This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.mft File: MSbg1dN79m8-nYh-rq2cpjwYlIk.mft (raw, json) Hash identifier: 96F2juW5Y1shAUMqTq7D4KCXtcmw4/O8/TnUJyNOiQQ= Subject key identifier: 03:0A:0A:4E:91:1F:5C:C7:9B:2D:F3:E2:C3:90:33:72:C1:D4:C0:C3 Authority key identifier: 31:26:E0:D5:D3:7B:F6:6F:3E:9D:88:7E:AE:AD:9C:A6:3C:18:94:89 Certificate issuer: /CN=3126e0d5d37bf66f3e9d887eaead9ca63c189489 Certificate serial: 019B0F00C6A50548430129072AFC48702F59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MSbg1dN79m8-nYh-rq2cpjwYlIk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.mft Manifest number: 176F Signing time: Thu 11 Dec 2025 20:01:07 +0000 Manifest this update: Thu 11 Dec 2025 20:01:07 +0000 Manifest next update: Fri 12 Dec 2025 20:01:07 +0000 Files and hashes: 1: MSbg1dN79m8-nYh-rq2cpjwYlIk.crl (hash: UHFHO09Ij9xQydXTkW/rUwasfHeh23IRjS8EQEpAw+8=) 2: UmPwqKyARZqa-K92MHrGqC9QyYg.roa (hash: j/qBkJJtXcMUmDoWtmsXwP9m2yfPn26NNyaQXDeqLdE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.mft rsync://rpki.ripe.net/repository/DEFAULT/MSbg1dN79m8-nYh-rq2cpjwYlIk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 20:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:00:c6:a5:05:48:43:01:29:07:2a:fc:48:70:2f:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3126e0d5d37bf66f3e9d887eaead9ca63c189489 Validity Not Before: Dec 11 20:01:07 2025 GMT Not After : Dec 12 20:01:07 2025 GMT Subject: CN=030a0a4e911f5cc79b2df3e2c3903372c1d4c0c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:f5:c5:15:81:64:08:52:61:ee:c3:49:ae:58: 72:68:a4:ac:e8:fa:29:89:6b:f5:13:21:31:b9:c9: f1:41:92:b1:b8:56:07:b4:73:24:4e:fd:ba:d2:37: 2e:d3:82:5d:94:eb:81:88:74:e9:dd:42:7f:a7:75: 0d:d4:7a:7b:24:e5:39:04:01:28:67:93:1e:90:f7: 5f:17:fc:57:23:71:00:d1:9d:de:01:ca:be:c7:80: 23:b4:ec:6d:cf:02:f8:e4:28:a2:bf:7f:d9:88:fd: 9a:60:b1:20:3f:0e:c4:ca:c3:d0:fd:2b:f0:a9:70: d6:8a:43:bd:a1:0c:3e:09:b1:51:2d:e7:2f:f4:f7: 8a:97:a6:cc:68:3e:b2:57:9e:8f:43:dc:9e:ce:25: c9:60:06:c5:8a:c4:89:30:7f:a6:d7:10:ea:e8:d3: 6b:9e:51:4c:7f:17:a2:14:e6:5e:a1:ec:e8:c8:84: cf:be:a1:d7:40:88:46:29:b2:31:b7:a9:2a:d3:1f: 78:2a:26:c8:96:4a:4c:0b:ea:6f:56:12:d3:88:fa: 10:bb:d3:ab:9c:5a:b3:5c:dd:a5:23:e2:bf:3c:ad: 37:19:4e:f8:50:69:e8:7c:20:31:61:c3:a7:de:97: 3d:d9:2d:d3:49:91:95:9d:e5:ab:65:9f:df:96:58: 07:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:0A:0A:4E:91:1F:5C:C7:9B:2D:F3:E2:C3:90:33:72:C1:D4:C0:C3 X509v3 Authority Key Identifier: