This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/0222d8-8d8a-44c0-a11f-dc0c4f1083c9/1/morKHCZcEygjx4T9qEL3oaBbjLc.mft File: morKHCZcEygjx4T9qEL3oaBbjLc.mft (raw, json) Hash identifier: OWJtWEW8pE/c6cvfU1+xjothpAvqfMYt8cA0M1A1CuU= Subject key identifier: AB:C0:22:4C:21:28:34:39:A6:9C:78:E6:8D:90:79:73:35:91:F6:7D Authority key identifier: 9A:8A:CA:1C:26:5C:13:28:23:C7:84:FD:A8:42:F7:A1:A0:5B:8C:B7 Certificate issuer: /CN=9a8aca1c265c132823c784fda842f7a1a05b8cb7 Certificate serial: 019BF35062300A9A90679DAC6707A4C86B56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/morKHCZcEygjx4T9qEL3oaBbjLc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/0222d8-8d8a-44c0-a11f-dc0c4f1083c9/1/morKHCZcEygjx4T9qEL3oaBbjLc.mft Manifest number: 045A Signing time: Sun 25 Jan 2026 04:01:30 +0000 Manifest this update: Sun 25 Jan 2026 04:01:30 +0000 Manifest next update: Mon 26 Jan 2026 04:01:30 +0000 Files and hashes: 1: AyxCahcSKu47yxPv4m32n1KPeFU.roa (hash: +WkSYCnFPhdi7837ndWHjwqAWUrNMMzWhW5p7s1rMYY=) 2: morKHCZcEygjx4T9qEL3oaBbjLc.crl (hash: KnKrFfm1X8vuyw7yAT8IM5VpQQtsPo8mNuxaj4j1GcQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/0222d8-8d8a-44c0-a11f-dc0c4f1083c9/1/morKHCZcEygjx4T9qEL3oaBbjLc.crl rsync://rpki.ripe.net/repository/DEFAULT/62/0222d8-8d8a-44c0-a11f-dc0c4f1083c9/1/morKHCZcEygjx4T9qEL3oaBbjLc.mft rsync://rpki.ripe.net/repository/DEFAULT/morKHCZcEygjx4T9qEL3oaBbjLc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:50:62:30:0a:9a:90:67:9d:ac:67:07:a4:c8:6b:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a8aca1c265c132823c784fda842f7a1a05b8cb7 Validity Not Before: Jan 25 04:01:30 2026 GMT Not After : Jan 26 04:01:30 2026 GMT Subject: CN=abc0224c21283439a69c78e68d9079733591f67d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c6:32:4e:85:4c:ed:20:a0:6b:8d:81:fc:01: 37:08:48:02:cf:5c:62:e3:c2:0a:eb:6e:bd:c5:ab: b9:66:92:ce:df:be:39:3b:c3:56:74:f9:6b:e3:49: 94:d7:78:2e:aa:6e:ee:d1:83:dd:1d:8d:7a:38:8c: 69:4c:bd:07:35:5d:eb:b9:93:62:88:f0:ec:8f:7a: c2:80:c8:48:53:9a:1a:70:ee:6d:63:a4:3a:85:fe: bf:3f:94:0d:84:7c:0a:61:e5:57:27:99:be:e4:3b: 01:38:0c:9b:f8:d2:2a:ad:f7:90:4e:c7:84:1e:03: c6:ff:5f:ae:02:3f:c6:69:47:e6:32:04:78:6e:66: 23:ce:ff:1d:3f:85:33:8a:1f:64:78:54:e0:d0:98: b8:b7:66:a1:20:d5:35:9a:2d:c3:1f:5e:ac:4f:b0: 86:9b:b2:52:1f:31:99:22:0b:aa:92:06:d6:28:68: 84:19:ca:a3:06:35:aa:b7:5e:6c:d7:09:be:37:1d: 9c:6f:22:9d:28:ee:ca:f3:1e:e0:09:e7:14:a0:ea: 90:42:42:6a:55:72:6c:c8:58:14:86:b2:79:24:5f: 6d:ad:2f:62:a6:ac:6e:10:7e:99:6d:15:e3:6f:20: bd:d0:e7:15:ee:4f:2c:81:14:75:fa:5c:8d:98:71: e2:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:C0:22:4C:21:28:34:39:A6:9C:78:E6:8D:90:79:73:35:91:F6:7D X509v3 Authority Key Identifier: keyid:9A:8A:CA:1C:26:5C:13:28:23:C7:84:FD:A8:42:F7:A1:A0:5B:8C:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/morKHCZcEygjx4T9qEL3oaBbjLc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0222d8-8d8a-44c0-a11f-dc0c4f1083c9/1/morKHCZcEygjx4T9qEL3oaBbjLc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0222d8-8d8a-44c0-a11f-dc0c4f1083c9/1/morKHCZcEygjx4T9qEL3oaBbjLc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:2b:cf:d5:da:5f:46:b8:01:24:c1:73:24:e4:7d:db:33:3b: e4:55:5b:23:9d:51:aa:bd:ce:26:06:43:3e:16:a2:4f:27:04: fd:50:2a:8f:f0:f0:95:dd:f5:d5:0f:63:b5:d7:7e:0f:d8:65: f2:fb:d0:f0:2d:2a:6c:47:e8:76:8c:89:2a:0a:73:f9:9f:1e: c1:10:0a:4a:9e:5a:cb:f7:14:c9:4a:34:fb:cb:f4:4b:58:b3: b8:51:5c:4a:d0:df:cb:17:21:1c:56:5e:6b:0b:c4:16:f3:2b: ad:ff:da:d9:3b:1f:57:9c:b1:1c:40:6c:7f:4a:04:4e:80:fb: 11:bd:62:45:73:7b:41:d3:f7:cb:d0:e7:4b:2d:ae:22:c7:0f: e0:51:94:56:ed:8b:34:88:04:91:b3:75:a9:53:91:a8:fa:84: 21:d3:2c:5b:9c:ed:25:5d:f8:3a:e9:98:3a:23:fe:44:62:31: da:33:f9:41:78:c2:f7:14:91:46:b4:f9:6d:ee:2a:dc:10:ab: ff:48:f3:83:89:fa:ad:dd:3b:01:84:02:53:4c:6a:cb:9f:44: 3d:16:fb:39:da:63:ad:81:68:cf:ad:aa:1b:c4:75:6c:11:ff: f4:04:98:24:60:cd:d9:c9:f8:a2:1b:05:d8:a1:78:ea:37:61: f7:fa:7a:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzUGIwCpqQZ52sZwekyGtWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhOGFjYTFjMjY1YzEzMjgyM2M3ODRmZGE4NDJmN2ExYTA1 YjhjYjcwHhcNMjYwMTI1MDQwMTMwWhcNMjYwMTI2MDQwMTMwWjAzMTEwLwYDVQQD EyhhYmMwMjI0YzIxMjgzNDM5YTY5Yzc4ZTY4ZDkwNzk3MzM1OTFmNjdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocYyToVM7SCga42B/AE3CEgCz1xi 48IK6269xau5ZpLO3745O8NWdPlr40mU13guqm7u0YPdHY16OIxpTL0HNV3ruZNi iPDsj3rCgMhIU5oacO5tY6Q6hf6/P5QNhHwKYeVXJ5m+5DsBOAyb+NIqrfeQTseE HgPG/1+uAj/GaUfmMgR4bmYjzv8dP4Uzih9keFTg0Ji4t2ahINU1mi3DH16sT7CG m7JSHzGZIguqkgbWKGiEGcqjBjWqt15s1wm+Nx2cbyKdKO7K8x7gCecUoOqQQkJq VXJsyFgUhrJ5JF9trS9ipqxuEH6ZbRXjbyC90OcV7k8sgRR1+lyNmHHiYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKvAIkwhKDQ5ppx45o2QeXM1kfZ9MB8GA1UdIwQY MBaAFJqKyhwmXBMoI8eE/ahC96GgW4y3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbW9yS0hDWmNFeWdqeDRUOXFFTDNvYUJiakxjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8wMjIyZDgtOGQ4YS00NGMwLWExMWYt ZGMwYzRmMTA4M2M5LzEvbW9yS0hDWmNFeWdqeDRUOXFFTDNvYUJiakxjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi8wMjIyZDgtOGQ4YS00NGMwLWExMWYtZGMwYzRmMTA4M2M5 LzEvbW9yS0hDWmNFeWdqeDRUOXFFTDNvYUJiakxjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfCvP1dpf RrgBJMFzJOR92zM75FVbI51Rqr3OJgZDPhaiTycE/VAqj/Dwld311Q9jtdd+D9hl 8vvQ8C0qbEfodoyJKgpz+Z8ewRAKSp5ay/cUyUo0+8v0S1izuFFcStDfyxchHFZe awvEFvMrrf/a2TsfV5yxHEBsf0oEToD7Eb1iRXN7QdP3y9DnSy2uIscP4FGUVu2L NIgEkbN1qVORqPqEIdMsW5ztJV34OumYOiP+RGIx2jP5QXjC9xSRRrT5be4q3BCr /0jzg4n6rd07AYQCU0xqy59EPRb7OdpjrYFoz62qG8R1bBH/9ASYJGDN2cn4ohsF 2KF46jdh9/p6fA== -----END CERTIFICATE-----Generated at Sun Jan 25 06:14:51 2026 by rpki-client