This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.mft File: MSbg1dN79m8-nYh-rq2cpjwYlIk.mft (raw, json) Hash identifier: 50vZwZWycovYJWJPzYI+eIlCIbCW5qD/NkX0ULwDPfU= Subject key identifier: 25:B7:25:D5:D6:40:BE:63:B9:28:EF:87:F2:1C:5A:0E:61:E5:DF:36 Authority key identifier: 31:26:E0:D5:D3:7B:F6:6F:3E:9D:88:7E:AE:AD:9C:A6:3C:18:94:89 Certificate issuer: /CN=3126e0d5d37bf66f3e9d887eaead9ca63c189489 Certificate serial: 019B4EBB0CF95F80377A8D1F5F142D4E0A39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MSbg1dN79m8-nYh-rq2cpjwYlIk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.mft Manifest number: 1790 Signing time: Wed 24 Dec 2025 05:00:39 +0000 Manifest this update: Wed 24 Dec 2025 05:00:39 +0000 Manifest next update: Thu 25 Dec 2025 05:00:39 +0000 Files and hashes: 1: MSbg1dN79m8-nYh-rq2cpjwYlIk.crl (hash: IvFtYmDOz9lAJlet3OmFSiROKbuMjHb6PtGBnwcKa6Q=) 2: UmPwqKyARZqa-K92MHrGqC9QyYg.roa (hash: j/qBkJJtXcMUmDoWtmsXwP9m2yfPn26NNyaQXDeqLdE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.mft rsync://rpki.ripe.net/repository/DEFAULT/MSbg1dN79m8-nYh-rq2cpjwYlIk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 05:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:bb:0c:f9:5f:80:37:7a:8d:1f:5f:14:2d:4e:0a:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3126e0d5d37bf66f3e9d887eaead9ca63c189489 Validity Not Before: Dec 24 05:00:39 2025 GMT Not After : Dec 25 05:00:39 2025 GMT Subject: CN=25b725d5d640be63b928ef87f21c5a0e61e5df36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:26:59:15:a9:96:e5:44:c7:8a:42:f8:8e:48: fc:2f:09:d2:e1:fb:34:70:9e:61:ee:b4:4a:34:4a: 82:f4:1b:0a:a9:cc:96:25:a2:d2:ab:c0:84:f9:32: 8d:96:65:a3:8f:9c:78:ec:a7:47:0d:16:41:70:c2: 0d:c9:7e:e3:b0:75:01:ea:c4:f6:58:cf:67:7c:a5: 8b:ce:32:d9:9c:bf:7f:5e:2f:f1:d2:12:c5:ec:fa: 8a:f1:a7:bb:59:f8:ed:a2:69:e6:3b:74:25:b1:e3: 6d:36:48:42:b1:64:69:25:3b:72:39:79:11:d5:10: 41:94:33:a1:42:27:47:51:c4:7f:a8:78:ae:47:7c: fb:ec:11:b2:d6:1a:01:9e:43:75:a6:cb:08:f9:8f: 4f:a0:f8:a1:ad:02:0f:b9:d8:c4:4f:0e:b7:df:c1: 9c:6f:86:ea:0c:cb:7d:62:3e:c2:cd:c0:e4:17:a8: 3f:d3:dd:a9:a2:7f:29:7a:40:59:1e:52:9e:89:4e: fe:7a:52:2d:7c:f3:b5:d0:25:65:fb:a9:dd:e8:75: 38:26:77:15:71:2c:37:fa:b2:e2:59:be:34:fc:0a: 98:c7:3d:09:74:89:0a:bf:b4:dc:ee:68:ee:98:8b: 4a:56:b0:08:1a:be:16:8c:e3:57:95:2e:37:13:7d: 70:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:B7:25:D5:D6:40:BE:63:B9:28:EF:87:F2:1C:5A:0E:61:E5:DF:36 X509v3 Authority Key Identifier: keyid:31:26:E0:D5:D3:7B:F6:6F:3E:9D:88:7E:AE:AD:9C:A6:3C:18:94:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MSbg1dN79m8-nYh-rq2cpjwYlIk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:aa:ef:64:71:f9:af:0b:fe:77:7d:e2:5d:0b:ef:38:4e:7f: 1e:93:20:32:96:2e:c5:a9:0f:ef:ab:f0:f1:1f:0f:ab:74:c0: 47:a8:c4:66:b6:94:29:12:7a:c9:c5:64:e0:a0:67:21:6e:a6: 11:c6:19:0e:5d:7b:02:13:40:44:5b:61:3e:bb:2d:c9:35:fb: 4d:ec:df:92:26:e4:1f:25:76:14:b4:b1:0b:d1:11:77:53:0d: 00:90:69:f0:6a:e1:01:e5:b0:20:1e:15:36:11:64:92:13:e9: 4f:0e:46:09:fd:f0:5c:05:ab:de:82:af:9d:5f:71:9c:1d:3f: 56:51:d7:60:b5:dd:06:f2:8f:91:8c:ed:56:01:aa:23:39:5d: 23:03:d2:1a:e3:73:2b:24:68:a3:f6:19:08:87:70:f8:0a:79: 6b:85:d1:4d:e4:e1:4c:97:b1:f1:cb:2c:b4:02:74:7c:ed:ea: e6:b9:88:70:20:46:c9:a7:16:88:02:ef:9b:4e:65:37:d4:0e: 0e:0f:c6:26:aa:b8:86:fe:ab:fc:46:d9:2f:5e:13:ce:81:ee: 39:26:49:9e:90:d1:36:72:58:d6:d7:78:19:27:c4:e3:42:7e: ad:97:80:9d:a5:d9:7c:1f:97:ec:0a:30:86:a7:11:61:10:4b: 5c:af:90:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOuwz5X4A3eo0fXxQtTgo5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxMjZlMGQ1ZDM3YmY2NmYzZTlkODg3ZWFlYWQ5Y2E2M2Mx ODk0ODkwHhcNMjUxMjI0MDUwMDM5WhcNMjUxMjI1MDUwMDM5WjAzMTEwLwYDVQQD EygyNWI3MjVkNWQ2NDBiZTYzYjkyOGVmODdmMjFjNWEwZTYxZTVkZjM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriZZFamW5UTHikL4jkj8LwnS4fs0 cJ5h7rRKNEqC9BsKqcyWJaLSq8CE+TKNlmWjj5x47KdHDRZBcMINyX7jsHUB6sT2 WM9nfKWLzjLZnL9/Xi/x0hLF7PqK8ae7WfjtomnmO3QlseNtNkhCsWRpJTtyOXkR 1RBBlDOhQidHUcR/qHiuR3z77BGy1hoBnkN1pssI+Y9PoPihrQIPudjETw6338Gc b4bqDMt9Yj7CzcDkF6g/092pon8pekBZHlKeiU7+elItfPO10CVl+6nd6HU4JncV cSw3+rLiWb40/AqYxz0JdIkKv7Tc7mjumItKVrAIGr4WjONXlS43E31w2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCW3JdXWQL5juSjvh/IcWg5h5d82MB8GA1UdIwQY MBaAFDEm4NXTe/ZvPp2Ifq6tnKY8GJSJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVNiZzFkTjc5bTgtblloLXJxMmNwandZbElrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8zMmVmNWEtZTJiOS00OTk5LWJmYjIt NmU4ZWQzYzczMDdlLzEvTVNiZzFkTjc5bTgtblloLXJxMmNwandZbElrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8zMmVmNWEtZTJiOS00OTk5LWJmYjItNmU4ZWQzYzczMDdl LzEvTVNiZzFkTjc5bTgtblloLXJxMmNwandZbElrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnKrvZHH5 rwv+d33iXQvvOE5/HpMgMpYuxakP76vw8R8Pq3TAR6jEZraUKRJ6ycVk4KBnIW6m EcYZDl17AhNARFthPrstyTX7TezfkibkHyV2FLSxC9ERd1MNAJBp8GrhAeWwIB4V NhFkkhPpTw5GCf3wXAWr3oKvnV9xnB0/VlHXYLXdBvKPkYztVgGqIzldIwPSGuNz KyRoo/YZCIdw+Ap5a4XRTeThTJex8csstAJ0fO3q5rmIcCBGyacWiALvm05lN9QO Dg/GJqq4hv6r/EbZL14TzoHuOSZJnpDRNnJY1td4GSfE40J+rZeAnaXZfB+X7Aow hqcRYRBLXK+QxQ== -----END CERTIFICATE-----Generated at Wed Dec 24 14:55:41 2025 by rpki-client