This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/mowynYdjwp8pkxq7uBlfl1A4KYs.mft File: mowynYdjwp8pkxq7uBlfl1A4KYs.mft (raw, json) Hash identifier: I0sBj6HINkyvuxQ/tUQtb9v69Snb+T2u8iTSju/dcHQ= Subject key identifier: 9E:3F:45:9A:FC:40:25:06:57:C3:91:CD:AD:E2:CD:93:CE:9A:1A:CD Authority key identifier: 9A:8C:32:9D:87:63:C2:9F:29:93:1A:BB:B8:19:5F:97:50:38:29:8B Certificate issuer: /CN=9a8c329d8763c29f29931abbb8195f975038298b Certificate serial: 019B3F47E4FBACB2CAE4AC42E9F1716F560B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mowynYdjwp8pkxq7uBlfl1A4KYs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/mowynYdjwp8pkxq7uBlfl1A4KYs.mft Manifest number: 0481 Signing time: Sun 21 Dec 2025 05:00:34 +0000 Manifest this update: Sun 21 Dec 2025 05:00:34 +0000 Manifest next update: Mon 22 Dec 2025 05:00:34 +0000 Files and hashes: 1: FDxX9SBwi6ZE3MJeOvg7kb7kK38.roa (hash: bwymb63cONmt/c+6ZDVkw7Ek8DpIFx336RD8V0Gt1oQ=) 2: mowynYdjwp8pkxq7uBlfl1A4KYs.crl (hash: 7iJ81Xlj3z8mKJIWa4vbVOsWXcP8LUVXpyN+KFpctV4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/mowynYdjwp8pkxq7uBlfl1A4KYs.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/mowynYdjwp8pkxq7uBlfl1A4KYs.mft rsync://rpki.ripe.net/repository/DEFAULT/mowynYdjwp8pkxq7uBlfl1A4KYs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:47:e4:fb:ac:b2:ca:e4:ac:42:e9:f1:71:6f:56:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a8c329d8763c29f29931abbb8195f975038298b Validity Not Before: Dec 21 05:00:34 2025 GMT Not After : Dec 22 05:00:34 2025 GMT Subject: CN=9e3f459afc40250657c391cdade2cd93ce9a1acd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:95:90:64:b8:56:20:fc:92:a0:d1:38:4c:8f: 27:6e:42:47:1c:28:b4:ce:fb:9e:9b:b0:8c:1d:02: 8e:1a:17:e4:85:f8:17:4a:d3:ff:ce:03:59:fe:17: 42:8a:9a:a7:ad:d5:21:db:e0:93:53:60:fe:3a:da: 93:c8:45:1f:b2:e4:b3:7b:62:a7:f2:c0:1a:b4:92: bc:26:91:66:ee:94:61:49:d9:64:e2:57:78:81:3e: ca:94:36:ee:4c:d6:b7:32:8e:bb:b8:56:29:2f:18: 62:bc:2b:4b:bc:42:12:cb:16:ec:ba:59:82:e5:a9: 9c:7c:49:b5:a1:fc:b4:f7:28:89:7d:45:a4:7f:6a: a8:75:73:d8:a3:3f:c2:8f:6b:94:0f:3b:12:f8:2d: cd:c9:aa:0a:cf:9d:6a:e3:f1:fb:e8:82:4a:27:22: f4:f0:80:88:e2:d2:d8:8f:a6:a0:f1:9a:21:24:b3: c1:ee:1e:bd:9c:16:5f:5e:8c:7a:5b:78:ac:2d:9a: 3e:d6:5e:61:85:a0:34:69:a9:d9:7e:c4:19:c4:15: 93:9e:a2:37:ba:32:4b:b8:17:84:c1:a6:a9:44:36: 40:6c:6f:52:88:65:58:43:97:be:8a:de:66:c4:28: cf:73:e7:47:1c:ab:98:eb:3c:7d:3e:ac:af:b9:2c: 39:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:3F:45:9A:FC:40:25:06:57:C3:91:CD:AD:E2:CD:93:CE:9A:1A:CD X509v3 Authority Key Identifier: keyid:9A:8C:32:9D:87:63:C2:9F:29:93:1A:BB:B8:19:5F:97:50:38:29:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mowynYdjwp8pkxq7uBlfl1A4KYs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/mowynYdjwp8pkxq7uBlfl1A4KYs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/mowynYdjwp8pkxq7uBlfl1A4KYs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:e4:97:15:9e:7f:3e:8c:12:c3:e9:ee:16:98:a4:52:61:0e: 47:c6:c3:6e:ac:a4:a4:20:db:ed:92:4f:c9:29:d7:65:00:4f: 6c:c4:3b:cd:aa:3b:66:56:4f:7a:c5:3d:9d:01:01:71:d6:36: de:ab:bb:31:b4:9a:3a:b9:15:84:41:ec:c9:91:6b:cb:4e:22: 67:ef:4b:5d:d3:31:c6:14:55:67:89:c2:f3:74:2a:fb:3d:bc: ad:63:65:db:7d:5d:5c:8b:ff:ff:a5:5c:00:fc:32:16:82:eb: 5e:76:75:97:a5:10:1d:92:bc:8a:1a:69:43:bc:1c:e0:ff:e6: 19:c9:1a:a9:4b:13:b3:fa:ff:a4:d6:58:77:f4:71:28:3a:20: c8:1e:96:13:b6:5e:c8:d1:b2:c0:9e:59:06:a4:89:ad:94:59: 97:33:8d:af:61:53:91:92:46:66:7e:a0:69:8e:e6:9d:c9:e5: 05:d2:56:c6:10:16:e2:c6:fb:06:02:44:46:9e:40:9a:3a:cb: 4f:bc:7c:fb:8f:d0:4e:01:5d:9b:93:d5:5c:f9:00:7b:64:00: 7d:c4:46:a3:e3:33:95:4f:7e:17:24:9e:d9:c1:00:8d:b6:6b: 2a:4d:d4:d9:dd:4b:55:87:d0:e7:20:ff:ab:e1:41:a4:f9:94: 90:40:77:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/R+T7rLLK5KxC6fFxb1YLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhOGMzMjlkODc2M2MyOWYyOTkzMWFiYmI4MTk1Zjk3NTAz ODI5OGIwHhcNMjUxMjIxMDUwMDM0WhcNMjUxMjIyMDUwMDM0WjAzMTEwLwYDVQQD Eyg5ZTNmNDU5YWZjNDAyNTA2NTdjMzkxY2RhZGUyY2Q5M2NlOWExYWNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ZWQZLhWIPySoNE4TI8nbkJHHCi0 zvuem7CMHQKOGhfkhfgXStP/zgNZ/hdCipqnrdUh2+CTU2D+OtqTyEUfsuSze2Kn 8sAatJK8JpFm7pRhSdlk4ld4gT7KlDbuTNa3Mo67uFYpLxhivCtLvEISyxbsulmC 5amcfEm1ofy09yiJfUWkf2qodXPYoz/Cj2uUDzsS+C3NyaoKz51q4/H76IJKJyL0 8ICI4tLYj6ag8ZohJLPB7h69nBZfXox6W3isLZo+1l5hhaA0aanZfsQZxBWTnqI3 ujJLuBeEwaapRDZAbG9SiGVYQ5e+it5mxCjPc+dHHKuY6zx9PqyvuSw5IwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ4/RZr8QCUGV8ORza3izZPOmhrNMB8GA1UdIwQY MBaAFJqMMp2HY8KfKZMau7gZX5dQOCmLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbW93eW5ZZGp3cDhwa3hxN3VCbGZsMUE0S1lzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8wY2Q5NDktZjRiNy00OGQ5LWEwYzYt ZmRhOGExM2NhMWQ3LzEvbW93eW5ZZGp3cDhwa3hxN3VCbGZsMUE0S1lzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS8wY2Q5NDktZjRiNy00OGQ5LWEwYzYtZmRhOGExM2NhMWQ3 LzEvbW93eW5ZZGp3cDhwa3hxN3VCbGZsMUE0S1lzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKuSXFZ5/ PowSw+nuFpikUmEOR8bDbqykpCDb7ZJPySnXZQBPbMQ7zao7ZlZPesU9nQEBcdY2 3qu7MbSaOrkVhEHsyZFry04iZ+9LXdMxxhRVZ4nC83Qq+z28rWNl231dXIv//6Vc APwyFoLrXnZ1l6UQHZK8ihppQ7wc4P/mGckaqUsTs/r/pNZYd/RxKDogyB6WE7Ze yNGywJ5ZBqSJrZRZlzONr2FTkZJGZn6gaY7mncnlBdJWxhAW4sb7BgJERp5AmjrL T7x8+4/QTgFdm5PVXPkAe2QAfcRGo+MzlU9+FySe2cEAjbZrKk3U2d1LVYfQ5yD/ q+FBpPmUkEB3Cw== -----END CERTIFICATE-----Generated at Sun Dec 21 13:03:11 2025 by rpki-client