This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.mft File: mSOBKhWX6WBeKpv0ms-NY4mBpfQ.mft (raw, json) Hash identifier: SXnt2o6cK+EIFJl2l+gTvZe8H8O7+7RJLzgk/Z6d5w8= Subject key identifier: 8E:5B:AA:0F:9C:52:70:1F:71:FC:57:5C:E1:1F:86:36:17:48:BA:D1 Authority key identifier: 99:23:81:2A:15:97:E9:60:5E:2A:9B:F4:9A:CF:8D:63:89:81:A5:F4 Certificate issuer: /CN=9923812a1597e9605e2a9bf49acf8d638981a5f4 Certificate serial: 019AF0BEE4E866F4562CC990D6B191EA4E5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.mft Manifest number: 0757 Signing time: Fri 05 Dec 2025 23:00:33 +0000 Manifest this update: Fri 05 Dec 2025 23:00:33 +0000 Manifest next update: Sat 06 Dec 2025 23:00:33 +0000 Files and hashes: 1: Hg9K5nZYj4y2LREbfAkkrFG5Zls.roa (hash: F2au21rdmN5JT8fnaZxO8lAlqsDmX3/SHMl+Sh2h2I8=) 2: PYZw-6nO0E-fCuRk7f6-YtCO0xE.roa (hash: HII+EpmrCTFcWzx501ezrd96ebkYigxDHvPMzn/KKcI=) 3: mSOBKhWX6WBeKpv0ms-NY4mBpfQ.crl (hash: PL48KIhPgJQGB8ByvSXzDTNLBVKjRnaIkJyCJodf/sE=) 4: x7qF1swc6KDeUuxg1VrqWurToxo.roa (hash: YrT3FZ1bNCws8FjDrY5Tigrw49fzDr1WY2YjpG9Nkf0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.mft rsync://rpki.ripe.net/repository/DEFAULT/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:be:e4:e8:66:f4:56:2c:c9:90:d6:b1:91:ea:4e:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9923812a1597e9605e2a9bf49acf8d638981a5f4 Validity Not Before: Dec 5 23:00:33 2025 GMT Not After : Dec 6 23:00:33 2025 GMT Subject: CN=8e5baa0f9c52701f71fc575ce11f86361748bad1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e7:24:93:73:7a:96:6e:84:bb:5d:36:39:4b: ac:aa:ca:28:61:f5:e3:52:b8:5b:e2:d2:fc:41:b7: 24:ba:87:00:fe:89:ae:f4:3b:b6:29:2f:c3:26:1d: 38:39:6e:49:6a:dc:c9:48:b9:89:ee:1f:12:f5:d6: ac:98:37:32:ea:58:3d:46:59:61:f5:4a:ca:56:35: 67:64:0e:65:f0:6a:c2:30:90:ab:b3:21:c2:62:35: 4c:32:20:d1:9b:fe:8d:a5:98:a8:dd:88:32:03:0f: da:5d:a6:80:d0:32:b4:42:95:c3:25:b2:64:1b:20: 06:a0:e0:e5:6c:b8:98:cb:a7:42:c0:8b:06:d0:9f: 96:ad:2c:33:42:82:02:88:24:69:18:73:1d:6c:65: 4d:e4:6d:12:05:2f:8a:d1:d9:3a:d7:79:f0:0a:65: 14:c0:0d:dd:f3:f6:a2:e8:ea:91:98:fe:83:34:f0: 42:a4:c7:9c:39:9d:a8:0c:f9:eb:4c:53:3b:02:8e: cd:8b:b3:df:3d:97:88:a3:8c:72:21:5b:e6:5b:5c: 15:29:e1:50:ba:fa:e0:03:04:b9:8a:8f:84:5c:4e: 02:2d:5c:a3:3d:2c:49:ff:c2:6f:41:07:6c:f4:00: 64:76:b7:7f:53:c8:4e:d9:c7:53:8e:c7:67:b9:df: 24:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:5B:AA:0F:9C:52:70:1F:71:FC:57:5C:E1:1F:86:36:17:48:BA:D1 X509v3 Authority Key Identifier: keyid:99:23:81:2A:15:97:E9:60:5E:2A:9B:F4:9A:CF:8D:63:89:81:A5:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:c1:9e:be:a6:04:38:c1:5a:68:96:08:0b:18:9d:ba:12:09: 59:60:62:cc:f4:ef:fc:d8:8d:3d:cd:c3:27:8c:08:b5:7b:18: 3e:c7:99:48:fb:83:eb:81:73:e4:ed:dd:49:40:09:f9:e2:57: a6:b8:79:52:f7:83:01:54:ad:ff:25:ac:b6:c3:40:1c:c4:76: 64:b0:7a:ae:c3:a8:11:54:7b:41:ca:d6:05:79:a1:e7:02:6c: 5a:86:99:77:66:66:99:9f:fe:0f:ae:72:8d:92:fd:9f:8f:8a: 3e:76:18:c5:96:f4:b7:d2:56:08:8d:71:fa:fc:75:89:33:f7: ae:e2:ac:47:92:dd:04:7c:a6:63:2c:95:3a:36:67:b2:f1:6c: ca:0f:2a:00:25:ad:0f:dd:e9:0b:e2:36:10:cd:ff:04:65:1e: 69:ff:b8:7e:84:32:5a:fd:42:6b:f4:de:92:f0:20:11:91:b6: 40:6a:0b:c6:56:ad:82:1b:40:86:83:58:ec:f8:8a:e6:dc:9b: 69:59:af:c1:94:2f:15:f1:43:b3:1b:28:a9:fc:68:14:b6:88: 55:00:5f:9b:6a:80:93:20:5f:c1:a0:f9:56:7d:12:8f:5b:a5: eb:01:61:b7:bf:a2:42:09:4e:a7:c1:a7:d6:19:1e:6b:16:83: 7b:04:9e:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvuToZvRWLMmQ1rGR6k5aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5MjM4MTJhMTU5N2U5NjA1ZTJhOWJmNDlhY2Y4ZDYzODk4 MWE1ZjQwHhcNMjUxMjA1MjMwMDMzWhcNMjUxMjA2MjMwMDMzWjAzMTEwLwYDVQQD Eyg4ZTViYWEwZjljNTI3MDFmNzFmYzU3NWNlMTFmODYzNjE3NDhiYWQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAveckk3N6lm6Eu102OUusqsooYfXj Urhb4tL8QbckuocA/omu9Du2KS/DJh04OW5JatzJSLmJ7h8S9dasmDcy6lg9Rllh 9UrKVjVnZA5l8GrCMJCrsyHCYjVMMiDRm/6NpZio3YgyAw/aXaaA0DK0QpXDJbJk GyAGoODlbLiYy6dCwIsG0J+WrSwzQoICiCRpGHMdbGVN5G0SBS+K0dk613nwCmUU wA3d8/ai6OqRmP6DNPBCpMecOZ2oDPnrTFM7Ao7Ni7PfPZeIo4xyIVvmW1wVKeFQ uvrgAwS5io+EXE4CLVyjPSxJ/8JvQQds9ABkdrd/U8hO2cdTjsdnud8kvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI5bqg+cUnAfcfxXXOEfhjYXSLrRMB8GA1UdIwQY MBaAFJkjgSoVl+lgXiqb9JrPjWOJgaX0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVNPQktoV1g2V0JlS3B2MG1zLU5ZNG1CcGZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9jM2NlZWYtZDc1NS00MzU1LTkzMDQt NmIxNmM3ODhhOTBmLzEvbVNPQktoV1g2V0JlS3B2MG1zLU5ZNG1CcGZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS9jM2NlZWYtZDc1NS00MzU1LTkzMDQtNmIxNmM3ODhhOTBm LzEvbVNPQktoV1g2V0JlS3B2MG1zLU5ZNG1CcGZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYsGevqYE OMFaaJYICxiduhIJWWBizPTv/NiNPc3DJ4wItXsYPseZSPuD64Fz5O3dSUAJ+eJX prh5UveDAVSt/yWstsNAHMR2ZLB6rsOoEVR7QcrWBXmh5wJsWoaZd2ZmmZ/+D65y jZL9n4+KPnYYxZb0t9JWCI1x+vx1iTP3ruKsR5LdBHymYyyVOjZnsvFsyg8qACWt D93pC+I2EM3/BGUeaf+4foQyWv1Ca/TekvAgEZG2QGoLxlatghtAhoNY7PiK5tyb aVmvwZQvFfFDsxsoqfxoFLaIVQBfm2qAkyBfwaD5Vn0Sj1ul6wFht7+iQglOp8Gn 1hkeaxaDewSeJQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:22:18 2025 by rpki-client