This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/b60b69-2e42-483d-8e71-b7428487ab3d/1/MSJY70M2DehMJcJvn7V6t-ePkWI.mft File: MSJY70M2DehMJcJvn7V6t-ePkWI.mft (raw, json) Hash identifier: /B9htMm7tVBeDZexlC6NHGveRZrj1FnsCskIY1PNvGw= Subject key identifier: 29:DF:6C:8F:9C:D1:8A:B6:C7:FB:CE:29:29:8F:76:9E:30:B7:EC:6E Authority key identifier: 31:22:58:EF:43:36:0D:E8:4C:25:C2:6F:9F:B5:7A:B7:E7:8F:91:62 Certificate issuer: /CN=312258ef43360de84c25c26f9fb57ab7e78f9162 Certificate serial: 019B59AC8BB3DAA9F82931BE30BE984E6C6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MSJY70M2DehMJcJvn7V6t-ePkWI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/b60b69-2e42-483d-8e71-b7428487ab3d/1/MSJY70M2DehMJcJvn7V6t-ePkWI.mft Manifest number: 69 Signing time: Fri 26 Dec 2025 08:00:38 +0000 Manifest this update: Fri 26 Dec 2025 08:00:38 +0000 Manifest next update: Sat 27 Dec 2025 08:00:38 +0000 Files and hashes: 1: 95ojNrCRHrkw3Lw0A9w7F9KN3K4.roa (hash: sfSKA+1SpVw/MDk+oNTr+sF8VTzQjSJ1fbmRWnJ6h44=) 2: MSJY70M2DehMJcJvn7V6t-ePkWI.crl (hash: +IslkkCBY1APmE+x5OREWdUg7PcM+IOexp6Ld0YQ1zY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/b60b69-2e42-483d-8e71-b7428487ab3d/1/MSJY70M2DehMJcJvn7V6t-ePkWI.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/b60b69-2e42-483d-8e71-b7428487ab3d/1/MSJY70M2DehMJcJvn7V6t-ePkWI.mft rsync://rpki.ripe.net/repository/DEFAULT/MSJY70M2DehMJcJvn7V6t-ePkWI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ac:8b:b3:da:a9:f8:29:31:be:30:be:98:4e:6c:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=312258ef43360de84c25c26f9fb57ab7e78f9162 Validity Not Before: Dec 26 08:00:38 2025 GMT Not After : Dec 27 08:00:38 2025 GMT Subject: CN=29df6c8f9cd18ab6c7fbce29298f769e30b7ec6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:70:18:1e:71:74:0b:50:f0:43:4f:10:ce:89: 59:c7:2a:70:f3:6b:b4:5a:49:44:82:f5:40:06:5c: 1e:0e:61:57:b3:0d:05:16:59:45:17:8a:dd:bf:90: 44:9f:5f:2d:38:69:79:42:78:46:1d:18:f8:c3:2b: 3f:b3:6f:9c:42:d4:b5:85:31:af:db:02:37:bc:ba: e9:65:c3:e0:cd:c7:8a:4d:b8:f9:fd:66:30:51:b9: 2b:c0:93:ca:51:63:6f:1c:c3:4e:ba:b3:a5:64:02: 0d:bc:1f:b5:2b:0e:1c:27:b3:a1:ff:e5:4b:c9:89: 5b:ca:bb:1f:4a:dd:d1:c1:70:c4:0a:7c:fa:33:87: fd:ea:4d:da:80:66:8f:cd:64:39:be:46:67:b4:07: f0:7a:7c:6d:a8:30:5c:64:45:7c:19:f0:23:c2:1f: 6a:9b:3c:1f:49:51:f6:95:b1:f2:e0:79:55:50:c4: 3f:97:58:1a:cd:10:0e:5f:67:8c:67:28:7f:84:33: a7:c4:6c:8d:3c:38:6e:7a:a5:01:7e:23:11:7d:83: b2:91:ba:a0:dd:fd:3d:a7:09:6d:ee:8b:f0:c8:fd: e7:f1:ee:ea:ad:5b:90:4f:86:9f:89:ff:24:1d:a9: bf:ca:3e:15:66:4f:a8:f1:3c:18:43:d0:5d:b9:bb: 81:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:DF:6C:8F:9C:D1:8A:B6:C7:FB:CE:29:29:8F:76:9E:30:B7:EC:6E X509v3 Authority Key Identifier: