This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/MseO7vestFH8N1df65EU38zBzfs.mft File: MseO7vestFH8N1df65EU38zBzfs.mft (raw, json) Hash identifier: AJAxM1xfkVxXbeCsFMuj/jwOV1FmU1bptVUbjYv/VAc= Subject key identifier: 61:8F:BC:CA:9C:27:6F:ED:B9:50:63:C7:C1:B0:5E:7F:B5:0E:91:60 Authority key identifier: 32:C7:8E:EE:F7:AC:B4:51:FC:37:57:5F:EB:91:14:DF:CC:C1:CD:FB Certificate issuer: /CN=32c78eeef7acb451fc37575feb9114dfccc1cdfb Certificate serial: 019AF277435B9A054B2775FF4545674551E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MseO7vestFH8N1df65EU38zBzfs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/MseO7vestFH8N1df65EU38zBzfs.mft Manifest number: 12A4 Signing time: Sat 06 Dec 2025 07:01:33 +0000 Manifest this update: Sat 06 Dec 2025 07:01:33 +0000 Manifest next update: Sun 07 Dec 2025 07:01:33 +0000 Files and hashes: 1: 9i8DjH71Ep8U9n2vVSWdpKwB5UA.roa (hash: fm2wqDwUiAhqNuk8l7rNQtkTwCk4cyJ8IN2iwk3dti0=) 2: M6U6dkH9DSHzE2ElXf3ZUgv-gao.roa (hash: gyUWfn2VEKn6DTTZDCrSAEanNDrzsmaWPFOYycLgJ88=) 3: MseO7vestFH8N1df65EU38zBzfs.crl (hash: /C/dr/wUzv/+kMdR0Hq3Jo5ZWshQFqYBKwJwSgqLTWM=) 4: O--ohDSHb3_cgUUA6fEd67yI0qE.roa (hash: ZeZLP6PWTPODtcpDZvxrQiDQ91HF+onUP31S24SY2QI=) 5: qcE5lMt-ta8yQgK_A4TOf_qcnKk.roa (hash: mHbw87Bhgg5orJBSCEF9YhID6w2GXs/pHd+LaovXweg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/MseO7vestFH8N1df65EU38zBzfs.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/MseO7vestFH8N1df65EU38zBzfs.mft rsync://rpki.ripe.net/repository/DEFAULT/MseO7vestFH8N1df65EU38zBzfs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:43:5b:9a:05:4b:27:75:ff:45:45:67:45:51:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32c78eeef7acb451fc37575feb9114dfccc1cdfb Validity Not Before: Dec 6 07:01:33 2025 GMT Not After : Dec 7 07:01:33 2025 GMT Subject: CN=618fbcca9c276fedb95063c7c1b05e7fb50e9160 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d7:65:af:57:0b:73:a7:00:bf:db:55:41:1b: 9c:b0:2f:62:07:b8:46:68:60:af:f3:64:4c:a3:36: c3:9e:81:1a:81:bb:a8:87:c1:fb:23:a9:d3:c3:ea: e1:cc:06:ae:98:2b:ab:8f:31:8e:84:0b:dd:9a:f5: 23:82:27:e1:55:06:f3:74:ac:24:b6:86:47:69:2c: a8:1e:9e:49:f5:4e:ad:0c:ab:3b:f0:3e:13:70:34: eb:8d:b0:bf:7f:cb:9a:7c:cc:82:0e:e2:3f:a5:0b: ec:53:a8:db:2d:4b:91:e9:93:8d:68:37:ba:ab:23: 06:89:b3:76:0b:41:0b:d5:b5:ef:ae:64:5b:04:0b: 40:50:78:ca:42:c9:2f:14:ba:f2:8c:c0:a1:35:a0: 31:30:af:a9:31:26:d7:52:80:de:44:72:54:d9:cf: fe:3f:ec:e5:6d:da:7d:63:95:a9:65:57:69:61:8f: cc:d8:a6:03:8a:8a:de:1c:a0:c3:84:11:68:36:b9: f2:a9:75:4b:b5:08:62:3a:bc:e7:8f:94:06:e0:05: 51:7e:c2:d0:e9:4f:f5:3f:5f:f2:43:c5:49:43:6a: 74:92:b7:37:9c:2d:49:42:5a:73:56:53:f3:00:8b: d3:e1:42:91:7e:7c:c5:d7:2c:31:a8:cd:08:85:de: e2:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:8F:BC:CA:9C:27:6F:ED:B9:50:63:C7:C1:B0:5E:7F:B5:0E:91:60 X509v3 Authority Key