This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/0Mo8Cxlv3gunTBSHvcucX6BTZks.mft File: 0Mo8Cxlv3gunTBSHvcucX6BTZks.mft (raw, json) Hash identifier: ISpEmb/bP8inyW3gy14nNDLlmIM2gltBhJGy4f3WpZM= Subject key identifier: D1:B9:C4:69:7C:B0:CD:9A:5E:BC:35:10:FB:CA:8E:0C:1E:E7:AD:16 Authority key identifier: D0:CA:3C:0B:19:6F:DE:0B:A7:4C:14:87:BD:CB:9C:5F:A0:53:66:4B Certificate issuer: /CN=d0ca3c0b196fde0ba74c1487bdcb9c5fa053664b Certificate serial: 019B5D896277A71155A9D63559244ED239E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Mo8Cxlv3gunTBSHvcucX6BTZks.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/0Mo8Cxlv3gunTBSHvcucX6BTZks.mft Manifest number: 179A Signing time: Sat 27 Dec 2025 02:00:43 +0000 Manifest this update: Sat 27 Dec 2025 02:00:43 +0000 Manifest next update: Sun 28 Dec 2025 02:00:43 +0000 Files and hashes: 1: 0Mo8Cxlv3gunTBSHvcucX6BTZks.crl (hash: dpDJB0tb3v3aInk91qXNbSQ+W2A5uE0VPM+ewzt9Ja0=) 2: 5Iq99HGOQym0RGozEyZTnwgi5-c.roa (hash: 81JX76zEEyAwuma2A2j1xpYjvTQiYo/8wBvDbJx61DE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/0Mo8Cxlv3gunTBSHvcucX6BTZks.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/0Mo8Cxlv3gunTBSHvcucX6BTZks.mft rsync://rpki.ripe.net/repository/DEFAULT/0Mo8Cxlv3gunTBSHvcucX6BTZks.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5d:89:62:77:a7:11:55:a9:d6:35:59:24:4e:d2:39:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0ca3c0b196fde0ba74c1487bdcb9c5fa053664b Validity Not Before: Dec 27 02:00:43 2025 GMT Not After : Dec 28 02:00:43 2025 GMT Subject: CN=d1b9c4697cb0cd9a5ebc3510fbca8e0c1ee7ad16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:b4:7a:50:37:63:9e:44:20:6d:11:9a:59:91: b7:e6:0e:79:85:d8:cd:f3:23:ee:12:93:b7:54:59: 12:3a:a9:9c:9a:90:0b:4a:6f:d0:dc:f3:28:7a:23: 65:63:07:cc:f0:1d:33:cd:0c:ed:42:a5:68:92:2a: 49:7d:b3:fd:7e:c8:8c:42:e5:4c:43:fc:be:99:a1: c1:e3:28:a0:e5:9f:bd:c6:7f:ab:2c:66:6b:06:56: ed:e3:1d:2a:ae:3d:ab:a2:6a:f6:e7:6d:15:13:1a: c7:f5:e9:88:57:de:a9:71:30:bf:52:c1:c8:3a:24: 5e:4e:7e:0c:19:cd:cb:1f:1e:2f:01:ea:51:51:20: 99:70:4c:01:e2:b1:18:05:02:f8:cd:ed:2b:c3:a8: a6:67:51:9f:07:63:c9:66:57:2b:38:92:e5:35:ff: b2:27:8e:e4:56:bd:43:ca:9f:8a:d2:20:74:fc:a0: 7b:a6:13:55:43:a8:96:14:18:4e:2f:ef:76:c4:ed: 78:cb:94:72:11:7e:24:fe:8e:37:84:26:89:9f:7c: 2a:26:11:f7:8f:4c:fd:5b:a0:06:3c:eb:14:3f:bd: d8:67:a3:b8:94:b9:d2:1c:9c:d0:d1:ba:53:5e:0e: fc:26:fc:e2:c4:e0:57:e4:29:62:eb:52:85:61:20: 26:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:B9:C4:69:7C:B0:CD:9A:5E:BC:35:10:FB:CA:8E:0C:1E:E7:AD:16 X509v3 Authority Key Identifier: keyid:D0:CA:3C:0B:19:6F:DE:0B:A7:4C:14:87:BD:CB:9C:5F:A0:53:66:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Mo8Cxlv3gunTBSHvcucX6BTZks.