keyid:31:22:58:EF:43:36:0D:E8:4C:25:C2:6F:9F:B5:7A:B7:E7:8F:91:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MSJY70M2DehMJcJvn7V6t-ePkWI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b60b69-2e42-483d-8e71-b7428487ab3d/1/MSJY70M2DehMJcJvn7V6t-ePkWI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b60b69-2e42-483d-8e71-b7428487ab3d/1/MSJY70M2DehMJcJvn7V6t-ePkWI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:34:16:6e:b5:9c:bf:dd:b4:0f:8f:ea:60:24:f1:20:9c:30: 12:ab:25:4a:00:27:0e:d9:e3:ab:92:bf:d9:4e:7b:26:68:43: 76:3a:72:ea:7f:e2:67:d8:e9:7c:b0:a7:29:89:7b:99:05:ab: d5:1d:b0:3e:7a:83:1f:d2:01:b6:20:4d:28:8b:1f:04:9a:d6: a2:21:c2:f8:ad:e0:da:af:e3:16:45:50:94:29:99:7e:1e:39: 29:b6:b3:14:e9:b0:f3:58:02:6c:ce:b2:db:03:b7:94:a6:ad: e4:0b:2a:30:25:39:61:e4:b8:0f:dc:a4:1a:81:fe:d8:a3:61: a0:a3:fc:b5:46:e3:2d:15:b8:2e:1f:06:9c:59:a1:69:b6:0b: 71:b8:72:ae:9c:53:b2:67:50:ec:a3:71:62:36:2e:5c:30:db: 59:a7:47:31:53:2e:fa:39:16:7c:3a:41:93:9d:a7:f6:9e:e1: bd:74:75:40:27:e0:12:70:8d:07:db:f9:62:af:51:bd:28:42: 76:95:f3:78:bd:82:d9:b0:64:55:d5:ba:eb:50:c2:18:2a:d9: 07:90:cb:d6:f4:64:28:7e:48:77:c4:b1:30:2b:f1:88:d2:e9: 0b:dc:8f:22:c2:3c:38:80:66:f1:a8:ac:61:57:4d:6e:12:8b: 9e:dd:ac:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrIuz2qn4KTG+ML6YTmxqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxMjI1OGVmNDMzNjBkZTg0YzI1YzI2ZjlmYjU3YWI3ZTc4 ZjkxNjIwHhcNMjUxMjI2MDgwMDM4WhcNMjUxMjI3MDgwMDM4WjAzMTEwLwYDVQQD EygyOWRmNmM4ZjljZDE4YWI2YzdmYmNlMjkyOThmNzY5ZTMwYjdlYzZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXAYHnF0C1DwQ08QzolZxypw82u0 WklEgvVABlweDmFXsw0FFllFF4rdv5BEn18tOGl5QnhGHRj4wys/s2+cQtS1hTGv 2wI3vLrpZcPgzceKTbj5/WYwUbkrwJPKUWNvHMNOurOlZAINvB+1Kw4cJ7Oh/+VL yYlbyrsfSt3RwXDECnz6M4f96k3agGaPzWQ5vkZntAfwenxtqDBcZEV8GfAjwh9q mzwfSVH2lbHy4HlVUMQ/l1gazRAOX2eMZyh/hDOnxGyNPDhueqUBfiMRfYOykbqg 3f09pwlt7ovwyP3n8e7qrVuQT4afif8kHam/yj4VZk+o8TwYQ9BdubuBbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCnfbI+c0Yq2x/vOKSmPdp4wt+xuMB8GA1UdIwQY MBaAFDEiWO9DNg3oTCXCb5+1erfnj5FiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVNKWTcwTTJEZWhNSmNKdm43VjZ0LWVQa1dJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9iNjBiNjktMmU0Mi00ODNkLThlNzEt Yjc0Mjg0ODdhYjNkLzEvTVNKWTcwTTJEZWhNSmNKdm43VjZ0LWVQa1dJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9iNjBiNjktMmU0Mi00ODNkLThlNzEtYjc0Mjg0ODdhYjNk LzEvTVNKWTcwTTJEZWhNSmNKdm43VjZ0LWVQa1dJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwDQWbrWc v920D4/qYCTxIJwwEqslSgAnDtnjq5K/2U57JmhDdjpy6n/iZ9jpfLCnKYl7mQWr 1R2wPnqDH9IBtiBNKIsfBJrWoiHC+K3g2q/jFkVQlCmZfh45KbazFOmw81gCbM6y 2wO3lKat5AsqMCU5YeS4D9ykGoH+2KNhoKP8tUbjLRW4Lh8GnFmhabYLcbhyrpxT smdQ7KNxYjYuXDDbWadHMVMu+jkWfDpBk52n9p7hvXR1QCfgEnCNB9v5Yq9RvShC dpXzeL2C2bBkVdW661DCGCrZB5DL1vRkKH5Id8SxMCvxiNLpC9yPIsI8OIBm8ais YVdNbhKLnt2sZA== -----END CERTIFICATE-----Generated at Fri Dec 26 15:41:48 2025 by rpki-client