This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/febeb6-79e6-4d97-9c92-b79968e0e174/1/MOalwxNr0v3TbISgzHJb98sP6rU.mft File: MOalwxNr0v3TbISgzHJb98sP6rU.mft (raw, json) Hash identifier: AtD2u2QzUkHR7YN4YpN5EWCY9KB47dem0StGVUxJGA8= Subject key identifier: 37:46:9D:D3:75:7D:73:A3:FD:0B:E8:E2:04:E7:C7:3E:35:36:A1:8F Authority key identifier: 30:E6:A5:C3:13:6B:D2:FD:D3:6C:84:A0:CC:72:5B:F7:CB:0F:EA:B5 Certificate issuer: /CN=30e6a5c3136bd2fdd36c84a0cc725bf7cb0feab5 Certificate serial: 019B6CFC783098DF7DF86D78D7275B6F185B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MOalwxNr0v3TbISgzHJb98sP6rU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/febeb6-79e6-4d97-9c92-b79968e0e174/1/MOalwxNr0v3TbISgzHJb98sP6rU.mft Manifest number: 1281 Signing time: Tue 30 Dec 2025 02:00:43 +0000 Manifest this update: Tue 30 Dec 2025 02:00:43 +0000 Manifest next update: Wed 31 Dec 2025 02:00:43 +0000 Files and hashes: 1: HqsZJgL9LBUTcewanQzxQHLDph8.roa (hash: UQ79eEyJ8LyCIFyjDtOvtd/bCzwLuuC1qKDG3mAmlzU=) 2: MOalwxNr0v3TbISgzHJb98sP6rU.crl (hash: +9EtURngR4WAiCd7bgEbbVd0E4rU8wmSv7mVIcNCnjc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/febeb6-79e6-4d97-9c92-b79968e0e174/1/MOalwxNr0v3TbISgzHJb98sP6rU.crl rsync://rpki.ripe.net/repository/DEFAULT/62/febeb6-79e6-4d97-9c92-b79968e0e174/1/MOalwxNr0v3TbISgzHJb98sP6rU.mft rsync://rpki.ripe.net/repository/DEFAULT/MOalwxNr0v3TbISgzHJb98sP6rU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6c:fc:78:30:98:df:7d:f8:6d:78:d7:27:5b:6f:18:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30e6a5c3136bd2fdd36c84a0cc725bf7cb0feab5 Validity Not Before: Dec 30 02:00:43 2025 GMT Not After : Dec 31 02:00:43 2025 GMT Subject: CN=37469dd3757d73a3fd0be8e204e7c73e3536a18f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:33:a6:76:f0:47:9c:b1:76:82:a5:88:55:ca: ee:ab:b3:e1:b8:36:23:f4:15:93:13:3e:d2:00:cd: 42:85:d3:6d:7a:87:f7:53:ae:1e:82:31:9b:cf:a7: df:36:78:4e:25:07:c4:a2:43:0e:7d:4b:ea:6a:38: 1f:ef:92:3c:16:4f:25:fd:30:c3:b3:12:f6:2b:91: 87:21:22:7f:e7:16:93:06:2d:1f:8a:e7:aa:1e:d9: 7d:ca:5f:db:98:cf:37:a8:66:a9:27:5e:53:46:4f: fe:2e:8a:5e:9a:90:13:63:74:ba:c3:fa:ea:2b:a9: 29:22:0c:c8:db:7c:ae:55:0d:91:17:84:fa:ea:f4: 10:af:09:66:12:ee:ab:c1:7f:9a:52:0c:97:99:a2: 6f:96:03:81:c6:3a:0a:eb:66:16:ee:ff:17:7d:73: 97:5e:b7:0a:a9:26:78:7a:06:fb:6c:66:ab:d9:22: 26:e9:7c:d4:59:f9:91:3b:94:5d:15:6c:be:7d:b0: ee:5a:ee:4b:b2:1c:3e:c7:cd:b9:43:bc:a8:f2:31: e2:a4:37:d5:e6:94:df:d6:a5:25:6a:46:40:c2:79: 53:9c:d2:6c:fd:16:2c:81:ce:73:73:37:22:13:d7: b8:75:0b:97:74:1b:98:04:73:8e:04:50:c8:d0:77: 89:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:46:9D:D3:75:7D:73:A3:FD:0B:E8:E2:04:E7:C7:3E:35:36:A1:8F X509v3 Authority Key Identifier: keyid:30:E6:A5:C3:13:6B:D2:FD:D3:6C:84:A0:CC:72:5B:F7:CB:0F:EA:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MOalwxNr0v3TbISgzHJb98sP6rU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/febeb6-79e6-4d97-9c92-b79968e0e174/1/MOalwxNr0v3TbISgzHJb98sP6rU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/febeb6-79e6-4d97-9c92-b79968e0e174/1/MOalwxNr0v3TbISgzHJb98sP6rU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:5f:46:23:92:28:f5:85:b4:86:e2:70:34:c4:69:5a:82:7d: 75:a7:10:cf:9f:c5:c3:47:35:95:48:7b:ac:46:56:63:1e:8a: 7b:77:75:db:c5:c5:13:a6:17:17:dd:e8:0c:2f:fe:2f:78:2f: ce:bd:c8:d4:37:20:07:1b:21:e7:b0:87:52:d0:c1:cf:97:cb: 1b:52:3d:44:7b:4b:28:7f:08:b8:4a:fb:7f:00:a3:88:f4:9b: cd:c1:34:df:a3:9b:fa:de:ac:81:fc:71:e2:28:37:77:7d:1a: 79:96:60:53:c7:e2:4d:bd:24:c0:a1:6c:ee:aa:90:43:fe:e7: 48:aa:58:36:0f:25:a0:65:14:f6:e8:84:90:a9:76:d7:a4:c3: b1:44:90:2c:98:36:63:ac:e3:28:72:a5:12:68:42:cd:d6:40: c5:b0:b7:fb:e2:a8:82:ac:b5:91:56:0d:58:38:bf:af:64:1b: 07:a7:2c:f3:4d:d2:0f:b6:21:b7:1b:2f:a2:01:fc:39:43:80: 31:6d:b8:25:b5:62:82:df:2f:79:d4:f9:80:43:d3:66:26:22: 79:e4:31:6f:86:05:a4:33:c6:89:4e:44:6c:27:6f:8a:c1:71: 1b:29:69:5b:fd:6c:40:31:75:d9:1c:d1:ef:37:f1:26:17:bd: d2:68:4c:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZts/HgwmN99+G141ydbbxhbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwZTZhNWMzMTM2YmQyZmRkMzZjODRhMGNjNzI1YmY3Y2Iw ZmVhYjUwHhcNMjUxMjMwMDIwMDQzWhcNMjUxMjMxMDIwMDQzWjAzMTEwLwYDVQQD EygzNzQ2OWRkMzc1N2Q3M2EzZmQwYmU4ZTIwNGU3YzczZTM1MzZhMThmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzOmdvBHnLF2gqWIVcruq7PhuDYj 9BWTEz7SAM1ChdNteof3U64egjGbz6ffNnhOJQfEokMOfUvqajgf75I8Fk8l/TDD sxL2K5GHISJ/5xaTBi0fiueqHtl9yl/bmM83qGapJ15TRk/+LopempATY3S6w/rq K6kpIgzI23yuVQ2RF4T66vQQrwlmEu6rwX+aUgyXmaJvlgOBxjoK62YW7v8XfXOX XrcKqSZ4egb7bGar2SIm6XzUWfmRO5RdFWy+fbDuWu5Lshw+x825Q7yo8jHipDfV 5pTf1qUlakZAwnlTnNJs/RYsgc5zczciE9e4dQuXdBuYBHOOBFDI0HeJRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDdGndN1fXOj/Qvo4gTnxz41NqGPMB8GA1UdIwQY MBaAFDDmpcMTa9L902yEoMxyW/fLD+q1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTU9hbHd4TnIwdjNUYklTZ3pISmI5OHNQNnJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9mZWJlYjYtNzllNi00ZDk3LTljOTIt Yjc5OTY4ZTBlMTc0LzEvTU9hbHd4TnIwdjNUYklTZ3pISmI5OHNQNnJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi9mZWJlYjYtNzllNi00ZDk3LTljOTItYjc5OTY4ZTBlMTc0 LzEvTU9hbHd4TnIwdjNUYklTZ3pISmI5OHNQNnJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe19GI5Io 9YW0huJwNMRpWoJ9dacQz5/Fw0c1lUh7rEZWYx6Ke3d128XFE6YXF93oDC/+L3gv zr3I1DcgBxsh57CHUtDBz5fLG1I9RHtLKH8IuEr7fwCjiPSbzcE036Ob+t6sgfxx 4ig3d30aeZZgU8fiTb0kwKFs7qqQQ/7nSKpYNg8loGUU9uiEkKl216TDsUSQLJg2 Y6zjKHKlEmhCzdZAxbC3++Kogqy1kVYNWDi/r2QbB6cs803SD7YhtxsvogH8OUOA MW24JbVigt8vedT5gEPTZiYieeQxb4YFpDPGiU5EbCdvisFxGylpW/1sQDF12RzR 7zfxJhe90mhMRA== -----END CERTIFICATE-----Generated at Tue Dec 30 07:59:26 2025 by rpki-client