This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.mft File: 1MOxLI1jUZDskoQ3u9bLDow4-ak.mft (raw, json) Hash identifier: DuDQVBC/q5uNEsT5l5IWn7HVN4eX15bGjYq8ZDM4mGw= Subject key identifier: AA:98:B3:B0:72:C5:75:2C:02:7A:A6:01:2B:86:62:50:A1:F0:06:EF Authority key identifier: D4:C3:B1:2C:8D:63:51:90:EC:92:84:37:BB:D6:CB:0E:8C:38:F9:A9 Certificate issuer: /CN=d4c3b12c8d635190ec928437bbd6cb0e8c38f9a9 Certificate serial: 019AF208DC342C20055EF78B20DF7ADEC4A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1MOxLI1jUZDskoQ3u9bLDow4-ak.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.mft Manifest number: 176C Signing time: Sat 06 Dec 2025 05:00:58 +0000 Manifest this update: Sat 06 Dec 2025 05:00:58 +0000 Manifest next update: Sun 07 Dec 2025 05:00:58 +0000 Files and hashes: 1: 1-a8zXqKmuNRgVPV4192OV1bknwE.roa (hash: gqHxvIckMu2Lte9MvNCn2JfrjMNz47mdlspHr2lNqy0=) 2: 1MOxLI1jUZDskoQ3u9bLDow4-ak.crl (hash: ceufHiwbCFS4Lg/05b/4H2L6Ipf6Dvw+cwBWe3LFGE0=) 3: GnY_25RaB7VB-Uit3iO_cOg1Kw4.roa (hash: ZVEoTNxwNym6ttfGviMGg7HgfXQQGhqaSdVzNN7qtAU=) 4: UCV_wWObO7yn0rdsq3WdkI9c0ao.roa (hash: /hdTNc7Vsm2zFa0tev+TWkzp0ilL4Wfo3WC4MWXESGk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.crl rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.mft rsync://rpki.ripe.net/repository/DEFAULT/1MOxLI1jUZDskoQ3u9bLDow4-ak.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:dc:34:2c:20:05:5e:f7:8b:20:df:7a:de:c4:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4c3b12c8d635190ec928437bbd6cb0e8c38f9a9 Validity Not Before: Dec 6 05:00:58 2025 GMT Not After : Dec 7 05:00:58 2025 GMT Subject: CN=aa98b3b072c5752c027aa6012b866250a1f006ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:90:39:b4:05:84:63:8c:cc:85:2e:8c:85:e9: c4:a0:bc:d7:1c:a2:ae:65:2f:28:05:a5:9e:66:f8: 12:19:0b:d2:20:2b:84:c5:fe:1e:33:d9:ca:f0:39: 40:1a:e2:0f:40:ca:c3:78:c1:95:85:6c:f5:25:d8: dc:2e:83:f7:44:24:de:39:f7:06:1f:b2:56:02:08: 68:39:20:ef:58:ec:59:c2:c8:3d:21:5d:30:34:b9: ea:d4:87:0a:14:f6:a1:94:69:bf:a9:e5:d0:b1:50: e5:a9:76:60:e4:be:69:49:ee:41:f4:40:93:83:a0: ae:e1:22:6a:06:8e:b5:d2:7f:4a:3b:99:14:52:a0: f2:56:b2:99:bd:3d:9c:ca:61:ae:49:93:1f:bd:98: ca:d4:b3:fa:ce:65:b8:0d:23:84:fc:d8:59:d2:d0: d5:20:d5:ec:33:9c:e9:10:52:20:29:d4:92:ec:17: 7a:00:62:c0:76:ef:71:fd:2d:b8:67:8b:16:f8:f2: 0c:a9:2d:ee:76:97:f0:29:87:cc:e9:2c:75:0d:0f: 3e:7d:be:59:ed:9a:b6:7a:a5:43:c7:44:1c:9f:f3: 38:34:43:e2:d9:86:6d:11:3b:be:58:c7:05:23:84: 66:cd:17:18:30:97:61:c9:b8:72:5a:08:d7:45:dd: 71:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:98:B3:B0:72:C5:75:2C:02:7A:A6:01:2B:86:62:50:A1:F0:06:EF X509v3 Authority Key Identifier: keyid:D4:C3:B1:2C:8D:63:51:90:EC:92:84:37:BB:D6:CB:0E:8C:38:F9:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1MOxLI1jUZDskoQ3u9bLDow4-ak.