This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.mft File: p0msqF3GbIPOVezcBFyWB1yn3rw.mft (raw, json) Hash identifier: spAY9vu9xKYXlCpRwsdnqcG+R3eKgxaeRZ6Pc4vRii4= Subject key identifier: 01:27:A2:D1:D5:A9:3C:75:02:83:F3:C1:E3:DF:41:FA:DE:D8:E3:00 Authority key identifier: A7:49:AC:A8:5D:C6:6C:83:CE:55:EC:DC:04:5C:96:07:5C:A7:DE:BC Certificate issuer: /CN=a749aca85dc66c83ce55ecdc045c96075ca7debc Certificate serial: 019B3C7E86A2077B2C72402F605BED24B501 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p0msqF3GbIPOVezcBFyWB1yn3rw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 16:01:23 +0000 Manifest this update: Sat 20 Dec 2025 16:01:23 +0000 Manifest next update: Sun 21 Dec 2025 16:01:23 +0000 Files and hashes: 1: p0msqF3GbIPOVezcBFyWB1yn3rw.crl (hash: 5QKMJgHJ+w0Bgwpi9Tnv7Op1h480N5PwSfOuo3C8qMI=) 2: vPW0vOvqthOlHU6_v3sIc5DQ0j0.roa (hash: uvs0104pFwEVBM0nuV6DqiIGUvrkJtwZhdn8IHcJS3s=) 3: wWNRdFWkzsrzPRdYPLpt7t1EH44.roa (hash: jdk5fXDfmvLAmCXB7Op/+o6QmlltLAtxqbK6vg83GwE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.crl rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.mft rsync://rpki.ripe.net/repository/DEFAULT/p0msqF3GbIPOVezcBFyWB1yn3rw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:86:a2:07:7b:2c:72:40:2f:60:5b:ed:24:b5:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a749aca85dc66c83ce55ecdc045c96075ca7debc Validity Not Before: Dec 20 16:01:23 2025 GMT Not After : Dec 21 16:01:23 2025 GMT Subject: CN=0127a2d1d5a93c750283f3c1e3df41faded8e300 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:de:25:bf:e9:32:a3:83:7d:39:94:26:84:26: 3a:2b:5e:78:78:42:83:68:30:5a:10:80:77:7a:c7: e4:55:88:c1:10:bb:33:07:aa:f2:b6:b4:b7:44:94: 34:d6:89:b5:77:36:63:cc:d1:e4:67:2a:0b:8a:17: 70:4b:c6:25:57:6d:fc:fe:08:2b:76:ac:f6:9b:90: ff:25:fa:19:f3:8a:7d:27:ee:c1:ca:07:28:2b:a0: 4e:62:0c:06:c9:44:17:5e:e1:eb:cf:cd:c3:90:7a: f5:07:01:2f:cf:71:c8:35:06:37:ef:2b:89:a2:1f: 47:55:5f:6d:0e:73:3b:8c:d0:65:70:7b:b6:ed:52: 49:f5:65:fb:23:11:52:8c:dc:d2:38:9c:9b:54:39: 7f:c0:57:4d:c7:a7:a7:5a:99:97:e4:f4:23:85:c8: e3:4d:29:b0:ad:0a:85:18:71:4d:19:b9:14:f6:48: e3:66:b5:b9:24:11:f7:44:1f:3e:03:d8:84:cd:37: 9d:34:36:11:56:18:0b:ee:17:ac:1d:05:3c:4b:fe: 9a:90:50:d0:e6:d2:93:51:06:56:b7:fb:3d:8c:7b: 04:04:f2:9e:8d:c0:b7:91:11:4e:03:51:86:60:c8: 21:c0:67:8a:1e:d0:a2:9a:7c:ed:9a:68:60:92:b6: 2d:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:27:A2:D1:D5:A9:3C:75:02:83:F3:C1:E3:DF:41:FA:DE:D8:E3:00 X509v3 Authority Key Identifier: keyid:A7:49:AC:A8:5D:C6:6C:83:CE:55:EC:DC:04:5C:96:07:5C:A7:DE:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0msqF3GbIPOVezcBFyWB1yn3rw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:e6:b4:91:ec:1f:af:05:0b:cd:01:e0:61:c4:94:2c:65:54: 68:b8:b3:16:15:da:8b:b9:8c:a1:1d:7d:0c:c8:a0:2c:84:21: bb:2a:ae:0a:1d:5e:0b:1c:6b:55:64:27:ef:6e:48:26:ea:ef: dd:21:0b:b0:42:83:9a:62:76:53:2c:94:99:50:19:99:d3:63: b6:13:80:89:20:4e:d8:66:49:8a:81:ec:6d:86:11:19:16:2e: e7:b0:7e:a9:aa:22:6d:2b:7b:1a:c8:52:62:7c:a2:b6:e9:f8: 40:d0:d8:58:ac:40:8c:0f:bb:bd:1a:11:2e:c9:82:ca:a0:6b: 10:fa:cb:ec:c5:cd:ba:13:07:10:3d:6d:c7:eb:9b:6f:43:c4: f9:62:e4:45:d4:c1:fc:f4:f5:c5:66:91:95:b9:dc:25:b7:93: 2c:e4:5b:8e:72:41:2e:de:24:67:cd:05:e2:ee:b8:45:ec:b8: b3:a2:a0:d7:04:d3:a5:83:02:67:69:0f:54:e3:7d:f1:5d:6f: dc:cc:31:85:4e:9a:5c:54:19:ad:02:d0:c7:27:be:63:a8:17: bb:0c:57:e6:3f:d2:28:ef:ef:fe:12:3e:6e:23:35:d9:52:75: 80:0b:2b:9d:88:6a:d6:26:0c:57:71:67:58:14:37:4d:b5:af: fe:5d:c5:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8foaiB3ssckAvYFvtJLUBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3NDlhY2E4NWRjNjZjODNjZTU1ZWNkYzA0NWM5NjA3NWNh N2RlYmMwHhcNMjUxMjIwMTYwMTIzWhcNMjUxMjIxMTYwMTIzWjAzMTEwLwYDVQQD EygwMTI3YTJkMWQ1YTkzYzc1MDI4M2YzYzFlM2RmNDFmYWRlZDhlMzAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5N4lv+kyo4N9OZQmhCY6K154eEKD aDBaEIB3esfkVYjBELszB6rytrS3RJQ01om1dzZjzNHkZyoLihdwS8YlV238/ggr dqz2m5D/JfoZ84p9J+7BygcoK6BOYgwGyUQXXuHrz83DkHr1BwEvz3HINQY37yuJ oh9HVV9tDnM7jNBlcHu27VJJ9WX7IxFSjNzSOJybVDl/wFdNx6enWpmX5PQjhcjj TSmwrQqFGHFNGbkU9kjjZrW5JBH3RB8+A9iEzTedNDYRVhgL7hesHQU8S/6akFDQ 5tKTUQZWt/s9jHsEBPKejcC3kRFOA1GGYMghwGeKHtCimnztmmhgkrYt+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAEnotHVqTx1AoPzwePfQfre2OMAMB8GA1UdIwQY MBaAFKdJrKhdxmyDzlXs3ARclgdcp968MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDBtc3FGM0diSVBPVmV6Y0JGeVdCMXluM3J3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy8zM2U1MDgtMTI3ZC00OTQ2LWIzY2Mt NGM5ZjQzZjg3OGFiLzEvcDBtc3FGM0diSVBPVmV6Y0JGeVdCMXluM3J3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy8zM2U1MDgtMTI3ZC00OTQ2LWIzY2MtNGM5ZjQzZjg3OGFi LzEvcDBtc3FGM0diSVBPVmV6Y0JGeVdCMXluM3J3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiOa0kewf rwULzQHgYcSULGVUaLizFhXai7mMoR19DMigLIQhuyquCh1eCxxrVWQn725IJurv 3SELsEKDmmJ2UyyUmVAZmdNjthOAiSBO2GZJioHsbYYRGRYu57B+qaoibSt7GshS Ynyitun4QNDYWKxAjA+7vRoRLsmCyqBrEPrL7MXNuhMHED1tx+ubb0PE+WLkRdTB /PT1xWaRlbncJbeTLORbjnJBLt4kZ80F4u64Rey4s6Kg1wTTpYMCZ2kPVON98V1v 3MwxhU6aXFQZrQLQxye+Y6gXuwxX5j/SKO/v/hI+biM12VJ1gAsrnYhq1iYMV3Fn WBQ3TbWv/l3FHw== -----END CERTIFICATE-----Generated at Sat Dec 20 21:32:11 2025 by rpki-client