This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/MseO7vestFH8N1df65EU38zBzfs.mft File: MseO7vestFH8N1df65EU38zBzfs.mft (raw, json) Hash identifier: mcv1CbWgHsxVcvSCckLCGS9H3jWiBGstf+uejgZNb5k= Subject key identifier: F4:E1:41:BE:1F:34:3C:A2:8F:F8:90:BD:C0:98:E3:F5:49:73:CD:F3 Authority key identifier: 32:C7:8E:EE:F7:AC:B4:51:FC:37:57:5F:EB:91:14:DF:CC:C1:CD:FB Certificate issuer: /CN=32c78eeef7acb451fc37575feb9114dfccc1cdfb Certificate serial: 019B3E35763846C726D64B2CFE0AC7703173 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MseO7vestFH8N1df65EU38zBzfs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/MseO7vestFH8N1df65EU38zBzfs.mft Manifest number: 12CC Signing time: Sun 21 Dec 2025 00:00:49 +0000 Manifest this update: Sun 21 Dec 2025 00:00:49 +0000 Manifest next update: Mon 22 Dec 2025 00:00:49 +0000 Files and hashes: 1: M6U6dkH9DSHzE2ElXf3ZUgv-gao.roa (hash: gyUWfn2VEKn6DTTZDCrSAEanNDrzsmaWPFOYycLgJ88=) 2: MseO7vestFH8N1df65EU38zBzfs.crl (hash: Irolr7Fzt+L1ZAnYGtrSHyYoR97wpH12dPi6HfsR0r8=) 3: O--ohDSHb3_cgUUA6fEd67yI0qE.roa (hash: ZeZLP6PWTPODtcpDZvxrQiDQ91HF+onUP31S24SY2QI=) 4: qcE5lMt-ta8yQgK_A4TOf_qcnKk.roa (hash: mHbw87Bhgg5orJBSCEF9YhID6w2GXs/pHd+LaovXweg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/MseO7vestFH8N1df65EU38zBzfs.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/MseO7vestFH8N1df65EU38zBzfs.mft rsync://rpki.ripe.net/repository/DEFAULT/MseO7vestFH8N1df65EU38zBzfs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:35:76:38:46:c7:26:d6:4b:2c:fe:0a:c7:70:31:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32c78eeef7acb451fc37575feb9114dfccc1cdfb Validity Not Before: Dec 21 00:00:49 2025 GMT Not After : Dec 22 00:00:49 2025 GMT Subject: CN=f4e141be1f343ca28ff890bdc098e3f54973cdf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b4:05:cc:67:a7:1d:1d:58:93:e8:a7:2d:f7: 01:23:42:ae:d4:3d:ee:e6:97:bb:45:4c:8c:68:5f: 28:bf:41:b2:5b:37:1a:fb:d1:5c:2b:b9:1d:c7:f3: 7d:aa:36:68:e0:76:3e:66:8a:0c:36:8d:42:69:ba: 70:b0:32:01:a7:94:78:a3:fa:a3:4c:17:ee:04:24: 8b:72:81:d1:43:a7:23:91:8b:e4:74:06:7d:98:75: 52:e3:b0:57:19:9c:2c:9d:6b:8f:51:34:ec:fb:9f: 50:40:da:57:67:54:3b:f8:df:a6:66:a3:51:92:f2: f0:0d:66:ed:41:d1:82:53:3f:d3:98:91:c2:53:8d: d9:d5:4e:50:58:cb:94:b0:0e:eb:30:91:19:91:1b: 22:19:73:24:8d:69:d3:4d:5c:09:1c:eb:d3:c6:61: 55:13:f4:a0:4c:44:2a:8b:1c:30:75:77:a5:ff:39: 8f:c8:95:1b:9e:0a:ae:39:23:52:f1:2d:70:63:80: b8:12:32:a5:2e:a1:c2:3d:f5:ca:dd:e1:6e:2f:55: 67:cb:c8:c3:84:05:f1:6e:de:d6:dc:4f:05:a6:2c: 04:b4:8f:cc:3e:32:aa:54:db:1e:20:5f:fa:44:63: cc:05:b5:c5:51:b9:2a:57:63:8b:45:35:ae:77:ce: 8f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:E1:41:BE:1F:34:3C:A2:8F:F8:90:BD:C0:98:E3:F5:49:73:CD:F3 X509v3 Authority Key Identifier: keyid:32:C7:8E:EE:F7:AC:B4:51:FC:37:57:5F:EB:91:14:DF:CC:C1:CD:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MseO7vestFH8N1df65EU38zBzfs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/MseO7vestFH8N1df65EU38zBzfs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/MseO7vestFH8N1df65EU38zBzfs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:03:8d:9a:8e:96:37:43:29:fa:84:e1:f6:df:04:a4:0a:df: f7:54:b0:42:c8:a5:c6:99:6d:e2:00:43:c8:5a:b5:dd:09:85: d4:a8:3f:79:90:50:67:4b:9a:ae:70:e8:a2:d6:6b:79:34:03: 73:ca:b2:e5:57:69:58:0c:af:03:a1:a4:89:43:b1:fc:17:96: 4c:a7:bb:0a:14:a1:4a:a0:82:c7:50:b3:2d:5b:f8:45:46:6b: d0:a3:3b:06:d2:26:df:27:ea:12:88:d6:8c:e9:db:37:cc:9c: 5c:1b:e3:10:6d:78:bb:27:cb:6e:6a:80:5e:ff:fd:24:ce:d7: 36:e0:7a:28:7f:2d:e1:e1:24:3d:86:57:f7:f9:10:11:0a:3b: d1:e7:34:e8:10:63:e1:51:3f:22:82:c6:8c:c7:3f:28:9e:1e: e6:c1:7b:d0:17:57:0a:e5:d2:86:91:26:6c:ec:74:10:75:8b: 62:8a:01:2d:f0:5f:7a:54:f7:f8:77:d5:fb:b0:fb:77:36:ea: 44:ae:ec:45:57:eb:07:6a:7a:85:95:b0:ba:8e:d7:49:59:47: 27:97:9c:78:1f:01:77:61:7e:0f:48:2c:37:ec:e5:a9:02:42: 03:31:dd:1a:35:c1:f2:9f:5b:63:bf:0e:47:6c:aa:41:e3:17: 3d:b6:2d:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+NXY4Rscm1kss/grHcDFzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyYzc4ZWVlZjdhY2I0NTFmYzM3NTc1ZmViOTExNGRmY2Nj MWNkZmIwHhcNMjUxMjIxMDAwMDQ5WhcNMjUxMjIyMDAwMDQ5WjAzMTEwLwYDVQQD EyhmNGUxNDFiZTFmMzQzY2EyOGZmODkwYmRjMDk4ZTNmNTQ5NzNjZGYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrQFzGenHR1Yk+inLfcBI0Ku1D3u 5pe7RUyMaF8ov0GyWzca+9FcK7kdx/N9qjZo4HY+ZooMNo1CabpwsDIBp5R4o/qj TBfuBCSLcoHRQ6cjkYvkdAZ9mHVS47BXGZwsnWuPUTTs+59QQNpXZ1Q7+N+mZqNR kvLwDWbtQdGCUz/TmJHCU43Z1U5QWMuUsA7rMJEZkRsiGXMkjWnTTVwJHOvTxmFV E/SgTEQqixwwdXel/zmPyJUbngquOSNS8S1wY4C4EjKlLqHCPfXK3eFuL1Vny8jD hAXxbt7W3E8FpiwEtI/MPjKqVNseIF/6RGPMBbXFUbkqV2OLRTWud86PKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPThQb4fNDyij/iQvcCY4/VJc83zMB8GA1UdIwQY MBaAFDLHju73rLRR/DdXX+uRFN/Mwc37MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXNlTzd2ZXN0Rkg4TjFkZjY1RVUzOHpCemZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8yMjViY2ItNmQzZC00YzBlLTgyNGYt MmYxYzhlNDA4YjY0LzEvTXNlTzd2ZXN0Rkg4TjFkZjY1RVUzOHpCemZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC8yMjViY2ItNmQzZC00YzBlLTgyNGYtMmYxYzhlNDA4YjY0 LzEvTXNlTzd2ZXN0Rkg4TjFkZjY1RVUzOHpCemZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABQONmo6W N0Mp+oTh9t8EpArf91SwQsilxplt4gBDyFq13QmF1Kg/eZBQZ0uarnDootZreTQD c8qy5VdpWAyvA6GkiUOx/BeWTKe7ChShSqCCx1CzLVv4RUZr0KM7BtIm3yfqEojW jOnbN8ycXBvjEG14uyfLbmqAXv/9JM7XNuB6KH8t4eEkPYZX9/kQEQo70ec06BBj 4VE/IoLGjMc/KJ4e5sF70BdXCuXShpEmbOx0EHWLYooBLfBfelT3+HfV+7D7dzbq RK7sRVfrB2p6hZWwuo7XSVlHJ5eceB8Bd2F+D0gsN+zlqQJCAzHdGjXB8p9bY78O R2yqQeMXPbYtIw== -----END CERTIFICATE-----Generated at Sun Dec 21 07:28:40 2025 by rpki-client