keyid:31:26:E0:D5:D3:7B:F6:6F:3E:9D:88:7E:AE:AD:9C:A6:3C:18:94:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MSbg1dN79m8-nYh-rq2cpjwYlIk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:30:f7:1f:49:bd:34:00:cf:29:fa:a9:94:4d:48:40:fd:e3: d9:e7:d0:52:2e:6f:86:48:c3:23:b9:f4:1c:ba:3f:bd:50:51: 5b:8c:34:69:40:8d:6d:fe:7d:b2:ec:8f:60:35:44:b0:e2:33: f5:ae:ab:a6:09:a7:9a:58:02:e6:8a:78:ec:16:86:be:69:60: 32:15:9d:7f:19:d3:fd:e9:db:83:df:31:a6:65:34:d1:b5:86: 3d:84:ed:fe:f2:5b:6c:cd:f6:77:bd:37:14:18:59:38:33:f5: 2a:36:ba:fe:5f:08:6c:16:11:cc:d4:86:a4:3a:54:ff:f3:32: f1:ab:2a:51:e1:fd:97:57:7b:ca:81:74:ce:51:da:2c:3f:45: b3:69:72:1f:1a:e0:ee:97:22:28:85:7d:15:cc:2f:f7:02:ce: 05:8b:8b:e4:3a:b3:6e:37:43:92:37:04:bb:b9:8d:77:92:ed: 4b:06:24:49:5f:4c:4e:7d:40:86:f1:ab:e4:ad:fc:3f:53:c7: 46:6b:2b:a2:46:34:1b:21:41:e1:ed:c5:3d:6f:b6:08:aa:da: b8:63:be:51:c9:cc:c9:a2:4d:61:44:75:1b:a8:cf:61:24:f9: f6:ca:43:25:fd:90:8e:2a:8c:a1:8d:be:1a:4f:5c:53:e9:31: d6:d4:00:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPAMalBUhDASkHKvxIcC9ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxMjZlMGQ1ZDM3YmY2NmYzZTlkODg3ZWFlYWQ5Y2E2M2Mx ODk0ODkwHhcNMjUxMjExMjAwMTA3WhcNMjUxMjEyMjAwMTA3WjAzMTEwLwYDVQQD EygwMzBhMGE0ZTkxMWY1Y2M3OWIyZGYzZTJjMzkwMzM3MmMxZDRjMGMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5/XFFYFkCFJh7sNJrlhyaKSs6Pop iWv1EyExucnxQZKxuFYHtHMkTv260jcu04JdlOuBiHTp3UJ/p3UN1Hp7JOU5BAEo Z5MekPdfF/xXI3EA0Z3eAcq+x4AjtOxtzwL45Ciiv3/ZiP2aYLEgPw7EysPQ/Svw qXDWikO9oQw+CbFRLecv9PeKl6bMaD6yV56PQ9yeziXJYAbFisSJMH+m1xDq6NNr nlFMfxeiFOZeoezoyITPvqHXQIhGKbIxt6kq0x94KibIlkpMC+pvVhLTiPoQu9Or nFqzXN2lI+K/PK03GU74UGnofCAxYcOn3pc92S3TSZGVneWrZZ/fllgHFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAMKCk6RH1zHmy3z4sOQM3LB1MDDMB8GA1UdIwQY MBaAFDEm4NXTe/ZvPp2Ifq6tnKY8GJSJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVNiZzFkTjc5bTgtblloLXJxMmNwandZbElrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8zMmVmNWEtZTJiOS00OTk5LWJmYjIt NmU4ZWQzYzczMDdlLzEvTVNiZzFkTjc5bTgtblloLXJxMmNwandZbElrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8zMmVmNWEtZTJiOS00OTk5LWJmYjItNmU4ZWQzYzczMDdl LzEvTVNiZzFkTjc5bTgtblloLXJxMmNwandZbElrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWTD3H0m9 NADPKfqplE1IQP3j2efQUi5vhkjDI7n0HLo/vVBRW4w0aUCNbf59suyPYDVEsOIz 9a6rpgmnmlgC5op47BaGvmlgMhWdfxnT/enbg98xpmU00bWGPYTt/vJbbM32d703 FBhZODP1Kja6/l8IbBYRzNSGpDpU//My8asqUeH9l1d7yoF0zlHaLD9Fs2lyHxrg 7pciKIV9Fcwv9wLOBYuL5DqzbjdDkjcEu7mNd5LtSwYkSV9MTn1AhvGr5K38P1PH RmsrokY0GyFB4e3FPW+2CKrauGO+UcnMyaJNYUR1G6jPYST59spDJf2QjiqMoY2+ Gk9cU+kx1tQAzw== -----END CERTIFICATE-----Generated at Fri Dec 12 05:15:55 2025 by rpki-client