This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.mft File: p0msqF3GbIPOVezcBFyWB1yn3rw.mft (raw, json) Hash identifier: CALk9hqul7/6Iu+k7jtdEJZ6+KlBMrarQN78hC3I2j0= Subject key identifier: 92:8D:68:ED:89:F4:2F:1B:25:ED:E0:44:AB:2B:97:CF:C5:94:ED:47 Authority key identifier: A7:49:AC:A8:5D:C6:6C:83:CE:55:EC:DC:04:5C:96:07:5C:A7:DE:BC Certificate issuer: /CN=a749aca85dc66c83ce55ecdc045c96075ca7debc Certificate serial: 019AF12D19717337266F61B3DC49CDDDC7AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p0msqF3GbIPOVezcBFyWB1yn3rw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 01:00:55 +0000 Manifest this update: Sat 06 Dec 2025 01:00:55 +0000 Manifest next update: Sun 07 Dec 2025 01:00:55 +0000 Files and hashes: 1: p0msqF3GbIPOVezcBFyWB1yn3rw.crl (hash: gpvuyMZ/1G7RVJ6hTtCd+b9/GdiRUPEemdj2p+qbIPw=) 2: vPW0vOvqthOlHU6_v3sIc5DQ0j0.roa (hash: uvs0104pFwEVBM0nuV6DqiIGUvrkJtwZhdn8IHcJS3s=) 3: wWNRdFWkzsrzPRdYPLpt7t1EH44.roa (hash: jdk5fXDfmvLAmCXB7Op/+o6QmlltLAtxqbK6vg83GwE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.crl rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.mft rsync://rpki.ripe.net/repository/DEFAULT/p0msqF3GbIPOVezcBFyWB1yn3rw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:19:71:73:37:26:6f:61:b3:dc:49:cd:dd:c7:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a749aca85dc66c83ce55ecdc045c96075ca7debc Validity Not Before: Dec 6 01:00:55 2025 GMT Not After : Dec 7 01:00:55 2025 GMT Subject: CN=928d68ed89f42f1b25ede044ab2b97cfc594ed47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b8:97:eb:23:18:dc:00:e0:70:ab:a5:66:91: 1b:fd:52:f6:0d:b3:05:53:b6:cc:5a:73:3e:be:18: ee:fb:3b:1d:c8:12:6b:63:91:87:7f:73:e6:20:6b: 91:5e:74:ae:c9:ad:92:72:65:47:d9:12:39:36:d5: 8e:a7:96:58:c9:fb:64:a3:73:93:e7:99:c8:11:c1: 0b:7f:1a:22:db:8a:ec:11:3c:51:a7:3e:d1:93:0b: 8b:b9:f8:c2:a6:ac:62:25:7b:09:1e:59:4f:68:9d: 97:7f:b0:50:b5:36:ae:39:b1:5c:55:4d:0b:ac:68: 34:86:51:aa:8c:be:f9:a8:c5:04:ad:89:01:75:f9: 63:02:99:88:78:2a:83:8d:7b:a3:39:65:02:45:a5: d3:c8:99:18:e6:45:1c:87:3e:e7:ea:26:7c:fb:85: 82:c4:85:6a:a7:c7:5f:d7:26:6f:9f:96:93:9d:8e: 99:4a:cc:b8:c0:72:36:d8:2b:e4:60:0f:92:fd:99: 25:35:9a:f7:be:36:bd:f1:33:53:19:0a:54:87:42: 82:ca:9b:c8:75:0e:68:94:58:5d:cb:cb:96:0d:0e: 6b:28:2e:81:65:b1:dc:e2:58:6b:1a:6b:98:99:8a: e1:6a:cf:70:51:5c:6f:52:dd:52:29:29:8c:8f:64: c6:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:8D:68:ED:89:F4:2F:1B:25:ED:E0:44:AB:2B:97:CF:C5:94:ED:47 X509v3 Authority Key Identifier: