This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.mft File: MSQoUMrUHN91o8nWCyH8pUP3Q4Q.mft (raw, json) Hash identifier: 64Mt0VIAkMUD0vhv68P2Cpg9zFhFJvSeHgk2H6Z2yIg= Subject key identifier: E1:43:16:7C:D9:2D:7E:38:1A:59:BC:0F:9C:53:77:1F:10:2B:16:A4 Authority key identifier: 31:24:28:50:CA:D4:1C:DF:75:A3:C9:D6:0B:21:FC:A5:43:F7:43:84 Certificate issuer: /CN=31242850cad41cdf75a3c9d60b21fca543f74384 Certificate serial: 019AABA8615A3A3CD27FD5386E6BA42A8A62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.mft Manifest number: 1742 Signing time: Sat 22 Nov 2025 13:02:10 +0000 Manifest this update: Sat 22 Nov 2025 13:02:10 +0000 Manifest next update: Sun 23 Nov 2025 13:02:10 +0000 Files and hashes: 1: 6G5nNFKJWFzHfNQU02eI4MMaEEg.roa (hash: 6cSP9En6aM/vjTao+cEFN3U0rlWFoCsSysKwaT7SNIU=) 2: MSQoUMrUHN91o8nWCyH8pUP3Q4Q.crl (hash: OV9nCKR92n6gAh4EEaYHoR0017b92FxWAubbkO3LPzw=) 3: dTX8V27b3FZ8vwtYRtnPTsQ9bhg.roa (hash: 77xEsKoJwAS0zsMbL8sU52nye1oYIoAnIfCbqIAKy1c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.mft rsync://rpki.ripe.net/repository/DEFAULT/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ab:a8:61:5a:3a:3c:d2:7f:d5:38:6e:6b:a4:2a:8a:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31242850cad41cdf75a3c9d60b21fca543f74384 Validity Not Before: Nov 22 13:02:10 2025 GMT Not After : Nov 23 13:02:10 2025 GMT Subject: CN=e143167cd92d7e381a59bc0f9c53771f102b16a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:30:eb:92:db:32:58:04:2e:e6:8e:65:25:d7: 2d:9f:e9:ac:b8:fd:8d:3d:e7:fc:9c:9b:72:91:a5: 25:ad:2b:c6:a3:00:11:90:22:55:94:84:2f:8c:92: c0:1d:e2:10:f7:ad:da:a6:42:b0:9b:3a:56:fd:0b: 29:cf:fd:ce:75:a4:3f:3d:7e:c6:15:b2:26:fe:d8: 3a:d0:aa:34:e1:1f:7b:db:df:e2:30:b6:d3:40:e3: 95:35:ea:cd:14:d4:f2:e4:88:a0:9c:12:fb:4a:c8: 9f:59:66:6d:a9:48:6a:2d:9a:b5:e6:c1:26:e4:97: dc:c4:1f:4e:c4:c9:32:a9:05:95:09:3b:fc:5a:71: 9c:b2:a6:fe:ca:09:18:69:28:70:8f:6e:e1:90:c6: cc:1f:58:fe:27:7e:bb:27:ae:14:69:78:59:fd:66: 3b:1c:d8:bc:93:dd:f0:6c:b7:d2:72:2e:46:7b:bc: 76:d9:ef:58:a6:91:83:2d:70:29:f3:bb:8f:3f:70: 73:6b:0e:3d:cd:25:16:a2:38:5c:5a:af:f4:58:31: fa:f3:39:c9:74:5d:54:90:28:b2:5d:3d:35:50:3e: 4a:45:f7:38:30:45:f4:2f:37:32:a0:f3:3f:57:49: 0d:80:82:85:f5:c7:30:b1:26:4e:e9:4a:94:6a:d7: 2c:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:43:16:7C:D9:2D:7E:38:1A:59:BC:0F:9C:53:77:1F:10:2B:16:A4 X509v3 Authority Key Identifier: keyid:31:24:28:50:CA:D4:1C:DF:75:A3:C9:D6:0B:21:FC:A5:43:F7:43:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:96:c4:b2:a0:9a:2d:12:f1:6e:31:47:cd:c5:ea:fd:93:80: 