This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/0bf3b2-4dc4-4e25-9b9b-01f9a7b494da/1/moI9HNrrg3dfH7vV-frkGsXfFxk.mft File: moI9HNrrg3dfH7vV-frkGsXfFxk.mft (raw, json) Hash identifier: XyUbW58l7gqgRdMd9v8f6+I7lzKDG+gC6exdX0RMGmo= Subject key identifier: 2D:60:2C:1E:CF:C4:13:F4:4A:31:C7:21:F2:2B:13:65:59:19:61:EA Authority key identifier: 9A:82:3D:1C:DA:EB:83:77:5F:1F:BB:D5:F9:FA:E4:1A:C5:DF:17:19 Certificate issuer: /CN=9a823d1cdaeb83775f1fbbd5f9fae41ac5df1719 Certificate serial: 019B657A2A37A000913AB7FCA15F3D683D94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/moI9HNrrg3dfH7vV-frkGsXfFxk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/0bf3b2-4dc4-4e25-9b9b-01f9a7b494da/1/moI9HNrrg3dfH7vV-frkGsXfFxk.mft Manifest number: 07D5 Signing time: Sun 28 Dec 2025 15:01:03 +0000 Manifest this update: Sun 28 Dec 2025 15:01:03 +0000 Manifest next update: Mon 29 Dec 2025 15:01:03 +0000 Files and hashes: 1: moI9HNrrg3dfH7vV-frkGsXfFxk.crl (hash: SXwYFowyRzZ4oje9RQE6nauO7iRD1IFE9MdS4fJDqV4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/0bf3b2-4dc4-4e25-9b9b-01f9a7b494da/1/moI9HNrrg3dfH7vV-frkGsXfFxk.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/0bf3b2-4dc4-4e25-9b9b-01f9a7b494da/1/moI9HNrrg3dfH7vV-frkGsXfFxk.mft rsync://rpki.ripe.net/repository/DEFAULT/moI9HNrrg3dfH7vV-frkGsXfFxk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 15:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:65:7a:2a:37:a0:00:91:3a:b7:fc:a1:5f:3d:68:3d:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a823d1cdaeb83775f1fbbd5f9fae41ac5df1719 Validity Not Before: Dec 28 15:01:03 2025 GMT Not After : Dec 29 15:01:03 2025 GMT Subject: CN=2d602c1ecfc413f44a31c721f22b1365591961ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:be:af:5a:e4:25:c3:95:ed:27:03:6a:65:75: 2c:6d:24:1a:2a:7e:68:28:db:83:bf:8d:72:e8:16: cf:e5:8d:08:1e:10:94:b5:fa:e8:08:6a:7d:dc:b8: 93:aa:dc:cf:c2:52:84:f3:77:90:3f:8d:cb:a5:e2: a3:68:5c:5c:9a:56:93:24:d2:d6:d7:01:68:a6:77: 71:23:7a:a7:34:f3:0f:9b:cb:e8:bc:d3:f1:fc:88: 6c:87:af:b2:2c:72:c4:16:8a:5f:a3:f3:7e:7e:67: 79:cc:a8:8f:92:bc:c0:e8:88:d4:ab:0b:44:1e:92: f7:e2:86:9e:d0:37:d1:00:11:54:fe:a6:95:41:df: bf:b9:43:d0:f0:b6:ba:89:bb:1d:13:56:29:72:41: 38:9b:b8:95:d4:7a:05:21:9b:48:73:8d:2c:c5:75: 4a:da:8b:60:fb:f8:c4:4e:b9:be:18:89:5b:ff:e5: d7:2e:1c:c7:dd:d2:ca:aa:6c:56:dc:92:8b:a1:3a: c1:59:94:63:da:af:64:d6:f1:30:c9:f9:03:20:80: 9f:a5:8e:cf:2e:22:4f:93:94:3a:26:de:7a:76:42: 87:2d:45:31:e1:c0:8a:73:2a:8d:6a:54:bd:2d:57: c0:d0:fd:65:18:51:02:2c:36:49:90:e6:a9:34:41: 34:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:60:2C:1E:CF:C4:13:F4:4A:31:C7:21:F2:2B:13:65:59:19:61:EA X509v3 Authority Key Identifier: keyid:9A:82:3D:1C:DA:EB:83:77:5F:1F:BB:D5:F9:FA:E4:1A:C5:DF:17:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/moI9HNrrg3dfH7vV-frkGsXfFxk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0bf3b2-4dc4-4e25-9b9b-01f9a7b494da/1/moI9HNrrg3dfH7vV-frkGsXfFxk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0bf3b2-4dc4-4e25-9b9b-01f9a7b494da/1/moI9HNrrg3dfH7vV-frkGsXfFxk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:88:aa:cb:50:24:5e:35:9f:3a:00:28:64:e6:e1:03:36:fd: 5d:2f:a4:a4:89:6e:03:a2:dd:b1:5f:6c:b3:79:22:b0:66:21: 97:b5:fc:48:8f:d8:f6:8c:4a:87:dc:0c:5a:25:e6:1c:7c:7a: e2:d8:22:9a:ee:da:1b:99:82:96:ee:52:70:11:0b:e3:35:4c: c5:e9:ab:b2:63:9b:c2:1a:be:fc:33:af:80:dc:66:e9:d3:d6: 5a:74:ac:c4:c5:ee:93:df:6d:19:c2:6f:15:93:6d:34:9d:88: 5c:24:0c:f9:cf:e1:ee:5a:e3:d0:82:7f:7e:78:a9:ad:aa:42: 0e:e7:c4:d8:cf:e4:46:68:09:89:96:50:f0:dd:24:58:f5:d1: 91:9f:af:c7:63:a7:7a:32:5f:16:69:cc:d8:1e:ba:68:0a:78: a0:6e:d0:5c:21:c8:74:af:48:c3:d6:fe:b5:30:67:84:e1:d3: e4:5c:61:1c:77:e6:c9:88:61:96:91:59:96:66:e0:fe:1f:2b: 00:10:fe:c5:72:f2:f7:cd:af:a6:60:ce:45:33:d1:0e:07:b9: ba:97:8b:2c:b1:cd:f6:05:35:8f:20:53:c4:65:b6:02:dd:76: 57:94:68:64:dd:35:8c:b4:84:ca:76:38:91:da:ce:09:63:10: fd:23:19:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtleio3oACROrf8oV89aD2UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhODIzZDFjZGFlYjgzNzc1ZjFmYmJkNWY5ZmFlNDFhYzVk ZjE3MTkwHhcNMjUxMjI4MTUwMTAzWhcNMjUxMjI5MTUwMTAzWjAzMTEwLwYDVQQD EygyZDYwMmMxZWNmYzQxM2Y0NGEzMWM3MjFmMjJiMTM2NTU5MTk2MWVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAor6vWuQlw5XtJwNqZXUsbSQaKn5o KNuDv41y6BbP5Y0IHhCUtfroCGp93LiTqtzPwlKE83eQP43LpeKjaFxcmlaTJNLW 1wFopndxI3qnNPMPm8vovNPx/Ihsh6+yLHLEFopfo/N+fmd5zKiPkrzA6IjUqwtE HpL34oae0DfRABFU/qaVQd+/uUPQ8La6ibsdE1YpckE4m7iV1HoFIZtIc40sxXVK 2otg+/jETrm+GIlb/+XXLhzH3dLKqmxW3JKLoTrBWZRj2q9k1vEwyfkDIICfpY7P LiJPk5Q6Jt56dkKHLUUx4cCKcyqNalS9LVfA0P1lGFECLDZJkOapNEE0hQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC1gLB7PxBP0SjHHIfIrE2VZGWHqMB8GA1UdIwQY MBaAFJqCPRza64N3Xx+71fn65BrF3xcZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbW9JOUhOcnJnM2RmSDd2Vi1mcmtHc1hmRnhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wYmYzYjItNGRjNC00ZTI1LTliOWIt MDFmOWE3YjQ5NGRhLzEvbW9JOUhOcnJnM2RmSDd2Vi1mcmtHc1hmRnhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8wYmYzYjItNGRjNC00ZTI1LTliOWItMDFmOWE3YjQ5NGRh LzEvbW9JOUhOcnJnM2RmSDd2Vi1mcmtHc1hmRnhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOoiqy1Ak XjWfOgAoZObhAzb9XS+kpIluA6LdsV9ss3kisGYhl7X8SI/Y9oxKh9wMWiXmHHx6 4tgimu7aG5mClu5ScBEL4zVMxemrsmObwhq+/DOvgNxm6dPWWnSsxMXuk99tGcJv FZNtNJ2IXCQM+c/h7lrj0IJ/fniprapCDufE2M/kRmgJiZZQ8N0kWPXRkZ+vx2On ejJfFmnM2B66aAp4oG7QXCHIdK9Iw9b+tTBnhOHT5FxhHHfmyYhhlpFZlmbg/h8r ABD+xXLy982vpmDORTPRDge5upeLLLHN9gU1jyBTxGW2At12V5RoZN01jLSEynY4 kdrOCWMQ/SMZng== -----END CERTIFICATE-----Generated at Sun Dec 28 23:37:38 2025 by rpki-client