This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/93dd43-9933-42ca-afc2-2c1891cacac7/1/mSxuCcGSxVgKSh0pQVDWI3q4kl0.mft File: mSxuCcGSxVgKSh0pQVDWI3q4kl0.mft (raw, json) Hash identifier: 69wykF5wL/d6Uk7OFZSxibMZ2jMovZmIWvJeoTZp9Ew= Subject key identifier: DE:46:74:88:AA:0E:F5:6A:1B:69:8C:8E:96:B3:25:64:9C:DA:07:71 Authority key identifier: 99:2C:6E:09:C1:92:C5:58:0A:4A:1D:29:41:50:D6:23:7A:B8:92:5D Certificate issuer: /CN=992c6e09c192c5580a4a1d294150d6237ab8925d Certificate serial: 019B54F4920CEC95390F5A457F3D6F3E0280 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSxuCcGSxVgKSh0pQVDWI3q4kl0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/93dd43-9933-42ca-afc2-2c1891cacac7/1/mSxuCcGSxVgKSh0pQVDWI3q4kl0.mft Manifest number: 1796 Signing time: Thu 25 Dec 2025 10:01:12 +0000 Manifest this update: Thu 25 Dec 2025 10:01:12 +0000 Manifest next update: Fri 26 Dec 2025 10:01:12 +0000 Files and hashes: 1: djCZyDS3Av-3n9Oi3QzE4yqgYHQ.roa (hash: umRqAsXCH4x+gTRMItrAG7erZAX903krnPo4zn0Ncs0=) 2: kIauAKAEPDGUiqRzZKf1-zzLViU.roa (hash: ajO4l/6tIJY/grZz1/mU3dymnv+IkFvwXNVUf7Kw9ao=) 3: mSxuCcGSxVgKSh0pQVDWI3q4kl0.crl (hash: yPUERgiDEu6JODjTeJvF5nxl3XbSfrnNNJdBJ4mC8rQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/93dd43-9933-42ca-afc2-2c1891cacac7/1/mSxuCcGSxVgKSh0pQVDWI3q4kl0.crl rsync://rpki.ripe.net/repository/DEFAULT/54/93dd43-9933-42ca-afc2-2c1891cacac7/1/mSxuCcGSxVgKSh0pQVDWI3q4kl0.mft rsync://rpki.ripe.net/repository/DEFAULT/mSxuCcGSxVgKSh0pQVDWI3q4kl0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 10:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:f4:92:0c:ec:95:39:0f:5a:45:7f:3d:6f:3e:02:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=992c6e09c192c5580a4a1d294150d6237ab8925d Validity Not Before: Dec 25 10:01:12 2025 GMT Not After : Dec 26 10:01:12 2025 GMT Subject: CN=de467488aa0ef56a1b698c8e96b325649cda0771 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c5:1e:c9:bf:21:06:6d:22:cd:d3:b8:03:df: 2e:d7:24:dd:ab:ab:7c:2c:61:92:98:53:4f:6f:9a: 4d:2e:4e:36:d1:b0:f5:81:6b:12:ae:53:32:c6:a0: 1c:3f:d6:7d:a7:52:f8:09:37:61:9f:d1:dd:ed:bc: b5:11:60:07:bb:ae:e2:30:63:32:85:13:63:1b:a9: ce:97:e3:db:f7:a6:21:d8:83:15:70:cb:3e:ed:5e: ac:51:37:ac:ee:5c:c3:22:92:72:52:64:ab:52:71: 81:e2:01:c9:22:00:ef:10:d4:24:29:3c:f2:a2:86: ee:bd:6a:71:70:2e:fa:ce:44:9e:b8:94:3d:ed:38: d1:f3:f2:86:77:59:6f:a1:04:c4:e5:a8:1b:1a:a1: cb:71:73:ff:5b:99:29:6a:16:7c:a3:53:f3:84:02: 48:5b:9f:04:59:1c:92:3c:51:7d:63:08:28:d6:bc: f9:82:29:01:32:1d:eb:16:a3:aa:8c:32:06:d5:49: 17:4b:e8:4a:15:8e:61:ec:26:ac:dd:c9:bc:ea:78: b5:4c:0a:04:01:0a:5d:a3:f3:9a:ee:77:8a:01:74: 8b:42:a0:86:35:2a:03:2a:a1:a1:f1:5e:8a:2f:84: ff:b2:4e:9c:99:06:56:ca:9f:74:9f:79:d1:d8:76: 25:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:46:74:88:AA:0E:F5:6A:1B:69:8C:8E:96:B3:25:64:9C:DA:07:71 X509v3 Authority Key Identifier: keyid:99:2C:6E:09:C1:92:C5:58:0A:4A:1D:29:41:50:D6:23:7A:B8:92:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSxuCcGSxVgKSh0pQVDWI3q4kl0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/93dd43-9933-42ca-afc2-2c1891cacac7/1/mSxuCcGSxVgKSh0pQVDWI3q4kl0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/93dd43-9933-42ca-afc2-2c1891cacac7/1/mSxuCcGSxVgKSh0pQVDWI3q4kl0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:d5:d4:50:c6:03:c6:f9:a1:ae:96:b3:33:d4:bf:71:57:6c: 87:cb:88:d4:22:f5:ce:4e:41:89:91:e1:a7:2e:b5:a3:e4:39: 1f:37:d3:8d:d8:03:42:f8:94:3e:a6:cf:42:e0:32:40:13:ed: 67:a9:bf:15:d9:14:d3:ac:7a:56:76:11:ce:e7:ce:3a:6d:a6: dd:be:6b:3c:3f:05:22:72:fe:07:0b:47:a5:46:85:74:28:a8: 36:a5:b2:6b:37:b7:1f:a3:4a:44:4c:eb:58:c5:f9:ef:7b:f2: 4c:b3:3c:bc:6b:7a:e8:fd:82:06:3c:15:62:b9:4f:27:55:b4: 8a:14:7e:c7:87:2d:29:a7:a0:8b:f0:cc:ab:6d:4f:59:77:2b: 4a:78:5a:38:c0:23:e6:64:d1:6b:e9:fe:4e:a0:57:b3:6a:06: 9e:de:e8:70:01:6b:7f:7a:f2:cc:21:75:42:0f:dd:8f:8d:87: 61:7a:5b:ad:b8:b6:62:a6:6d:bd:4e:06:14:e8:7f:d0:02:b2: 79:99:4f:71:83:df:2f:4c:e3:d5:5f:c4:9d:dd:6b:de:e9:b2: 48:f9:20:47:d2:d3:85:0a:1e:a0:ff:72:7d:7c:86:aa:b2:de: 45:b4:c7:b2:2e:be:14:a7:31:2b:d4:98:5a:b7:b1:59:12:51: a1:0d:a6:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtU9JIM7JU5D1pFfz1vPgKAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5MmM2ZTA5YzE5MmM1NTgwYTRhMWQyOTQxNTBkNjIzN2Fi ODkyNWQwHhcNMjUxMjI1MTAwMTEyWhcNMjUxMjI2MTAwMTEyWjAzMTEwLwYDVQQD EyhkZTQ2NzQ4OGFhMGVmNTZhMWI2OThjOGU5NmIzMjU2NDljZGEwNzcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzcUeyb8hBm0izdO4A98u1yTdq6t8 LGGSmFNPb5pNLk420bD1gWsSrlMyxqAcP9Z9p1L4CTdhn9Hd7by1EWAHu67iMGMy hRNjG6nOl+Pb96Yh2IMVcMs+7V6sUTes7lzDIpJyUmSrUnGB4gHJIgDvENQkKTzy oobuvWpxcC76zkSeuJQ97TjR8/KGd1lvoQTE5agbGqHLcXP/W5kpahZ8o1PzhAJI W58EWRySPFF9Ywgo1rz5gikBMh3rFqOqjDIG1UkXS+hKFY5h7Cas3cm86ni1TAoE AQpdo/Oa7neKAXSLQqCGNSoDKqGh8V6KL4T/sk6cmQZWyp90n3nR2HYlLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN5GdIiqDvVqG2mMjpazJWSc2gdxMB8GA1UdIwQY MBaAFJksbgnBksVYCkodKUFQ1iN6uJJdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVN4dUNjR1N4VmdLU2gwcFFWRFdJM3E0a2wwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC85M2RkNDMtOTkzMy00MmNhLWFmYzIt MmMxODkxY2FjYWM3LzEvbVN4dUNjR1N4VmdLU2gwcFFWRFdJM3E0a2wwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC85M2RkNDMtOTkzMy00MmNhLWFmYzItMmMxODkxY2FjYWM3 LzEvbVN4dUNjR1N4VmdLU2gwcFFWRFdJM3E0a2wwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADdXUUMYD xvmhrpazM9S/cVdsh8uI1CL1zk5BiZHhpy61o+Q5HzfTjdgDQviUPqbPQuAyQBPt Z6m/FdkU06x6VnYRzufOOm2m3b5rPD8FInL+BwtHpUaFdCioNqWyaze3H6NKREzr WMX573vyTLM8vGt66P2CBjwVYrlPJ1W0ihR+x4ctKaegi/DMq21PWXcrSnhaOMAj 5mTRa+n+TqBXs2oGnt7ocAFrf3ryzCF1Qg/dj42HYXpbrbi2YqZtvU4GFOh/0AKy eZlPcYPfL0zj1V/End1r3umySPkgR9LThQoeoP9yfXyGqrLeRbTHsi6+FKcxK9SY WrexWRJRoQ2mBw== -----END CERTIFICATE-----Generated at Thu Dec 25 16:00:17 2025 by rpki-client