59:fd:10:aa:38:99:c3:2d:75:2a:e1:79:62:aa:53:d4:c1:56: ab:3a:27:00:29:b2:c3:c3:66:36:d0:76:e4:ce:97:b8:99:4d: ea:f4:13:7b:6e:cc:12:40:9c:d7:ad:94:1c:df:3a:04:11:63: 03:ee:42:d4:9f:3c:db:59:d8:e0:19:2a:8f:6f:6f:2c:c8:ef: 1c:34:25:aa:b9:8a:42:f4:53:e0:3d:af:70:a8:19:7a:bb:7e: 05:12:bc:74:63:24:cb:34:3d:76:f5:c1:37:44:89:86:3f:c1: bc:f4:1f:f0:7c:02:92:16:71:1c:8c:27:17:19:53:e9:07:ba: 5a:61:59:67:b8:e6:c0:8e:fd:30:21:06:0f:89:90:3d:d7:d0: 05:5f:c1:5c:e4:34:4d:12:57:ca:da:c0:78:fc:49:ae:1e:f2: 72:a7:89:6e:d9:51:d3:3f:1f:e7:19:e4:3f:a9:a1:d0:19:4a: c2:b4:a5:e8:80:58:ae:42:19:47:89:2a:63:1e:2b:97:05:94: df:2c:2b:2c:8a:75:9e:40:8e:11:07:4a:08:a4:c1:b9:af:2b: 1e:e7:39:1c:0b:49:be:ee:46:ce:a8:71:47:cf:4c:a2:37:aa: 18:51:0b:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqrqGFaOjzSf9U4bmukKopiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxMjQyODUwY2FkNDFjZGY3NWEzYzlkNjBiMjFmY2E1NDNm NzQzODQwHhcNMjUxMTIyMTMwMjEwWhcNMjUxMTIzMTMwMjEwWjAzMTEwLwYDVQQD EyhlMTQzMTY3Y2Q5MmQ3ZTM4MWE1OWJjMGY5YzUzNzcxZjEwMmIxNmE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhTDrktsyWAQu5o5lJdctn+msuP2N Pef8nJtykaUlrSvGowARkCJVlIQvjJLAHeIQ963apkKwmzpW/Qspz/3OdaQ/PX7G FbIm/tg60Ko04R9729/iMLbTQOOVNerNFNTy5IignBL7SsifWWZtqUhqLZq15sEm 5JfcxB9OxMkyqQWVCTv8WnGcsqb+ygkYaShwj27hkMbMH1j+J367J64UaXhZ/WY7 HNi8k93wbLfSci5Ge7x22e9YppGDLXAp87uPP3Bzaw49zSUWojhcWq/0WDH68znJ dF1UkCiyXT01UD5KRfc4MEX0LzcyoPM/V0kNgIKF9ccwsSZO6UqUatcs8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOFDFnzZLX44Glm8D5xTdx8QKxakMB8GA1UdIwQY MBaAFDEkKFDK1BzfdaPJ1gsh/KVD90OEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVNRb1VNclVITjkxbzhuV0N5SDhwVVAzUTRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8xYTI3ZWMtZWIwYS00NDA2LWExZDEt MDdlZDQ2YjE0OWMzLzEvTVNRb1VNclVITjkxbzhuV0N5SDhwVVAzUTRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC8xYTI3ZWMtZWIwYS00NDA2LWExZDEtMDdlZDQ2YjE0OWMz LzEvTVNRb1VNclVITjkxbzhuV0N5SDhwVVAzUTRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoZbEsqCa LRLxbjFHzcXq/ZOAWf0QqjiZwy11KuF5YqpT1MFWqzonACmyw8NmNtB25M6XuJlN 6vQTe27MEkCc162UHN86BBFjA+5C1J8821nY4Bkqj29vLMjvHDQlqrmKQvRT4D2v cKgZert+BRK8dGMkyzQ9dvXBN0SJhj/BvPQf8HwCkhZxHIwnFxlT6Qe6WmFZZ7jm wI79MCEGD4mQPdfQBV/BXOQ0TRJXytrAePxJrh7ycqeJbtlR0z8f5xnkP6mh0BlK wrSl6IBYrkIZR4kqYx4rlwWU3ywrLIp1nkCOEQdKCKTBua8rHuc5HAtJvu5Gzqhx R89MojeqGFELGQ== -----END CERTIFICATE-----Generated at Sat Nov 22 21:44:03 2025 by rpki-client