This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/d73592-e46d-4598-8b12-fa9114a82ac9/1/soH_MU_IquOXVAewoMF_L9403CY.mft File: soH_MU_IquOXVAewoMF_L9403CY.mft (raw, json) Hash identifier: DzBj2UApQV5s2HdDDsayZZ2zHcXvtDTdls8TlxFGHN0= Subject key identifier: 6F:B7:B9:51:42:40:16:27:B3:2B:01:B8:96:45:48:F1:57:6A:1F:AE Authority key identifier: B2:81:FF:31:4F:C8:AA:E3:97:54:07:B0:A0:C1:7F:2F:DE:34:DC:26 Certificate issuer: /CN=b281ff314fc8aae3975407b0a0c17f2fde34dc26 Certificate serial: 019B4280210E99E16839BB60F69BA9A45529 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/soH_MU_IquOXVAewoMF_L9403CY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/d73592-e46d-4598-8b12-fa9114a82ac9/1/soH_MU_IquOXVAewoMF_L9403CY.mft Manifest number: 107B Signing time: Sun 21 Dec 2025 20:00:51 +0000 Manifest this update: Sun 21 Dec 2025 20:00:51 +0000 Manifest next update: Mon 22 Dec 2025 20:00:51 +0000 Files and hashes: 1: go1QZ0e22NiGhCdbGFP80uaB__o.roa (hash: CjjqC3BGYnOdj8L5wiPgLlhe25x4Dta7BFEkigZuNFk=) 2: soH_MU_IquOXVAewoMF_L9403CY.crl (hash: ZSd3dk/rMg9lUMCrfEeRistm1heP7/RvIqCMLKmlO20=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/d73592-e46d-4598-8b12-fa9114a82ac9/1/soH_MU_IquOXVAewoMF_L9403CY.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/d73592-e46d-4598-8b12-fa9114a82ac9/1/soH_MU_IquOXVAewoMF_L9403CY.mft rsync://rpki.ripe.net/repository/DEFAULT/soH_MU_IquOXVAewoMF_L9403CY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 20:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:80:21:0e:99:e1:68:39:bb:60:f6:9b:a9:a4:55:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b281ff314fc8aae3975407b0a0c17f2fde34dc26 Validity Not Before: Dec 21 20:00:51 2025 GMT Not After : Dec 22 20:00:51 2025 GMT Subject: CN=6fb7b95142401627b32b01b8964548f1576a1fae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:06:8f:4e:32:20:92:cf:af:9a:65:d5:5c:0a: 3a:79:34:7a:4d:b3:57:e1:88:89:55:60:75:7b:d4: b7:16:0f:cf:77:c4:67:53:a3:6a:e2:29:fa:f6:fc: 5f:8c:ec:d9:60:49:21:1c:9d:ab:43:44:49:05:2b: cb:45:a2:0a:27:e7:55:a4:f7:da:31:7c:42:3c:b8: f6:84:ee:4d:5d:3d:bc:6f:18:6a:ed:06:23:e7:e6: 3c:9e:1f:ab:c7:b2:7d:67:30:05:97:a2:1d:0a:f9: ff:66:e4:e5:5e:b3:10:f7:7b:c6:0a:81:e6:e8:30: 74:3f:9d:cf:b0:3f:3c:3f:a7:39:2a:f2:53:30:58: e6:7c:9b:eb:df:bb:3c:c6:e8:b7:97:a5:70:84:45: bb:87:86:55:b7:07:a0:be:cf:0f:38:4a:83:47:00: d4:2e:68:51:4a:27:c2:85:42:64:5d:eb:c2:c8:5c: 05:cb:57:67:44:7c:2f:7a:3b:44:09:18:25:40:39: 8e:5e:a0:62:62:83:af:40:0a:c5:19:0a:9b:ac:66: a2:b3:63:28:ac:bb:7a:e6:04:14:85:3b:75:f2:f7: 5b:09:76:18:30:3c:f5:54:fb:47:92:f6:1a:cb:8f: 76:02:8f:e3:5d:ea:eb:6f:d7:15:23:69:d5:0c:e5: 34:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:B7:B9:51:42:40:16:27:B3:2B:01:B8:96:45:48:F1:57:6A:1F:AE X509v3 Authority Key Identifier: