This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.mft File: MSQoUMrUHN91o8nWCyH8pUP3Q4Q.mft (raw, json) Hash identifier: hT26RxQ/tKCI97oPrRxAw1knPhkxqXdtF3GClihw0bo= Subject key identifier: 5A:AC:7D:91:21:9B:33:8A:67:90:2E:1B:9D:88:3E:A6:C8:D0:FA:9C Authority key identifier: 31:24:28:50:CA:D4:1C:DF:75:A3:C9:D6:0B:21:FC:A5:43:F7:43:84 Certificate issuer: /CN=31242850cad41cdf75a3c9d60b21fca543f74384 Certificate serial: 019B3C7F62F3D2AA3BD56805273F0D1B5331 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.mft Manifest number: 178D Signing time: Sat 20 Dec 2025 16:02:19 +0000 Manifest this update: Sat 20 Dec 2025 16:02:19 +0000 Manifest next update: Sun 21 Dec 2025 16:02:19 +0000 Files and hashes: 1: 6G5nNFKJWFzHfNQU02eI4MMaEEg.roa (hash: 6cSP9En6aM/vjTao+cEFN3U0rlWFoCsSysKwaT7SNIU=) 2: MSQoUMrUHN91o8nWCyH8pUP3Q4Q.crl (hash: O2LX4R3YvI7IRBFS14B9u5b8RimE5YDdy1igzX5Kl7Q=) 3: dTX8V27b3FZ8vwtYRtnPTsQ9bhg.roa (hash: 77xEsKoJwAS0zsMbL8sU52nye1oYIoAnIfCbqIAKy1c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.mft rsync://rpki.ripe.net/repository/DEFAULT/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:62:f3:d2:aa:3b:d5:68:05:27:3f:0d:1b:53:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31242850cad41cdf75a3c9d60b21fca543f74384 Validity Not Before: Dec 20 16:02:19 2025 GMT Not After : Dec 21 16:02:19 2025 GMT Subject: CN=5aac7d91219b338a67902e1b9d883ea6c8d0fa9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c8:3b:b4:81:eb:29:f4:10:a5:a0:e0:c8:a3: e5:95:b7:99:6f:ad:dd:d2:ab:27:26:2c:ed:69:53: 9f:d0:71:4c:5c:6b:aa:c9:8c:e5:63:53:b9:de:cc: ee:0c:fa:1f:45:23:d9:45:00:ff:85:b0:ab:4c:4b: 82:8a:62:71:5a:b8:e4:40:f0:6f:c0:32:72:70:af: 73:d7:4a:1c:65:92:8a:35:9a:07:37:23:4f:24:56: b9:f1:8b:b9:be:c3:8e:99:a4:c4:ce:84:df:2f:86: b6:86:35:20:cb:16:32:6e:0b:27:cf:f3:ee:d0:f6: 7a:9f:bf:7b:27:e0:c0:a1:bf:14:28:a6:f5:32:de: 08:4c:fd:84:c0:9c:bb:dd:6d:b1:2b:91:be:25:3d: b5:eb:53:ba:db:46:96:cd:36:43:02:b6:f8:31:d4: f0:ee:a5:be:fb:1b:71:11:f1:78:9d:1b:c8:bf:59: fd:af:86:57:47:93:64:e8:dd:ab:3a:10:df:48:41: 96:db:7c:f6:fe:70:d8:af:fa:50:90:2a:bb:fb:40: b7:6c:b2:6c:a7:bb:dc:d2:31:b5:45:04:8b:09:55: 37:51:c4:c1:45:a5:79:98:74:25:31:25:26:00:0c: 64:91:97:cd:ac:be:71:99:19:6c:9f:86:64:0c:4c: dd:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:AC:7D:91:21:9B:33:8A:67:90:2E:1B:9D:88:3E:A6:C8:D0:FA:9C X509v3 Authority Key Identifier: keyid:31:24:28:50:CA:D4:1C:DF:75:A3:C9:D6:0B:21:FC:A5:43:F7:43:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:79:cc:82:aa:0b:79:9d:12:da:51:73:cd:da:58:7b:56:9e: 