This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/5f6ba0-9ca5-4a67-9f3a-187a57a4d677/1/msLwFwWoWaHX3lAwr4LfmlLI7C8.mft File: msLwFwWoWaHX3lAwr4LfmlLI7C8.mft (raw, json) Hash identifier: +X049/aiOFqoUQRGY5y1tOgctqAksgEWODcJW0NJNp0= Subject key identifier: 6C:5B:27:EC:EC:FF:9B:EB:04:8F:A1:0E:87:09:EC:BF:A8:56:DE:F0 Authority key identifier: 9A:C2:F0:17:05:A8:59:A1:D7:DE:50:30:AF:82:DF:9A:52:C8:EC:2F Certificate issuer: /CN=9ac2f01705a859a1d7de5030af82df9a52c8ec2f Certificate serial: 019B597748333B6147DD721F5A925BCD5AD2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/msLwFwWoWaHX3lAwr4LfmlLI7C8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/5f6ba0-9ca5-4a67-9f3a-187a57a4d677/1/msLwFwWoWaHX3lAwr4LfmlLI7C8.mft Manifest number: 1793 Signing time: Fri 26 Dec 2025 07:02:27 +0000 Manifest this update: Fri 26 Dec 2025 07:02:27 +0000 Manifest next update: Sat 27 Dec 2025 07:02:27 +0000 Files and hashes: 1: msLwFwWoWaHX3lAwr4LfmlLI7C8.crl (hash: CfuI435tlmwseSqo/URfD5ZROVdSsfjRQf9MiG5p7Sc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/5f6ba0-9ca5-4a67-9f3a-187a57a4d677/1/msLwFwWoWaHX3lAwr4LfmlLI7C8.crl rsync://rpki.ripe.net/repository/DEFAULT/37/5f6ba0-9ca5-4a67-9f3a-187a57a4d677/1/msLwFwWoWaHX3lAwr4LfmlLI7C8.mft rsync://rpki.ripe.net/repository/DEFAULT/msLwFwWoWaHX3lAwr4LfmlLI7C8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:77:48:33:3b:61:47:dd:72:1f:5a:92:5b:cd:5a:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ac2f01705a859a1d7de5030af82df9a52c8ec2f Validity Not Before: Dec 26 07:02:27 2025 GMT Not After : Dec 27 07:02:27 2025 GMT Subject: CN=6c5b27ececff9beb048fa10e8709ecbfa856def0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:0e:8e:f2:99:62:d2:f9:8f:a8:08:40:2c:3b: 45:8b:95:0c:d9:30:1f:ae:85:8b:92:75:12:62:17: 75:b9:3a:4c:d0:4f:64:38:1f:5a:5d:98:78:46:1b: 3d:ff:b4:8b:56:5d:2d:51:ee:97:75:54:5f:de:e8: ea:e7:d1:44:33:03:59:60:e7:f0:2b:08:67:0b:12: c3:77:6d:bf:3d:39:7e:60:cb:19:f7:78:d5:c5:3d: 8f:e8:d3:40:42:fa:cd:5e:3b:07:c0:e0:23:52:22: 7e:e4:92:bd:c8:13:82:b1:78:9c:75:fc:16:a7:fd: 57:5b:f2:c0:a0:7d:d2:52:46:da:e5:9b:2d:1b:ea: 78:bb:e0:e6:dc:41:07:ed:3d:60:de:ed:c6:d8:ad: 56:c1:b3:74:59:ac:40:8f:7d:25:9d:a1:4d:4a:83: ec:7c:5c:82:54:b8:cf:03:25:32:d7:cb:29:56:7f: 4c:b6:b3:6e:e4:41:ea:11:45:35:30:c2:34:24:79: ed:5c:a7:51:c7:72:61:12:1b:b0:3f:6c:77:4a:8b: 14:e7:38:ca:4f:c4:c6:c1:ee:80:2d:09:8c:42:ab: 9d:b6:6c:07:7f:0f:8a:1c:d0:f5:6b:1b:75:0c:4d: c7:60:48:89:7d:ef:55:61:57:e5:70:a3:cb:72:b7: 1a:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:5B:27:EC:EC:FF:9B:EB:04:8F:A1:0E:87:09:EC:BF:A8:56:DE:F0 X509v3 Authority Key Identifier: