94:ed:b7:e0:9e:6b:ad:7f:78:60:9d:6c:88: 12:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:7F:68:AE:EE:D8:22:76:CD:96:9C:CD:F4:57:EA:2A:CE:9B:8E:85 X509v3 Authority Key Identifier: keyid:32:C8:46:F1:91:43:32:30:D9:73:CB:C8:FD:A0:6B:60:2E:BF:CB:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MshG8ZFDMjDZc8vI_aBrYC6_y1s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:ef:9a:33:2b:4a:c1:e7:fc:96:58:3c:2e:70:24:bc:00:81: 17:76:35:f6:00:0f:b1:c4:d1:fb:e3:d4:45:50:30:b9:e5:bb: f7:10:34:09:50:f1:10:fb:8a:87:97:b1:6c:18:d3:13:f6:82: 91:17:55:5a:44:df:24:6b:bd:b3:93:d4:2a:42:b4:d6:a0:65: 23:95:28:fd:23:d5:6e:4b:4d:20:3c:80:e9:8f:5a:39:62:23: 7f:f0:88:d7:7b:26:79:a1:56:f2:b3:44:6d:b3:a4:f4:fc:5e: 65:28:a6:60:19:6f:cd:82:ab:d1:71:57:8a:c0:3e:30:57:ae: 99:f9:01:ce:7d:d4:f5:80:72:c6:88:44:75:ac:9f:51:e6:83: 39:72:2a:91:f3:2b:97:f4:8b:07:c8:a1:70:bc:bd:30:0f:b9: 23:77:d7:c2:a2:31:dc:59:ca:ea:d0:c3:59:70:4d:de:ed:db: 22:eb:29:82:3f:5c:45:35:f9:ea:a4:5a:4e:aa:9c:b6:2f:75: 6d:19:e7:c6:31:e3:88:6c:5c:8d:73:b7:d2:25:aa:4d:18:60: 7c:bb:50:3a:e4:2e:a8:33:6c:2d:c7:76:78:0b:73:41:4b:cf: d2:36:ac:53:9d:c9:28:e4:8b:f3:08:99:6c:ed:d1:03:eb:d1: 3f:b3:6b:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/XriKjkIsby1GJBlesHWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyYzg0NmYxOTE0MzMyMzBkOTczY2JjOGZkYTA2YjYwMmVi ZmNiNWIwHhcNMjUxMjIwMDkwMDQ5WhcNMjUxMjIxMDkwMDQ5WjAzMTEwLwYDVQQD Eyg3MzdmNjhhZWVlZDgyMjc2Y2Q5NjljY2RmNDU3ZWEyYWNlOWI4ZTg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyam/8xk6SJkPZWxpaGZwzWK4uB0I UWNKLgLc7s+921AfIa3jLhDmZoWeSPXrdvI9BwAvQDJHPHBz9kH9WSaYy/RcuEOV DXG5rKkMViNXkWMSIPx9jnmaV/O+OdO+7xnrekYs7lMSPxUyu+hE8zlDPI5rIxK5 32F9GuHhAxqrHK5cxXLbBWJA+ldy3CbN3iAde9+EAInXyJBmE6ccPqra+Yh3hmJb 1IcX/c2CxaNGZ/ZtE1hI+I1w22u7cRldAkrWq1FaQyz5WYvm10SDFKmeOQ/EMnKj +2//DLd36xqxOQKdTosKwBM7QvKiBg59lJIEcJTtt+Cea61/eGCdbIgSSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHN/aK7u2CJ2zZaczfRX6irOm46FMB8GA1UdIwQY MBaAFDLIRvGRQzIw2XPLyP2ga2Auv8tbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXNoRzhaRkRNakRaYzh2SV9hQnJZQzZfeTFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9lNTc1NmUtMTMxNy00NDcyLTgzMDIt YTIzNDFkM2JiMDUzLzEvTXNoRzhaRkRNakRaYzh2SV9hQnJZQzZfeTFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9lNTc1NmUtMTMxNy00NDcyLTgzMDItYTIzNDFkM2JiMDUz LzEvTXNoRzhaRkRNakRaYzh2SV9hQnJZQzZfeTFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABe+aMytK wef8llg8LnAkvACBF3Y19gAPscTR++PURVAwueW79xA0CVDxEPuKh5exbBjTE/aC kRdVWkTfJGu9s5PUKkK01qBlI5Uo/SPVbktNIDyA6Y9aOWIjf/CI13smeaFW8rNE bbOk9PxeZSimYBlvzYKr0XFXisA+MFeumfkBzn3U9YByxohEdayfUeaDOXIqkfMr l/SLB8ihcLy9MA+5I3fXwqIx3FnK6tDDWXBN3u3bIuspgj9cRTX56qRaTqqcti91 bRnnxjHjiGxcjXO30iWqTRhgfLtQOuQuqDNsLcd2eAtzQUvP0jasU53JKOSL8wiZ bO3RA+vRP7NrFg== -----END CERTIFICATE-----Generated at Sat Dec 20 17:00:08 2025 by rpki-client