40:c4:22:5a:56:12:e6:15:54:a6:e7:28:e8:5c:c7:00:a3:2e: c7:76:47:4f:e8:13:0b:6e:0a:13:d3:af:a7:b4:7c:71:38:23: 78:54:7d:31:26:b9:d1:d1:be:49:0c:c1:73:28:6e:c6:b3:cf: 72:32:83:21:9e:75:2f:dd:e8:fe:59:37:80:58:7c:cf:e2:90: 9e:e9:1e:ba:5d:1e:4d:c1:f6:00:ec:d2:17:cb:66:b6:c6:56: 1f:00:e5:15:f0:6c:64:5e:ad:6f:8a:45:13:43:cf:89:b4:20: 20:64:d9:d4:3e:ed:14:5d:55:54:be:38:9b:ff:cb:96:d7:58: 0f:0d:ef:c7:3d:f9:d1:b8:11:b3:4e:a1:c4:0d:b5:98:0d:b2: ce:c5:b2:cf:c7:30:12:48:e4:42:9e:fa:db:67:ed:14:b5:ec: 8e:80:5b:f5:a8:50:56:b7:88:03:25:a5:a6:c8:e5:99:41:04: 23:1a:4e:1c:9b:2f:dc:7e:0d:bc:9f:47:ac:6d:02:80:ac:ba: 16:80:7e:a9:92:2f:f4:a3:20:93:1f:5d:2d:e7:01:d3:f3:15: 6b:42:a0:b3:e9:29:75:1b:b0:3e:96:4a:53:79:d4:c4:4d:9d: 76:3a:6d:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8f2Lz0qo71WgFJz8NG1MxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxMjQyODUwY2FkNDFjZGY3NWEzYzlkNjBiMjFmY2E1NDNm NzQzODQwHhcNMjUxMjIwMTYwMjE5WhcNMjUxMjIxMTYwMjE5WjAzMTEwLwYDVQQD Eyg1YWFjN2Q5MTIxOWIzMzhhNjc5MDJlMWI5ZDg4M2VhNmM4ZDBmYTljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsg7tIHrKfQQpaDgyKPllbeZb63d 0qsnJiztaVOf0HFMXGuqyYzlY1O53szuDPofRSPZRQD/hbCrTEuCimJxWrjkQPBv wDJycK9z10ocZZKKNZoHNyNPJFa58Yu5vsOOmaTEzoTfL4a2hjUgyxYybgsnz/Pu 0PZ6n797J+DAob8UKKb1Mt4ITP2EwJy73W2xK5G+JT2161O620aWzTZDArb4MdTw 7qW++xtxEfF4nRvIv1n9r4ZXR5Nk6N2rOhDfSEGW23z2/nDYr/pQkCq7+0C3bLJs p7vc0jG1RQSLCVU3UcTBRaV5mHQlMSUmAAxkkZfNrL5xmRlsn4ZkDEzdSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFqsfZEhmzOKZ5AuG52IPqbI0PqcMB8GA1UdIwQY MBaAFDEkKFDK1BzfdaPJ1gsh/KVD90OEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVNRb1VNclVITjkxbzhuV0N5SDhwVVAzUTRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8xYTI3ZWMtZWIwYS00NDA2LWExZDEt MDdlZDQ2YjE0OWMzLzEvTVNRb1VNclVITjkxbzhuV0N5SDhwVVAzUTRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC8xYTI3ZWMtZWIwYS00NDA2LWExZDEtMDdlZDQ2YjE0OWMz LzEvTVNRb1VNclVITjkxbzhuV0N5SDhwVVAzUTRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKnnMgqoL eZ0S2lFzzdpYe1aeQMQiWlYS5hVUpuco6FzHAKMux3ZHT+gTC24KE9Ovp7R8cTgj eFR9MSa50dG+SQzBcyhuxrPPcjKDIZ51L93o/lk3gFh8z+KQnukeul0eTcH2AOzS F8tmtsZWHwDlFfBsZF6tb4pFE0PPibQgIGTZ1D7tFF1VVL44m//LltdYDw3vxz35 0bgRs06hxA21mA2yzsWyz8cwEkjkQp7622ftFLXsjoBb9ahQVreIAyWlpsjlmUEE IxpOHJsv3H4NvJ9HrG0CgKy6FoB+qZIv9KMgkx9dLecB0/MVa0Kgs+kpdRuwPpZK U3nUxE2ddjptUw== -----END CERTIFICATE-----Generated at Sat Dec 20 23:38:10 2025 by rpki-client