This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/0222d8-8d8a-44c0-a11f-dc0c4f1083c9/1/morKHCZcEygjx4T9qEL3oaBbjLc.mft File: morKHCZcEygjx4T9qEL3oaBbjLc.mft (raw, json) Hash identifier: aC4OoCULeEgJXVVkmkRqcftHAwQ7StE9n/QGGMrvBQw= Subject key identifier: 05:FF:21:19:0E:9E:09:DF:86:2F:ED:91:BF:4D:15:CE:DE:97:D4:B8 Authority key identifier: 9A:8A:CA:1C:26:5C:13:28:23:C7:84:FD:A8:42:F7:A1:A0:5B:8C:B7 Certificate issuer: /CN=9a8aca1c265c132823c784fda842f7a1a05b8cb7 Certificate serial: 019B74ED4CD136B1EF1A4B0CCC5EA502935C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/morKHCZcEygjx4T9qEL3oaBbjLc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/0222d8-8d8a-44c0-a11f-dc0c4f1083c9/1/morKHCZcEygjx4T9qEL3oaBbjLc.mft Manifest number: 0418 Signing time: Wed 31 Dec 2025 15:01:06 +0000 Manifest this update: Wed 31 Dec 2025 15:01:06 +0000 Manifest next update: Thu 01 Jan 2026 15:01:06 +0000 Files and hashes: 1: PXv4MGw4HfMQV8zuoB-3WTegwaw.roa (hash: GqIG1YKim2qQL71fUd8HU7TowoibLsmIA+NjM1XqDss=) 2: morKHCZcEygjx4T9qEL3oaBbjLc.crl (hash: khQZnF6DqHvFN+/70I62m8L5unX151Ma23LiymX5zMo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/0222d8-8d8a-44c0-a11f-dc0c4f1083c9/1/morKHCZcEygjx4T9qEL3oaBbjLc.crl rsync://rpki.ripe.net/repository/DEFAULT/62/0222d8-8d8a-44c0-a11f-dc0c4f1083c9/1/morKHCZcEygjx4T9qEL3oaBbjLc.mft rsync://rpki.ripe.net/repository/DEFAULT/morKHCZcEygjx4T9qEL3oaBbjLc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 15:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:74:ed:4c:d1:36:b1:ef:1a:4b:0c:cc:5e:a5:02:93:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a8aca1c265c132823c784fda842f7a1a05b8cb7 Validity Not Before: Dec 31 15:01:06 2025 GMT Not After : Jan 1 15:01:06 2026 GMT Subject: CN=05ff21190e9e09df862fed91bf4d15cede97d4b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d7:43:c6:bb:fa:5b:26:33:84:fc:8c:c6:38: 06:95:18:6a:83:36:c1:2b:0d:3c:96:65:e1:c2:8a: 30:b2:63:9a:18:94:57:fc:e5:e7:31:ab:77:03:50: 87:85:5f:b1:37:58:d3:b2:85:ca:0c:ed:9c:6f:f4: c6:b7:68:69:36:8c:29:d9:a2:d1:38:ae:24:4e:4c: fc:5e:b5:42:63:1d:c1:cc:58:77:b2:12:6c:d5:72: 56:04:00:54:39:c0:e0:b8:24:26:d0:93:57:61:9e: cc:20:32:8b:32:a5:b2:90:a6:af:15:65:8c:c9:dd: 7e:06:b1:ed:bc:1a:83:a2:21:9e:cc:fa:54:df:9c: 65:d1:df:54:3f:cf:2e:d3:dc:68:9a:72:2e:5a:28: 01:4f:63:d6:36:ef:b7:86:14:83:5d:f4:86:92:55: 31:c0:20:9f:1c:d1:87:26:75:cb:54:27:65:91:5a: 8c:59:47:7e:47:a8:f0:7b:03:a6:d9:6b:89:c8:4c: 6a:ef:9b:41:2b:a1:33:fa:ad:a5:22:a8:03:6a:cb: ef:72:4e:f6:d8:ac:8a:f8:7f:c6:ae:b8:15:9b:fd: d3:8c:e5:da:9f:e5:b1:2c:9c:1a:eb:50:b6:7c:80: 8f:c0:1b:5a:b4:72:49:91:05:d9:ea:21:d4:d4:53: a2:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:FF:21:19:0E:9E:09:DF:86:2F:ED:91:BF:4D:15:CE:DE:97:D4:B8 X509v3 Authority Key Identifier: keyid:9A:8A:CA:1C:26:5C:13:28:23:C7:84:FD:A8:42:F7:A1:A0:5B:8C:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/morKHCZcEygjx4T9qEL3oaBbjLc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0222d8-8d8a-44c0-a11f-dc0c4f1083c9/1/morKHCZcEygjx4T9qEL3oaBbjLc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0222d8-8d8a-44c0-a11f-dc0c4f1083c9/1/morKHCZcEygjx4T9qEL3oaBbjLc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:e2:3f:b6:47:c1:f5:d1:1f:78:aa:b2:71:cc:b7:eb:a6:76: 53:51:10:d5:4b:34:96:fe:37:49:1b:ae:df:a4:9f:ea:f6:3d: 8a:30:05:87:b7:f3:cc:b1:28:7a:b4:20:c1:ac:3c:9e:1d:c7: bd:8b:f5:fe:ab:93:88:be:c7:d3:5c:54:f3:80:3a:d2:1b:0e: f7:54:67:b7:f7:b7:5e:c8:4b:36:6e:fb:99:68:e1:6f:e0:c1: 14:2b:a7:db:7a:80:28:44:ad:ee:2d:d5:29:bc:eb:8a:ca:27: 36:6d:df:d4:35:b5:dc:cb:d9:12:c2:a3:0a:fc:c0:8e:e9:45: 2c:97:cd:c1:25:ba:9a:f2:01:a6:8d:90:85:40:39:53:96:74: b4:aa:de:5c:e4:ee:26:91:9d:26:9d:4c:1c:3c:c7:a5:7d:e8: 4e:7f:ba:80:27:c6:f5:93:d1:dd:41:5c:10:6c:ad:a2:4c:d5: 0c:21:77:42:7d:5c:dd:4b:92:3e:b5:19:04:b8:30:34:35:d3: 8a:bc:94:00:c3:d2:fb:b5:af:41:8e:71:22:35:68:bf:8d:fa: a2:40:7f:aa:50:2e:df:3a:1d:69:3d:19:6f:f7:be:e3:48:24: 66:77:ff:22:f8:89:e8:46:cc:bf:f4:cc:ac:36:1c:53:7e:e8: da:51:2c:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt07UzRNrHvGksMzF6lApNcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhOGFjYTFjMjY1YzEzMjgyM2M3ODRmZGE4NDJmN2ExYTA1 YjhjYjcwHhcNMjUxMjMxMTUwMTA2WhcNMjYwMTAxMTUwMTA2WjAzMTEwLwYDVQQD EygwNWZmMjExOTBlOWUwOWRmODYyZmVkOTFiZjRkMTVjZWRlOTdkNGI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxddDxrv6WyYzhPyMxjgGlRhqgzbB Kw08lmXhwoowsmOaGJRX/OXnMat3A1CHhV+xN1jTsoXKDO2cb/TGt2hpNowp2aLR OK4kTkz8XrVCYx3BzFh3shJs1XJWBABUOcDguCQm0JNXYZ7MIDKLMqWykKavFWWM yd1+BrHtvBqDoiGezPpU35xl0d9UP88u09xomnIuWigBT2PWNu+3hhSDXfSGklUx wCCfHNGHJnXLVCdlkVqMWUd+R6jwewOm2WuJyExq75tBK6Ez+q2lIqgDasvvck72 2KyK+H/GrrgVm/3TjOXan+WxLJwa61C2fICPwBtatHJJkQXZ6iHU1FOifwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAX/IRkOngnfhi/tkb9NFc7el9S4MB8GA1UdIwQY MBaAFJqKyhwmXBMoI8eE/ahC96GgW4y3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbW9yS0hDWmNFeWdqeDRUOXFFTDNvYUJiakxjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8wMjIyZDgtOGQ4YS00NGMwLWExMWYt ZGMwYzRmMTA4M2M5LzEvbW9yS0hDWmNFeWdqeDRUOXFFTDNvYUJiakxjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi8wMjIyZDgtOGQ4YS00NGMwLWExMWYtZGMwYzRmMTA4M2M5 LzEvbW9yS0hDWmNFeWdqeDRUOXFFTDNvYUJiakxjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQuI/tkfB 9dEfeKqyccy366Z2U1EQ1Us0lv43SRuu36Sf6vY9ijAFh7fzzLEoerQgwaw8nh3H vYv1/quTiL7H01xU84A60hsO91Rnt/e3XshLNm77mWjhb+DBFCun23qAKESt7i3V KbzrisonNm3f1DW13MvZEsKjCvzAjulFLJfNwSW6mvIBpo2QhUA5U5Z0tKreXOTu JpGdJp1MHDzHpX3oTn+6gCfG9ZPR3UFcEGytokzVDCF3Qn1c3UuSPrUZBLgwNDXT iryUAMPS+7WvQY5xIjVov436okB/qlAu3zodaT0Zb/e+40gkZnf/IviJ6EbMv/TM rDYcU37o2lEsOg== -----END CERTIFICATE-----Generated at Wed Dec 31 21:48:12 2025 by rpki-client