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/0Mo8Cxlv3gunTBSHvcucX6BTZks.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/0Mo8Cxlv3gunTBSHvcucX6BTZks.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:51:08:cf:c0:64:88:ab:d1:b1:7d:e4:ae:23:eb:c8:5c:da: de:35:5e:d4:f1:3b:78:30:1b:fd:ae:13:7a:27:8a:73:3b:bb: ed:c3:ba:60:e4:55:ce:d8:86:1b:f1:bd:e8:d2:b7:12:3a:75: 19:e4:a7:6c:e1:c0:7b:6f:ea:71:50:c9:72:bf:f3:83:c2:37: a7:46:2c:06:19:e0:12:46:69:f0:28:6a:d5:7e:ea:d7:46:10: c0:dc:b8:26:b9:d6:3f:4b:c6:c1:87:1d:3a:12:33:7b:d1:19: 46:87:0c:51:43:33:3b:14:e6:45:46:54:d6:e1:33:49:4f:ba: d3:5e:23:69:72:b3:6e:47:81:11:fb:71:1f:60:bb:c3:81:66: d1:69:16:69:19:39:e7:3b:7c:fd:7a:25:58:12:f0:a0:21:6e: ce:93:26:41:bb:df:3e:4f:34:68:f1:5a:f5:ce:76:b3:ac:91: fe:26:ff:e6:31:dc:a4:49:e9:69:4b:e2:f0:fe:da:9a:b3:28: 57:89:cf:1f:35:89:71:12:7f:ce:5d:1b:e2:52:2b:78:37:34: 80:46:1a:fa:ee:88:e4:26:bf:0f:79:78:3e:0c:e2:ed:64:6a: 17:94:7e:ba:c3:66:dd:6b:c4:c0:c2:b1:8a:7e:99:81:22:a1: ab:b6:18:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtdiWJ3pxFVqdY1WSRO0jnmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwY2EzYzBiMTk2ZmRlMGJhNzRjMTQ4N2JkY2I5YzVmYTA1 MzY2NGIwHhcNMjUxMjI3MDIwMDQzWhcNMjUxMjI4MDIwMDQzWjAzMTEwLwYDVQQD EyhkMWI5YzQ2OTdjYjBjZDlhNWViYzM1MTBmYmNhOGUwYzFlZTdhZDE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrR6UDdjnkQgbRGaWZG35g55hdjN 8yPuEpO3VFkSOqmcmpALSm/Q3PMoeiNlYwfM8B0zzQztQqVokipJfbP9fsiMQuVM Q/y+maHB4yig5Z+9xn+rLGZrBlbt4x0qrj2romr2520VExrH9emIV96pcTC/UsHI OiReTn4MGc3LHx4vAepRUSCZcEwB4rEYBQL4ze0rw6imZ1GfB2PJZlcrOJLlNf+y J47kVr1Dyp+K0iB0/KB7phNVQ6iWFBhOL+92xO14y5RyEX4k/o43hCaJn3wqJhH3 j0z9W6AGPOsUP73YZ6O4lLnSHJzQ0bpTXg78JvzixOBX5Cli61KFYSAmTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNG5xGl8sM2aXrw1EPvKjgwe560WMB8GA1UdIwQY MBaAFNDKPAsZb94Lp0wUh73LnF+gU2ZLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvME1vOEN4bHYzZ3VuVEJTSHZjdWNYNkJUWmtzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi84MTAyNGYtNTE3MS00N2M0LWI1Y2Et NmI2MzMzMWVmZjAyLzEvME1vOEN4bHYzZ3VuVEJTSHZjdWNYNkJUWmtzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi84MTAyNGYtNTE3MS00N2M0LWI1Y2EtNmI2MzMzMWVmZjAy LzEvME1vOEN4bHYzZ3VuVEJTSHZjdWNYNkJUWmtzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJlEIz8Bk iKvRsX3kriPryFza3jVe1PE7eDAb/a4TeieKczu77cO6YORVztiGG/G96NK3Ejp1 GeSnbOHAe2/qcVDJcr/zg8I3p0YsBhngEkZp8Chq1X7q10YQwNy4JrnWP0vGwYcd OhIze9EZRocMUUMzOxTmRUZU1uEzSU+6014jaXKzbkeBEftxH2C7w4Fm0WkWaRk5 5zt8/XolWBLwoCFuzpMmQbvfPk80aPFa9c52s6yR/ib/5jHcpEnpaUvi8P7amrMo V4nPHzWJcRJ/zl0b4lIreDc0gEYa+u6I5Ca/D3l4Pgzi7WRqF5R+usNm3WvEwMKx in6ZgSKhq7YYcg== -----END CERTIFICATE-----Generated at Sat Dec 27 04:10:18 2025 by rpki-client