keyid:A7:49:AC:A8:5D:C6:6C:83:CE:55:EC:DC:04:5C:96:07:5C:A7:DE:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0msqF3GbIPOVezcBFyWB1yn3rw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:56:89:3f:54:4c:ff:26:63:d5:97:cf:6f:22:15:2d:03:10: 97:74:6a:67:40:93:b3:c1:a0:5a:d1:02:e8:40:92:65:a9:71: d7:e1:84:9e:bb:21:fd:71:b9:a4:06:ae:98:2b:87:8f:94:51: c5:51:9a:5f:93:66:3a:22:02:57:37:13:13:5d:cf:47:22:4d: 39:e4:86:3d:9d:82:cc:3b:cd:5f:44:46:a7:dd:69:76:40:54: 02:60:25:1a:94:4a:9b:b8:6f:6d:72:d3:e9:32:75:99:a5:d9: 79:06:b6:15:20:bc:68:4e:5a:bb:0a:55:08:8b:4d:1e:96:cf: dd:93:a0:fd:fa:7b:1f:59:48:b7:4d:c3:b9:16:62:2a:e5:fc: 1f:57:a7:d0:23:ce:13:e7:24:f3:0a:f8:0b:0e:58:81:e8:f0: b0:d3:76:77:a8:31:5a:a5:40:df:ea:e3:4a:9b:7e:7e:c4:2a: 90:bc:54:32:ba:3c:c1:2d:3c:77:fc:9f:7a:d2:91:86:69:a1: 78:da:b7:25:a3:19:c7:c8:f5:85:6a:a5:a1:d7:92:4b:f7:e5: c0:fc:0c:af:73:0e:48:5b:6f:3e:5a:5d:5f:86:a2:4f:28:06: b5:ff:ac:a5:71:7d:42:fb:eb:6f:66:94:08:d8:e4:6f:ad:13: 7d:a3:57:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLRlxczcmb2Gz3EnN3cetMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3NDlhY2E4NWRjNjZjODNjZTU1ZWNkYzA0NWM5NjA3NWNh N2RlYmMwHhcNMjUxMjA2MDEwMDU1WhcNMjUxMjA3MDEwMDU1WjAzMTEwLwYDVQQD Eyg5MjhkNjhlZDg5ZjQyZjFiMjVlZGUwNDRhYjJiOTdjZmM1OTRlZDQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnriX6yMY3ADgcKulZpEb/VL2DbMF U7bMWnM+vhju+zsdyBJrY5GHf3PmIGuRXnSuya2ScmVH2RI5NtWOp5ZYyftko3OT 55nIEcELfxoi24rsETxRpz7RkwuLufjCpqxiJXsJHllPaJ2Xf7BQtTauObFcVU0L rGg0hlGqjL75qMUErYkBdfljApmIeCqDjXujOWUCRaXTyJkY5kUchz7n6iZ8+4WC xIVqp8df1yZvn5aTnY6ZSsy4wHI22CvkYA+S/ZklNZr3vja98TNTGQpUh0KCypvI dQ5olFhdy8uWDQ5rKC6BZbHc4lhrGmuYmYrhas9wUVxvUt1SKSmMj2TGLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJKNaO2J9C8bJe3gRKsrl8/FlO1HMB8GA1UdIwQY MBaAFKdJrKhdxmyDzlXs3ARclgdcp968MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDBtc3FGM0diSVBPVmV6Y0JGeVdCMXluM3J3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy8zM2U1MDgtMTI3ZC00OTQ2LWIzY2Mt NGM5ZjQzZjg3OGFiLzEvcDBtc3FGM0diSVBPVmV6Y0JGeVdCMXluM3J3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy8zM2U1MDgtMTI3ZC00OTQ2LWIzY2MtNGM5ZjQzZjg3OGFi LzEvcDBtc3FGM0diSVBPVmV6Y0JGeVdCMXluM3J3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmVaJP1RM /yZj1ZfPbyIVLQMQl3RqZ0CTs8GgWtEC6ECSZalx1+GEnrsh/XG5pAaumCuHj5RR xVGaX5NmOiICVzcTE13PRyJNOeSGPZ2CzDvNX0RGp91pdkBUAmAlGpRKm7hvbXLT 6TJ1maXZeQa2FSC8aE5auwpVCItNHpbP3ZOg/fp7H1lIt03DuRZiKuX8H1en0CPO E+ck8wr4Cw5YgejwsNN2d6gxWqVA3+rjSpt+fsQqkLxUMro8wS08d/yfetKRhmmh eNq3JaMZx8j1hWqlodeSS/flwPwMr3MOSFtvPlpdX4aiTygGtf+spXF9Qvvrb2aU CNjkb60TfaNXXw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:33:02 2025 by rpki-client