This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/bdd256-2f59-431b-b653-cae678b2f21e/1/1-msoRBterQGEZTXq8gv9B1LgdkU.mft File: 1-msoRBterQGEZTXq8gv9B1LgdkU.mft (raw, json) Hash identifier: ivvUeXLf/fKyPWHQT/MkTdLiNhNk+HAlK79oBRDGY30= Subject key identifier: 50:45:15:39:9D:3F:80:86:E6:19:3A:B1:FD:B9:57:1E:62:E7:B7:35 Authority key identifier: FA:6B:28:44:1B:5E:AD:01:84:65:35:EA:F2:0B:FD:07:52:E0:76:45 Certificate issuer: /CN=fa6b28441b5ead01846535eaf20bfd0752e07645 Certificate serial: 019AF23FFCF5C88B9A2F30AB9D89E7B7E929 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-msoRBterQGEZTXq8gv9B1LgdkU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/bdd256-2f59-431b-b653-cae678b2f21e/1/1-msoRBterQGEZTXq8gv9B1LgdkU.mft Manifest number: A7 Signing time: Sat 06 Dec 2025 06:01:10 +0000 Manifest this update: Sat 06 Dec 2025 06:01:10 +0000 Manifest next update: Sun 07 Dec 2025 06:01:10 +0000 Files and hashes: 1: 1-msoRBterQGEZTXq8gv9B1LgdkU.crl (hash: UHZWc1qg719KJ8pDd+OVTcOwn9wLXOXQRgpyUsj558Y=) 2: vBOQCuTyEfYV4gQKe7qCxZbiu9I.roa (hash: YzgNFzACvcQVNgde31Xeo9Tat9fZP3Es1rC5dljFCQE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/bdd256-2f59-431b-b653-cae678b2f21e/1/1-msoRBterQGEZTXq8gv9B1LgdkU.crl rsync://rpki.ripe.net/repository/DEFAULT/48/bdd256-2f59-431b-b653-cae678b2f21e/1/1-msoRBterQGEZTXq8gv9B1LgdkU.mft rsync://rpki.ripe.net/repository/DEFAULT/1-msoRBterQGEZTXq8gv9B1LgdkU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:fc:f5:c8:8b:9a:2f:30:ab:9d:89:e7:b7:e9:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa6b28441b5ead01846535eaf20bfd0752e07645 Validity Not Before: Dec 6 06:01:10 2025 GMT Not After : Dec 7 06:01:10 2025 GMT Subject: CN=504515399d3f8086e6193ab1fdb9571e62e7b735 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:fb:2f:23:e0:78:00:d1:9e:26:af:2d:e1:0d: 45:d5:35:a7:2e:2b:44:a3:72:14:0d:33:41:b0:76: 97:ac:4b:d0:34:44:0a:0a:f9:f0:06:f9:ab:0f:28: c5:52:81:7c:70:c3:b0:63:3c:48:36:0b:5c:e6:87: 49:cf:a1:4e:1a:7f:45:c2:11:a4:e9:78:c5:af:cc: 87:88:95:fd:0d:54:1e:f4:a2:0c:f3:f1:15:98:4e: b9:47:fa:f3:b4:24:6a:30:77:85:8d:a2:13:56:3d: ef:33:6a:33:7e:14:e2:c5:dd:af:bb:e4:c4:39:22: 3f:19:64:01:6a:a1:95:17:00:c0:62:62:ad:b9:0b: 79:22:da:22:b9:81:ea:bc:91:87:f3:5e:0f:33:c9: 42:23:db:52:ef:81:4c:6e:75:a3:13:ff:db:00:eb: 38:fe:fd:3f:45:0b:d5:16:65:42:ec:80:32:fb:38: 61:c3:5f:9e:10:d5:77:65:cd:dd:31:0e:aa:dd:20: 50:67:e0:62:e1:08:73:f7:a7:ea:fc:cd:0b:7e:d3: 9c:98:48:e6:f0:18:e6:81:a8:09:21:04:b3:18:6b: 7e:08:5a:c1:d1:a8:ca:4b:6b:b9:f3:21:62:6b:fe: f3:7c:19:46:5b:77:78:8a:6b:00:87:f8:d3:4c:1b: af:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:45:15:39:9D:3F:80:86:E6:19:3A:B1:FD:B9:57:1E:62:E7:B7:35 X509v3 Authority Key Identifier: keyid:FA:6B:28:44:1B:5E:AD:01:84:65:35:EA:F2:0B:FD:07:52:E0:76:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-msoRBterQGEZTXq8gv9B1LgdkU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bdd256-2f59-431b-b653-cae678b2f21e/1/1-msoRBterQGEZTXq8gv9B1LgdkU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bdd256-2f59-431b-b653-cae678b2f21e/1/1-msoRBterQGEZTXq8gv9B1LgdkU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:0a:5e:14:07:3d:b3:79:1e:8c:e2:93:ef:2a:d8:ed:f2:7e: 21:f0:81:32:07:f4:3a:d6:ba:13:ff:93:2b:2c:53:d1:f0:cb: 2d:5a:27:9d:4f:32:52:80:ca:d0:37:51:52:3d:2e:c4:c7:35: 88:ab:75:9c:83:2e:9b:1e:71:42:01:7a:30:51:08:99:ff:10: d3:01:27:ed:a5:05:03:d0:53:ca:2b:4c:17:04:61:98:f7:c1: 06:b6:9b:4b:2e:b0:25:51:33:80:3d:26:86:9e:6a:0b:23:73: 5b:c5:b1:ec:1c:b2:81:e1:66:94:18:a5:7f:89:29:14:4c:9c: 15:f6:66:56:a9:f5:9e:32:df:8b:4d:90:a9:e7:54:16:68:63: 28:5a:c9:91:d4:b4:7c:47:fd:ae:da:2f:ad:cc:60:e5:5a:55: 0d:75:66:55:80:0d:6c:c9:7c:5e:65:89:5a:f9:cf:cd:7e:73: 74:0a:a1:d5:71:fb:ae:8b:a1:16:5b:2b:d9:23:6f:d0:1e:49: e8:36:cc:4b:85:53:c5:0b:48:fd:25:c9:c3:8b:38:6b:0e:c0: 15:80:9b:c3:f6:4e:38:c4:e8:67:dd:3e:41:ee:63:65:e4:91: 91:9b:14:fa:b8:1a:00:0a:12:0f:84:e1:7f:d5:f9:a8:dd:5e: 82:52:dd:5a -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZryP/z1yIuaLzCrnYnnt+kpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhNmIyODQ0MWI1ZWFkMDE4NDY1MzVlYWYyMGJmZDA3NTJl MDc2NDUwHhcNMjUxMjA2MDYwMTEwWhcNMjUxMjA3MDYwMTEwWjAzMTEwLwYDVQQD Eyg1MDQ1MTUzOTlkM2Y4MDg2ZTYxOTNhYjFmZGI5NTcxZTYyZTdiNzM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfsvI+B4ANGeJq8t4Q1F1TWnLitE o3IUDTNBsHaXrEvQNEQKCvnwBvmrDyjFUoF8cMOwYzxINgtc5odJz6FOGn9FwhGk 6XjFr8yHiJX9DVQe9KIM8/EVmE65R/rztCRqMHeFjaITVj3vM2ozfhTixd2vu+TE OSI/GWQBaqGVFwDAYmKtuQt5ItoiuYHqvJGH814PM8lCI9tS74FMbnWjE//bAOs4 /v0/RQvVFmVC7IAy+zhhw1+eENV3Zc3dMQ6q3SBQZ+Bi4Qhz96fq/M0LftOcmEjm 8BjmgagJIQSzGGt+CFrB0ajKS2u58yFia/7zfBlGW3d4imsAh/jTTBuv+wIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFFBFFTmdP4CG5hk6sf25Vx5i57c1MB8GA1UdIwQY MBaAFPprKEQbXq0BhGU16vIL/QdS4HZFMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1tc29SQnRlclFHRVpUWHE4Z3Y5QjFMZ2RrVS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDgvYmRkMjU2LTJmNTktNDMxYi1iNjUz LWNhZTY3OGIyZjIxZS8xLzEtbXNvUkJ0ZXJRR0VaVFhxOGd2OUIxTGdka1UubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzQ4L2JkZDI1Ni0yZjU5LTQzMWItYjY1My1jYWU2NzhiMmYy MWUvMS8xLW1zb1JCdGVyUUdFWlRYcThndjlCMUxnZGtVLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAgpe FAc9s3kejOKT7yrY7fJ+IfCBMgf0Ota6E/+TKyxT0fDLLVonnU8yUoDK0DdRUj0u xMc1iKt1nIMumx5xQgF6MFEImf8Q0wEn7aUFA9BTyitMFwRhmPfBBrabSy6wJVEz gD0mhp5qCyNzW8Wx7ByygeFmlBilf4kpFEycFfZmVqn1njLfi02QqedUFmhjKFrJ kdS0fEf9rtovrcxg5VpVDXVmVYANbMl8XmWJWvnPzX5zdAqh1XH7rouhFlsr2SNv 0B5J6DbMS4VTxQtI/SXJw4s4aw7AFYCbw/ZOOMToZ90+Qe5jZeSRkZsU+rgaAAoS D4Thf9X5qN1eglLdWg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:37:21 2025 by rpki-client