This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/bdd256-2f59-431b-b653-cae678b2f21e/1/1-msoRBterQGEZTXq8gv9B1LgdkU.mft File: 1-msoRBterQGEZTXq8gv9B1LgdkU.mft (raw, json) Hash identifier: l1d36NuEG+VMp2HZdCqHrubGsYntJjlO+xFSELk8fRk= Subject key identifier: 1C:C4:E9:73:FA:17:E8:A3:02:93:F6:DB:49:97:6F:26:CF:A9:43:22 Authority key identifier: FA:6B:28:44:1B:5E:AD:01:84:65:35:EA:F2:0B:FD:07:52:E0:76:45 Certificate issuer: /CN=fa6b28441b5ead01846535eaf20bfd0752e07645 Certificate serial: 019B5A88C7F87E31897F0A7BD518253F124B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-msoRBterQGEZTXq8gv9B1LgdkU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/bdd256-2f59-431b-b653-cae678b2f21e/1/1-msoRBterQGEZTXq8gv9B1LgdkU.mft Manifest number: DD Signing time: Fri 26 Dec 2025 12:01:12 +0000 Manifest this update: Fri 26 Dec 2025 12:01:12 +0000 Manifest next update: Sat 27 Dec 2025 12:01:12 +0000 Files and hashes: 1: 1-msoRBterQGEZTXq8gv9B1LgdkU.crl (hash: o1xFx5WwXx1QETzk9MlMfd1i3Fpjehsxw416ZUn5wNI=) 2: vBOQCuTyEfYV4gQKe7qCxZbiu9I.roa (hash: YzgNFzACvcQVNgde31Xeo9Tat9fZP3Es1rC5dljFCQE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/bdd256-2f59-431b-b653-cae678b2f21e/1/1-msoRBterQGEZTXq8gv9B1LgdkU.crl rsync://rpki.ripe.net/repository/DEFAULT/48/bdd256-2f59-431b-b653-cae678b2f21e/1/1-msoRBterQGEZTXq8gv9B1LgdkU.mft rsync://rpki.ripe.net/repository/DEFAULT/1-msoRBterQGEZTXq8gv9B1LgdkU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:c7:f8:7e:31:89:7f:0a:7b:d5:18:25:3f:12:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa6b28441b5ead01846535eaf20bfd0752e07645 Validity Not Before: Dec 26 12:01:12 2025 GMT Not After : Dec 27 12:01:12 2025 GMT Subject: CN=1cc4e973fa17e8a30293f6db49976f26cfa94322 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:89:85:7f:b8:9a:9e:f0:2e:88:02:70:62:55: 7a:fa:20:cc:55:ff:36:b4:df:08:75:b1:59:35:3f: 7a:05:12:b0:e9:d7:5d:83:c0:35:8a:7a:30:c5:ad: eb:09:b6:73:83:3f:2c:51:2d:c4:37:b8:4a:95:03: ec:25:9a:e2:3d:1a:67:5d:7f:b0:97:18:8f:da:d5: 59:6a:a7:c4:38:c5:06:71:6e:c1:b1:38:1a:52:5b: e8:fe:a3:18:73:b1:44:fd:ac:20:e4:bd:62:a8:fa: d7:61:03:11:bb:82:10:30:e6:de:b0:a4:fd:fe:de: 9a:06:cd:6f:b1:9c:34:e2:1c:9e:80:1a:5b:bd:4b: a2:e4:c3:48:3a:44:4a:48:6f:d8:0e:89:02:9b:8d: 30:9a:f2:38:4d:1b:8b:0b:f3:70:b6:6a:df:37:8a: d7:95:11:31:55:f7:1a:29:e6:96:a0:28:df:21:6b: d0:37:db:b7:b0:ca:6b:48:73:a0:81:66:04:8f:07: 95:e3:1a:e3:83:a5:ca:de:7f:d1:6b:ba:cf:5d:0d: 8a:4c:89:0c:02:d4:00:c1:cd:d2:12:74:68:8b:f8: 7a:78:4d:3a:59:9f:f6:c0:d8:58:4b:23:dc:f4:ff: 39:e1:a6:4c:24:de:4b:27:c0:dc:ab:89:9f:43:9c: 6f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:C4:E9:73:FA:17:E8:A3:02:93:F6:DB:49:97:6F:26:CF:A9:43:22 X509v3 Authority Key Identifier: