This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.mft File: mssomVmi7E-KKEGRVELMvTRCSTg.mft (raw, json) Hash identifier: DQULduRZDrjEzDCiIgBIUw4frjLLI9rq/XwX6aaaeHM= Subject key identifier: 1F:65:EB:F8:83:8D:ED:DE:C5:D7:A6:C8:B4:71:15:48:39:BB:BA:05 Authority key identifier: 9A:CB:28:99:59:A2:EC:4F:8A:28:41:91:54:42:CC:BD:34:42:49:38 Certificate issuer: /CN=9acb289959a2ec4f8a2841915442ccbd34424938 Certificate serial: 019B19BB43B2D1D8DDAB9DDC48F22FF44311 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mssomVmi7E-KKEGRVELMvTRCSTg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.mft Manifest number: 02B1 Signing time: Sat 13 Dec 2025 22:01:01 +0000 Manifest this update: Sat 13 Dec 2025 22:01:01 +0000 Manifest next update: Sun 14 Dec 2025 22:01:01 +0000 Files and hashes: 1: XTu5vjEexW769xTu81kG0hu1WhA.roa (hash: Ne41d2x1Hfl8GjUz/n/mltRHcHp7ZxByOWAV8Ao4X7o=) 2: mssomVmi7E-KKEGRVELMvTRCSTg.crl (hash: QqQldhn5q5Tzif84D4QcnVeivneiSugsnKBigsKD7/4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.crl rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.mft rsync://rpki.ripe.net/repository/DEFAULT/mssomVmi7E-KKEGRVELMvTRCSTg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:bb:43:b2:d1:d8:dd:ab:9d:dc:48:f2:2f:f4:43:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9acb289959a2ec4f8a2841915442ccbd34424938 Validity Not Before: Dec 13 22:01:01 2025 GMT Not After : Dec 14 22:01:01 2025 GMT Subject: CN=1f65ebf8838deddec5d7a6c8b471154839bbba05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:4d:90:b6:77:a0:3c:81:e1:e0:10:e4:da:3f: 0b:51:75:6c:64:8a:14:22:21:64:17:68:cb:7d:59: 04:0d:d9:d8:a3:2e:be:91:e3:1c:dd:28:c4:7d:89: 91:2a:5c:b2:ee:f0:78:a3:76:47:ef:56:e2:6f:e9: 4f:28:43:97:6d:a8:7e:4a:63:bc:85:ff:da:28:34: 11:9e:d8:0c:41:c5:0d:10:be:8a:71:51:9a:57:98: 64:ef:80:f0:64:65:d4:7c:9b:12:f5:2b:72:db:32: f3:da:2f:ad:ea:40:b4:7c:90:23:e6:b7:20:2b:b8: fc:5f:78:be:67:56:9a:d0:4b:ed:3e:47:20:56:05: 6f:45:5a:aa:19:fa:5c:41:9d:5c:c6:33:0a:1c:61: c5:13:77:2c:50:85:db:dd:7f:44:d4:65:41:b9:e8: 52:0c:ac:65:23:aa:4e:a3:a1:f8:3f:33:af:b9:ce: b1:8e:85:65:f1:9d:a5:ce:9a:ab:4b:16:97:7e:3c: 96:ee:bf:ef:e0:b6:ed:c4:29:ad:cb:49:49:a3:0d: dd:ec:b9:a1:7c:28:b8:ea:1a:32:1d:eb:d9:2c:2b: 89:79:f5:39:fb:fb:94:3d:59:cd:90:4f:f0:11:12: 0a:8a:c1:21:99:b1:bd:85:14:35:17:03:03:67:2f: ca:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:65:EB:F8:83:8D:ED:DE:C5:D7:A6:C8:B4:71:15:48:39:BB:BA:05 X509v3 Authority Key Identifier: keyid:9A:CB:28:99:59:A2:EC:4F:8A:28:41:91:54:42:CC:BD:34:42:49:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mssomVmi7E-KKEGRVELMvTRCSTg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:65:2e:f1:69:4d:96:ae:af:85:c4:e7:3b:40:86:e9:e8:53: 1b:14:01:98:ed:53:1a:e0:03:59:96:7d:79:2f:27:04:1b:93: 9a:b0:72:a5:a1:8e:60:dd:e7:4f:f8:bc:24:62:e1:38:91:f3: 0e:ab:01:c6:09:e4:84:26:b1:a4:1e:f1:2a:ce:44:6f:fc:43: 95:41:ff:b9:4d:9b:81:2a:8c:d9:d0:74:87:78:18:b6:e7:80: b4:a0:41:7d:cb:3e:f6:59:bd:10:58:95:33:8f:1a:1b:00:43: 24:51:a4:2a:49:71:f6:47:9c:a8:64:0d:dc:39:9b:87:ed:9b: 09:59:00:39:29:63:da:37:0b:b6:e0:04:2e:60:44:59:34:e2: 8f:b4:f5:9f:1f:48:c4:4b:e0:24:80:c0:cd:cc:30:ee:88:ee: 23:4c:55:71:40:60:22:60:21:2d:a3:b9:50:f9:2f:47:91:c9: a7:10:a6:e5:f4:8b:ff:3f:d5:15:27:15:e2:e6:db:d2:c1:ad: ef:68:f6:99:6c:f7:b6:0f:f5:f1:54:17:6b:da:e4:e0:cb:56: d4:77:9d:a6:70:d5:3a:c4:74:97:b3:45:65:0a:20:8c:51:4d: e5:19:3f:4b:ab:69:1e:b4:db:37:d0:b3:81:41:3c:c8:2f:ea: 6a:ab:88:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZu0Oy0djdq53cSPIv9EMRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhY2IyODk5NTlhMmVjNGY4YTI4NDE5MTU0NDJjY2JkMzQ0 MjQ5MzgwHhcNMjUxMjEzMjIwMTAxWhcNMjUxMjE0MjIwMTAxWjAzMTEwLwYDVQQD EygxZjY1ZWJmODgzOGRlZGRlYzVkN2E2YzhiNDcxMTU0ODM5YmJiYTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmE2QtnegPIHh4BDk2j8LUXVsZIoU IiFkF2jLfVkEDdnYoy6+keMc3SjEfYmRKlyy7vB4o3ZH71bib+lPKEOXbah+SmO8 hf/aKDQRntgMQcUNEL6KcVGaV5hk74DwZGXUfJsS9Sty2zLz2i+t6kC0fJAj5rcg K7j8X3i+Z1aa0EvtPkcgVgVvRVqqGfpcQZ1cxjMKHGHFE3csUIXb3X9E1GVBuehS DKxlI6pOo6H4PzOvuc6xjoVl8Z2lzpqrSxaXfjyW7r/v4LbtxCmty0lJow3d7Lmh fCi46hoyHevZLCuJefU5+/uUPVnNkE/wERIKisEhmbG9hRQ1FwMDZy/KFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB9l6/iDje3exdemyLRxFUg5u7oFMB8GA1UdIwQY MBaAFJrLKJlZouxPiihBkVRCzL00Qkk4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXNzb21WbWk3RS1LS0VHUlZFTE12VFJDU1RnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9hYjBkZjEtZGY0Yy00ODcyLTk4YzUt ODY0ZmUzYmJkZWZkLzEvbXNzb21WbWk3RS1LS0VHUlZFTE12VFJDU1RnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9hYjBkZjEtZGY0Yy00ODcyLTk4YzUtODY0ZmUzYmJkZWZk LzEvbXNzb21WbWk3RS1LS0VHUlZFTE12VFJDU1RnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAomUu8WlN lq6vhcTnO0CG6ehTGxQBmO1TGuADWZZ9eS8nBBuTmrBypaGOYN3nT/i8JGLhOJHz DqsBxgnkhCaxpB7xKs5Eb/xDlUH/uU2bgSqM2dB0h3gYtueAtKBBfcs+9lm9EFiV M48aGwBDJFGkKklx9kecqGQN3Dmbh+2bCVkAOSlj2jcLtuAELmBEWTTij7T1nx9I xEvgJIDAzcww7ojuI0xVcUBgImAhLaO5UPkvR5HJpxCm5fSL/z/VFScV4ubb0sGt 72j2mWz3tg/18VQXa9rk4MtW1HedpnDVOsR0l7NFZQogjFFN5Rk/S6tpHrTbN9Cz gUE8yC/qaquIaw== -----END CERTIFICATE-----Generated at Sun Dec 14 00:07:24 2025 by rpki-client