keyid:9A:C2:F0:17:05:A8:59:A1:D7:DE:50:30:AF:82:DF:9A:52:C8:EC:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/msLwFwWoWaHX3lAwr4LfmlLI7C8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/5f6ba0-9ca5-4a67-9f3a-187a57a4d677/1/msLwFwWoWaHX3lAwr4LfmlLI7C8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/5f6ba0-9ca5-4a67-9f3a-187a57a4d677/1/msLwFwWoWaHX3lAwr4LfmlLI7C8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:b4:69:5f:48:b7:18:01:a1:bd:b0:b5:cc:17:1c:bc:b9:fd: 13:1c:d4:04:c3:f6:a9:28:7d:fe:1c:84:76:29:39:3b:1d:aa: 12:40:43:de:e4:b8:fe:0b:00:84:e2:f1:08:c7:a3:6f:f3:2b: e7:20:b5:18:ca:f7:e3:d9:89:01:b8:60:9c:1e:1c:e5:77:37: 2e:96:ad:69:cd:c1:80:60:91:39:95:bb:2c:35:aa:67:b6:a4: 96:f6:13:b6:a5:94:9c:4a:41:0a:25:da:80:96:d5:09:24:0a: 8b:4c:af:e4:74:25:29:9b:f8:44:52:ea:02:c9:ac:97:f0:eb: b6:92:7c:d1:c1:c1:93:9e:bc:e1:1c:f1:31:86:89:a5:03:2f: 57:4e:de:cd:45:7c:78:a9:b3:7c:d0:06:66:16:43:52:f0:c3: fd:d0:36:05:c8:55:d0:f3:38:15:11:80:cd:88:48:70:b3:4e: e8:22:7b:50:4a:31:4f:e9:c9:d5:b3:7d:f8:9c:cf:20:52:02: b2:f1:80:21:ad:37:f9:28:a7:7d:a4:66:f3:7f:3f:84:de:fc: 23:53:63:d8:d2:a5:44:1f:7d:ef:b2:35:b2:6d:d5:32:9c:18: 18:82:03:99:8a:6f:99:44:62:6c:a1:b3:da:f7:e0:7b:d2:be: 0c:cc:af:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZd0gzO2FH3XIfWpJbzVrSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhYzJmMDE3MDVhODU5YTFkN2RlNTAzMGFmODJkZjlhNTJj OGVjMmYwHhcNMjUxMjI2MDcwMjI3WhcNMjUxMjI3MDcwMjI3WjAzMTEwLwYDVQQD Eyg2YzViMjdlY2VjZmY5YmViMDQ4ZmExMGU4NzA5ZWNiZmE4NTZkZWYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2w6O8pli0vmPqAhALDtFi5UM2TAf roWLknUSYhd1uTpM0E9kOB9aXZh4Rhs9/7SLVl0tUe6XdVRf3ujq59FEMwNZYOfw KwhnCxLDd22/PTl+YMsZ93jVxT2P6NNAQvrNXjsHwOAjUiJ+5JK9yBOCsXicdfwW p/1XW/LAoH3SUkba5ZstG+p4u+Dm3EEH7T1g3u3G2K1WwbN0WaxAj30lnaFNSoPs fFyCVLjPAyUy18spVn9MtrNu5EHqEUU1MMI0JHntXKdRx3JhEhuwP2x3SosU5zjK T8TGwe6ALQmMQqudtmwHfw+KHND1axt1DE3HYEiJfe9VYVflcKPLcrcapQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGxbJ+zs/5vrBI+hDocJ7L+oVt7wMB8GA1UdIwQY MBaAFJrC8BcFqFmh195QMK+C35pSyOwvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXNMd0Z3V29XYUhYM2xBd3I0TGZtbExJN0M4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy81ZjZiYTAtOWNhNS00YTY3LTlmM2Et MTg3YTU3YTRkNjc3LzEvbXNMd0Z3V29XYUhYM2xBd3I0TGZtbExJN0M4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy81ZjZiYTAtOWNhNS00YTY3LTlmM2EtMTg3YTU3YTRkNjc3 LzEvbXNMd0Z3V29XYUhYM2xBd3I0TGZtbExJN0M4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALrRpX0i3 GAGhvbC1zBccvLn9ExzUBMP2qSh9/hyEdik5Ox2qEkBD3uS4/gsAhOLxCMejb/Mr 5yC1GMr349mJAbhgnB4c5Xc3Lpatac3BgGCROZW7LDWqZ7aklvYTtqWUnEpBCiXa gJbVCSQKi0yv5HQlKZv4RFLqAsmsl/DrtpJ80cHBk5684RzxMYaJpQMvV07ezUV8 eKmzfNAGZhZDUvDD/dA2BchV0PM4FRGAzYhIcLNO6CJ7UEoxT+nJ1bN9+JzPIFIC svGAIa03+SinfaRm838/hN78I1Nj2NKlRB9977I1sm3VMpwYGIIDmYpvmURibKGz 2vfge9K+DMyvzw== -----END CERTIFICATE-----Generated at Fri Dec 26 14:09:07 2025 by rpki-client