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:6a:42:9b:5b:73:2f:55:b3:99:04:26:b6:27:19:ad:08:a1: 18:5b:a2:1c:bd:20:ed:22:b4:d6:42:b1:40:7d:bd:4b:c0:79: 4a:85:69:99:82:6a:36:6d:aa:c0:0a:56:af:e8:4f:92:fc:9d: b9:f2:92:b4:4e:26:45:7c:0b:3d:98:b8:0c:70:2b:98:41:95: f0:1f:fe:ef:06:92:4a:8c:43:9d:69:a2:6b:72:14:82:05:6c: a6:d4:7d:b6:dc:9b:a3:6d:99:a5:1d:57:41:63:ed:fe:43:17: f0:5b:2f:58:6d:f5:69:03:8f:8a:ad:a9:d8:21:5e:5e:d3:18: bd:29:8c:eb:a3:7c:66:16:5a:5b:2a:55:49:14:e4:70:96:c4: ef:73:2b:26:2e:83:9a:90:26:04:86:a0:1a:44:d2:97:a9:2b: 24:f1:b0:a8:2c:2c:19:1f:4a:2c:c8:bd:ff:fa:52:34:39:4a: f6:00:06:9c:75:c9:ee:f7:6b:00:3a:de:a8:41:2f:e7:81:f1: 51:cf:5a:02:b3:81:22:7a:4d:94:c1:bc:e0:1f:be:27:0c:35: b0:92:fd:06:34:70:39:2d:c2:36:b2:2b:b8:b3:5c:7b:8f:55: 86:b3:25:2e:48:d2:c4:51:45:16:0d:0e:49:cd:82:7a:c5:3b: 32:82:96:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCNw0LCAFXveLIN963sSjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0YzNiMTJjOGQ2MzUxOTBlYzkyODQzN2JiZDZjYjBlOGMz OGY5YTkwHhcNMjUxMjA2MDUwMDU4WhcNMjUxMjA3MDUwMDU4WjAzMTEwLwYDVQQD EyhhYTk4YjNiMDcyYzU3NTJjMDI3YWE2MDEyYjg2NjI1MGExZjAwNmVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3pA5tAWEY4zMhS6MhenEoLzXHKKu ZS8oBaWeZvgSGQvSICuExf4eM9nK8DlAGuIPQMrDeMGVhWz1JdjcLoP3RCTeOfcG H7JWAghoOSDvWOxZwsg9IV0wNLnq1IcKFPahlGm/qeXQsVDlqXZg5L5pSe5B9ECT g6Cu4SJqBo610n9KO5kUUqDyVrKZvT2cymGuSZMfvZjK1LP6zmW4DSOE/NhZ0tDV INXsM5zpEFIgKdSS7Bd6AGLAdu9x/S24Z4sW+PIMqS3udpfwKYfM6Sx1DQ8+fb5Z 7Zq2eqVDx0Qcn/M4NEPi2YZtETu+WMcFI4RmzRcYMJdhybhyWgjXRd1xsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKqYs7ByxXUsAnqmASuGYlCh8AbvMB8GA1UdIwQY MBaAFNTDsSyNY1GQ7JKEN7vWyw6MOPmpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMU1PeExJMWpVWkRza29RM3U5YkxEb3c0LWFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy8yZmI1OTMtNDNmNS00ZGI3LTk4MTkt MGY5ZDU3YTVkNGZhLzEvMU1PeExJMWpVWkRza29RM3U5YkxEb3c0LWFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy8yZmI1OTMtNDNmNS00ZGI3LTk4MTktMGY5ZDU3YTVkNGZh LzEvMU1PeExJMWpVWkRza29RM3U5YkxEb3c0LWFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaGpCm1tz L1WzmQQmticZrQihGFuiHL0g7SK01kKxQH29S8B5SoVpmYJqNm2qwApWr+hPkvyd ufKStE4mRXwLPZi4DHArmEGV8B/+7waSSoxDnWmia3IUggVsptR9ttybo22ZpR1X QWPt/kMX8FsvWG31aQOPiq2p2CFeXtMYvSmM66N8ZhZaWypVSRTkcJbE73MrJi6D mpAmBIagGkTSl6krJPGwqCwsGR9KLMi9//pSNDlK9gAGnHXJ7vdrADreqEEv54Hx Uc9aArOBInpNlMG84B++Jww1sJL9BjRwOS3CNrIruLNce49VhrMlLkjSxFFFFg0O Sc2CesU7MoKWAg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:11:04 2025 by rpki-client