This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.mft File: mssomVmi7E-KKEGRVELMvTRCSTg.mft (raw, json) Hash identifier: R4aVSQQZ0e8hHsnN7yGY+nIrGwIclWm2mmaewxwQo1I= Subject key identifier: 3D:DF:52:8C:8A:B2:76:94:D4:19:3B:A8:93:D8:C8:43:8B:FB:0C:FB Authority key identifier: 9A:CB:28:99:59:A2:EC:4F:8A:28:41:91:54:42:CC:BD:34:42:49:38 Certificate issuer: /CN=9acb289959a2ec4f8a2841915442ccbd34424938 Certificate serial: 019B2175055B5B0F99E45EB1ED45C88EBC41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mssomVmi7E-KKEGRVELMvTRCSTg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.mft Manifest number: 02B5 Signing time: Mon 15 Dec 2025 10:01:15 +0000 Manifest this update: Mon 15 Dec 2025 10:01:15 +0000 Manifest next update: Tue 16 Dec 2025 10:01:15 +0000 Files and hashes: 1: XTu5vjEexW769xTu81kG0hu1WhA.roa (hash: Ne41d2x1Hfl8GjUz/n/mltRHcHp7ZxByOWAV8Ao4X7o=) 2: mssomVmi7E-KKEGRVELMvTRCSTg.crl (hash: gtcJbb98tlWDGQBBSk5ARAZjW4bOVGJyRs47TQF/mu0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.crl rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.mft rsync://rpki.ripe.net/repository/DEFAULT/mssomVmi7E-KKEGRVELMvTRCSTg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 10:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:75:05:5b:5b:0f:99:e4:5e:b1:ed:45:c8:8e:bc:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9acb289959a2ec4f8a2841915442ccbd34424938 Validity Not Before: Dec 15 10:01:15 2025 GMT Not After : Dec 16 10:01:15 2025 GMT Subject: CN=3ddf528c8ab27694d4193ba893d8c8438bfb0cfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c6:b5:ee:76:6e:16:e8:e3:79:cb:60:74:18: ee:d5:39:e6:9a:44:70:cb:ae:ad:fe:f6:af:6a:17: d4:66:3e:7d:bc:ec:f9:0e:a0:a3:ff:3f:62:86:35: 23:52:d5:68:11:20:1c:60:9c:d8:99:83:da:cb:50: d5:ad:03:89:27:a6:68:cb:e0:0e:a8:4c:76:0b:51: bc:5d:f5:55:af:00:45:72:e6:7c:0a:8d:a4:ce:7a: bc:20:47:f5:83:2a:7d:45:a5:14:c6:34:5e:f9:ba: 44:0b:cd:c0:07:4d:42:1f:7d:e7:e2:90:a8:c0:c8: 3f:8f:9c:d4:e5:fd:88:43:62:16:4e:fa:28:e9:de: e1:3f:c3:b3:16:58:2b:5a:d3:33:e0:1d:68:3f:4b: fd:31:8b:91:03:56:2b:0d:f7:7c:be:5b:69:ce:7b: 9f:bd:e4:a5:15:7a:26:fe:96:0d:a2:47:fe:07:94: 36:34:a3:8c:f0:4a:dd:c5:e9:2f:7d:b2:82:b4:c1: 70:1e:46:9e:3e:15:64:b1:81:cb:4f:1c:86:57:f4: 00:62:be:a6:7e:71:b3:45:9e:a5:a5:15:18:06:2b: 67:3c:f8:be:fe:6a:03:14:c9:02:65:b2:33:a3:53: 33:5a:55:b6:28:a6:bc:45:7c:63:ae:b9:0e:3e:80: 38:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:DF:52:8C:8A:B2:76:94:D4:19:3B:A8:93:D8:C8:43:8B:FB:0C:FB X509v3 Authority Key Identifier: keyid:9A:CB:28:99:59:A2:EC:4F:8A:28:41:91:54:42:CC:BD:34:42:49:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mssomVmi7E-KKEGRVELMvTRCSTg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:14:5f:8c:66:3f:8b:b8:24:8a:48:b2:61:f0:91:89:ad:e8: 2d:b2:4f:db:68:36:be:33:11:18:70:4f:bb:71:c3:3a:0f:14: 6c:76:69:bb:1b:94:e9:84:87:e8:55:bc:74:b2:50:53:d9:14: 38:20:5e:a8:a3:78:05:42:22:6a:a2:81:f3:1a:35:3f:55:96: 1d:43:fd:5d:27:e9:02:58:2f:c1:2d:22:32:1b:9e:c8:6d:4e: 5b:b0:23:24:18:f5:81:bd:46:54:f0:ea:35:a2:e4:29:62:73: a5:76:c8:83:9c:4d:be:ca:1c:dd:3e:ca:d7:31:9d:ac:32:ee: d1:42:83:1c:b5:ae:34:d5:aa:c2:14:8b:50:e0:68:bd:94:4c: 21:78:ac:e2:23:e4:4f:13:f0:ee:92:9a:d4:ee:34:ad:96:49: 25:2c:dd:e1:f0:7a:78:9c:60:ad:e9:66:c3:9a:72:3c:6a:16: f1:a1:d4:20:2e:a1:80:ba:67:79:a6:ff:c4:54:bf:4d:da:f3: 49:ab:3b:b2:0f:6d:5d:cd:3e:2f:b7:1e:f4:9d:e9:c4:1e:f1: 3f:8c:51:ca:07:1a:28:e9:e0:d0:41:ed:f5:0b:a4:a3:d8:d7: 1f:87:09:e3:b5:a2:f3:13:66:55:a9:fe:d4:cc:5a:f1:ed:62: 55:fe:03:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshdQVbWw+Z5F6x7UXIjrxBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhY2IyODk5NTlhMmVjNGY4YTI4NDE5MTU0NDJjY2JkMzQ0 MjQ5MzgwHhcNMjUxMjE1MTAwMTE1WhcNMjUxMjE2MTAwMTE1WjAzMTEwLwYDVQQD EygzZGRmNTI4YzhhYjI3Njk0ZDQxOTNiYTg5M2Q4Yzg0MzhiZmIwY2ZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8a17nZuFujjectgdBju1TnmmkRw y66t/vavahfUZj59vOz5DqCj/z9ihjUjUtVoESAcYJzYmYPay1DVrQOJJ6Zoy+AO qEx2C1G8XfVVrwBFcuZ8Co2kznq8IEf1gyp9RaUUxjRe+bpEC83AB01CH33n4pCo wMg/j5zU5f2IQ2IWTvoo6d7hP8OzFlgrWtMz4B1oP0v9MYuRA1YrDfd8vltpznuf veSlFXom/pYNokf+B5Q2NKOM8ErdxekvfbKCtMFwHkaePhVksYHLTxyGV/QAYr6m fnGzRZ6lpRUYBitnPPi+/moDFMkCZbIzo1MzWlW2KKa8RXxjrrkOPoA4vQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD3fUoyKsnaU1Bk7qJPYyEOL+wz7MB8GA1UdIwQY MBaAFJrLKJlZouxPiihBkVRCzL00Qkk4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXNzb21WbWk3RS1LS0VHUlZFTE12VFJDU1RnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9hYjBkZjEtZGY0Yy00ODcyLTk4YzUt ODY0ZmUzYmJkZWZkLzEvbXNzb21WbWk3RS1LS0VHUlZFTE12VFJDU1RnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9hYjBkZjEtZGY0Yy00ODcyLTk4YzUtODY0ZmUzYmJkZWZk LzEvbXNzb21WbWk3RS1LS0VHUlZFTE12VFJDU1RnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfhRfjGY/ i7gkikiyYfCRia3oLbJP22g2vjMRGHBPu3HDOg8UbHZpuxuU6YSH6FW8dLJQU9kU OCBeqKN4BUIiaqKB8xo1P1WWHUP9XSfpAlgvwS0iMhueyG1OW7AjJBj1gb1GVPDq NaLkKWJzpXbIg5xNvsoc3T7K1zGdrDLu0UKDHLWuNNWqwhSLUOBovZRMIXis4iPk TxPw7pKa1O40rZZJJSzd4fB6eJxgrelmw5pyPGoW8aHUIC6hgLpneab/xFS/Tdrz Sas7sg9tXc0+L7ce9J3pxB7xP4xRygcaKOng0EHt9Quko9jXH4cJ47Wi8xNmVan+ 1Mxa8e1iVf4Dwg== -----END CERTIFICATE-----Generated at Mon Dec 15 19:52:21 2025 by rpki-client