This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/ff00c4-b728-44a0-962d-973db9ce68b5/1/MsK-SD_ye7jw3AnOD3HyqI6vfgc.mft File: MsK-SD_ye7jw3AnOD3HyqI6vfgc.mft (raw, json) Hash identifier: dILajeem8crlF2f/+qjlyAGtjbriKZEIJQaJp2Lv/eM= Subject key identifier: 50:54:DC:54:FA:FE:47:E1:C8:92:8C:E0:48:43:60:D7:1C:C0:78:F1 Authority key identifier: 32:C2:BE:48:3F:F2:7B:B8:F0:DC:09:CE:0F:71:F2:A8:8E:AF:7E:07 Certificate issuer: /CN=32c2be483ff27bb8f0dc09ce0f71f2a88eaf7e07 Certificate serial: 019B454A928FDCDAE846E4B73472B4EFC89B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MsK-SD_ye7jw3AnOD3HyqI6vfgc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/ff00c4-b728-44a0-962d-973db9ce68b5/1/MsK-SD_ye7jw3AnOD3HyqI6vfgc.mft Manifest number: 178F Signing time: Mon 22 Dec 2025 09:01:13 +0000 Manifest this update: Mon 22 Dec 2025 09:01:13 +0000 Manifest next update: Tue 23 Dec 2025 09:01:13 +0000 Files and hashes: 1: 3Ld3_xMK0PlfZFY-qBwXca5iVGM.roa (hash: CjU6hi/Jh6Zo5sGQ2UDjZfEn9Czpv8lCLYgvh/6NOKs=) 2: MsK-SD_ye7jw3AnOD3HyqI6vfgc.crl (hash: jifHvYF66QNwq1fASoSJ2wpLIcCsIqRGysNrRUYAtaY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/ff00c4-b728-44a0-962d-973db9ce68b5/1/MsK-SD_ye7jw3AnOD3HyqI6vfgc.crl rsync://rpki.ripe.net/repository/DEFAULT/40/ff00c4-b728-44a0-962d-973db9ce68b5/1/MsK-SD_ye7jw3AnOD3HyqI6vfgc.mft rsync://rpki.ripe.net/repository/DEFAULT/MsK-SD_ye7jw3AnOD3HyqI6vfgc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 09:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:4a:92:8f:dc:da:e8:46:e4:b7:34:72:b4:ef:c8:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32c2be483ff27bb8f0dc09ce0f71f2a88eaf7e07 Validity Not Before: Dec 22 09:01:13 2025 GMT Not After : Dec 23 09:01:13 2025 GMT Subject: CN=5054dc54fafe47e1c8928ce0484360d71cc078f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:2f:0f:d9:57:c2:be:e1:6f:d6:ca:16:00:01: d0:b3:4e:09:1f:c2:83:23:de:d5:84:fd:b5:be:88: 7e:30:1b:eb:a5:b5:4e:4c:8f:4e:fb:79:7a:3f:15: d7:65:5a:84:12:1c:7a:63:2a:6f:70:93:bd:2d:71: 9f:f7:ac:c6:80:da:9f:c7:00:cb:9a:ff:7c:c0:6a: 03:30:74:a7:36:d7:7f:2a:40:2d:81:56:30:13:37: 70:99:67:b5:d2:f8:70:9a:bd:ba:f3:bf:4a:32:8d: 54:cc:db:a1:4e:55:08:07:be:bc:00:66:2f:46:ec: 84:ce:77:ea:12:29:6f:1f:63:0f:85:06:f0:1e:b8: ca:9b:69:be:9a:4f:a7:5c:02:8d:c5:08:b7:99:31: c4:bc:57:68:74:07:c9:98:84:82:b7:83:f6:dc:b0: 4c:0d:ac:a7:56:6e:fa:32:40:a1:26:1f:04:69:a7: e0:11:27:b8:a8:61:27:b6:64:7d:13:54:f3:41:b8: fa:21:89:6f:c0:cd:91:9a:2a:d6:a1:02:3d:f6:b1: ea:f4:82:ea:d7:d3:cd:5a:e5:ec:59:b6:4e:e8:fa: a8:02:5e:6a:f3:f1:bc:38:85:f3:f7:16:f8:7a:ca: ed:66:ac:09:19:11:25:3c:b0:91:88:0c:22:ff:c7: 83:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:54:DC:54:FA:FE:47:E1:C8:92:8C:E0:48:43:60:D7:1C:C0:78:F1 X509v3 Authority Key Identifier: keyid:32:C2:BE:48:3F:F2:7B:B8:F0:DC:09:CE:0F:71:F2:A8:8E:AF:7E:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MsK-SD_ye7jw3AnOD3HyqI6vfgc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/ff00c4-b728-44a0-962d-973db9ce68b5/1/MsK-SD_ye7jw3AnOD3HyqI6vfgc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/ff00c4-b728-44a0-962d-973db9ce68b5/1/MsK-SD_ye7jw3AnOD3HyqI6vfgc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:1d:28:aa:10:5d:84:b8:b5:09:de:2f:cf:0e:29:56:31:1c: 54:60:ad:84:63:0e:19:09:93:c4:83:5c:40:ee:8f:9b:77:cd: b8:3e:e8:27:9b:84:49:c5:33:9c:cd:27:c4:44:6a:4b:c5:8f: 17:90:82:c5:dd:f1:25:6a:ef:80:d8:88:a8:9b:2b:f1:81:7a: a2:89:f9:1f:b3:6d:e5:01:3f:e9:a8:3a:b8:fc:68:51:95:5d: 0b:f3:4d:a5:c6:74:cd:09:32:3c:95:59:68:1d:b0:3b:c2:19: 50:a7:76:3b:13:35:99:b6:b8:e1:d3:bc:71:46:fb:cf:15:37: ad:3f:25:4f:10:a5:c8:60:ab:67:9d:66:c6:b6:07:5d:67:64: 9e:7b:53:fa:51:90:6a:74:1e:71:eb:a7:46:8e:7d:49:4f:16: 61:83:83:e4:31:40:e0:34:51:91:ab:95:6d:22:45:a9:b6:7d: 3d:f6:63:2c:31:22:62:30:00:02:f6:ca:45:21:c2:ab:4e:9d: 07:92:27:78:cd:1f:1c:af:b8:52:df:49:75:0e:87:57:b5:86: c5:c2:b8:56:8f:85:71:1c:17:99:a7:c4:80:e5:70:82:52:17: 73:ec:da:c9:63:ad:c3:f8:68:56:17:b8:3e:b7:18:6a:b4:eb: ce:eb:64:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFSpKP3NroRuS3NHK078ibMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyYzJiZTQ4M2ZmMjdiYjhmMGRjMDljZTBmNzFmMmE4OGVh ZjdlMDcwHhcNMjUxMjIyMDkwMTEzWhcNMjUxMjIzMDkwMTEzWjAzMTEwLwYDVQQD Eyg1MDU0ZGM1NGZhZmU0N2UxYzg5MjhjZTA0ODQzNjBkNzFjYzA3OGYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkC8P2VfCvuFv1soWAAHQs04JH8KD I97VhP21voh+MBvrpbVOTI9O+3l6PxXXZVqEEhx6YypvcJO9LXGf96zGgNqfxwDL mv98wGoDMHSnNtd/KkAtgVYwEzdwmWe10vhwmr26879KMo1UzNuhTlUIB768AGYv RuyEznfqEilvH2MPhQbwHrjKm2m+mk+nXAKNxQi3mTHEvFdodAfJmISCt4P23LBM DaynVm76MkChJh8EaafgESe4qGEntmR9E1TzQbj6IYlvwM2RmirWoQI99rHq9ILq 19PNWuXsWbZO6PqoAl5q8/G8OIXz9xb4esrtZqwJGRElPLCRiAwi/8eDgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFBU3FT6/kfhyJKM4EhDYNccwHjxMB8GA1UdIwQY MBaAFDLCvkg/8nu48NwJzg9x8qiOr34HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXNLLVNEX3llN2p3M0FuT0QzSHlxSTZ2ZmdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9mZjAwYzQtYjcyOC00NGEwLTk2MmQt OTczZGI5Y2U2OGI1LzEvTXNLLVNEX3llN2p3M0FuT0QzSHlxSTZ2ZmdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC9mZjAwYzQtYjcyOC00NGEwLTk2MmQtOTczZGI5Y2U2OGI1 LzEvTXNLLVNEX3llN2p3M0FuT0QzSHlxSTZ2ZmdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfB0oqhBd hLi1Cd4vzw4pVjEcVGCthGMOGQmTxINcQO6Pm3fNuD7oJ5uEScUznM0nxERqS8WP F5CCxd3xJWrvgNiIqJsr8YF6oon5H7Nt5QE/6ag6uPxoUZVdC/NNpcZ0zQkyPJVZ aB2wO8IZUKd2OxM1mba44dO8cUb7zxU3rT8lTxClyGCrZ51mxrYHXWdknntT+lGQ anQeceunRo59SU8WYYOD5DFA4DRRkauVbSJFqbZ9PfZjLDEiYjAAAvbKRSHCq06d B5IneM0fHK+4Ut9JdQ6HV7WGxcK4Vo+FcRwXmafEgOVwglIXc+zayWOtw/hoVhe4 PrcYarTrzutkpQ== -----END CERTIFICATE-----Generated at Mon Dec 22 11:45:46 2025 by rpki-client