This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.mft File: mssomVmi7E-KKEGRVELMvTRCSTg.mft (raw, json) Hash identifier: s60STcBwRN71JEokRuqj3uJRyumX7OyvXIVCl2k2DHI= Subject key identifier: 49:01:1B:D7:8F:B0:63:4B:59:6A:7E:77:7B:5A:8E:CB:D3:95:DE:97 Authority key identifier: 9A:CB:28:99:59:A2:EC:4F:8A:28:41:91:54:42:CC:BD:34:42:49:38 Certificate issuer: /CN=9acb289959a2ec4f8a2841915442ccbd34424938 Certificate serial: 019AF50A7FDDDE44EBC2C6E20DFCB70386F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mssomVmi7E-KKEGRVELMvTRCSTg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.mft Manifest number: 029E Signing time: Sat 06 Dec 2025 19:01:37 +0000 Manifest this update: Sat 06 Dec 2025 19:01:37 +0000 Manifest next update: Sun 07 Dec 2025 19:01:37 +0000 Files and hashes: 1: XTu5vjEexW769xTu81kG0hu1WhA.roa (hash: Ne41d2x1Hfl8GjUz/n/mltRHcHp7ZxByOWAV8Ao4X7o=) 2: mssomVmi7E-KKEGRVELMvTRCSTg.crl (hash: IXkjgIkY5PWT9H33JMMhLfOVGwi0VkW90axOPAPL4OQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.crl rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.mft rsync://rpki.ripe.net/repository/DEFAULT/mssomVmi7E-KKEGRVELMvTRCSTg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:7f:dd:de:44:eb:c2:c6:e2:0d:fc:b7:03:86:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9acb289959a2ec4f8a2841915442ccbd34424938 Validity Not Before: Dec 6 19:01:37 2025 GMT Not After : Dec 7 19:01:37 2025 GMT Subject: CN=49011bd78fb0634b596a7e777b5a8ecbd395de97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:31:e4:31:b0:49:6f:56:5e:db:7c:9e:d2:3b: dc:9f:3c:22:92:2d:47:c1:4d:fe:ea:db:52:3d:42: d4:78:0e:86:5d:58:62:26:96:be:ef:da:cc:57:0f: 72:1a:cf:ac:1c:f0:8c:b3:32:8f:63:37:71:41:49: 79:c4:e9:a9:9a:9b:6d:33:4e:4f:84:fb:d3:bb:52: 4a:f9:8d:4c:23:1e:9b:97:9a:b4:09:b6:d9:ff:2b: 02:06:8b:d3:98:45:a8:04:d2:36:3b:e6:d5:bc:ec: dc:2a:80:e5:90:9a:88:d2:af:5e:78:74:c4:1e:3b: 0a:9b:58:61:d0:5c:0d:00:04:c7:15:52:79:6c:24: 29:c6:87:f0:eb:6c:64:17:98:44:3c:0b:15:a7:ed: 40:06:28:08:65:7e:a0:0b:29:6f:f1:75:9b:4c:de: 12:4a:64:d6:48:3a:cd:e0:d9:70:32:80:91:97:19: 37:86:6b:27:2d:74:e2:9e:0d:64:2b:29:28:58:1a: 87:58:2f:c8:8e:b5:29:65:c4:b2:57:de:81:e9:08: 9b:55:03:de:5c:56:09:51:e1:5e:15:9b:27:8b:52: d4:e6:0f:93:eb:62:0c:c0:cd:92:dc:db:42:a2:e0: 66:36:df:ed:d7:42:97:0f:b3:a0:22:bc:42:20:21: a7:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:01:1B:D7:8F:B0:63:4B:59:6A:7E:77:7B:5A:8E:CB:D3:95:DE:97 X509v3 Authority Key Identifier: keyid:9A:CB:28:99:59:A2:EC:4F:8A:28:41:91:54:42:CC:BD:34:42:49:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mssomVmi7E-KKEGRVELMvTRCSTg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:c7:a9:f0:16:60:8d:67:e1:e2:0d:cd:b3:57:5b:f5:d9:8e: 47:08:32:46:a1:66:f5:a4:06:b1:30:00:47:a9:16:b8:8a:7f: ac:75:20:36:e2:1a:8e:a8:8b:f5:b2:75:08:ec:b6:15:5a:25: 96:f9:b5:86:5b:6e:ab:79:3f:0f:fd:6c:42:37:59:4a:7e:47: cb:a0:39:1d:98:50:40:dd:7f:8b:d1:f5:ac:09:44:a5:7a:05: a5:ad:ac:ec:99:c4:ac:8c:d8:47:aa:d2:f8:07:de:92:d9:31: 31:13:f7:ac:60:22:57:7e:5a:57:8b:a2:63:8b:a1:dd:e4:95: 01:d4:0b:0d:28:14:c8:1a:ef:58:32:e1:f2:79:fd:7f:a4:8d: e5:c2:79:13:fa:47:54:a6:68:e0:9a:af:33:93:8a:23:bd:38: 42:b0:ea:14:70:12:e4:77:27:4a:5e:8d:cf:75:09:43:50:5f: ee:a3:db:cf:c0:25:2f:4b:02:97:c4:a5:b4:b7:d9:1b:cc:c3: e8:8e:b4:7b:e3:9b:31:c0:2b:fb:64:a1:78:07:42:1e:0e:21: 8a:ad:3f:4f:c4:c0:1f:0a:3d:8c:1a:aa:ba:29:77:4b:b4:55: 93:70:b1:14:93:20:26:ba:eb:81:6a:c1:a2:62:fe:a2:d2:7e: 7a:63:b5:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1Cn/d3kTrwsbiDfy3A4b3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhY2IyODk5NTlhMmVjNGY4YTI4NDE5MTU0NDJjY2JkMzQ0 MjQ5MzgwHhcNMjUxMjA2MTkwMTM3WhcNMjUxMjA3MTkwMTM3WjAzMTEwLwYDVQQD Eyg0OTAxMWJkNzhmYjA2MzRiNTk2YTdlNzc3YjVhOGVjYmQzOTVkZTk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzHkMbBJb1Ze23ye0jvcnzwiki1H wU3+6ttSPULUeA6GXVhiJpa+79rMVw9yGs+sHPCMszKPYzdxQUl5xOmpmpttM05P hPvTu1JK+Y1MIx6bl5q0CbbZ/ysCBovTmEWoBNI2O+bVvOzcKoDlkJqI0q9eeHTE HjsKm1hh0FwNAATHFVJ5bCQpxofw62xkF5hEPAsVp+1ABigIZX6gCylv8XWbTN4S SmTWSDrN4NlwMoCRlxk3hmsnLXTing1kKykoWBqHWC/IjrUpZcSyV96B6QibVQPe XFYJUeFeFZsni1LU5g+T62IMwM2S3NtCouBmNt/t10KXD7OgIrxCICGnawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEkBG9ePsGNLWWp+d3tajsvTld6XMB8GA1UdIwQY MBaAFJrLKJlZouxPiihBkVRCzL00Qkk4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXNzb21WbWk3RS1LS0VHUlZFTE12VFJDU1RnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9hYjBkZjEtZGY0Yy00ODcyLTk4YzUt ODY0ZmUzYmJkZWZkLzEvbXNzb21WbWk3RS1LS0VHUlZFTE12VFJDU1RnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9hYjBkZjEtZGY0Yy00ODcyLTk4YzUtODY0ZmUzYmJkZWZk LzEvbXNzb21WbWk3RS1LS0VHUlZFTE12VFJDU1RnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS8ep8BZg jWfh4g3Ns1db9dmORwgyRqFm9aQGsTAAR6kWuIp/rHUgNuIajqiL9bJ1COy2FVol lvm1hltuq3k/D/1sQjdZSn5Hy6A5HZhQQN1/i9H1rAlEpXoFpa2s7JnErIzYR6rS +AfektkxMRP3rGAiV35aV4uiY4uh3eSVAdQLDSgUyBrvWDLh8nn9f6SN5cJ5E/pH VKZo4JqvM5OKI704QrDqFHAS5HcnSl6Nz3UJQ1Bf7qPbz8AlL0sCl8SltLfZG8zD 6I60e+ObMcAr+2SheAdCHg4hiq0/T8TAHwo9jBqquil3S7RVk3CxFJMgJrrrgWrB omL+otJ+emO1QQ== -----END CERTIFICATE-----Generated at Sat Dec 6 23:58:54 2025 by rpki-client