This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/194589-6c6e-47ce-9733-13952643f114/1/mo9LAp4p7t8n1FzU05AQgya-JvA.mft File: mo9LAp4p7t8n1FzU05AQgya-JvA.mft (raw, json) Hash identifier: /CVIdPUmqPkVN9y/8lFnCUI0+fQP2fftwJfFnvtKvOA= Subject key identifier: D7:3E:7B:D8:61:35:70:26:83:74:46:9A:D7:B6:BC:CC:82:09:FE:B6 Authority key identifier: 9A:8F:4B:02:9E:29:EE:DF:27:D4:5C:D4:D3:90:10:83:26:BE:26:F0 Certificate issuer: /CN=9a8f4b029e29eedf27d45cd4d390108326be26f0 Certificate serial: 019AF208D3BEFE2228AC5358B3CA25B9EE6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mo9LAp4p7t8n1FzU05AQgya-JvA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/194589-6c6e-47ce-9733-13952643f114/1/mo9LAp4p7t8n1FzU05AQgya-JvA.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 05:00:56 +0000 Manifest this update: Sat 06 Dec 2025 05:00:56 +0000 Manifest next update: Sun 07 Dec 2025 05:00:56 +0000 Files and hashes: 1: Zw30iDu4jzobtmXOoRJnqyr607Y.roa (hash: 4CedzSiaWJKzH9a7MTqU1eCaCh1zeNHdX5Usa6vZk+8=) 2: mo9LAp4p7t8n1FzU05AQgya-JvA.crl (hash: EZfwH9b4oBnKpaosSq6Yta41jyyamEjdmi80knEMhZQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/194589-6c6e-47ce-9733-13952643f114/1/mo9LAp4p7t8n1FzU05AQgya-JvA.crl rsync://rpki.ripe.net/repository/DEFAULT/47/194589-6c6e-47ce-9733-13952643f114/1/mo9LAp4p7t8n1FzU05AQgya-JvA.mft rsync://rpki.ripe.net/repository/DEFAULT/mo9LAp4p7t8n1FzU05AQgya-JvA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:d3:be:fe:22:28:ac:53:58:b3:ca:25:b9:ee:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a8f4b029e29eedf27d45cd4d390108326be26f0 Validity Not Before: Dec 6 05:00:56 2025 GMT Not After : Dec 7 05:00:56 2025 GMT Subject: CN=d73e7bd8613570268374469ad7b6bccc8209feb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:72:e1:2a:18:07:f2:5a:7b:a5:f0:68:62:b5: 1f:98:c0:eb:01:a4:a7:b8:39:f3:c1:99:43:a3:d4: 7e:99:e9:52:7a:ad:30:67:60:c1:4a:9b:bc:4f:f9: 7a:a0:50:32:21:20:11:2c:22:fb:14:1e:c4:0e:d0: fb:2d:58:df:8b:1f:e1:60:d7:2c:55:55:b2:93:b4: e4:ac:83:c6:d7:78:16:71:48:21:c8:fa:90:44:80: 4b:c5:58:f2:b7:3e:80:e9:f1:86:d0:69:71:94:da: f6:16:8d:92:f4:e4:15:6b:95:62:09:c3:a7:16:18: ae:0e:f5:e5:4c:1a:72:6d:12:2c:aa:35:fe:c5:d2: ef:b0:7f:87:a8:cf:3e:ea:d0:e9:28:2c:93:2e:04: 1b:6c:e0:bf:42:52:e1:6d:4b:c4:a3:a8:ac:2a:02: 1a:b7:15:9e:25:06:5b:75:91:66:f9:d0:0e:b7:2e: 00:fb:7b:90:aa:a0:b5:92:d6:37:3b:21:ef:d6:cc: db:97:44:8b:b0:d9:a0:0d:e8:31:04:ff:1b:36:fb: e0:8f:6a:96:eb:09:d8:e0:52:5b:1f:be:3f:8d:83: 08:18:d2:7b:aa:73:3d:e1:ee:27:56:8d:6e:92:fd: d2:dd:fd:ae:4f:3a:21:6e:db:6a:0e:09:96:0b:a0: 49:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:3E:7B:D8:61:35:70:26:83:74:46:9A:D7:B6:BC:CC:82:09:FE:B6 X509v3 Authority Key Identifier: keyid:9A:8F:4B:02:9E:29:EE:DF:27:D4:5C:D4:D3:90:10:83:26:BE:26:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mo9LAp4p7t8n1FzU05AQgya-JvA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/194589-6c6e-47ce-9733-13952643f114/1/mo9LAp4p7t8n1FzU05AQgya-JvA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/194589-6c6e-47ce-9733-13952643f114/1/mo9LAp4p7t8n1FzU05AQgya-JvA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:77:b4:08:5a:84:4a:a3:70:9b:7c:4d:c9:bf:57:75:ef:17: 07:9d:95:5e:73:66:b2:86:86:67:ec:33:a3:a4:9c:9f:b9:9d: f8:4b:af:e6:68:a5:9e:c4:d8:26:80:af:88:9e:77:3e:23:fa: 0e:09:4d:d6:ed:18:2a:ff:1c:10:2a:9f:04:b6:10:f7:f4:d8: 65:75:c7:5d:2b:9d:0a:90:61:0e:36:bb:37:3c:9b:11:fe:e0: d2:dc:b3:3e:21:0a:38:ef:11:21:c8:83:0f:9f:a7:d2:0d:af: 3b:39:55:a3:7e:a1:0a:31:ba:13:21:16:0f:ab:00:ba:c5:7b: bb:e1:18:aa:e0:3d:8e:ad:62:56:9b:ac:f7:da:12:c4:ad:e0: bf:7e:ab:7a:32:2b:8e:7f:74:c7:22:5f:c0:3c:58:36:6b:b2: 5d:f7:2f:5e:19:9c:2a:1a:f3:c0:7a:8b:2e:35:73:f6:b4:7f: dc:51:6f:71:1b:93:1a:d5:8c:b4:72:54:f7:75:6b:e5:eb:2b: 96:50:47:6c:8d:ff:b9:05:f7:c1:60:ba:76:52:81:f9:71:9d: 83:e8:67:c6:f7:05:a1:1e:da:14:11:15:c3:80:fb:5c:46:a4: ae:db:fc:b1:73:07:f5:49:e0:d9:e7:9c:dc:c0:c3:8f:2e:be: 49:6e:9e:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCNO+/iIorFNYs8olue5qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhOGY0YjAyOWUyOWVlZGYyN2Q0NWNkNGQzOTAxMDgzMjZi ZTI2ZjAwHhcNMjUxMjA2MDUwMDU2WhcNMjUxMjA3MDUwMDU2WjAzMTEwLwYDVQQD EyhkNzNlN2JkODYxMzU3MDI2ODM3NDQ2OWFkN2I2YmNjYzgyMDlmZWI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnLhKhgH8lp7pfBoYrUfmMDrAaSn uDnzwZlDo9R+melSeq0wZ2DBSpu8T/l6oFAyISARLCL7FB7EDtD7LVjfix/hYNcs VVWyk7TkrIPG13gWcUghyPqQRIBLxVjytz6A6fGG0GlxlNr2Fo2S9OQVa5ViCcOn FhiuDvXlTBpybRIsqjX+xdLvsH+HqM8+6tDpKCyTLgQbbOC/QlLhbUvEo6isKgIa txWeJQZbdZFm+dAOty4A+3uQqqC1ktY3OyHv1szbl0SLsNmgDegxBP8bNvvgj2qW 6wnY4FJbH74/jYMIGNJ7qnM94e4nVo1ukv3S3f2uTzohbttqDgmWC6BJKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNc+e9hhNXAmg3RGmte2vMyCCf62MB8GA1UdIwQY MBaAFJqPSwKeKe7fJ9Rc1NOQEIMmvibwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbW85TEFwNHA3dDhuMUZ6VTA1QVFneWEtSnZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8xOTQ1ODktNmM2ZS00N2NlLTk3MzMt MTM5NTI2NDNmMTE0LzEvbW85TEFwNHA3dDhuMUZ6VTA1QVFneWEtSnZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny8xOTQ1ODktNmM2ZS00N2NlLTk3MzMtMTM5NTI2NDNmMTE0 LzEvbW85TEFwNHA3dDhuMUZ6VTA1QVFneWEtSnZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeHe0CFqE SqNwm3xNyb9Xde8XB52VXnNmsoaGZ+wzo6Scn7md+Euv5milnsTYJoCviJ53PiP6 DglN1u0YKv8cECqfBLYQ9/TYZXXHXSudCpBhDja7NzybEf7g0tyzPiEKOO8RIciD D5+n0g2vOzlVo36hCjG6EyEWD6sAusV7u+EYquA9jq1iVpus99oSxK3gv36rejIr jn90xyJfwDxYNmuyXfcvXhmcKhrzwHqLLjVz9rR/3FFvcRuTGtWMtHJU93Vr5esr llBHbI3/uQX3wWC6dlKB+XGdg+hnxvcFoR7aFBEVw4D7XEakrtv8sXMH9Ung2eec 3MDDjy6+SW6erw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:23:53 2025 by rpki-client