This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/9062e2-95ae-4656-b2ee-984a8eb51e45/1/Mss8BdaixRwv9S3Z3LnitVxASPk.mft File: Mss8BdaixRwv9S3Z3LnitVxASPk.mft (raw, json) Hash identifier: Sridghwv64yk+dGDvCfKM9wSYJW9k9IjQ4Jhc0jrMVQ= Subject key identifier: 9C:E1:FA:17:4A:BA:71:0E:BF:2F:11:0C:38:34:34:F9:16:93:BE:96 Authority key identifier: 32:CB:3C:05:D6:A2:C5:1C:2F:F5:2D:D9:DC:B9:E2:B5:5C:40:48:F9 Certificate issuer: /CN=32cb3c05d6a2c51c2ff52dd9dcb9e2b55c4048f9 Certificate serial: 019B59E46D583F83AC5F5587B56019A2846A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mss8BdaixRwv9S3Z3LnitVxASPk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/9062e2-95ae-4656-b2ee-984a8eb51e45/1/Mss8BdaixRwv9S3Z3LnitVxASPk.mft Manifest number: 1795 Signing time: Fri 26 Dec 2025 09:01:40 +0000 Manifest this update: Fri 26 Dec 2025 09:01:40 +0000 Manifest next update: Sat 27 Dec 2025 09:01:40 +0000 Files and hashes: 1: Mss8BdaixRwv9S3Z3LnitVxASPk.crl (hash: +ccgGbYa+3yWRAIVVJpLeuh3anCOnwtdM85XVXKP8z0=) 2: pkl1dG1Tn-y8sIzafCzQdaxLGO0.roa (hash: +t+HSalevZKgrBOwo+A1WYwHvxUsDh9dx8CrhAZYnCE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/9062e2-95ae-4656-b2ee-984a8eb51e45/1/Mss8BdaixRwv9S3Z3LnitVxASPk.crl rsync://rpki.ripe.net/repository/DEFAULT/33/9062e2-95ae-4656-b2ee-984a8eb51e45/1/Mss8BdaixRwv9S3Z3LnitVxASPk.mft rsync://rpki.ripe.net/repository/DEFAULT/Mss8BdaixRwv9S3Z3LnitVxASPk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e4:6d:58:3f:83:ac:5f:55:87:b5:60:19:a2:84:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32cb3c05d6a2c51c2ff52dd9dcb9e2b55c4048f9 Validity Not Before: Dec 26 09:01:40 2025 GMT Not After : Dec 27 09:01:40 2025 GMT Subject: CN=9ce1fa174aba710ebf2f110c383434f91693be96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ec:8e:de:36:d0:b3:fc:5d:4c:8a:f2:93:8b: 3e:23:0a:cc:c2:b0:e0:83:bc:ec:9c:43:ba:2f:7b: 7e:dd:b5:c4:6d:2a:dc:67:55:66:18:38:c5:c8:d8: 5b:22:92:75:ca:06:eb:62:7e:af:e9:d8:81:4f:60: 43:29:86:ac:70:cb:42:d6:65:08:db:3b:ab:ec:93: fa:be:d0:8b:19:7f:c1:95:3d:dc:b0:2a:bb:c0:36: 17:d0:3e:89:a1:46:6d:ee:db:75:6f:69:e5:1c:e3: a6:e0:8e:54:94:8e:13:16:8c:37:22:8b:5e:d8:68: 0e:82:a2:77:0c:cc:f0:29:16:4f:64:d6:f3:53:c6: 63:8d:f4:d4:a2:2b:8f:ab:19:ae:b6:6e:01:7d:24: 31:e5:d0:ff:77:fc:61:2b:0b:98:f9:f3:b9:06:5a: 51:ba:cd:d2:13:19:82:0b:56:7f:f7:cd:18:4d:65: 6e:79:df:cc:a5:6c:e1:b1:2f:16:dc:82:bf:cc:6f: e1:14:a6:55:ad:3b:70:5f:6e:00:21:03:30:49:c7: 38:06:a0:5f:03:64:2c:d4:f0:7a:60:4a:4f:62:86: 60:54:93:fb:08:e0:45:42:d1:ac:19:e1:eb:70:3c: b5:a9:a3:49:01:d0:03:4c:d7:e5:e3:16:39:ad:b3: 1f:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:E1:FA:17:4A:BA:71:0E:BF:2F:11:0C:38:34:34:F9:16:93:BE:96 X509v3 Authority Key Identifier: keyid:32:CB:3C:05:D6:A2:C5:1C:2F:F5:2D:D9:DC:B9:E2:B5:5C:40:48:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mss8BdaixRwv9S3Z3LnitVxASPk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/9062e2-95ae-4656-b2ee-984a8eb51e45/1/Mss8BdaixRwv9S3Z3LnitVxASPk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/9062e2-95ae-4656-b2ee-984a8eb51e45/1/Mss8BdaixRwv9S3Z3LnitVxASPk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:a4:c4:6b:ca:81:50:2f:e1:31:62:74:7c:ef:a5:72:ff:b5: f5:2d:b4:ba:b9:8a:db:ce:6e:d8:0f:cb:b7:f3:9d:5d:c2:14: 82:29:d1:b5:37:85:9a:fa:1e:73:a6:28:ee:62:ef:55:d8:95: 5a:4e:7d:70:ed:ec:a5:28:9b:d5:29:aa:09:96:b2:48:28:55: f2:f4:24:da:e5:8e:b3:44:51:8f:0d:f0:82:96:3a:26:93:1c: 8f:84:5c:2f:eb:1a:92:79:2e:36:d7:e5:e9:66:44:e8:eb:35: 77:14:5e:4a:5a:02:e6:16:da:3c:6c:0a:14:06:58:42:0c:1c: 1e:0c:db:99:d0:ee:85:af:7e:c3:06:bc:bb:aa:7e:18:8f:0e: a9:7c:c9:25:03:d9:92:80:93:3f:9e:08:b2:96:8a:d1:bb:d4: 01:b0:44:76:e7:8b:16:42:77:4c:c1:ea:7f:cc:49:6e:2d:98: ea:63:7c:28:e6:14:6b:2a:4b:85:27:69:7a:76:ca:f0:b6:82: 32:61:c9:49:eb:87:3b:ea:6a:49:a5:e2:72:0d:b9:9e:ea:6d: a1:cf:65:00:35:a4:3c:a9:23:30:0f:48:0d:b0:72:75:1c:a7: 1e:20:41:c0:ef:3f:92:cc:bf:ef:f7:c1:08:3a:59:3e:1b:22: 18:4b:a1:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ5G1YP4OsX1WHtWAZooRqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyY2IzYzA1ZDZhMmM1MWMyZmY1MmRkOWRjYjllMmI1NWM0 MDQ4ZjkwHhcNMjUxMjI2MDkwMTQwWhcNMjUxMjI3MDkwMTQwWjAzMTEwLwYDVQQD Eyg5Y2UxZmExNzRhYmE3MTBlYmYyZjExMGMzODM0MzRmOTE2OTNiZTk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuyO3jbQs/xdTIryk4s+IwrMwrDg g7zsnEO6L3t+3bXEbSrcZ1VmGDjFyNhbIpJ1ygbrYn6v6diBT2BDKYascMtC1mUI 2zur7JP6vtCLGX/BlT3csCq7wDYX0D6JoUZt7tt1b2nlHOOm4I5UlI4TFow3Iote 2GgOgqJ3DMzwKRZPZNbzU8ZjjfTUoiuPqxmutm4BfSQx5dD/d/xhKwuY+fO5BlpR us3SExmCC1Z/980YTWVued/MpWzhsS8W3IK/zG/hFKZVrTtwX24AIQMwScc4BqBf A2Qs1PB6YEpPYoZgVJP7COBFQtGsGeHrcDy1qaNJAdADTNfl4xY5rbMfCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJzh+hdKunEOvy8RDDg0NPkWk76WMB8GA1UdIwQY MBaAFDLLPAXWosUcL/Ut2dy54rVcQEj5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXNzOEJkYWl4Und2OVMzWjNMbml0VnhBU1BrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy85MDYyZTItOTVhZS00NjU2LWIyZWUt OTg0YThlYjUxZTQ1LzEvTXNzOEJkYWl4Und2OVMzWjNMbml0VnhBU1BrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy85MDYyZTItOTVhZS00NjU2LWIyZWUtOTg0YThlYjUxZTQ1 LzEvTXNzOEJkYWl4Und2OVMzWjNMbml0VnhBU1BrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAaTEa8qB UC/hMWJ0fO+lcv+19S20urmK285u2A/Lt/OdXcIUginRtTeFmvoec6Yo7mLvVdiV Wk59cO3spSib1SmqCZaySChV8vQk2uWOs0RRjw3wgpY6JpMcj4RcL+saknkuNtfl 6WZE6Os1dxReSloC5hbaPGwKFAZYQgwcHgzbmdDuha9+wwa8u6p+GI8OqXzJJQPZ koCTP54IspaK0bvUAbBEdueLFkJ3TMHqf8xJbi2Y6mN8KOYUaypLhSdpenbK8LaC MmHJSeuHO+pqSaXicg25nuptoc9lADWkPKkjMA9IDbBydRynHiBBwO8/ksy/7/fB CDpZPhsiGEuhhg== -----END CERTIFICATE-----Generated at Fri Dec 26 15:44:22 2025 by rpki-client