This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/24a817-24a6-4ac0-9336-7d7814c7a5f7/1/SOmaP-7GTWutCY0bLfC1NqA4jqM.mft File: SOmaP-7GTWutCY0bLfC1NqA4jqM.mft (raw, json) Hash identifier: 3oCjhLsQVg59iLNbRbFhNO1X6iQmJ0lsUwV6e13bYL4= Subject key identifier: 91:83:6A:12:FB:D0:24:2F:F2:3F:A3:5D:33:C5:C3:C3:80:32:5F:85 Authority key identifier: 48:E9:9A:3F:EE:C6:4D:6B:AD:09:8D:1B:2D:F0:B5:36:A0:38:8E:A3 Certificate issuer: /CN=48e99a3feec64d6bad098d1b2df0b536a0388ea3 Certificate serial: 019B67D639132ACCF9DB37F850B71D3FBD19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SOmaP-7GTWutCY0bLfC1NqA4jqM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/24a817-24a6-4ac0-9336-7d7814c7a5f7/1/SOmaP-7GTWutCY0bLfC1NqA4jqM.mft Manifest number: 17A0 Signing time: Mon 29 Dec 2025 02:00:51 +0000 Manifest this update: Mon 29 Dec 2025 02:00:51 +0000 Manifest next update: Tue 30 Dec 2025 02:00:51 +0000 Files and hashes: 1: JqTAJDe2OYCUvbJc8miiDJhn9ck.roa (hash: XOVcEkw4qLtgeZZ1W3TII3S4x02laIR1b6T9nld7824=) 2: SOmaP-7GTWutCY0bLfC1NqA4jqM.crl (hash: Wn9OFL8FBr7JfLtGuAcQ/GZOEX7Q8ZqM3/HQiZLZX5I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/24a817-24a6-4ac0-9336-7d7814c7a5f7/1/SOmaP-7GTWutCY0bLfC1NqA4jqM.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/24a817-24a6-4ac0-9336-7d7814c7a5f7/1/SOmaP-7GTWutCY0bLfC1NqA4jqM.mft rsync://rpki.ripe.net/repository/DEFAULT/SOmaP-7GTWutCY0bLfC1NqA4jqM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 02:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:67:d6:39:13:2a:cc:f9:db:37:f8:50:b7:1d:3f:bd:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48e99a3feec64d6bad098d1b2df0b536a0388ea3 Validity Not Before: Dec 29 02:00:51 2025 GMT Not After : Dec 30 02:00:51 2025 GMT Subject: CN=91836a12fbd0242ff23fa35d33c5c3c380325f85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:00:73:cc:b4:d2:93:52:0a:cb:d8:ed:13:20: 0a:8e:2b:a8:cc:7f:96:67:cb:1b:97:b8:9e:d0:2f: 0f:c7:ff:7b:46:cf:32:c8:2e:4f:18:da:6b:f8:aa: 40:66:22:70:12:1f:8f:6b:32:c8:59:4f:b6:c1:dc: e9:c8:0c:be:13:5b:5f:e3:8a:9e:a1:23:18:58:b4: 5c:d5:df:85:8a:eb:60:74:6d:54:6d:40:e9:27:05: 0b:d2:96:f6:9e:68:13:04:65:22:66:7d:b4:e3:d8: bf:1b:9b:a2:07:2f:b2:b7:58:cf:92:1e:76:d2:fc: 7d:40:9e:ef:d0:a6:43:14:6a:36:4c:31:06:00:ab: 0c:06:28:e9:91:d1:40:e2:60:ab:35:9e:7a:15:15: 07:31:b0:0f:32:8c:0a:f1:11:d0:c4:0a:0f:9a:0e: 14:a2:76:b6:3b:38:5d:2a:05:bc:7e:88:ab:b2:7a: 68:34:fe:99:c3:c5:04:9f:fa:eb:22:9c:0c:e5:98: bd:f8:e7:02:9f:f7:81:91:e8:d4:45:0b:88:2c:dc: 83:f8:74:73:8e:b3:23:66:98:8f:d0:f5:4e:cd:98: f9:c3:94:40:84:8c:c9:71:33:34:77:cc:12:42:41: aa:10:db:ea:bb:17:6e:d5:45:8d:82:fe:66:71:81: 05:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:83:6A:12:FB:D0:24:2F:F2:3F:A3:5D:33:C5:C3:C3:80:32:5F:85 X509v3 Authority Key Identifier: