This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/febeb6-79e6-4d97-9c92-b79968e0e174/1/MOalwxNr0v3TbISgzHJb98sP6rU.mft File: MOalwxNr0v3TbISgzHJb98sP6rU.mft (raw, json) Hash identifier: xuxlSR4WY1KafcU+7DxiOZUl+8dLZdDV+wlLrS/Cp2M= Subject key identifier: 97:C0:B5:AE:87:BF:87:71:27:E4:49:67:90:03:FC:3C:46:B7:6C:E1 Authority key identifier: 30:E6:A5:C3:13:6B:D2:FD:D3:6C:84:A0:CC:72:5B:F7:CB:0F:EA:B5 Certificate issuer: /CN=30e6a5c3136bd2fdd36c84a0cc725bf7cb0feab5 Certificate serial: 019B500545853F1FD35192871EBF9F41E521 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MOalwxNr0v3TbISgzHJb98sP6rU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/febeb6-79e6-4d97-9c92-b79968e0e174/1/MOalwxNr0v3TbISgzHJb98sP6rU.mft Manifest number: 1272 Signing time: Wed 24 Dec 2025 11:01:21 +0000 Manifest this update: Wed 24 Dec 2025 11:01:21 +0000 Manifest next update: Thu 25 Dec 2025 11:01:21 +0000 Files and hashes: 1: HqsZJgL9LBUTcewanQzxQHLDph8.roa (hash: UQ79eEyJ8LyCIFyjDtOvtd/bCzwLuuC1qKDG3mAmlzU=) 2: MOalwxNr0v3TbISgzHJb98sP6rU.crl (hash: UQY1tuBylxSWZOQvySAXZP/T2UWl0pbuDJcaSVhzjYQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/febeb6-79e6-4d97-9c92-b79968e0e174/1/MOalwxNr0v3TbISgzHJb98sP6rU.crl rsync://rpki.ripe.net/repository/DEFAULT/62/febeb6-79e6-4d97-9c92-b79968e0e174/1/MOalwxNr0v3TbISgzHJb98sP6rU.mft rsync://rpki.ripe.net/repository/DEFAULT/MOalwxNr0v3TbISgzHJb98sP6rU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:05:45:85:3f:1f:d3:51:92:87:1e:bf:9f:41:e5:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30e6a5c3136bd2fdd36c84a0cc725bf7cb0feab5 Validity Not Before: Dec 24 11:01:21 2025 GMT Not After : Dec 25 11:01:21 2025 GMT Subject: CN=97c0b5ae87bf877127e449679003fc3c46b76ce1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b4:25:91:cc:7f:2d:19:b7:94:dd:d8:b7:37: dd:e5:13:8f:ec:88:61:9b:5a:c0:7c:37:ac:f1:0c: 4f:51:e0:06:33:cd:48:31:e0:f7:78:ee:a4:80:09: e7:42:47:47:3c:12:1b:5d:1b:ba:f0:a8:a9:1b:34: 17:ba:30:b7:e1:92:a0:01:80:62:cc:14:24:52:b0: 4d:d8:31:a3:7d:b2:fe:fd:82:76:6f:af:68:8e:92: d7:dc:26:5b:0a:7a:ad:d9:cd:c3:10:4b:43:a8:7e: 4f:14:8d:2f:18:ce:ec:c2:8c:4f:54:8c:2a:a9:56: d9:39:d6:e5:59:8e:33:1a:b1:40:a7:c9:bd:64:5a: 93:a5:a7:a9:8b:83:45:b3:47:22:4e:fa:4c:db:78: c0:b7:9c:05:4f:61:ee:c4:a1:99:9c:8f:75:e5:03: 9f:cd:9b:29:34:54:63:21:b9:f4:6c:9c:f1:81:b8: 43:33:44:71:17:c2:04:76:84:7f:bb:9a:1a:eb:aa: b1:3c:7d:b2:e2:5a:81:61:2e:d5:bb:d6:bd:c5:b8: 71:fa:30:9d:06:13:08:24:cb:35:17:f2:40:b2:5b: 2d:cd:00:92:32:28:35:32:3f:e2:0f:a6:21:d4:82: 40:de:9c:12:5b:60:72:c8:e5:fe:07:84:4f:c6:66: e5:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:C0:B5:AE:87:BF:87:71:27:E4:49:67:90:03:FC:3C:46:B7:6C:E1 X509v3 Authority Key Identifier: keyid:30:E6:A5:C3:13:6B:D2:FD:D3:6C:84:A0:CC:72:5B:F7:CB:0F:EA:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MOalwxNr0v3TbISgzHJb98sP6rU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/febeb6-79e6-4d97-9c92-b79968e0e174/1/MOalwxNr0v3TbISgzHJb98sP6rU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/febeb6-79e6-4d97-9c92-b79968e0e174/1/MOalwxNr0v3TbISgzHJb98sP6rU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:d8:f4:6e:10:f3:86:69:a5:b4:59:e3:ad:0e:ab:48:c0:e1: 7b:69:ec:a1:9e:da:b7:b5:c9:df:ac:cf:39:55:3d:18:81:75: 78:c7:af:a1:e0:f6:cc:e1:03:02:b0:fd:08:90:29:ee:80:41: 62:15:f5:65:50:b6:b2:39:05:bc:b5:5e:7a:9a:d2:f9:a0:a3: df:f1:7c:e9:3e:6f:9d:49:84:7f:a4:64:d8:fe:7e:34:88:e3: 0d:87:39:77:7d:ac:1a:6b:80:28:89:e1:96:2b:eb:38:1e:8f: f4:64:5c:43:15:cf:db:fa:42:5f:8c:27:3a:13:d3:29:0f:14: 65:62:2c:45:5d:f9:8b:8e:7f:5e:66:ba:1d:ef:78:c7:34:d0: 02:e4:05:db:48:cc:eb:6b:d9:0b:a7:bf:30:cc:4d:b2:0b:ae: c1:79:e3:19:6e:32:86:00:f5:a6:a6:69:08:50:76:e4:bd:84: b8:04:13:dd:c4:14:43:1e:4d:ae:fe:d8:c8:8b:7e:6b:9f:7e: 48:01:bf:05:17:e1:b3:04:2c:c8:46:4f:6e:c3:33:87:89:e7: f0:87:41:77:d3:3e:d6:c5:a5:16:eb:ce:02:11:82:f0:3a:0d: 9e:06:5e:4e:f3:e2:f6:01:42:c5:99:34:31:16:e9:c1:3c:ea: f8:21:71:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQBUWFPx/TUZKHHr+fQeUhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwZTZhNWMzMTM2YmQyZmRkMzZjODRhMGNjNzI1YmY3Y2Iw ZmVhYjUwHhcNMjUxMjI0MTEwMTIxWhcNMjUxMjI1MTEwMTIxWjAzMTEwLwYDVQQD Eyg5N2MwYjVhZTg3YmY4NzcxMjdlNDQ5Njc5MDAzZmMzYzQ2Yjc2Y2UxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbQlkcx/LRm3lN3Ytzfd5ROP7Ihh m1rAfDes8QxPUeAGM81IMeD3eO6kgAnnQkdHPBIbXRu68KipGzQXujC34ZKgAYBi zBQkUrBN2DGjfbL+/YJ2b69ojpLX3CZbCnqt2c3DEEtDqH5PFI0vGM7swoxPVIwq qVbZOdblWY4zGrFAp8m9ZFqTpaepi4NFs0ciTvpM23jAt5wFT2HuxKGZnI915QOf zZspNFRjIbn0bJzxgbhDM0RxF8IEdoR/u5oa66qxPH2y4lqBYS7Vu9a9xbhx+jCd BhMIJMs1F/JAslstzQCSMig1Mj/iD6Yh1IJA3pwSW2ByyOX+B4RPxmbldQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJfAta6Hv4dxJ+RJZ5AD/DxGt2zhMB8GA1UdIwQY MBaAFDDmpcMTa9L902yEoMxyW/fLD+q1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTU9hbHd4TnIwdjNUYklTZ3pISmI5OHNQNnJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9mZWJlYjYtNzllNi00ZDk3LTljOTIt Yjc5OTY4ZTBlMTc0LzEvTU9hbHd4TnIwdjNUYklTZ3pISmI5OHNQNnJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi9mZWJlYjYtNzllNi00ZDk3LTljOTItYjc5OTY4ZTBlMTc0 LzEvTU9hbHd4TnIwdjNUYklTZ3pISmI5OHNQNnJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ9j0bhDz hmmltFnjrQ6rSMDhe2nsoZ7at7XJ36zPOVU9GIF1eMevoeD2zOEDArD9CJAp7oBB YhX1ZVC2sjkFvLVeeprS+aCj3/F86T5vnUmEf6Rk2P5+NIjjDYc5d32sGmuAKInh livrOB6P9GRcQxXP2/pCX4wnOhPTKQ8UZWIsRV35i45/Xma6He94xzTQAuQF20jM 62vZC6e/MMxNsguuwXnjGW4yhgD1pqZpCFB25L2EuAQT3cQUQx5Nrv7YyIt+a59+ SAG/BRfhswQsyEZPbsMzh4nn8IdBd9M+1sWlFuvOAhGC8DoNngZeTvPi9gFCxZk0 MRbpwTzq+CFxAw== -----END CERTIFICATE-----Generated at Wed Dec 24 17:00:29 2025 by rpki-client