This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.mft File: MSOZsSkM1Bmni9L7MR47x9-fXx8.mft (raw, json) Hash identifier: 5ke57QpTOwsbfUyk5ySB90mek+MoqeZvjt75w1ThmTc= Subject key identifier: F4:2E:DD:40:E4:09:07:5E:9F:1F:7A:E3:9C:8A:FC:A3:03:80:45:A3 Authority key identifier: 31:23:99:B1:29:0C:D4:19:A7:8B:D2:FB:31:1E:3B:C7:DF:9F:5F:1F Certificate issuer: /CN=312399b1290cd419a78bd2fb311e3bc7df9f5f1f Certificate serial: 019AF61C591A1A45EDF9ED603EF2BEA50D75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MSOZsSkM1Bmni9L7MR47x9-fXx8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.mft Manifest number: 0271 Signing time: Sun 07 Dec 2025 00:00:44 +0000 Manifest this update: Sun 07 Dec 2025 00:00:44 +0000 Manifest next update: Mon 08 Dec 2025 00:00:44 +0000 Files and hashes: 1: MSOZsSkM1Bmni9L7MR47x9-fXx8.crl (hash: 8xcJtZIUIm2ZrQDV2faj57HksrBGfd9IhzbV3mLxKVM=) 2: _YRrPXeHgAXgMpc2QmNmEMk3D08.roa (hash: rjz45MaRJ7ZN8GT6YntGrX6BstY+oeOQVYxVS/+RMXk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.mft rsync://rpki.ripe.net/repository/DEFAULT/MSOZsSkM1Bmni9L7MR47x9-fXx8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:1c:59:1a:1a:45:ed:f9:ed:60:3e:f2:be:a5:0d:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=312399b1290cd419a78bd2fb311e3bc7df9f5f1f Validity Not Before: Dec 7 00:00:44 2025 GMT Not After : Dec 8 00:00:44 2025 GMT Subject: CN=f42edd40e409075e9f1f7ae39c8afca3038045a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:1a:4a:67:10:d3:c8:77:2a:ce:61:87:cf:fb: 67:57:84:db:5c:0a:66:56:51:78:75:6e:f6:48:95: e3:43:26:c0:c8:1b:b6:79:5a:05:d3:66:12:07:c9: 4b:8d:32:b8:b3:37:52:c6:66:6d:d1:f8:80:94:5a: fd:f4:db:ca:36:08:c2:f4:30:8b:86:f4:6a:b4:68: 3c:da:aa:31:2f:c3:d6:2d:64:06:03:87:e3:51:1a: d2:eb:4b:8b:46:2e:d2:78:a6:ca:cd:39:7c:6f:2e: 78:76:59:d0:c2:d2:67:b2:3c:81:5b:56:91:7d:e3: 73:1f:05:b1:2c:08:45:8a:42:cf:a8:f0:fb:3a:b1: 78:ac:5e:e0:58:be:bd:de:d3:2a:95:df:51:26:ae: 53:49:da:ff:72:7c:bb:0c:77:1b:82:04:a8:54:2d: d5:32:71:b3:27:37:6e:0e:7a:87:9a:9b:84:7f:bb: 54:91:b4:2e:86:34:a0:f5:aa:66:28:28:41:eb:20: d2:f7:b5:58:06:10:67:88:14:f3:f8:20:57:3a:22: 72:21:64:42:09:da:33:71:63:e9:23:63:dd:14:a5: 03:49:ca:eb:06:3a:da:28:eb:03:11:e3:19:58:8b: ef:43:86:50:6e:00:1a:30:f4:85:75:2e:aa:9d:0d: 12:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:2E:DD:40:E4:09:07:5E:9F:1F:7A:E3:9C:8A:FC:A3:03:80:45:A3 X509v3 Authority Key Identifier: keyid:31:23:99:B1:29:0C:D4:19:A7:8B:D2:FB:31:1E:3B:C7:DF:9F:5F:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MSOZsSkM1Bmni9L7MR47x9-fXx8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:ba:b7:b1:a9:80:5a:de:cd:25:fe:5b:88:5a:ba:46:0d:93: ec:95:db:9d:6d:e3:1f:14:25:08:66:a2:55:57:9e:27:39:a9: 8c:89:b9:d7:15:ec:fa:c5:31:5a:d3:1d:13:e2:cc:eb:d6:3b: d1:3a:68:70:6a:f4:dc:4d:83:39:82:98:ee:f1:1b:b9:3c:f2: 9d:fc:05:9b:9f:43:bd:34:1c:46:cc:59:2e:c4:09:40:a6:39: 9e:31:4a:d2:56:48:88:3c:c1:3b:dd:7d:0e:cd:c8:6a:49:aa: 09:52:a4:ea:ea:20:7c:3e:a3:aa:ad:55:98:c3:f2:ed:49:55: 99:fd:55:52:56:fc:62:3b:4e:5f:48:2d:89:a7:e1:fc:a1:67: e0:cb:42:11:90:af:71:cc:38:57:0c:0e:15:86:94:c5:77:c7: a0:8d:f8:62:23:67:e7:e2:4f:97:b0:f8:16:7c:63:5c:fa:1a: 0a:8a:b9:67:1e:dd:9f:58:7f:64:12:4f:1d:68:c1:19:65:0e: df:df:1f:8e:dc:19:f1:7d:ef:52:dc:6f:9a:35:a4:ac:92:17: 4b:72:7d:2d:3b:d6:cc:f9:a4:54:37:b1:bb:73:2b:4e:b9:10: 8b:ca:c6:37:48:04:d9:ab:82:43:bc:14:2c:31:8e:31:68:11: 35:84:a6:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2HFkaGkXt+e1gPvK+pQ11MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxMjM5OWIxMjkwY2Q0MTlhNzhiZDJmYjMxMWUzYmM3ZGY5 ZjVmMWYwHhcNMjUxMjA3MDAwMDQ0WhcNMjUxMjA4MDAwMDQ0WjAzMTEwLwYDVQQD EyhmNDJlZGQ0MGU0MDkwNzVlOWYxZjdhZTM5YzhhZmNhMzAzODA0NWEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhpKZxDTyHcqzmGHz/tnV4TbXApm VlF4dW72SJXjQybAyBu2eVoF02YSB8lLjTK4szdSxmZt0fiAlFr99NvKNgjC9DCL hvRqtGg82qoxL8PWLWQGA4fjURrS60uLRi7SeKbKzTl8by54dlnQwtJnsjyBW1aR feNzHwWxLAhFikLPqPD7OrF4rF7gWL693tMqld9RJq5TSdr/cny7DHcbggSoVC3V MnGzJzduDnqHmpuEf7tUkbQuhjSg9apmKChB6yDS97VYBhBniBTz+CBXOiJyIWRC CdozcWPpI2PdFKUDScrrBjraKOsDEeMZWIvvQ4ZQbgAaMPSFdS6qnQ0SCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPQu3UDkCQdenx9645yK/KMDgEWjMB8GA1UdIwQY MBaAFDEjmbEpDNQZp4vS+zEeO8ffn18fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVNPWnNTa00xQm1uaTlMN01SNDd4OS1mWHg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS82NzY0OTktOTE0My00ODc3LTlkZmYt Mjg4NDEwMzc3NmM4LzEvTVNPWnNTa00xQm1uaTlMN01SNDd4OS1mWHg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS82NzY0OTktOTE0My00ODc3LTlkZmYtMjg4NDEwMzc3NmM4 LzEvTVNPWnNTa00xQm1uaTlMN01SNDd4OS1mWHg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVbq3samA Wt7NJf5biFq6Rg2T7JXbnW3jHxQlCGaiVVeeJzmpjIm51xXs+sUxWtMdE+LM69Y7 0TpocGr03E2DOYKY7vEbuTzynfwFm59DvTQcRsxZLsQJQKY5njFK0lZIiDzBO919 Ds3IakmqCVKk6uogfD6jqq1VmMPy7UlVmf1VUlb8YjtOX0gtiafh/KFn4MtCEZCv ccw4VwwOFYaUxXfHoI34YiNn5+JPl7D4FnxjXPoaCoq5Zx7dn1h/ZBJPHWjBGWUO 398fjtwZ8X3vUtxvmjWkrJIXS3J9LTvWzPmkVDexu3MrTrkQi8rGN0gE2auCQ7wU LDGOMWgRNYSm9w== -----END CERTIFICATE-----Generated at Sun Dec 7 01:52:17 2025 by rpki-client