keyid:B2:81:FF:31:4F:C8:AA:E3:97:54:07:B0:A0:C1:7F:2F:DE:34:DC:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/soH_MU_IquOXVAewoMF_L9403CY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d73592-e46d-4598-8b12-fa9114a82ac9/1/soH_MU_IquOXVAewoMF_L9403CY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d73592-e46d-4598-8b12-fa9114a82ac9/1/soH_MU_IquOXVAewoMF_L9403CY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:ec:ee:36:96:3e:22:91:8c:84:d9:3d:86:81:3a:43:86:23: 98:4d:bf:c1:23:5b:65:70:5c:01:43:d4:7a:07:40:a0:5f:1a: f9:a1:82:a5:57:29:4e:b7:e9:06:3a:f6:4c:99:8a:fd:90:39: d0:78:9d:a5:8a:b2:20:7d:45:94:0b:33:f0:eb:f9:31:6b:da: 9d:14:18:c3:e3:ec:e9:61:8c:6c:a4:72:51:a6:64:55:98:2f: 54:a6:6f:0f:36:3c:98:65:0f:fa:09:6f:17:33:06:73:86:b0: 88:31:17:d3:4f:b9:5f:ff:70:9a:5b:1e:b6:3b:6a:66:b2:60: 6b:f3:c8:c4:67:e5:23:4f:74:fb:cf:fc:a3:7e:12:45:e1:e9: 8c:aa:2a:2a:40:8a:06:0d:7e:82:52:1f:19:be:8e:19:c6:6f: 06:a3:e2:a7:6a:18:4c:c0:a5:0b:c5:2c:44:5b:c2:f2:68:9c: 46:92:9b:43:44:40:5b:cf:e5:94:42:2f:1d:e3:86:02:4a:0b: e2:0a:73:04:12:03:a2:06:6c:1c:9c:94:ca:2f:a1:24:c0:48: 5a:6d:d3:e5:73:34:8a:9c:6d:28:a1:f3:f5:05:90:d8:0f:6e: d7:bb:75:8f:d9:f3:e9:d8:54:e2:82:4e:4a:2f:30:87:eb:b5: d4:8f:c1:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCgCEOmeFoObtg9puppFUpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyODFmZjMxNGZjOGFhZTM5NzU0MDdiMGEwYzE3ZjJmZGUz NGRjMjYwHhcNMjUxMjIxMjAwMDUxWhcNMjUxMjIyMjAwMDUxWjAzMTEwLwYDVQQD Eyg2ZmI3Yjk1MTQyNDAxNjI3YjMyYjAxYjg5NjQ1NDhmMTU3NmExZmFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwaPTjIgks+vmmXVXAo6eTR6TbNX 4YiJVWB1e9S3Fg/Pd8RnU6Nq4in69vxfjOzZYEkhHJ2rQ0RJBSvLRaIKJ+dVpPfa MXxCPLj2hO5NXT28bxhq7QYj5+Y8nh+rx7J9ZzAFl6IdCvn/ZuTlXrMQ93vGCoHm 6DB0P53PsD88P6c5KvJTMFjmfJvr37s8xui3l6VwhEW7h4ZVtwegvs8POEqDRwDU LmhRSifChUJkXevCyFwFy1dnRHwvejtECRglQDmOXqBiYoOvQArFGQqbrGais2Mo rLt65gQUhTt18vdbCXYYMDz1VPtHkvYay492Ao/jXerrb9cVI2nVDOU0mwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG+3uVFCQBYnsysBuJZFSPFXah+uMB8GA1UdIwQY MBaAFLKB/zFPyKrjl1QHsKDBfy/eNNwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc29IX01VX0lxdU9YVkFld29NRl9MOTQwM0NZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9kNzM1OTItZTQ2ZC00NTk4LThiMTIt ZmE5MTE0YTgyYWM5LzEvc29IX01VX0lxdU9YVkFld29NRl9MOTQwM0NZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi9kNzM1OTItZTQ2ZC00NTk4LThiMTItZmE5MTE0YTgyYWM5 LzEvc29IX01VX0lxdU9YVkFld29NRl9MOTQwM0NZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE+zuNpY+ IpGMhNk9hoE6Q4YjmE2/wSNbZXBcAUPUegdAoF8a+aGCpVcpTrfpBjr2TJmK/ZA5 0HidpYqyIH1FlAsz8Ov5MWvanRQYw+Ps6WGMbKRyUaZkVZgvVKZvDzY8mGUP+glv FzMGc4awiDEX00+5X/9wmlsetjtqZrJga/PIxGflI090+8/8o34SReHpjKoqKkCK Bg1+glIfGb6OGcZvBqPip2oYTMClC8UsRFvC8micRpKbQ0RAW8/llEIvHeOGAkoL 4gpzBBIDogZsHJyUyi+hJMBIWm3T5XM0ipxtKKHz9QWQ2A9u17t1j9nz6dhU4oJO Si8wh+u11I/BYw== -----END CERTIFICATE-----Generated at Mon Dec 22 05:32:32 2025 by rpki-client