This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/d73592-e46d-4598-8b12-fa9114a82ac9/1/soH_MU_IquOXVAewoMF_L9403CY.mft File: soH_MU_IquOXVAewoMF_L9403CY.mft (raw, json) Hash identifier: xZng8Ll4i36ZRxvCguQqbOoN+LTbwlOpT1Z4UyLZltU= Subject key identifier: 77:0E:A1:D5:B1:89:CB:01:1B:FB:BD:9E:F8:4F:55:06:79:83:A2:77 Authority key identifier: B2:81:FF:31:4F:C8:AA:E3:97:54:07:B0:A0:C1:7F:2F:DE:34:DC:26 Certificate issuer: /CN=b281ff314fc8aae3975407b0a0c17f2fde34dc26 Certificate serial: 019AF16425C1861F705A59067162E4F0519A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/soH_MU_IquOXVAewoMF_L9403CY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/d73592-e46d-4598-8b12-fa9114a82ac9/1/soH_MU_IquOXVAewoMF_L9403CY.mft Manifest number: 1051 Signing time: Sat 06 Dec 2025 02:01:03 +0000 Manifest this update: Sat 06 Dec 2025 02:01:03 +0000 Manifest next update: Sun 07 Dec 2025 02:01:03 +0000 Files and hashes: 1: go1QZ0e22NiGhCdbGFP80uaB__o.roa (hash: CjjqC3BGYnOdj8L5wiPgLlhe25x4Dta7BFEkigZuNFk=) 2: soH_MU_IquOXVAewoMF_L9403CY.crl (hash: CFz22KeAydslDnrDaUKz2FeIUuLgqQeAX3FIaShOuMM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/d73592-e46d-4598-8b12-fa9114a82ac9/1/soH_MU_IquOXVAewoMF_L9403CY.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/d73592-e46d-4598-8b12-fa9114a82ac9/1/soH_MU_IquOXVAewoMF_L9403CY.mft rsync://rpki.ripe.net/repository/DEFAULT/soH_MU_IquOXVAewoMF_L9403CY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:25:c1:86:1f:70:5a:59:06:71:62:e4:f0:51:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b281ff314fc8aae3975407b0a0c17f2fde34dc26 Validity Not Before: Dec 6 02:01:03 2025 GMT Not After : Dec 7 02:01:03 2025 GMT Subject: CN=770ea1d5b189cb011bfbbd9ef84f55067983a277 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:bf:19:11:cb:de:a6:c7:4d:ee:fe:ef:4d:dc: 86:bc:d8:b4:09:38:be:1b:ff:5a:bd:0d:83:8b:0a: a6:1b:e9:4a:46:d1:95:68:81:69:f4:aa:59:b8:f5: 0d:63:3d:28:79:73:90:3b:16:8c:fb:a0:be:05:28: 48:c7:8a:e8:94:f4:be:5f:65:f5:39:3f:d1:22:f3: 7e:a2:63:4d:cd:dc:a0:89:6c:c9:f2:ad:fe:6f:70: 11:05:cd:f8:2a:48:28:e2:73:0a:b0:92:2f:0a:6b: 8e:09:d0:dc:bc:85:94:7a:b2:52:25:26:3a:f1:a2: 35:6e:c6:36:7d:53:f7:d0:76:f6:fd:7b:a7:53:94: e2:cd:9e:99:18:21:95:7a:6d:a0:65:e3:04:1a:e9: 84:b3:98:01:39:a5:6d:76:7c:56:7e:08:e9:41:c1: 16:2a:5d:75:7c:8e:f3:57:26:b6:cf:22:5c:45:23: 0a:85:40:33:4a:3e:6e:d3:ee:a1:61:ad:b3:be:c2: a8:85:a3:f0:e8:2f:15:49:97:4b:a1:3d:e6:54:e2: 51:15:ab:a8:70:65:65:c0:aa:2b:50:c1:90:a8:14: 01:2e:89:0a:bb:a4:44:8c:5c:e4:37:3c:f6:6b:3b: b8:05:99:6e:ad:4d:41:07:40:32:9e:71:9d:05:c4: 1b:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:0E:A1:D5:B1:89:CB:01:1B:FB:BD:9E:F8:4F:55:06:79:83:A2:77 X509v3 Authority Key Identifier: