This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/855ad6-a84f-4f01-bfc8-d3fd91ac7c9f/1/MSUs4wd4HQMZ_NdJT6ZPJgRQFqw.mft File: MSUs4wd4HQMZ_NdJT6ZPJgRQFqw.mft (raw, json) Hash identifier: Xbr2Rvok8uYw8IssR1GiLL/D98UlR70C4A+GSQAFvyc= Subject key identifier: BA:B3:0A:AC:D8:61:CB:37:2B:2F:86:5D:0F:0A:8E:3A:2E:FB:CA:BD Authority key identifier: 31:25:2C:E3:07:78:1D:03:19:FC:D7:49:4F:A6:4F:26:04:50:16:AC Certificate issuer: /CN=31252ce307781d0319fcd7494fa64f26045016ac Certificate serial: 019B33E884636BA142F02F683DD0E8FA8159 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MSUs4wd4HQMZ_NdJT6ZPJgRQFqw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/855ad6-a84f-4f01-bfc8-d3fd91ac7c9f/1/MSUs4wd4HQMZ_NdJT6ZPJgRQFqw.mft Manifest number: 3A Signing time: Fri 19 Dec 2025 00:00:34 +0000 Manifest this update: Fri 19 Dec 2025 00:00:34 +0000 Manifest next update: Sat 20 Dec 2025 00:00:34 +0000 Files and hashes: 1: MSUs4wd4HQMZ_NdJT6ZPJgRQFqw.crl (hash: DDbJ6J4bsO2iNLizSgUYgzjJIzCRZx7QUC04NucrDvo=) 2: e2kWH-n9xwHOTDKfeYfOg1xIQrU.roa (hash: ng2DaquieFqAgbP5IQorRbSXOj+A0OxG5GhDyC+r0bs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/855ad6-a84f-4f01-bfc8-d3fd91ac7c9f/1/MSUs4wd4HQMZ_NdJT6ZPJgRQFqw.crl rsync://rpki.ripe.net/repository/DEFAULT/53/855ad6-a84f-4f01-bfc8-d3fd91ac7c9f/1/MSUs4wd4HQMZ_NdJT6ZPJgRQFqw.mft rsync://rpki.ripe.net/repository/DEFAULT/MSUs4wd4HQMZ_NdJT6ZPJgRQFqw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:e8:84:63:6b:a1:42:f0:2f:68:3d:d0:e8:fa:81:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31252ce307781d0319fcd7494fa64f26045016ac Validity Not Before: Dec 19 00:00:34 2025 GMT Not After : Dec 20 00:00:34 2025 GMT Subject: CN=bab30aacd861cb372b2f865d0f0a8e3a2efbcabd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c5:af:3f:30:80:11:86:1a:55:f2:36:63:53: 91:eb:04:ec:91:ed:bf:b4:e2:23:49:c1:ef:bb:bc: 6d:76:bb:61:2e:af:18:9d:cc:ff:08:95:a3:64:f7: 7b:26:ca:93:5a:54:35:5e:d0:47:78:78:83:cb:79: 35:94:a4:4b:fd:f3:b8:95:a2:3b:00:ee:15:1e:16: 07:92:fb:d5:36:03:6b:c2:fe:83:97:b0:5e:7f:fb: 0d:80:b3:c6:e2:9d:10:b3:b0:5b:40:06:12:09:b6: 0f:75:03:db:af:0e:0b:e9:7a:c5:20:95:a8:61:fb: f0:5e:b4:09:46:6c:30:54:ff:20:ec:b4:28:3d:4f: d3:3c:3e:85:05:cc:b7:cb:3f:0f:8d:4b:d6:c1:77: b2:12:64:fe:84:dc:72:29:16:04:1e:b8:04:b7:20: d1:f3:b7:1a:0e:e8:55:fb:6c:01:53:b3:9d:5e:37: d2:fa:21:b8:51:9b:8c:e1:2b:f5:22:43:22:c0:58: 0f:df:10:df:aa:6f:e5:02:87:90:1d:75:ea:eb:9f: e1:c6:f2:c7:c2:b5:c7:d7:18:05:f8:eb:3f:5d:76: e4:13:3b:65:96:68:4c:5b:ca:e5:70:b8:6f:c6:d4: 79:82:ca:9e:ba:3b:35:4e:01:19:83:f3:14:3e:21: c6:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:B3:0A:AC:D8:61:CB:37:2B:2F:86:5D:0F:0A:8E:3A:2E:FB:CA:BD X509v3 Authority Key Identifier: keyid:31:25:2C:E3:07:78:1D:03:19:FC:D7:49:4F:A6:4F:26:04:50:16:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MSUs4wd4HQMZ_NdJT6ZPJgRQFqw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/855ad6-a84f-4f01-bfc8-d3fd91ac7c9f/1/MSUs4wd4HQMZ_NdJT6ZPJgRQFqw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/855ad6-a84f-4f01-bfc8-d3fd91ac7c9f/1/MSUs4wd4HQMZ_NdJT6ZPJgRQFqw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:80:65:e3:26:a5:aa:fe:4f:db:b0:76:5c:0a:79:05:16:a7: 07:96:97:0f:9d:7b:0b:a2:0f:d8:1a:f7:1b:1e:ef:36:f2:ba: 95:7b:48:25:d6:dc:04:ed:61:44:d6:6a:b2:81:ba:74:e0:44: 99:5e:77:da:26:ed:b9:9d:85:71:b2:19:10:78:5d:ab:65:f5: a2:ae:73:0b:dc:d6:42:e8:0d:8b:3a:33:b1:0f:45:62:96:40: 32:d2:38:64:c9:40:74:9b:45:7b:d3:3f:29:2e:e0:3d:36:d6: 54:53:66:03:56:3f:76:15:74:d0:95:74:1d:75:b8:34:8c:04: 60:56:7e:ad:4e:ed:79:1d:a9:08:1b:5f:71:df:0d:00:7d:5e: 8d:6a:f3:53:e7:da:0a:66:ec:e8:cf:6d:bf:24:33:33:8b:ec: 79:14:a1:5f:6d:ff:19:20:ca:f4:2f:32:6c:9d:cc:df:56:0b: 19:76:0b:6b:08:3b:fd:58:fa:5a:a8:1a:47:57:a8:fe:27:76: a2:4e:c7:93:94:05:f9:d3:8d:35:48:db:81:5c:a9:48:70:a6: 26:2c:fc:f4:ec:4b:f4:d7:13:5b:06:00:31:5e:c0:3a:ac:7b: 76:9f:31:7d:b8:08:b6:d4:24:83:c0:89:35:21:ba:12:73:79: 14:19:8b:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsz6IRja6FC8C9oPdDo+oFZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxMjUyY2UzMDc3ODFkMDMxOWZjZDc0OTRmYTY0ZjI2MDQ1 MDE2YWMwHhcNMjUxMjE5MDAwMDM0WhcNMjUxMjIwMDAwMDM0WjAzMTEwLwYDVQQD EyhiYWIzMGFhY2Q4NjFjYjM3MmIyZjg2NWQwZjBhOGUzYTJlZmJjYWJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8WvPzCAEYYaVfI2Y1OR6wTske2/ tOIjScHvu7xtdrthLq8Yncz/CJWjZPd7JsqTWlQ1XtBHeHiDy3k1lKRL/fO4laI7 AO4VHhYHkvvVNgNrwv6Dl7Bef/sNgLPG4p0Qs7BbQAYSCbYPdQPbrw4L6XrFIJWo YfvwXrQJRmwwVP8g7LQoPU/TPD6FBcy3yz8PjUvWwXeyEmT+hNxyKRYEHrgEtyDR 87caDuhV+2wBU7OdXjfS+iG4UZuM4Sv1IkMiwFgP3xDfqm/lAoeQHXXq65/hxvLH wrXH1xgF+Os/XXbkEztllmhMW8rlcLhvxtR5gsqeujs1TgEZg/MUPiHGIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLqzCqzYYcs3Ky+GXQ8Kjjou+8q9MB8GA1UdIwQY MBaAFDElLOMHeB0DGfzXSU+mTyYEUBasMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVNVczR3ZDRIUU1aX05kSlQ2WlBKZ1JRRnF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My84NTVhZDYtYTg0Zi00ZjAxLWJmYzgt ZDNmZDkxYWM3YzlmLzEvTVNVczR3ZDRIUU1aX05kSlQ2WlBKZ1JRRnF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My84NTVhZDYtYTg0Zi00ZjAxLWJmYzgtZDNmZDkxYWM3Yzlm LzEvTVNVczR3ZDRIUU1aX05kSlQ2WlBKZ1JRRnF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVYBl4yal qv5P27B2XAp5BRanB5aXD517C6IP2Br3Gx7vNvK6lXtIJdbcBO1hRNZqsoG6dOBE mV532ibtuZ2FcbIZEHhdq2X1oq5zC9zWQugNizozsQ9FYpZAMtI4ZMlAdJtFe9M/ KS7gPTbWVFNmA1Y/dhV00JV0HXW4NIwEYFZ+rU7teR2pCBtfcd8NAH1ejWrzU+fa Cmbs6M9tvyQzM4vseRShX23/GSDK9C8ybJ3M31YLGXYLawg7/Vj6WqgaR1eo/id2 ok7Hk5QF+dONNUjbgVypSHCmJiz89OxL9NcTWwYAMV7AOqx7dp8xfbgIttQkg8CJ NSG6EnN5FBmLFg== -----END CERTIFICATE-----Generated at Fri Dec 19 04:13:28 2025 by rpki-client