This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/2bcfc5-3bc9-477f-bc42-324ef34ebea2/1/MobxwgXuMYfirBpKW8BJ80Sf9mc.mft File: MobxwgXuMYfirBpKW8BJ80Sf9mc.mft (raw, json) Hash identifier: yTrnOuEc5nPQCVi4GCQnuz/2guLdTLqEndw56PfitRM= Subject key identifier: 64:06:15:E2:A7:72:86:6D:F1:E4:47:E2:D2:EB:80:64:DF:36:2C:03 Authority key identifier: 32:86:F1:C2:05:EE:31:87:E2:AC:1A:4A:5B:C0:49:F3:44:9F:F6:67 Certificate issuer: /CN=3286f1c205ee3187e2ac1a4a5bc049f3449ff667 Certificate serial: 019AF20918A46C2623626E6A7060D97EC683 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MobxwgXuMYfirBpKW8BJ80Sf9mc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/2bcfc5-3bc9-477f-bc42-324ef34ebea2/1/MobxwgXuMYfirBpKW8BJ80Sf9mc.mft Manifest number: 1432 Signing time: Sat 06 Dec 2025 05:01:13 +0000 Manifest this update: Sat 06 Dec 2025 05:01:13 +0000 Manifest next update: Sun 07 Dec 2025 05:01:13 +0000 Files and hashes: 1: MobxwgXuMYfirBpKW8BJ80Sf9mc.crl (hash: sBr9M8pqCStzUcP67rADafivQ4C7cRyFH8ELZZKxeh8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/2bcfc5-3bc9-477f-bc42-324ef34ebea2/1/MobxwgXuMYfirBpKW8BJ80Sf9mc.crl rsync://rpki.ripe.net/repository/DEFAULT/67/2bcfc5-3bc9-477f-bc42-324ef34ebea2/1/MobxwgXuMYfirBpKW8BJ80Sf9mc.mft rsync://rpki.ripe.net/repository/DEFAULT/MobxwgXuMYfirBpKW8BJ80Sf9mc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:18:a4:6c:26:23:62:6e:6a:70:60:d9:7e:c6:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3286f1c205ee3187e2ac1a4a5bc049f3449ff667 Validity Not Before: Dec 6 05:01:13 2025 GMT Not After : Dec 7 05:01:13 2025 GMT Subject: CN=640615e2a772866df1e447e2d2eb8064df362c03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:72:14:89:fc:14:2a:ea:90:00:26:1c:27:17: b9:24:0b:57:df:b6:98:52:e8:4b:f7:3a:a3:e7:56: 4a:05:c1:0c:7a:ed:e0:96:33:a5:01:e3:ca:f1:27: f3:2b:eb:33:30:43:a3:b8:b7:0a:90:9c:a3:bb:c1: d8:09:d4:66:76:d9:ce:be:8c:fe:21:76:b5:7b:57: 0d:70:d6:c7:84:f6:c8:95:e5:a9:4f:31:a4:e4:08: db:6d:81:ce:12:1c:2d:1c:39:d0:af:88:a2:3d:0c: 02:c9:b1:d1:f8:df:2a:cf:4f:30:dc:8b:0a:e2:1c: 60:62:b4:3a:30:81:dd:1e:32:82:15:41:71:54:4f: 18:1a:08:03:3a:2f:c6:7b:37:01:05:3b:38:58:c1: c2:73:18:6f:b6:b5:75:d1:52:e7:5d:19:a8:77:de: b4:8b:80:92:c9:ed:42:f7:d6:81:6d:52:fd:85:7e: 95:df:15:0d:87:0d:f8:72:a4:92:9d:fc:d9:e9:f6: 29:1c:a3:f1:6b:30:5a:18:88:b5:d0:9d:63:12:c8: 28:df:aa:1f:ef:fd:b7:fc:3f:0b:00:2c:f8:04:a5: aa:90:07:35:a6:39:cc:93:6c:84:12:ab:8e:12:5e: 3f:33:74:32:80:59:25:3b:d6:4b:1a:43:08:81:f5: 79:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:06:15:E2:A7:72:86:6D:F1:E4:47:E2:D2:EB:80:64:DF:36:2C:03 X509v3 Authority Key Identifier: keyid:32:86:F1:C2:05:EE:31:87:E2:AC:1A:4A:5B:C0:49:F3:44:9F:F6:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MobxwgXuMYfirBpKW8BJ80Sf9mc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/2bcfc5-3bc9-477f-bc42-324ef34ebea2/1/MobxwgXuMYfirBpKW8BJ80Sf9mc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/2bcfc5-3bc9-477f-bc42-324ef34ebea2/1/MobxwgXuMYfirBpKW8BJ80Sf9mc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:d2:66:6f:93:cd:b4:fa:ff:fa:1a:29:e6:e4:47:bf:f2:bf: 3e:ee:a0:4e:ad:2a:bd:7f:1c:ad:19:1b:4a:54:4b:dd:c9:48: 76:ed:8a:a6:44:ce:2a:2a:21:7b:70:35:72:8b:e3:d2:83:51: 94:55:68:9e:5e:bd:dd:47:68:39:18:b3:70:0f:c6:d6:59:bc: 85:be:b0:09:45:0c:81:29:3b:06:76:3d:5d:4e:4f:32:93:50: 2b:a8:56:b8:0e:64:e3:7e:0f:32:70:ad:61:c2:7f:49:9e:e2: 56:c2:9d:10:45:cd:be:8c:77:72:ea:fd:c6:68:8d:af:4e:b6: 36:ed:a6:af:63:46:bc:38:e5:e8:2a:61:a9:d4:47:c6:3e:8d: 6f:13:52:0e:e5:e8:d9:19:fc:6b:19:07:b0:64:ca:fc:27:82: d3:ee:6c:e9:79:d7:ab:c8:a4:73:07:88:48:4e:67:fd:cb:ed: e3:11:97:be:3c:a9:21:21:85:d0:90:77:2d:17:80:84:ec:83: 30:ce:9f:18:a4:50:16:f9:66:8a:d5:d3:48:fe:4a:7a:87:bc: e1:87:06:2a:84:5b:2b:56:73:bc:da:db:7c:54:0f:af:b4:2c: a0:97:f2:86:03:ed:41:a4:fb:d2:8f:df:ca:7a:86:f0:f8:ec: d3:51:bc:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCRikbCYjYm5qcGDZfsaDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyODZmMWMyMDVlZTMxODdlMmFjMWE0YTViYzA0OWYzNDQ5 ZmY2NjcwHhcNMjUxMjA2MDUwMTEzWhcNMjUxMjA3MDUwMTEzWjAzMTEwLwYDVQQD Eyg2NDA2MTVlMmE3NzI4NjZkZjFlNDQ3ZTJkMmViODA2NGRmMzYyYzAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1nIUifwUKuqQACYcJxe5JAtX37aY UuhL9zqj51ZKBcEMeu3gljOlAePK8SfzK+szMEOjuLcKkJyju8HYCdRmdtnOvoz+ IXa1e1cNcNbHhPbIleWpTzGk5AjbbYHOEhwtHDnQr4iiPQwCybHR+N8qz08w3IsK 4hxgYrQ6MIHdHjKCFUFxVE8YGggDOi/GezcBBTs4WMHCcxhvtrV10VLnXRmod960 i4CSye1C99aBbVL9hX6V3xUNhw34cqSSnfzZ6fYpHKPxazBaGIi10J1jEsgo36of 7/23/D8LACz4BKWqkAc1pjnMk2yEEquOEl4/M3QygFklO9ZLGkMIgfV5ZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGQGFeKncoZt8eRH4tLrgGTfNiwDMB8GA1UdIwQY MBaAFDKG8cIF7jGH4qwaSlvASfNEn/ZnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTW9ieHdnWHVNWWZpckJwS1c4Qko4MFNmOW1jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny8yYmNmYzUtM2JjOS00NzdmLWJjNDIt MzI0ZWYzNGViZWEyLzEvTW9ieHdnWHVNWWZpckJwS1c4Qko4MFNmOW1jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny8yYmNmYzUtM2JjOS00NzdmLWJjNDItMzI0ZWYzNGViZWEy LzEvTW9ieHdnWHVNWWZpckJwS1c4Qko4MFNmOW1jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaNJmb5PN tPr/+hop5uRHv/K/Pu6gTq0qvX8crRkbSlRL3clIdu2KpkTOKiohe3A1covj0oNR lFVonl693UdoORizcA/G1lm8hb6wCUUMgSk7BnY9XU5PMpNQK6hWuA5k434PMnCt YcJ/SZ7iVsKdEEXNvox3cur9xmiNr062Nu2mr2NGvDjl6CphqdRHxj6NbxNSDuXo 2Rn8axkHsGTK/CeC0+5s6XnXq8ikcweISE5n/cvt4xGXvjypISGF0JB3LReAhOyD MM6fGKRQFvlmitXTSP5Keoe84YcGKoRbK1ZzvNrbfFQPr7QsoJfyhgPtQaT70o/f ynqG8Pjs01G8lw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:33:25 2025 by rpki-client