keyid:FA:6B:28:44:1B:5E:AD:01:84:65:35:EA:F2:0B:FD:07:52:E0:76:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-msoRBterQGEZTXq8gv9B1LgdkU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bdd256-2f59-431b-b653-cae678b2f21e/1/1-msoRBterQGEZTXq8gv9B1LgdkU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bdd256-2f59-431b-b653-cae678b2f21e/1/1-msoRBterQGEZTXq8gv9B1LgdkU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:db:94:89:43:8b:a2:6a:e9:4b:20:ca:78:98:4e:24:9f:fc: 4b:39:87:78:f1:cd:ca:32:4e:30:51:64:c8:94:b7:8a:53:5a: b7:a2:16:15:ba:ab:4c:a0:0c:0e:c5:df:e0:46:ea:79:3b:b6: ef:d0:66:c4:cf:53:b4:36:89:64:61:ad:e0:f9:4f:0f:a8:8c: 92:c5:fc:23:b1:6b:6d:ab:8a:c4:71:9c:5a:ee:98:16:45:c4: fc:13:35:ff:85:0f:3e:c6:d4:29:64:c4:aa:18:8c:7d:83:b4: d4:0d:51:83:67:a6:8d:c1:af:90:9a:f2:ad:2e:75:1f:2d:63: b8:56:cd:65:1e:9e:2c:ec:f5:c0:83:13:f9:7b:47:73:7d:fd: 8c:e9:41:b6:75:f1:83:2c:ac:3c:cc:65:83:c2:c9:a6:8f:a9: fc:9f:30:86:15:8c:ed:ae:1b:51:47:d2:23:07:a1:4b:f0:1d: e6:76:50:3e:ac:c7:1c:21:ac:82:8c:69:9b:cf:1f:40:b3:cb: a8:f7:99:aa:2e:49:b5:51:99:b9:01:73:6a:2f:d8:3f:37:db: c1:55:03:52:b4:21:e2:df:6a:ad:22:88:4e:d4:92:07:6d:3e: b7:3a:da:70:93:2a:ef:cb:1b:ab:66:58:17:e7:0e:d0:0c:a5: ff:47:ca:b3 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtaiMf4fjGJfwp71RglPxJLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhNmIyODQ0MWI1ZWFkMDE4NDY1MzVlYWYyMGJmZDA3NTJl MDc2NDUwHhcNMjUxMjI2MTIwMTEyWhcNMjUxMjI3MTIwMTEyWjAzMTEwLwYDVQQD EygxY2M0ZTk3M2ZhMTdlOGEzMDI5M2Y2ZGI0OTk3NmYyNmNmYTk0MzIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwomFf7ianvAuiAJwYlV6+iDMVf82 tN8IdbFZNT96BRKw6dddg8A1inowxa3rCbZzgz8sUS3EN7hKlQPsJZriPRpnXX+w lxiP2tVZaqfEOMUGcW7BsTgaUlvo/qMYc7FE/awg5L1iqPrXYQMRu4IQMObesKT9 /t6aBs1vsZw04hyegBpbvUui5MNIOkRKSG/YDokCm40wmvI4TRuLC/NwtmrfN4rX lRExVfcaKeaWoCjfIWvQN9u3sMprSHOggWYEjweV4xrjg6XK3n/Ra7rPXQ2KTIkM AtQAwc3SEnRoi/h6eE06WZ/2wNhYSyPc9P854aZMJN5LJ8Dcq4mfQ5xvvQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFBzE6XP6F+ijApP220mXbybPqUMiMB8GA1UdIwQY MBaAFPprKEQbXq0BhGU16vIL/QdS4HZFMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1tc29SQnRlclFHRVpUWHE4Z3Y5QjFMZ2RrVS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDgvYmRkMjU2LTJmNTktNDMxYi1iNjUz LWNhZTY3OGIyZjIxZS8xLzEtbXNvUkJ0ZXJRR0VaVFhxOGd2OUIxTGdka1UubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzQ4L2JkZDI1Ni0yZjU5LTQzMWItYjY1My1jYWU2NzhiMmYy MWUvMS8xLW1zb1JCdGVyUUdFWlRYcThndjlCMUxnZGtVLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZtuU iUOLomrpSyDKeJhOJJ/8SzmHePHNyjJOMFFkyJS3ilNat6IWFbqrTKAMDsXf4Ebq eTu279BmxM9TtDaJZGGt4PlPD6iMksX8I7FrbauKxHGcWu6YFkXE/BM1/4UPPsbU KWTEqhiMfYO01A1Rg2emjcGvkJryrS51Hy1juFbNZR6eLOz1wIMT+XtHc339jOlB tnXxgyysPMxlg8LJpo+p/J8whhWM7a4bUUfSIwehS/Ad5nZQPqzHHCGsgoxpm88f QLPLqPeZqi5JtVGZuQFzai/YPzfbwVUDUrQh4t9qrSKITtSSB20+tzracJMq78sb q2ZYF+cO0Ayl/0fKsw== -----END CERTIFICATE-----Generated at Fri Dec 26 16:01:54 2025 by rpki-client