This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft File: MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft (raw, json) Hash identifier: xMXRFunPhv48W7CBf/RgRxYNgLpxHZER3b4ku6eqxPk= Subject key identifier: D1:E0:7C:2A:07:38:F4:EB:10:ED:D5:1C:11:AF:A0:CC:99:01:50:97 Authority key identifier: 32:C8:46:F1:91:43:32:30:D9:73:CB:C8:FD:A0:6B:60:2E:BF:CB:5B Certificate issuer: /CN=32c846f191433230d973cbc8fda06b602ebfcb5b Certificate serial: 019B145E80D607BFD5CB39C95C0FB55FBD91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MshG8ZFDMjDZc8vI_aBrYC6_y1s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft Manifest number: 1116 Signing time: Fri 12 Dec 2025 21:01:36 +0000 Manifest this update: Fri 12 Dec 2025 21:01:36 +0000 Manifest next update: Sat 13 Dec 2025 21:01:36 +0000 Files and hashes: 1: MshG8ZFDMjDZc8vI_aBrYC6_y1s.crl (hash: MkabLLHwkC59fIeFlrtJPEhLf7iSTwSpxmz5Xip0EUc=) 2: TBM-WxKs_JnUU_yCd07gs-SEpTM.roa (hash: ITKz1rUEY27fZS9fRQNAXZm00rkbdJk7GbuSl5tqJwg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.crl rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft rsync://rpki.ripe.net/repository/DEFAULT/MshG8ZFDMjDZc8vI_aBrYC6_y1s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 17:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:14:5e:80:d6:07:bf:d5:cb:39:c9:5c:0f:b5:5f:bd:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32c846f191433230d973cbc8fda06b602ebfcb5b Validity Not Before: Dec 12 21:01:36 2025 GMT Not After : Dec 13 21:01:36 2025 GMT Subject: CN=d1e07c2a0738f4eb10edd51c11afa0cc99015097 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:0b:bb:7a:1c:34:ce:e3:30:6a:96:4e:bc:8a: ee:13:f1:0e:97:30:54:c8:41:ff:e3:b0:d7:39:f2: c1:1c:c9:13:3f:d2:8c:53:06:05:ee:d9:6b:f2:e3: eb:06:2f:1e:ff:12:53:41:fa:62:3d:0f:c3:42:63: fb:a1:ff:59:72:fd:f8:9e:9f:03:02:85:1e:fe:92: 46:64:ab:c5:75:29:d1:44:a6:63:45:a4:3d:a1:69: 70:f1:23:f0:a5:bc:b7:0d:9c:29:a7:85:95:5f:a9: e1:e9:eb:f0:b7:2e:d2:2d:c4:0a:0a:7a:a5:2b:10: ad:20:4d:1e:c3:ef:49:23:06:1a:c1:43:03:83:ce: a1:2d:02:6c:51:f6:78:62:22:12:7b:8c:3d:3f:c2: cd:3f:6e:7f:9b:82:4e:d0:7f:38:1e:93:7d:be:69: 18:94:13:99:14:4e:d0:bb:c9:bc:68:6d:2a:d5:4f: 2a:c6:65:a6:51:0b:fd:73:b3:dd:19:57:ab:94:d8: 94:79:e5:cb:2a:23:a2:06:a5:7f:32:d6:03:54:37: 6a:aa:fe:9f:e4:94:3b:f0:f9:2e:9d:07:b6:0b:38: 6e:f6:b9:49:b9:76:a9:03:23:76:e3:9f:51:7a:87: ae:ce:c8:d8:10:f2:e6:3e:04:f3:14:7e:02:67:43: de:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:E0:7C:2A:07:38:F4:EB:10:ED:D5:1C:11:AF:A0:CC:99:01:50:97 X509v3 Authority Key Identifier: keyid:32:C8:46:F1:91:43:32:30:D9:73:CB:C8:FD:A0:6B:60:2E:BF:CB:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MshG8ZFDMjDZc8vI_aBrYC6_y1s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:56:4b:d8:e0:c0:12:d7:8e:23:52:6f:01:a8:69:f3:a3:66: 6a:91:dd:67:98:f6:c3:33:26:92:ae:fa:8a:dc:87:c2:4d:06: 49:24:6d:85:f5:49:09:40:ca:87:ed:15:cc:25:bd:d3:f1:2b: ef:0b:a4:b0:8e:36:4b:50:72:62:9d:44:4b:f1:a7:a4:ec:6a: 3d:a2:79:9a:32:b4:e9:3a:a2:26:07:3b:d2:56:da:1b:2d:a7: c0:81:4f:71:42:bd:2f:78:94:c0:a5:de:35:32:1e:e6:c6:1f: 7c:4d:8f:e9:f7:73:8a:dd:93:9d:dd:df:81:e5:35:e8:36:c7: 22:d1:6e:8e:e1:aa:46:90:a7:24:42:72:ae:6a:d5:5e:a9:29: de:62:d9:a5:24:91:2f:e0:9c:f9:b4:9b:85:79:b0:ec:ad:c0: 16:b9:06:6e:7f:cd:48:c6:10:fc:fb:62:b7:f5:ac:7b:65:d4: 7f:0f:96:eb:71:c3:c6:ad:6f:e7:18:9a:73:6d:9c:b1:b1:b2: 69:ba:b3:30:bb:05:2e:42:dc:9e:09:7d:c1:5d:d4:c2:02:83: 88:8e:10:7f:1c:e7:aa:87:4b:62:be:37:6c:98:14:5b:ac:f1: f2:88:20:cf:a5:49:5e:96:64:81:50:cd:3f:58:07:b4:22:97: 28:1d:bc:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsUXoDWB7/VyznJXA+1X72RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyYzg0NmYxOTE0MzMyMzBkOTczY2JjOGZkYTA2YjYwMmVi ZmNiNWIwHhcNMjUxMjEyMjEwMTM2WhcNMjUxMjEzMjEwMTM2WjAzMTEwLwYDVQQD EyhkMWUwN2MyYTA3MzhmNGViMTBlZGQ1MWMxMWFmYTBjYzk5MDE1MDk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigu7ehw0zuMwapZOvIruE/EOlzBU yEH/47DXOfLBHMkTP9KMUwYF7tlr8uPrBi8e/xJTQfpiPQ/DQmP7of9Zcv34np8D AoUe/pJGZKvFdSnRRKZjRaQ9oWlw8SPwpby3DZwpp4WVX6nh6evwty7SLcQKCnql KxCtIE0ew+9JIwYawUMDg86hLQJsUfZ4YiISe4w9P8LNP25/m4JO0H84HpN9vmkY lBOZFE7Qu8m8aG0q1U8qxmWmUQv9c7PdGVerlNiUeeXLKiOiBqV/MtYDVDdqqv6f 5JQ78PkunQe2Czhu9rlJuXapAyN2459ReoeuzsjYEPLmPgTzFH4CZ0PeCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNHgfCoHOPTrEO3VHBGvoMyZAVCXMB8GA1UdIwQY MBaAFDLIRvGRQzIw2XPLyP2ga2Auv8tbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXNoRzhaRkRNakRaYzh2SV9hQnJZQzZfeTFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9lNTc1NmUtMTMxNy00NDcyLTgzMDIt YTIzNDFkM2JiMDUzLzEvTXNoRzhaRkRNakRaYzh2SV9hQnJZQzZfeTFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9lNTc1NmUtMTMxNy00NDcyLTgzMDItYTIzNDFkM2JiMDUz LzEvTXNoRzhaRkRNakRaYzh2SV9hQnJZQzZfeTFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAplZL2ODA EteOI1JvAahp86NmapHdZ5j2wzMmkq76ityHwk0GSSRthfVJCUDKh+0VzCW90/Er 7wuksI42S1ByYp1ES/GnpOxqPaJ5mjK06TqiJgc70lbaGy2nwIFPcUK9L3iUwKXe NTIe5sYffE2P6fdzit2Tnd3fgeU16DbHItFujuGqRpCnJEJyrmrVXqkp3mLZpSSR L+Cc+bSbhXmw7K3AFrkGbn/NSMYQ/Ptit/Wse2XUfw+W63HDxq1v5xiac22csbGy abqzMLsFLkLcngl9wV3UwgKDiI4QfxznqodLYr43bJgUW6zx8oggz6VJXpZkgVDN P1gHtCKXKB28Dg== -----END CERTIFICATE-----Generated at Sat Dec 13 02:17:04 2025 by rpki-client