This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.mft File: p0msqF3GbIPOVezcBFyWB1yn3rw.mft (raw, json) Hash identifier: gUgnqmMKFTjyAtZshzUmVKBfMokE2t5saHwVY1E3UYQ= Subject key identifier: 84:57:0B:BC:77:B5:FE:01:D0:C4:97:D7:53:B7:A6:F9:3C:D0:6D:27 Authority key identifier: A7:49:AC:A8:5D:C6:6C:83:CE:55:EC:DC:04:5C:96:07:5C:A7:DE:BC Certificate issuer: /CN=a749aca85dc66c83ce55ecdc045c96075ca7debc Certificate serial: 019B1013B1C0E4B36276C534B92B390BD517 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p0msqF3GbIPOVezcBFyWB1yn3rw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.mft Manifest number: 1772 Signing time: Fri 12 Dec 2025 01:01:24 +0000 Manifest this update: Fri 12 Dec 2025 01:01:24 +0000 Manifest next update: Sat 13 Dec 2025 01:01:24 +0000 Files and hashes: 1: p0msqF3GbIPOVezcBFyWB1yn3rw.crl (hash: aiXbHvoEPj9lGLbyoqM5ZrZC8mK6p9wLhIPXaJmld3I=) 2: vPW0vOvqthOlHU6_v3sIc5DQ0j0.roa (hash: uvs0104pFwEVBM0nuV6DqiIGUvrkJtwZhdn8IHcJS3s=) 3: wWNRdFWkzsrzPRdYPLpt7t1EH44.roa (hash: jdk5fXDfmvLAmCXB7Op/+o6QmlltLAtxqbK6vg83GwE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.crl rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.mft rsync://rpki.ripe.net/repository/DEFAULT/p0msqF3GbIPOVezcBFyWB1yn3rw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:13:b1:c0:e4:b3:62:76:c5:34:b9:2b:39:0b:d5:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a749aca85dc66c83ce55ecdc045c96075ca7debc Validity Not Before: Dec 12 01:01:24 2025 GMT Not After : Dec 13 01:01:24 2025 GMT Subject: CN=84570bbc77b5fe01d0c497d753b7a6f93cd06d27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d3:92:89:53:e2:13:4f:ce:f4:bb:17:1c:29: db:fe:7c:e6:de:d0:8a:f0:3d:75:1b:37:d0:af:6c: c8:d3:68:17:39:c6:79:53:58:67:25:d5:3b:1e:a4: d0:ef:84:9f:33:e8:26:af:27:5d:6f:79:b4:cb:47: ba:80:93:80:1e:f6:a2:ad:28:d3:69:b1:62:e2:85: e2:e1:ec:3b:48:1c:ee:83:b5:fe:d2:c9:04:f0:50: d0:9a:0e:64:93:9f:d8:bd:da:90:2c:17:bd:58:14: fb:67:73:cd:3c:f2:45:ab:cb:d8:eb:f6:89:ec:e6: 6e:a1:58:ba:ed:d1:c5:ff:4f:80:52:b7:3f:66:eb: 23:3a:22:06:9b:16:ce:cf:b5:0c:42:53:44:10:12: 26:1b:da:28:d3:3f:73:12:bc:f3:7b:00:f5:60:d4: aa:36:61:6a:a0:63:93:48:99:f9:78:13:21:e1:4c: 26:c2:eb:42:f8:08:80:b1:55:bf:90:5d:8c:dc:e0: a9:bb:70:61:2d:d6:62:3f:8a:ee:d2:c7:9b:f9:b2: 5f:a0:05:2f:90:58:2d:98:2f:1d:06:14:68:bf:34: f4:55:56:e2:75:e6:09:56:ef:7e:30:cc:be:cb:ba: b8:ab:f6:38:89:00:9a:31:a0:12:38:d3:4c:cb:24: ac:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:57:0B:BC:77:B5:FE:01:D0:C4:97:D7:53:B7:A6:F9:3C:D0:6D:27 X509v3 Authority Key Identifier: keyid:A7:49:AC:A8:5D:C6:6C:83:CE:55:EC:DC:04:5C:96:07:5C:A7:DE:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0msqF3GbIPOVezcBFyWB1yn3rw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:60:b5:e4:95:9a:77:e3:de:b1:39:c7:64:54:96:8c:28:43: cc:ed:9a:89:4d:71:b5:75:a8:0a:9d:64:bb:1b:da:1a:12:d5: 6b:be:23:ba:05:fa:61:ab:1e:e6:6f:53:79:50:92:6b:a2:04: 90:02:ae:24:73:89:82:60:bf:e3:e9:95:53:a0:da:c3:c2:c7: 1e:d5:dc:cb:ba:e0:8c:6c:2a:15:b8:1a:48:0b:77:42:d0:90: d2:55:c4:ed:18:74:e7:50:5c:d4:bf:96:de:e8:6e:96:30:e5: 47:18:a2:b2:91:48:1a:46:fe:9c:b9:28:6f:96:01:8d:75:59: 24:7c:63:08:56:cb:00:6e:49:9c:66:91:c6:e8:8d:c2:31:4e: 5e:fb:17:8e:08:83:2c:e2:47:b3:25:e0:3c:46:4d:0f:11:2a: e0:53:99:50:31:d6:c2:c6:33:a9:e5:91:c5:eb:1c:cd:5d:32: 32:96:f2:d0:1e:0a:dc:0c:fa:b6:5c:08:fe:7a:df:92:01:8a: 70:76:c9:40:ea:7b:2a:3c:4d:63:8c:72:2d:29:30:19:b0:2b: be:50:08:a5:25:c8:ed:1f:ab:d8:67:8f:56:32:45:3f:75:3e: cd:1a:6d:ac:5c:cd:ca:60:93:e4:b7:95:89:3b:eb:75:cb:34: 70:07:57:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQE7HA5LNidsU0uSs5C9UXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3NDlhY2E4NWRjNjZjODNjZTU1ZWNkYzA0NWM5NjA3NWNh N2RlYmMwHhcNMjUxMjEyMDEwMTI0WhcNMjUxMjEzMDEwMTI0WjAzMTEwLwYDVQQD Eyg4NDU3MGJiYzc3YjVmZTAxZDBjNDk3ZDc1M2I3YTZmOTNjZDA2ZDI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNOSiVPiE0/O9LsXHCnb/nzm3tCK 8D11GzfQr2zI02gXOcZ5U1hnJdU7HqTQ74SfM+gmryddb3m0y0e6gJOAHvairSjT abFi4oXi4ew7SBzug7X+0skE8FDQmg5kk5/YvdqQLBe9WBT7Z3PNPPJFq8vY6/aJ 7OZuoVi67dHF/0+AUrc/ZusjOiIGmxbOz7UMQlNEEBImG9oo0z9zErzzewD1YNSq NmFqoGOTSJn5eBMh4UwmwutC+AiAsVW/kF2M3OCpu3BhLdZiP4ru0seb+bJfoAUv kFgtmC8dBhRovzT0VVbideYJVu9+MMy+y7q4q/Y4iQCaMaASONNMyySsgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIRXC7x3tf4B0MSX11O3pvk80G0nMB8GA1UdIwQY MBaAFKdJrKhdxmyDzlXs3ARclgdcp968MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDBtc3FGM0diSVBPVmV6Y0JGeVdCMXluM3J3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy8zM2U1MDgtMTI3ZC00OTQ2LWIzY2Mt NGM5ZjQzZjg3OGFiLzEvcDBtc3FGM0diSVBPVmV6Y0JGeVdCMXluM3J3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy8zM2U1MDgtMTI3ZC00OTQ2LWIzY2MtNGM5ZjQzZjg3OGFi LzEvcDBtc3FGM0diSVBPVmV6Y0JGeVdCMXluM3J3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIWC15JWa d+PesTnHZFSWjChDzO2aiU1xtXWoCp1kuxvaGhLVa74jugX6Yase5m9TeVCSa6IE kAKuJHOJgmC/4+mVU6Daw8LHHtXcy7rgjGwqFbgaSAt3QtCQ0lXE7Rh051Bc1L+W 3uhuljDlRxiispFIGkb+nLkob5YBjXVZJHxjCFbLAG5JnGaRxuiNwjFOXvsXjgiD LOJHsyXgPEZNDxEq4FOZUDHWwsYzqeWRxesczV0yMpby0B4K3Az6tlwI/nrfkgGK cHbJQOp7KjxNY4xyLSkwGbArvlAIpSXI7R+r2GePVjJFP3U+zRptrFzNymCT5LeV iTvrdcs0cAdXpA== -----END CERTIFICATE-----Generated at Fri Dec 12 08:02:22 2025 by rpki-client