This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/855ad6-a84f-4f01-bfc8-d3fd91ac7c9f/1/MSUs4wd4HQMZ_NdJT6ZPJgRQFqw.mft File: MSUs4wd4HQMZ_NdJT6ZPJgRQFqw.mft (raw, json) Hash identifier: 4YAmBHYbjUpezaoeQMh9P8swD8KJ6Dwugh6vAxc2GJs= Subject key identifier: 9E:5C:8D:41:C3:66:02:C7:2B:9D:55:D1:67:DB:C5:C9:E2:D0:C9:22 Authority key identifier: 31:25:2C:E3:07:78:1D:03:19:FC:D7:49:4F:A6:4F:26:04:50:16:AC Certificate issuer: /CN=31252ce307781d0319fcd7494fa64f26045016ac Certificate serial: 019B435B8445B2E8DA42AC72B5F5C499FB4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MSUs4wd4HQMZ_NdJT6ZPJgRQFqw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/855ad6-a84f-4f01-bfc8-d3fd91ac7c9f/1/MSUs4wd4HQMZ_NdJT6ZPJgRQFqw.mft Manifest number: 42 Signing time: Mon 22 Dec 2025 00:00:29 +0000 Manifest this update: Mon 22 Dec 2025 00:00:29 +0000 Manifest next update: Tue 23 Dec 2025 00:00:29 +0000 Files and hashes: 1: MSUs4wd4HQMZ_NdJT6ZPJgRQFqw.crl (hash: pfGhvmqOYGBcNTDnlQ0AeVCDvoayZEixYbxgtfn7Y0s=) 2: e2kWH-n9xwHOTDKfeYfOg1xIQrU.roa (hash: ng2DaquieFqAgbP5IQorRbSXOj+A0OxG5GhDyC+r0bs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/855ad6-a84f-4f01-bfc8-d3fd91ac7c9f/1/MSUs4wd4HQMZ_NdJT6ZPJgRQFqw.crl rsync://rpki.ripe.net/repository/DEFAULT/53/855ad6-a84f-4f01-bfc8-d3fd91ac7c9f/1/MSUs4wd4HQMZ_NdJT6ZPJgRQFqw.mft rsync://rpki.ripe.net/repository/DEFAULT/MSUs4wd4HQMZ_NdJT6ZPJgRQFqw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:5b:84:45:b2:e8:da:42:ac:72:b5:f5:c4:99:fb:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31252ce307781d0319fcd7494fa64f26045016ac Validity Not Before: Dec 22 00:00:29 2025 GMT Not After : Dec 23 00:00:29 2025 GMT Subject: CN=9e5c8d41c36602c72b9d55d167dbc5c9e2d0c922 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:91:f3:e1:a8:58:6a:fd:25:eb:17:5a:a5:e5: 13:36:ea:2a:cc:a5:72:65:f1:66:05:b1:dd:d5:de: 3a:96:2a:54:90:0b:c4:d5:67:ac:10:3c:47:73:a7: 73:42:6a:93:3d:13:c7:35:85:be:61:a2:71:19:ff: e7:d2:e1:2c:38:46:ea:87:08:eb:a3:81:cc:f6:1f: c8:ba:96:a8:02:95:5a:39:f3:cd:d8:cb:4a:e5:43: 51:ac:ca:5e:a1:26:26:d3:94:a5:b5:88:5e:ea:4c: bc:0e:8d:e5:81:91:e7:1c:50:c7:4c:68:66:d9:0b: 08:f3:ab:79:bd:3d:78:3c:71:a2:2f:a5:ef:4d:89: ec:2b:18:a7:22:bf:bf:88:43:6a:62:52:a8:75:40: 0d:07:c3:8a:49:3d:56:e6:af:64:84:c4:0b:32:59: 71:dc:52:b9:6c:5a:c0:07:99:b5:9a:0e:6a:9c:2d: 04:5d:53:ad:c6:38:21:8c:41:6d:8a:d2:b8:12:1e: 18:0f:f2:8f:63:a3:f2:61:8e:2c:d5:03:77:be:71: 16:52:11:c8:e3:be:45:6d:3f:35:4d:0f:02:0d:04: 8d:76:9d:7a:0c:4d:91:74:fd:bf:a2:f5:a1:cd:9d: fa:66:b2:b3:f7:ee:da:a8:a1:0c:0e:aa:83:ed:3b: 4d:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:5C:8D:41:C3:66:02:C7:2B:9D:55:D1:67:DB:C5:C9:E2:D0:C9:22 X509v3 Authority Key Identifier: keyid:31:25:2C:E3:07:78:1D:03:19:FC:D7:49:4F:A6:4F:26:04:50:16:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MSUs4wd4HQMZ_NdJT6ZPJgRQFqw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/855ad6-a84f-4f01-bfc8-d3fd91ac7c9f/1/MSUs4wd4HQMZ_NdJT6ZPJgRQFqw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/855ad6-a84f-4f01-bfc8-d3fd91ac7c9f/1/MSUs4wd4HQMZ_NdJT6ZPJgRQFqw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:e3:fd:80:87:d3:6e:15:35:43:35:65:5a:32:c3:43:1f:f9: 73:d0:6e:b9:53:9d:26:85:16:15:02:19:87:58:da:08:40:23: 7c:95:3a:09:b1:6c:4c:db:f8:c2:ce:d5:89:b6:39:84:85:6a: 6d:38:e8:7b:9b:6b:f7:e4:50:0c:37:1d:49:d2:e0:fa:e4:89: af:01:9c:bb:83:8b:03:83:c0:aa:4e:81:a5:e2:85:1f:99:a9: 38:47:e0:26:a6:67:99:08:f3:02:a7:65:da:7f:fa:1a:87:25: 7d:e6:d4:cd:ba:77:8f:52:06:92:e4:9d:75:1f:51:08:44:13: bf:b9:1c:fb:99:ea:fc:36:d5:71:4b:41:07:9e:b2:0a:e2:d5: 18:7d:2a:90:ca:df:c0:47:1c:da:ec:a8:bb:63:aa:e0:05:28: 93:73:0e:3c:e4:66:99:f3:a4:88:38:74:2d:b8:ac:3e:53:8b: a5:2b:2d:b6:fa:47:f1:bd:63:fd:71:3f:6b:5c:af:14:21:da: fd:3f:2c:b7:fb:e3:67:de:0c:35:c2:78:a5:53:9f:d6:91:12: d7:24:87:25:67:88:8b:14:23:04:0c:b3:ad:af:b9:5d:c3:47: 6e:ce:2b:56:ec:5a:eb:11:44:93:c0:dd:e2:34:6b:c6:29:66: 4d:f5:e4:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDW4RFsujaQqxytfXEmftPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxMjUyY2UzMDc3ODFkMDMxOWZjZDc0OTRmYTY0ZjI2MDQ1 MDE2YWMwHhcNMjUxMjIyMDAwMDI5WhcNMjUxMjIzMDAwMDI5WjAzMTEwLwYDVQQD Eyg5ZTVjOGQ0MWMzNjYwMmM3MmI5ZDU1ZDE2N2RiYzVjOWUyZDBjOTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5Hz4ahYav0l6xdapeUTNuoqzKVy ZfFmBbHd1d46lipUkAvE1WesEDxHc6dzQmqTPRPHNYW+YaJxGf/n0uEsOEbqhwjr o4HM9h/IupaoApVaOfPN2MtK5UNRrMpeoSYm05SltYhe6ky8Do3lgZHnHFDHTGhm 2QsI86t5vT14PHGiL6XvTYnsKxinIr+/iENqYlKodUANB8OKST1W5q9khMQLMllx 3FK5bFrAB5m1mg5qnC0EXVOtxjghjEFtitK4Eh4YD/KPY6PyYY4s1QN3vnEWUhHI 475FbT81TQ8CDQSNdp16DE2RdP2/ovWhzZ36ZrKz9+7aqKEMDqqD7TtNdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ5cjUHDZgLHK51V0Wfbxcni0MkiMB8GA1UdIwQY MBaAFDElLOMHeB0DGfzXSU+mTyYEUBasMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVNVczR3ZDRIUU1aX05kSlQ2WlBKZ1JRRnF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My84NTVhZDYtYTg0Zi00ZjAxLWJmYzgt ZDNmZDkxYWM3YzlmLzEvTVNVczR3ZDRIUU1aX05kSlQ2WlBKZ1JRRnF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My84NTVhZDYtYTg0Zi00ZjAxLWJmYzgtZDNmZDkxYWM3Yzlm LzEvTVNVczR3ZDRIUU1aX05kSlQ2WlBKZ1JRRnF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVeP9gIfT bhU1QzVlWjLDQx/5c9BuuVOdJoUWFQIZh1jaCEAjfJU6CbFsTNv4ws7VibY5hIVq bTjoe5tr9+RQDDcdSdLg+uSJrwGcu4OLA4PAqk6BpeKFH5mpOEfgJqZnmQjzAqdl 2n/6GoclfebUzbp3j1IGkuSddR9RCEQTv7kc+5nq/DbVcUtBB56yCuLVGH0qkMrf wEcc2uyou2Oq4AUok3MOPORmmfOkiDh0LbisPlOLpSsttvpH8b1j/XE/a1yvFCHa /T8st/vjZ94MNcJ4pVOf1pES1ySHJWeIixQjBAyzra+5XcNHbs4rVuxa6xFEk8Dd 4jRrxilmTfXkWQ== -----END CERTIFICATE-----Generated at Mon Dec 22 04:58:07 2025 by rpki-client