This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/e738c9-c821-434e-a26e-8a84bfd8f099/1/Mo1NdPJBWjV_502-BA8BVPHaz3w.mft File: Mo1NdPJBWjV_502-BA8BVPHaz3w.mft (raw, json) Hash identifier: oeHtkwcPC5cdFzs0vMCyU+Ylotwm2WmQiVbOINeYmZ0= Subject key identifier: 9D:8B:97:54:E5:D4:B1:2F:DA:0F:A7:BC:66:74:0B:10:08:98:B7:03 Authority key identifier: 32:8D:4D:74:F2:41:5A:35:7F:E7:4D:BE:04:0F:01:54:F1:DA:CF:7C Certificate issuer: /CN=328d4d74f2415a357fe74dbe040f0154f1dacf7c Certificate serial: 019B3C7F9EC47102F9E63DF9C333BC5DDED5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mo1NdPJBWjV_502-BA8BVPHaz3w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/e738c9-c821-434e-a26e-8a84bfd8f099/1/Mo1NdPJBWjV_502-BA8BVPHaz3w.mft Manifest number: 0B08 Signing time: Sat 20 Dec 2025 16:02:35 +0000 Manifest this update: Sat 20 Dec 2025 16:02:35 +0000 Manifest next update: Sun 21 Dec 2025 16:02:35 +0000 Files and hashes: 1: K-39Hqy0AFDZY_cxbUsSzlTGpbc.roa (hash: HOWSSaTxDqgiwOmso54SMRF/DSbrMg9/uUoQhZYJC/c=) 2: Mo1NdPJBWjV_502-BA8BVPHaz3w.crl (hash: AWoi6INB/vEfCmT1IMxRLIllOz7n0Qm5MsiPUEo9Ps0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/e738c9-c821-434e-a26e-8a84bfd8f099/1/Mo1NdPJBWjV_502-BA8BVPHaz3w.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/e738c9-c821-434e-a26e-8a84bfd8f099/1/Mo1NdPJBWjV_502-BA8BVPHaz3w.mft rsync://rpki.ripe.net/repository/DEFAULT/Mo1NdPJBWjV_502-BA8BVPHaz3w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:9e:c4:71:02:f9:e6:3d:f9:c3:33:bc:5d:de:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=328d4d74f2415a357fe74dbe040f0154f1dacf7c Validity Not Before: Dec 20 16:02:35 2025 GMT Not After : Dec 21 16:02:35 2025 GMT Subject: CN=9d8b9754e5d4b12fda0fa7bc66740b100898b703 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c6:0a:59:92:a8:55:8d:23:df:bb:35:40:93: a5:49:55:a4:74:95:e2:9f:dc:01:43:b6:d6:2d:c6: 05:de:cd:35:b6:80:63:2b:fe:ee:93:35:02:18:12: 96:c8:b1:fe:c6:39:91:2b:94:b0:a4:6e:50:1f:8c: 5d:31:c9:93:63:05:80:47:01:8d:80:bc:f1:78:ef: f8:11:d4:8b:81:06:10:85:f4:53:cb:61:98:fa:79: 98:2b:16:30:30:a5:8a:20:84:1e:c4:a9:c8:c0:b3: 6a:a3:79:d5:b4:4b:13:24:16:00:d1:60:6d:5b:1d: 50:6e:11:38:92:19:f2:ae:f4:3a:aa:fa:26:75:55: 21:07:a9:21:39:42:2e:4c:db:ea:58:30:2d:90:e6: 23:e3:b0:be:b0:a0:58:d0:5e:8f:93:7b:bd:a2:35: 87:f9:a2:83:34:75:5c:d9:f8:02:13:db:69:5b:b9: 2d:f7:db:94:94:0b:cd:c8:d2:03:79:a9:44:98:b9: ce:ac:04:a5:35:c4:83:9f:5f:7c:58:d2:13:4d:3f: 43:88:f1:b7:8e:85:aa:42:08:28:4e:e0:db:50:20: 10:95:42:5f:7f:78:e4:eb:77:1a:cf:c2:e5:7f:c1: 4c:13:66:55:d3:05:bf:cb:db:82:95:ae:99:2a:97: aa:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:8B:97:54:E5:D4:B1:2F:DA:0F:A7:BC:66:74:0B:10:08:98:B7:03 X509v3 Authority Key Identifier: