This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.mft File: mssomVmi7E-KKEGRVELMvTRCSTg.mft (raw, json) Hash identifier: oK5dxUd233Y9eXrpI+MUh+bZD4QaOva9YTH1CitMEKM= Subject key identifier: 4D:84:8D:30:A6:B1:65:A5:3C:9B:F3:D1:7C:8B:47:E5:5E:B1:04:4F Authority key identifier: 9A:CB:28:99:59:A2:EC:4F:8A:28:41:91:54:42:CC:BD:34:42:49:38 Certificate issuer: /CN=9acb289959a2ec4f8a2841915442ccbd34424938 Certificate serial: 019B0E2550B99297B2D26E4E2698F5065A39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mssomVmi7E-KKEGRVELMvTRCSTg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.mft Manifest number: 02AB Signing time: Thu 11 Dec 2025 16:01:25 +0000 Manifest this update: Thu 11 Dec 2025 16:01:25 +0000 Manifest next update: Fri 12 Dec 2025 16:01:25 +0000 Files and hashes: 1: XTu5vjEexW769xTu81kG0hu1WhA.roa (hash: Ne41d2x1Hfl8GjUz/n/mltRHcHp7ZxByOWAV8Ao4X7o=) 2: mssomVmi7E-KKEGRVELMvTRCSTg.crl (hash: 6Lr2N++6IWyjj0Hu+EYMhiGw6pyBXGSfOVZ6qPs+RXM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.crl rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.mft rsync://rpki.ripe.net/repository/DEFAULT/mssomVmi7E-KKEGRVELMvTRCSTg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:25:50:b9:92:97:b2:d2:6e:4e:26:98:f5:06:5a:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9acb289959a2ec4f8a2841915442ccbd34424938 Validity Not Before: Dec 11 16:01:25 2025 GMT Not After : Dec 12 16:01:25 2025 GMT Subject: CN=4d848d30a6b165a53c9bf3d17c8b47e55eb1044f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:57:8e:65:92:9c:a4:f1:f6:1b:0f:ac:fb:50: 80:0d:cc:0e:f8:f4:92:0e:b4:8d:e2:85:50:a2:15: 4b:1e:e6:d8:d1:a3:34:6d:b8:77:08:27:c5:d2:c5: 75:0c:3e:46:04:54:ad:b1:fd:f7:df:c5:04:38:48: 9b:9f:64:d2:04:49:8d:70:66:e7:ca:16:34:b3:a4: b3:73:2d:4b:b3:84:5c:d7:d2:67:be:00:04:da:39: ff:fd:0a:4e:ec:a4:10:9e:1e:e8:b6:15:1b:39:22: bb:5c:ae:f8:d8:6c:0e:24:c7:2e:0b:de:0f:ce:2d: 40:87:ef:23:9c:b8:1f:52:34:64:77:93:8d:de:63: 02:14:8d:84:2c:a2:a0:0c:26:98:82:91:7d:25:71: 13:e1:52:ff:6f:5a:3e:20:fc:ac:22:dc:f8:3b:72: 9f:eb:12:c5:ec:4d:e7:68:8a:b9:96:3b:87:c2:44: 78:a9:46:79:c5:74:33:5e:63:eb:a5:5d:1d:37:46: 34:94:32:55:85:41:86:21:a1:0a:7d:b4:df:29:13: b6:18:b6:3d:cc:eb:47:29:f7:36:1b:1f:b9:4f:37: 1f:c4:b1:97:13:42:3f:02:73:da:d1:16:46:7a:ea: 62:d8:ee:88:fa:40:93:79:54:51:a3:e7:c9:d3:aa: 44:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:84:8D:30:A6:B1:65:A5:3C:9B:F3:D1:7C:8B:47:E5:5E:B1:04:4F X509v3 Authority Key Identifier: keyid:9A:CB:28:99:59:A2:EC:4F:8A:28:41:91:54:42:CC:BD:34:42:49:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mssomVmi7E-KKEGRVELMvTRCSTg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:f8:c3:21:da:0c:f2:83:1b:ec:fd:4e:d0:aa:b8:20:84:2b: f4:ef:a8:cb:ef:44:5b:b5:53:d8:1d:64:32:2d:af:ca:48:ae: 42:27:31:b9:cb:4d:be:41:d9:c9:99:20:33:73:02:ce:78:9b: 53:15:5f:3d:57:d6:49:2a:3f:df:13:1e:f1:73:e0:83:2f:ae: 8a:6e:64:11:6b:88:e6:02:5d:76:72:73:af:39:95:85:4e:6e: 01:16:be:94:76:d1:bc:08:10:b3:b7:f6:aa:ab:68:2e:6e:c0: f8:19:be:c2:ca:8c:3c:99:9a:e9:26:e1:ce:2b:de:7b:a2:f5: a1:c9:84:0c:d1:3c:6f:4d:fc:04:97:9e:fb:6f:10:0a:e1:aa: b0:20:b2:6c:b1:83:b5:3a:69:76:62:4c:3a:2b:b3:91:f4:20: b1:74:bf:f0:02:21:81:c4:4f:da:9c:4e:04:ae:f0:b2:2c:15: 9d:86:d7:5c:3a:40:1e:9a:28:58:87:34:46:67:43:50:7b:fb: cb:e4:f3:51:3a:c9:96:cd:28:0a:c5:5c:00:5f:be:07:45:6c: dc:84:05:a2:e0:29:98:a6:ba:af:31:9d:6c:18:2b:8d:f5:9d: 48:40:15:3d:b2:80:10:e8:cc:b4:c1:4c:ff:bb:60:57:6e:cc: 4f:05:c1:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJVC5kpey0m5OJpj1Blo5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhY2IyODk5NTlhMmVjNGY4YTI4NDE5MTU0NDJjY2JkMzQ0 MjQ5MzgwHhcNMjUxMjExMTYwMTI1WhcNMjUxMjEyMTYwMTI1WjAzMTEwLwYDVQQD Eyg0ZDg0OGQzMGE2YjE2NWE1M2M5YmYzZDE3YzhiNDdlNTVlYjEwNDRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0FeOZZKcpPH2Gw+s+1CADcwO+PSS DrSN4oVQohVLHubY0aM0bbh3CCfF0sV1DD5GBFStsf3338UEOEibn2TSBEmNcGbn yhY0s6Szcy1Ls4Rc19JnvgAE2jn//QpO7KQQnh7othUbOSK7XK742GwOJMcuC94P zi1Ah+8jnLgfUjRkd5ON3mMCFI2ELKKgDCaYgpF9JXET4VL/b1o+IPysItz4O3Kf 6xLF7E3naIq5ljuHwkR4qUZ5xXQzXmPrpV0dN0Y0lDJVhUGGIaEKfbTfKRO2GLY9 zOtHKfc2Gx+5TzcfxLGXE0I/AnPa0RZGeupi2O6I+kCTeVRRo+fJ06pEUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE2EjTCmsWWlPJvz0XyLR+VesQRPMB8GA1UdIwQY MBaAFJrLKJlZouxPiihBkVRCzL00Qkk4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXNzb21WbWk3RS1LS0VHUlZFTE12VFJDU1RnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9hYjBkZjEtZGY0Yy00ODcyLTk4YzUt ODY0ZmUzYmJkZWZkLzEvbXNzb21WbWk3RS1LS0VHUlZFTE12VFJDU1RnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9hYjBkZjEtZGY0Yy00ODcyLTk4YzUtODY0ZmUzYmJkZWZk LzEvbXNzb21WbWk3RS1LS0VHUlZFTE12VFJDU1RnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH/jDIdoM 8oMb7P1O0Kq4IIQr9O+oy+9EW7VT2B1kMi2vykiuQicxuctNvkHZyZkgM3MCznib UxVfPVfWSSo/3xMe8XPggy+uim5kEWuI5gJddnJzrzmVhU5uARa+lHbRvAgQs7f2 qqtoLm7A+Bm+wsqMPJma6Sbhzivee6L1ocmEDNE8b038BJee+28QCuGqsCCybLGD tTppdmJMOiuzkfQgsXS/8AIhgcRP2pxOBK7wsiwVnYbXXDpAHpooWIc0RmdDUHv7 y+TzUTrJls0oCsVcAF++B0Vs3IQFouApmKa6rzGdbBgrjfWdSEAVPbKAEOjMtMFM /7tgV27MTwXBhg== -----END CERTIFICATE-----Generated at Fri Dec 12 00:01:42 2025 by rpki-client