This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/mowynYdjwp8pkxq7uBlfl1A4KYs.mft
File: mowynYdjwp8pkxq7uBlfl1A4KYs.mft (raw, json)
Hash identifier: SzIYdQMkODuEzdphKg4/izONpU08Kop8L8QF24t5uCg=
Subject key identifier: 96:53:89:36:7A:F7:C8:9A:C2:0F:43:6F:A2:BD:DC:43:BC:64:B9:FA
Authority key identifier: 9A:8C:32:9D:87:63:C2:9F:29:93:1A:BB:B8:19:5F:97:50:38:29:8B
Certificate issuer: /CN=9a8c329d8763c29f29931abbb8195f975038298b
Certificate serial: 019B45133028108C05E2AC52A4C16AB8A3E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mowynYdjwp8pkxq7uBlfl1A4KYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/mowynYdjwp8pkxq7uBlfl1A4KYs.mft
Manifest number: 0484
Signing time: Mon 22 Dec 2025 08:00:43 +0000
Manifest this update: Mon 22 Dec 2025 08:00:43 +0000
Manifest next update: Tue 23 Dec 2025 08:00:43 +0000
Files and hashes: 1: FDxX9SBwi6ZE3MJeOvg7kb7kK38.roa (hash: bwymb63cONmt/c+6ZDVkw7Ek8DpIFx336RD8V0Gt1oQ=)
2: mowynYdjwp8pkxq7uBlfl1A4KYs.crl (hash: FyaYb0K4TDmjXSV7OTYruM2bpSC5FKQnqM1hVvBHfis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/mowynYdjwp8pkxq7uBlfl1A4KYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/mowynYdjwp8pkxq7uBlfl1A4KYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mowynYdjwp8pkxq7uBlfl1A4KYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 23 Dec 2025 08:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:45:13:30:28:10:8c:05:e2:ac:52:a4:c1:6a:b8:a3:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a8c329d8763c29f29931abbb8195f975038298b
Validity
Not Before: Dec 22 08:00:43 2025 GMT
Not After : Dec 23 08:00:43 2025 GMT
Subject: CN=965389367af7c89ac20f436fa2bddc43bc64b9fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:94:96:66:5b:3c:cd:fd:37:53:c6:01:9d:b4:
ee:9e:8b:39:b8:a9:19:0f:60:f3:6f:11:7e:fc:b5:
79:31:15:c4:6d:16:ec:b7:9f:dd:df:ca:e5:0c:5b:
16:70:83:5a:01:b8:7b:f7:41:5a:c1:b9:f0:76:97:
b4:c4:60:e1:7c:98:fa:8c:ab:9f:1e:64:78:8d:b0:
a6:fb:63:80:5e:0e:8f:ad:5a:17:d5:c4:06:63:49:
86:79:0d:05:b2:4c:b4:c2:1f:35:7c:35:5f:36:f7:
b1:75:71:e9:f2:03:8c:f2:02:4e:ab:fa:0f:0c:2c:
23:fd:8b:ba:10:5d:b7:e1:8e:8c:7c:5c:80:55:94:
cc:bd:41:09:46:1b:8a:b0:42:e4:bd:03:75:59:d5:
ad:2b:81:a5:01:2e:81:ff:c8:91:76:17:30:7e:00:
16:4c:d3:41:f2:f5:c7:47:b5:d0:64:76:0b:80:aa:
b2:97:7f:2f:b4:08:d3:38:ae:b7:fc:31:47:3a:e1:
bf:6e:df:b5:e7:f0:2a:6c:42:1c:b6:a4:30:10:68:
82:3b:5c:d6:a2:23:38:12:02:64:9d:36:27:d4:96:
14:a5:64:77:b4:c6:4e:4a:a4:b2:e5:39:d6:c4:e1:
53:f3:b8:09:0a:3e:f1:9f:19:3b:34:e2:7c:d4:fc:
da:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:53:89:36:7A:F7:C8:9A:C2:0F:43:6F:A2:BD:DC:43:BC:64:B9:FA
X509v3 Authority Key Identifier:
keyid:9A:8C:32:9D:87:63:C2:9F:29:93:1A:BB:B8:19:5F:97:50:38:29:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mowynYdjwp8pkxq7uBlfl1A4KYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/mowynYdjwp8pkxq7uBlfl1A4KYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/mowynYdjwp8pkxq7uBlfl1A4KYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:7d:ec:78:29:20:cf:4b:b9:9d:c8:4d:95:36:1d:86:4d:02:
c4:f8:64:5e:e3:56:22:dc:35:ac:ae:9f:12:58:4d:7a:00:df:
b7:a6:b4:27:ad:9c:30:74:c2:68:61:1b:c7:27:91:33:22:2a:
2b:de:34:50:e1:a4:92:7c:b3:ce:d5:7e:e4:5e:2f:2f:37:23:
75:61:92:62:48:0c:1a:79:fb:0a:fe:68:72:8c:40:8b:a5:c8:
fb:77:e5:fe:8a:0f:00:8f:8a:05:0c:c7:a5:b3:6a:aa:2a:38:
b4:d3:4a:bd:3d:6b:a2:58:07:14:3e:8d:20:cd:e7:2b:f5:bc:
20:0e:53:1f:62:b9:ca:3b:20:43:78:57:07:47:8d:e4:bb:35:
1b:8b:28:ea:c3:53:ad:62:26:96:37:15:c9:0d:b2:06:26:4f:
88:ce:bd:1f:6c:b2:d0:a7:63:8d:48:d2:b3:2f:72:3f:9f:25:
60:16:c8:9c:78:28:25:c0:bc:cb:9e:68:4f:17:75:dd:3c:d1:
47:c5:6b:cc:f9:b2:b4:34:af:05:f9:00:0f:85:24:30:56:5a:
2a:1d:42:5b:bb:f3:b3:1c:d5:af:bd:b7:0d:f7:13:cf:01:bf:
1b:fb:af:e7:1e:f5:df:ef:cc:a4:b7:bf:f6:b4:99:c8:0d:23:
7c:85:4e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 14:05:19 2025 by rpki-client