keyid:32:8D:4D:74:F2:41:5A:35:7F:E7:4D:BE:04:0F:01:54:F1:DA:CF:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mo1NdPJBWjV_502-BA8BVPHaz3w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/e738c9-c821-434e-a26e-8a84bfd8f099/1/Mo1NdPJBWjV_502-BA8BVPHaz3w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/e738c9-c821-434e-a26e-8a84bfd8f099/1/Mo1NdPJBWjV_502-BA8BVPHaz3w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:5c:de:45:cf:5c:4d:81:59:b5:4a:9f:24:03:81:e5:16:df: a6:4a:d7:94:78:6d:3c:40:d7:d0:58:a8:ce:09:5c:f5:6a:83: 58:12:76:db:04:db:20:1e:72:bc:8d:25:93:49:3f:25:f3:4c: 04:d6:bd:09:9d:34:61:cb:9d:f5:b1:05:64:79:73:9c:e8:0e: fa:68:4d:d8:44:61:3a:02:cb:24:9d:96:60:95:5c:4b:9b:eb: ce:99:d3:f7:6a:69:c6:5a:b3:b5:4b:f2:09:fb:a3:70:14:51: e3:86:7b:e1:b0:25:57:89:46:e4:ed:7a:6b:7d:20:08:2c:3d: 7c:bd:8a:1e:d0:eb:9e:1e:9a:e9:c7:40:aa:17:08:b8:82:f0: d7:5c:19:02:7d:01:e3:0e:7d:2e:08:67:b1:7f:f6:3a:c9:20: c5:8b:37:21:d5:3b:df:b0:e5:a0:ac:dc:b5:84:27:fe:bb:88: cb:1d:89:0a:74:84:50:33:f8:e4:46:de:f4:ad:ae:c5:8b:e9: 6a:05:c8:1a:1f:5c:43:6e:3e:d2:76:b9:d7:5e:14:ae:de:76: 2f:2e:cf:1f:5e:df:32:23:d2:19:a0:bd:df:78:2e:ac:66:cb: f1:7e:e7:a1:db:2d:f3:a5:92:fc:4d:83:d2:1d:e2:ad:67:11: a4:fc:ed:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8f57EcQL55j35wzO8Xd7VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyOGQ0ZDc0ZjI0MTVhMzU3ZmU3NGRiZTA0MGYwMTU0ZjFk YWNmN2MwHhcNMjUxMjIwMTYwMjM1WhcNMjUxMjIxMTYwMjM1WjAzMTEwLwYDVQQD Eyg5ZDhiOTc1NGU1ZDRiMTJmZGEwZmE3YmM2Njc0MGIxMDA4OThiNzAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcYKWZKoVY0j37s1QJOlSVWkdJXi n9wBQ7bWLcYF3s01toBjK/7ukzUCGBKWyLH+xjmRK5SwpG5QH4xdMcmTYwWARwGN gLzxeO/4EdSLgQYQhfRTy2GY+nmYKxYwMKWKIIQexKnIwLNqo3nVtEsTJBYA0WBt Wx1QbhE4khnyrvQ6qvomdVUhB6khOUIuTNvqWDAtkOYj47C+sKBY0F6Pk3u9ojWH +aKDNHVc2fgCE9tpW7kt99uUlAvNyNIDealEmLnOrASlNcSDn198WNITTT9DiPG3 joWqQggoTuDbUCAQlUJff3jk63caz8Llf8FME2ZV0wW/y9uCla6ZKpeqGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ2Ll1Tl1LEv2g+nvGZ0CxAImLcDMB8GA1UdIwQY MBaAFDKNTXTyQVo1f+dNvgQPAVTx2s98MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTW8xTmRQSkJXalZfNTAyLUJBOEJWUEhhejN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9lNzM4YzktYzgyMS00MzRlLWEyNmUt OGE4NGJmZDhmMDk5LzEvTW8xTmRQSkJXalZfNTAyLUJBOEJWUEhhejN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9lNzM4YzktYzgyMS00MzRlLWEyNmUtOGE4NGJmZDhmMDk5 LzEvTW8xTmRQSkJXalZfNTAyLUJBOEJWUEhhejN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmlzeRc9c TYFZtUqfJAOB5RbfpkrXlHhtPEDX0Fiozglc9WqDWBJ22wTbIB5yvI0lk0k/JfNM BNa9CZ00Ycud9bEFZHlznOgO+mhN2ERhOgLLJJ2WYJVcS5vrzpnT92ppxlqztUvy CfujcBRR44Z74bAlV4lG5O16a30gCCw9fL2KHtDrnh6a6cdAqhcIuILw11wZAn0B 4w59LghnsX/2OskgxYs3IdU737DloKzctYQn/ruIyx2JCnSEUDP45Ebe9K2uxYvp agXIGh9cQ24+0na5114Urt52Ly7PH17fMiPSGaC933gurGbL8X7nodst86WS/E2D 0h3irWcRpPzt+g== -----END CERTIFICATE-----Generated at Sat Dec 20 20:46:11 2025 by rpki-client