keyid:48:E9:9A:3F:EE:C6:4D:6B:AD:09:8D:1B:2D:F0:B5:36:A0:38:8E:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SOmaP-7GTWutCY0bLfC1NqA4jqM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/24a817-24a6-4ac0-9336-7d7814c7a5f7/1/SOmaP-7GTWutCY0bLfC1NqA4jqM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/24a817-24a6-4ac0-9336-7d7814c7a5f7/1/SOmaP-7GTWutCY0bLfC1NqA4jqM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:42:b0:a2:bd:19:9a:59:17:ed:50:dd:94:81:35:ea:c7:44: 42:ca:90:48:4c:76:20:d7:6f:6a:a0:5a:39:dd:12:91:05:a8: 2e:93:69:48:e1:1f:2c:b0:58:93:91:67:56:df:84:3d:04:38: 17:b3:76:c8:ff:d7:33:4f:29:7b:9a:72:49:9f:49:9e:ad:91: d7:1c:05:e3:99:3c:c6:f1:0d:59:ef:4d:33:d4:d7:35:d5:d5: 32:f9:2d:c1:e4:6e:b6:cf:34:d6:50:7b:ec:80:90:33:0e:68: 79:b7:b8:05:19:b2:56:dd:0d:f5:2f:c9:84:39:7c:f9:bd:7c: 6b:3c:5a:4e:61:df:a3:79:fe:5e:4c:59:b7:56:55:f5:93:cb: 60:38:9f:72:d4:cf:75:2c:48:eb:36:63:21:e5:4f:06:08:ed: 5f:40:66:a0:fd:e2:7d:46:6f:92:51:51:42:7f:93:15:a0:bb: c1:c9:78:ff:72:85:14:13:6b:48:ca:ec:50:6a:0c:2d:78:e2: 16:93:b8:d0:97:6f:60:57:06:35:c0:53:a0:d4:83:5e:c0:ee: df:ea:e3:f5:01:c6:0b:7c:7e:a9:16:cd:2d:e3:74:a7:5c:dd: ec:2a:62:a7:98:1e:55:4f:a1:a0:a1:e4:95:e1:4c:37:37:9f: 83:59:9b:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtn1jkTKsz52zf4ULcdP70ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4ZTk5YTNmZWVjNjRkNmJhZDA5OGQxYjJkZjBiNTM2YTAz ODhlYTMwHhcNMjUxMjI5MDIwMDUxWhcNMjUxMjMwMDIwMDUxWjAzMTEwLwYDVQQD Eyg5MTgzNmExMmZiZDAyNDJmZjIzZmEzNWQzM2M1YzNjMzgwMzI1Zjg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0QBzzLTSk1IKy9jtEyAKjiuozH+W Z8sbl7ie0C8Px/97Rs8yyC5PGNpr+KpAZiJwEh+PazLIWU+2wdzpyAy+E1tf44qe oSMYWLRc1d+FiutgdG1UbUDpJwUL0pb2nmgTBGUiZn2049i/G5uiBy+yt1jPkh52 0vx9QJ7v0KZDFGo2TDEGAKsMBijpkdFA4mCrNZ56FRUHMbAPMowK8RHQxAoPmg4U ona2OzhdKgW8foirsnpoNP6Zw8UEn/rrIpwM5Zi9+OcCn/eBkejURQuILNyD+HRz jrMjZpiP0PVOzZj5w5RAhIzJcTM0d8wSQkGqENvquxdu1UWNgv5mcYEFUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJGDahL70CQv8j+jXTPFw8OAMl+FMB8GA1UdIwQY MBaAFEjpmj/uxk1rrQmNGy3wtTagOI6jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU09tYVAtN0dUV3V0Q1kwYkxmQzFOcUE0anFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8yNGE4MTctMjRhNi00YWMwLTkzMzYt N2Q3ODE0YzdhNWY3LzEvU09tYVAtN0dUV3V0Q1kwYkxmQzFOcUE0anFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS8yNGE4MTctMjRhNi00YWMwLTkzMzYtN2Q3ODE0YzdhNWY3 LzEvU09tYVAtN0dUV3V0Q1kwYkxmQzFOcUE0anFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASkKwor0Z mlkX7VDdlIE16sdEQsqQSEx2INdvaqBaOd0SkQWoLpNpSOEfLLBYk5FnVt+EPQQ4 F7N2yP/XM08pe5pySZ9Jnq2R1xwF45k8xvENWe9NM9TXNdXVMvktweRuts801lB7 7ICQMw5oebe4BRmyVt0N9S/JhDl8+b18azxaTmHfo3n+XkxZt1ZV9ZPLYDifctTP dSxI6zZjIeVPBgjtX0BmoP3ifUZvklFRQn+TFaC7wcl4/3KFFBNrSMrsUGoMLXji FpO40JdvYFcGNcBToNSDXsDu3+rj9QHGC3x+qRbNLeN0p1zd7Cpip5geVU+hoKHk leFMNzefg1mbTg== -----END CERTIFICATE-----Generated at Mon Dec 29 10:09:57 2025 by rpki-client