This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/bdd256-2f59-431b-b653-cae678b2f21e/1/1-msoRBterQGEZTXq8gv9B1LgdkU.mft File: 1-msoRBterQGEZTXq8gv9B1LgdkU.mft (raw, json) Hash identifier: nzYtlMuoWAW36Uc1vnh1i4i/boDPKoqt3FnL3wiLzhk= Subject key identifier: 65:1B:5A:55:18:51:38:DE:FE:6A:3E:7F:03:E5:65:99:A1:BD:9F:E4 Authority key identifier: FA:6B:28:44:1B:5E:AD:01:84:65:35:EA:F2:0B:FD:07:52:E0:76:45 Certificate issuer: /CN=fa6b28441b5ead01846535eaf20bfd0752e07645 Certificate serial: 019B6053E99821CB8949BB01E74DF7FE9616 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-msoRBterQGEZTXq8gv9B1LgdkU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/bdd256-2f59-431b-b653-cae678b2f21e/1/1-msoRBterQGEZTXq8gv9B1LgdkU.mft Manifest number: E0 Signing time: Sat 27 Dec 2025 15:01:10 +0000 Manifest this update: Sat 27 Dec 2025 15:01:10 +0000 Manifest next update: Sun 28 Dec 2025 15:01:10 +0000 Files and hashes: 1: 1-msoRBterQGEZTXq8gv9B1LgdkU.crl (hash: hBTjWvaaEIoxiA3fWpaoJiqgR8EpKNod2l/y6JvZUaY=) 2: vBOQCuTyEfYV4gQKe7qCxZbiu9I.roa (hash: YzgNFzACvcQVNgde31Xeo9Tat9fZP3Es1rC5dljFCQE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/bdd256-2f59-431b-b653-cae678b2f21e/1/1-msoRBterQGEZTXq8gv9B1LgdkU.crl rsync://rpki.ripe.net/repository/DEFAULT/48/bdd256-2f59-431b-b653-cae678b2f21e/1/1-msoRBterQGEZTXq8gv9B1LgdkU.mft rsync://rpki.ripe.net/repository/DEFAULT/1-msoRBterQGEZTXq8gv9B1LgdkU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 15:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:60:53:e9:98:21:cb:89:49:bb:01:e7:4d:f7:fe:96:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa6b28441b5ead01846535eaf20bfd0752e07645 Validity Not Before: Dec 27 15:01:10 2025 GMT Not After : Dec 28 15:01:10 2025 GMT Subject: CN=651b5a55185138defe6a3e7f03e56599a1bd9fe4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:4a:0e:7a:cc:e9:a2:dd:26:6d:44:91:83:b0: cc:13:13:ab:d7:ee:45:67:bd:5c:5d:cf:60:ec:40: 27:37:e9:10:53:0a:5e:44:33:a5:2d:06:11:c6:10: b4:78:e0:5e:3f:f7:fd:28:5d:a8:1d:82:e7:ba:29: 58:e9:ed:72:6e:28:1d:b9:e4:42:4d:bb:9d:b4:a3: 39:7b:8c:8d:da:b6:ab:31:30:fb:10:3d:19:8d:f0: 9e:ce:fb:e2:e6:be:d4:53:ab:e2:8a:bc:d6:cf:02: 8f:b6:8b:48:a8:d1:dc:37:42:98:30:c2:dd:80:c4: 1d:d9:dd:7b:63:f5:77:3a:31:d2:21:0e:fa:9e:00: 4e:f9:c3:3f:9d:cd:14:c0:d2:87:db:48:c0:0f:e6: 34:8d:b3:a2:f8:d2:57:86:84:51:57:c8:12:01:64: f1:79:e6:6e:72:e4:f7:34:ee:04:14:c9:fd:32:1b: 57:5c:35:4d:75:4b:c9:e9:85:dd:bd:14:d0:ce:47: c9:54:70:eb:ab:43:83:5e:53:d3:af:d2:cd:6e:11: ac:3b:59:43:32:d7:fc:35:11:50:d9:87:2e:e6:da: f1:d3:a9:ed:3c:3f:62:3d:fb:c7:80:6f:69:83:e7: 5a:74:35:73:f1:38:e0:88:db:09:df:94:55:8a:88: 5e:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:1B:5A:55:18:51:38:DE:FE:6A:3E:7F:03:E5:65:99:A1:BD:9F:E4 X509v3 Authority Key Identifier: keyid:FA:6B:28:44:1B:5E:AD:01:84:65:35:EA:F2:0B:FD:07:52:E0:76:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-msoRBterQGEZTXq8gv9B1LgdkU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bdd256-2f59-431b-b653-cae678b2f21e/1/1-msoRBterQGEZTXq8gv9B1LgdkU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bdd256-2f59-431b-b653-cae678b2f21e/1/1-msoRBterQGEZTXq8gv9B1LgdkU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:6c:a2:b2:6a:22:05:88:89:ff:2d:a3:71:0c:9e:1d:f4:88: 7f:d6:05:3c:21:3a:f6:36:c5:f0:87:65:4d:7c:c3:aa:2e:e5: 9b:f3:e7:53:99:9c:f6:35:bc:ff:b6:cb:d1:e8:f4:aa:5b:25: 11:14:6d:c9:50:6a:b3:16:91:57:4d:9c:7f:49:4f:f8:48:48: 0d:e5:69:da:60:7b:2d:c5:d4:0b:b7:b0:2d:e3:42:76:b7:ce: 88:c9:00:5b:21:3a:2e:f7:0b:ff:cd:9c:c3:a7:b7:b4:25:dd: 45:c0:b0:8c:62:9e:f7:8f:a7:28:52:20:49:4b:34:f6:fc:db: a1:57:0b:31:a2:84:5e:4e:af:c0:ce:1e:84:8d:b6:1a:96:51: 8e:ae:c7:b9:75:09:6d:85:9e:fb:b7:95:ad:60:b2:94:c0:35: 83:c6:17:de:c2:a3:9b:22:1e:87:31:22:1f:d1:ab:d4:27:15: a4:45:08:56:b4:10:1b:40:50:52:0e:59:47:d9:ee:52:b4:d1: 5b:e7:a9:fe:b9:eb:9f:1b:28:c9:73:4b:22:f9:c8:e1:c2:99: 49:34:e9:69:fd:a9:9a:95:39:52:44:c1:20:29:16:de:7b:31: f0:9b:e4:64:23:ef:46:f6:a7:fe:13:81:b1:b0:06:b7:df:07: f7:ca:29:9d -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtgU+mYIcuJSbsB5033/pYWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhNmIyODQ0MWI1ZWFkMDE4NDY1MzVlYWYyMGJmZDA3NTJl MDc2NDUwHhcNMjUxMjI3MTUwMTEwWhcNMjUxMjI4MTUwMTEwWjAzMTEwLwYDVQQD Eyg2NTFiNWE1NTE4NTEzOGRlZmU2YTNlN2YwM2U1NjU5OWExYmQ5ZmU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokoOeszpot0mbUSRg7DMExOr1+5F Z71cXc9g7EAnN+kQUwpeRDOlLQYRxhC0eOBeP/f9KF2oHYLnuilY6e1ybigdueRC TbudtKM5e4yN2rarMTD7ED0ZjfCezvvi5r7UU6viirzWzwKPtotIqNHcN0KYMMLd gMQd2d17Y/V3OjHSIQ76ngBO+cM/nc0UwNKH20jAD+Y0jbOi+NJXhoRRV8gSAWTx eeZucuT3NO4EFMn9MhtXXDVNdUvJ6YXdvRTQzkfJVHDrq0ODXlPTr9LNbhGsO1lD Mtf8NRFQ2Ycu5trx06ntPD9iPfvHgG9pg+dadDVz8TjgiNsJ35RVioherQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFGUbWlUYUTje/mo+fwPlZZmhvZ/kMB8GA1UdIwQY MBaAFPprKEQbXq0BhGU16vIL/QdS4HZFMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1tc29SQnRlclFHRVpUWHE4Z3Y5QjFMZ2RrVS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDgvYmRkMjU2LTJmNTktNDMxYi1iNjUz LWNhZTY3OGIyZjIxZS8xLzEtbXNvUkJ0ZXJRR0VaVFhxOGd2OUIxTGdka1UubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzQ4L2JkZDI1Ni0yZjU5LTQzMWItYjY1My1jYWU2NzhiMmYy MWUvMS8xLW1zb1JCdGVyUUdFWlRYcThndjlCMUxnZGtVLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD2yi smoiBYiJ/y2jcQyeHfSIf9YFPCE69jbF8IdlTXzDqi7lm/PnU5mc9jW8/7bL0ej0 qlslERRtyVBqsxaRV02cf0lP+EhIDeVp2mB7LcXUC7ewLeNCdrfOiMkAWyE6LvcL /82cw6e3tCXdRcCwjGKe94+nKFIgSUs09vzboVcLMaKEXk6vwM4ehI22GpZRjq7H uXUJbYWe+7eVrWCylMA1g8YX3sKjmyIehzEiH9Gr1CcVpEUIVrQQG0BQUg5ZR9nu UrTRW+ep/rnrnxsoyXNLIvnI4cKZSTTpaf2pmpU5UkTBICkW3nsx8JvkZCPvRvan /hOBsbAGt98H98opnQ== -----END CERTIFICATE-----Generated at Sat Dec 27 20:58:53 2025 by rpki-client