keyid:B2:81:FF:31:4F:C8:AA:E3:97:54:07:B0:A0:C1:7F:2F:DE:34:DC:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/soH_MU_IquOXVAewoMF_L9403CY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d73592-e46d-4598-8b12-fa9114a82ac9/1/soH_MU_IquOXVAewoMF_L9403CY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d73592-e46d-4598-8b12-fa9114a82ac9/1/soH_MU_IquOXVAewoMF_L9403CY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:76:fa:ab:d8:e7:99:59:7e:c7:05:ab:33:52:16:f5:a4:77: c6:eb:62:ef:73:e8:85:15:a4:4a:f9:d0:49:ae:48:26:d3:ad: 28:a8:87:6a:e5:37:ff:30:ef:5b:92:5c:c3:25:65:07:05:e7: b9:50:f1:94:07:d0:13:20:8c:a2:81:67:48:dc:a1:be:d8:17: 4f:1c:67:fe:38:e6:30:ef:1f:0a:95:bd:e3:cc:4c:63:c9:98: dc:d8:2f:6c:72:8c:54:50:65:db:20:6a:69:9c:ee:7e:b3:91: 28:f8:f8:22:5c:0c:2f:c2:e1:87:31:df:37:34:85:13:72:25: 22:4b:70:e8:17:b6:ea:76:0d:5f:15:51:88:ca:22:8e:c6:be: 91:3e:dc:10:1f:e4:92:a9:c4:da:a7:f9:37:1b:45:70:f4:3b: f3:ab:ef:cb:14:0f:ed:f0:f5:64:35:c1:0f:7f:1b:a6:55:9f: 0c:2e:2c:7a:e6:22:4c:3c:00:b5:95:9b:ae:dd:c1:6b:54:32: 46:7e:a5:52:5e:32:e7:da:02:40:cc:c2:2e:2b:c5:3d:9a:a4: ad:3a:48:ba:a5:de:f0:0c:76:e7:85:44:7c:b0:92:35:57:7e: ff:45:10:3f:bb:70:5e:9a:42:5d:68:f3:99:b6:76:4a:58:bc: 1e:9f:f4:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZCXBhh9wWlkGcWLk8FGaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyODFmZjMxNGZjOGFhZTM5NzU0MDdiMGEwYzE3ZjJmZGUz NGRjMjYwHhcNMjUxMjA2MDIwMTAzWhcNMjUxMjA3MDIwMTAzWjAzMTEwLwYDVQQD Eyg3NzBlYTFkNWIxODljYjAxMWJmYmJkOWVmODRmNTUwNjc5ODNhMjc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwb8ZEcvepsdN7v7vTdyGvNi0CTi+ G/9avQ2DiwqmG+lKRtGVaIFp9KpZuPUNYz0oeXOQOxaM+6C+BShIx4rolPS+X2X1 OT/RIvN+omNNzdygiWzJ8q3+b3ARBc34Kkgo4nMKsJIvCmuOCdDcvIWUerJSJSY6 8aI1bsY2fVP30Hb2/XunU5TizZ6ZGCGVem2gZeMEGumEs5gBOaVtdnxWfgjpQcEW Kl11fI7zVya2zyJcRSMKhUAzSj5u0+6hYa2zvsKohaPw6C8VSZdLoT3mVOJRFauo cGVlwKorUMGQqBQBLokKu6REjFzkNzz2azu4BZlurU1BB0AynnGdBcQbUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHcOodWxicsBG/u9nvhPVQZ5g6J3MB8GA1UdIwQY MBaAFLKB/zFPyKrjl1QHsKDBfy/eNNwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc29IX01VX0lxdU9YVkFld29NRl9MOTQwM0NZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9kNzM1OTItZTQ2ZC00NTk4LThiMTIt ZmE5MTE0YTgyYWM5LzEvc29IX01VX0lxdU9YVkFld29NRl9MOTQwM0NZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi9kNzM1OTItZTQ2ZC00NTk4LThiMTItZmE5MTE0YTgyYWM5 LzEvc29IX01VX0lxdU9YVkFld29NRl9MOTQwM0NZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn3b6q9jn mVl+xwWrM1IW9aR3xuti73PohRWkSvnQSa5IJtOtKKiHauU3/zDvW5JcwyVlBwXn uVDxlAfQEyCMooFnSNyhvtgXTxxn/jjmMO8fCpW948xMY8mY3NgvbHKMVFBl2yBq aZzufrORKPj4IlwML8LhhzHfNzSFE3IlIktw6Be26nYNXxVRiMoijsa+kT7cEB/k kqnE2qf5NxtFcPQ786vvyxQP7fD1ZDXBD38bplWfDC4seuYiTDwAtZWbrt3Ba1Qy Rn6lUl4y59oCQMzCLivFPZqkrTpIuqXe8Ax254VEfLCSNVd+/0UQP7twXppCXWjz mbZ2Sli8Hp/0vQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:11:24 2025 by rpki-client