This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/d73592-e46d-4598-8b12-fa9114a82ac9/1/soH_MU_IquOXVAewoMF_L9403CY.mft File: soH_MU_IquOXVAewoMF_L9403CY.mft (raw, json) Hash identifier: boR93HnMg1ENSrEKA8e6MS24vV0UiyyswYp2UpKjcEM= Subject key identifier: 59:36:E1:EB:56:E5:A5:C7:7F:A0:09:42:AE:A8:8B:87:EC:36:93:28 Authority key identifier: B2:81:FF:31:4F:C8:AA:E3:97:54:07:B0:A0:C1:7F:2F:DE:34:DC:26 Certificate issuer: /CN=b281ff314fc8aae3975407b0a0c17f2fde34dc26 Certificate serial: 019B3CB5012A6F68AC9F5D583FEE683E91E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/soH_MU_IquOXVAewoMF_L9403CY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/d73592-e46d-4598-8b12-fa9114a82ac9/1/soH_MU_IquOXVAewoMF_L9403CY.mft Manifest number: 1078 Signing time: Sat 20 Dec 2025 17:00:53 +0000 Manifest this update: Sat 20 Dec 2025 17:00:53 +0000 Manifest next update: Sun 21 Dec 2025 17:00:53 +0000 Files and hashes: 1: go1QZ0e22NiGhCdbGFP80uaB__o.roa (hash: CjjqC3BGYnOdj8L5wiPgLlhe25x4Dta7BFEkigZuNFk=) 2: soH_MU_IquOXVAewoMF_L9403CY.crl (hash: +1wULscXQ6oKhpy0/ksaNBDf+tcKa5r30U0AE7eysXs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/d73592-e46d-4598-8b12-fa9114a82ac9/1/soH_MU_IquOXVAewoMF_L9403CY.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/d73592-e46d-4598-8b12-fa9114a82ac9/1/soH_MU_IquOXVAewoMF_L9403CY.mft rsync://rpki.ripe.net/repository/DEFAULT/soH_MU_IquOXVAewoMF_L9403CY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 17:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b5:01:2a:6f:68:ac:9f:5d:58:3f:ee:68:3e:91:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b281ff314fc8aae3975407b0a0c17f2fde34dc26 Validity Not Before: Dec 20 17:00:53 2025 GMT Not After : Dec 21 17:00:53 2025 GMT Subject: CN=5936e1eb56e5a5c77fa00942aea88b87ec369328 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a1:fa:e9:ff:f5:07:1d:31:30:51:56:56:2c: ef:16:50:46:1e:3b:5b:37:68:2b:21:67:ca:b8:7b: d1:17:5f:36:02:55:a6:4b:fb:77:ac:4a:63:ea:60: 0b:2a:b6:e7:9f:eb:55:f5:d1:0a:ca:00:28:26:90: 46:e7:ee:3f:06:e5:cf:5e:04:05:2d:6a:97:31:ae: 90:a8:78:2e:87:d2:01:81:69:84:b3:85:fc:36:d5: 6a:c8:b7:2e:57:22:55:01:04:52:1a:e9:c4:f8:6c: 42:13:fb:3b:09:5b:dc:0d:0e:f4:be:be:1e:db:ef: ac:43:e1:c2:74:8e:ed:4e:a1:2b:a5:19:0c:68:75: a2:4e:7d:6f:eb:43:a2:4b:a2:23:b9:00:c9:b3:6d: 20:5e:a0:f0:c0:8f:87:5a:03:1e:4b:9c:ed:a2:2a: 49:bf:ed:df:31:8c:51:25:d0:fc:7c:8b:29:14:7c: 42:27:7b:98:78:fb:52:69:52:5f:49:2e:46:e2:7c: c9:4a:61:4e:dc:71:1f:86:de:d7:72:7b:c4:64:1c: 83:dd:e0:fc:5f:e3:fb:ce:c5:9f:05:36:3e:00:ee: 04:3c:8b:ad:15:57:73:23:a6:e2:11:8d:6f:bd:41: 1e:61:9e:92:2e:0f:52:6b:b9:79:82:4c:ec:cf:2d: e3:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:36:E1:EB:56:E5:A5:C7:7F:A0:09:42:AE:A8:8B:87:EC:36:93:28 X509v3 Authority Key Identifier: keyid:B2:81:FF:31:4F:C8:AA:E3:97:54:07:B0:A0:C1:7F:2F:DE:34:DC:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/soH_MU_IquOXVAewoMF_L9403CY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d73592-e46d-4598-8b12-fa9114a82ac9/1/soH_MU_IquOXVAewoMF_L9403CY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d73592-e46d-4598-8b12-fa9114a82ac9/1/soH_MU_IquOXVAewoMF_L9403CY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:70:b6:e9:64:c1:eb:c9:a8:a3:18:67:2b:b9:0e:ff:46:79: 7e:82:10:9f:9f:b7:b7:17:d8:db:a7:04:66:13:1c:b2:0e:c2: 45:00:9d:d3:52:69:2c:48:c0:8d:fc:37:14:de:e0:18:21:92: fa:29:4d:69:d4:cb:a8:92:32:eb:87:90:ea:26:d3:b6:5b:41: 20:9e:b1:98:4d:45:12:63:ea:02:9e:f7:b8:67:27:85:2c:7f: 7d:54:e4:ae:4f:68:3f:83:0d:f2:64:89:b2:3a:e3:8c:1b:53: 3d:bb:35:b8:20:0d:84:88:46:5e:36:e0:d4:95:49:a7:3d:f3: 68:ac:a8:40:ca:5b:9c:23:7f:33:e1:ec:49:40:b4:84:04:3c: 85:69:3e:51:35:dc:c2:32:a3:36:68:6e:ba:f4:8f:3f:fd:8a: f2:6a:55:1e:51:8e:cb:ad:8b:df:70:54:05:0c:48:b1:df:6a: eb:ad:0a:c9:d3:ae:65:b3:9b:a2:4f:6c:fe:2f:7e:3d:23:ec: 8e:29:f2:83:91:f2:f4:2c:56:3d:43:cc:28:1c:03:d8:11:b0: 05:83:6e:bd:54:be:eb:6a:3f:0a:08:3d:78:4a:41:d1:25:19: 56:db:d4:5a:f6:24:fd:a7:85:a8:35:b5:a0:16:83:62:15:20: bb:90:9a:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tQEqb2isn11YP+5oPpHlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyODFmZjMxNGZjOGFhZTM5NzU0MDdiMGEwYzE3ZjJmZGUz NGRjMjYwHhcNMjUxMjIwMTcwMDUzWhcNMjUxMjIxMTcwMDUzWjAzMTEwLwYDVQQD Eyg1OTM2ZTFlYjU2ZTVhNWM3N2ZhMDA5NDJhZWE4OGI4N2VjMzY5MzI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqH66f/1Bx0xMFFWVizvFlBGHjtb N2grIWfKuHvRF182AlWmS/t3rEpj6mALKrbnn+tV9dEKygAoJpBG5+4/BuXPXgQF LWqXMa6QqHguh9IBgWmEs4X8NtVqyLcuVyJVAQRSGunE+GxCE/s7CVvcDQ70vr4e 2++sQ+HCdI7tTqErpRkMaHWiTn1v60OiS6IjuQDJs20gXqDwwI+HWgMeS5ztoipJ v+3fMYxRJdD8fIspFHxCJ3uYePtSaVJfSS5G4nzJSmFO3HEfht7XcnvEZByD3eD8 X+P7zsWfBTY+AO4EPIutFVdzI6biEY1vvUEeYZ6SLg9Sa7l5gkzszy3jHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFk24etW5aXHf6AJQq6oi4fsNpMoMB8GA1UdIwQY MBaAFLKB/zFPyKrjl1QHsKDBfy/eNNwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc29IX01VX0lxdU9YVkFld29NRl9MOTQwM0NZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9kNzM1OTItZTQ2ZC00NTk4LThiMTIt ZmE5MTE0YTgyYWM5LzEvc29IX01VX0lxdU9YVkFld29NRl9MOTQwM0NZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi9kNzM1OTItZTQ2ZC00NTk4LThiMTItZmE5MTE0YTgyYWM5 LzEvc29IX01VX0lxdU9YVkFld29NRl9MOTQwM0NZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR3C26WTB 68mooxhnK7kO/0Z5foIQn5+3txfY26cEZhMcsg7CRQCd01JpLEjAjfw3FN7gGCGS +ilNadTLqJIy64eQ6ibTtltBIJ6xmE1FEmPqAp73uGcnhSx/fVTkrk9oP4MN8mSJ sjrjjBtTPbs1uCANhIhGXjbg1JVJpz3zaKyoQMpbnCN/M+HsSUC0hAQ8hWk+UTXc wjKjNmhuuvSPP/2K8mpVHlGOy62L33BUBQxIsd9q660KydOuZbObok9s/i9+PSPs jinyg5Hy9CxWPUPMKBwD2BGwBYNuvVS+62o/Cgg9eEpB0SUZVtvUWvYk/aeFqDW1 oBaDYhUgu5CaGg== -----END CERTIFICATE-----Generated at Sun Dec 21 02:25:01 2025 by rpki-client