Identifier: keyid:32:C7:8E:EE:F7:AC:B4:51:FC:37:57:5F:EB:91:14:DF:CC:C1:CD:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MseO7vestFH8N1df65EU38zBzfs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/MseO7vestFH8N1df65EU38zBzfs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/MseO7vestFH8N1df65EU38zBzfs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:bf:0b:94:81:9d:98:8a:fd:78:4a:c3:e6:77:72:f5:fa:91: 64:4a:b0:8b:ef:ed:f0:68:54:fe:b3:a1:21:fe:88:ed:ce:82: 99:fd:3d:83:82:40:cd:c2:82:69:60:c1:be:54:c2:ff:08:34: 0d:ac:04:b2:d6:26:f9:c8:b6:c8:56:9b:8d:ce:13:0d:cf:2a: 60:23:62:1b:03:e1:72:6f:c1:bf:a1:83:3c:04:9c:3c:f1:3a: a6:9f:a9:70:bd:4c:03:dc:0c:bd:db:68:c6:be:77:55:49:f1: d0:cd:80:76:b9:2c:23:96:f2:77:26:4f:9f:23:b7:fe:89:39: c7:55:52:79:d2:b9:af:85:cc:51:b7:34:a0:32:90:19:a3:4c: 98:da:f0:95:29:e8:9a:1b:45:0c:a5:38:7e:6e:fc:34:56:22: aa:0c:fc:48:ba:d0:26:2d:5c:4e:a8:91:7a:7e:da:e5:ad:0d: 04:f5:34:44:00:4e:00:39:cf:93:fa:e0:e0:57:5a:24:25:db: 23:71:94:d5:2d:4f:ca:66:76:a7:33:ca:02:72:2e:18:f2:67: bb:63:14:2a:4c:25:cc:bd:0e:2c:ed:c9:f3:f2:99:34:ce:c9: a4:5f:5d:65:fe:01:50:85:ce:7e:a9:61:e6:ca:bb:35:b5:f0: 5e:ca:a3:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryd0NbmgVLJ3X/RUVnRVHoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyYzc4ZWVlZjdhY2I0NTFmYzM3NTc1ZmViOTExNGRmY2Nj MWNkZmIwHhcNMjUxMjA2MDcwMTMzWhcNMjUxMjA3MDcwMTMzWjAzMTEwLwYDVQQD Eyg2MThmYmNjYTljMjc2ZmVkYjk1MDYzYzdjMWIwNWU3ZmI1MGU5MTYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9dlr1cLc6cAv9tVQRucsC9iB7hG aGCv82RMozbDnoEagbuoh8H7I6nTw+rhzAaumCurjzGOhAvdmvUjgifhVQbzdKwk toZHaSyoHp5J9U6tDKs78D4TcDTrjbC/f8uafMyCDuI/pQvsU6jbLUuR6ZONaDe6 qyMGibN2C0EL1bXvrmRbBAtAUHjKQskvFLryjMChNaAxMK+pMSbXUoDeRHJU2c/+ P+zlbdp9Y5WpZVdpYY/M2KYDioreHKDDhBFoNrnyqXVLtQhiOrznj5QG4AVRfsLQ 6U/1P1/yQ8VJQ2p0krc3nC1JQlpzVlPzAIvT4UKRfnzF1ywxqM0Ihd7iyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGGPvMqcJ2/tuVBjx8GwXn+1DpFgMB8GA1UdIwQY MBaAFDLHju73rLRR/DdXX+uRFN/Mwc37MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXNlTzd2ZXN0Rkg4TjFkZjY1RVUzOHpCemZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8yMjViY2ItNmQzZC00YzBlLTgyNGYt MmYxYzhlNDA4YjY0LzEvTXNlTzd2ZXN0Rkg4TjFkZjY1RVUzOHpCemZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC8yMjViY2ItNmQzZC00YzBlLTgyNGYtMmYxYzhlNDA4YjY0 LzEvTXNlTzd2ZXN0Rkg4TjFkZjY1RVUzOHpCemZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAib8LlIGd mIr9eErD5ndy9fqRZEqwi+/t8GhU/rOhIf6I7c6Cmf09g4JAzcKCaWDBvlTC/wg0 DawEstYm+ci2yFabjc4TDc8qYCNiGwPhcm/Bv6GDPAScPPE6pp+pcL1MA9wMvdto xr53VUnx0M2AdrksI5bydyZPnyO3/ok5x1VSedK5r4XMUbc0oDKQGaNMmNrwlSno mhtFDKU4fm78NFYiqgz8SLrQJi1cTqiRen7a5a0NBPU0RABOADnPk/rg4FdaJCXb I3GU1S1PymZ2pzPKAnIuGPJnu2MUKkwlzL0OLO3J8/KZNM7JpF9dZf4BUIXOfqlh 5sq7NbXwXsqjTA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:01:16 2025 by rpki-client