This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/d96189-eee1-4e9f-9d60-95e8d8293098/1/moBTvNLE2KeioyXit0ZBZqXkjd0.mft File: moBTvNLE2KeioyXit0ZBZqXkjd0.mft (raw, json) Hash identifier: e61dUOUwxL+MALyQG8ee61bkh2IoeTR3Az6oQeoyZDs= Subject key identifier: FB:23:17:F9:E5:84:F7:28:C7:9C:FB:D1:C0:C2:0A:10:83:C8:E5:92 Authority key identifier: 9A:80:53:BC:D2:C4:D8:A7:A2:A3:25:E2:B7:46:41:66:A5:E4:8D:DD Certificate issuer: /CN=9a8053bcd2c4d8a7a2a325e2b7464166a5e48ddd Certificate serial: 019AF31D5EDD84549422DA567D39EFB6DF29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/moBTvNLE2KeioyXit0ZBZqXkjd0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/d96189-eee1-4e9f-9d60-95e8d8293098/1/moBTvNLE2KeioyXit0ZBZqXkjd0.mft Manifest number: 11ED Signing time: Sat 06 Dec 2025 10:02:59 +0000 Manifest this update: Sat 06 Dec 2025 10:02:59 +0000 Manifest next update: Sun 07 Dec 2025 10:02:59 +0000 Files and hashes: 1: cxA-RyOMLkq935v_LceKQwYPwHs.roa (hash: HnGDMBYysRSj3AGQ0kR7dSJMblTeuNonvUsGSEcjwQ4=) 2: moBTvNLE2KeioyXit0ZBZqXkjd0.crl (hash: sDcmq87hmsdF4kFJXthl5KvqSN4+cnNI2PiKttsewR0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/d96189-eee1-4e9f-9d60-95e8d8293098/1/moBTvNLE2KeioyXit0ZBZqXkjd0.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/d96189-eee1-4e9f-9d60-95e8d8293098/1/moBTvNLE2KeioyXit0ZBZqXkjd0.mft rsync://rpki.ripe.net/repository/DEFAULT/moBTvNLE2KeioyXit0ZBZqXkjd0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:5e:dd:84:54:94:22:da:56:7d:39:ef:b6:df:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a8053bcd2c4d8a7a2a325e2b7464166a5e48ddd Validity Not Before: Dec 6 10:02:59 2025 GMT Not After : Dec 7 10:02:59 2025 GMT Subject: CN=fb2317f9e584f728c79cfbd1c0c20a1083c8e592 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:e2:a4:e6:9a:3f:63:56:b9:9f:02:52:83:f7: 1c:47:2c:f3:26:44:1e:dd:20:bc:58:5f:c9:7e:48: 42:6b:65:87:9b:5f:57:ad:18:a9:40:e7:ab:8d:c8: 6b:aa:d6:ef:e6:ef:c2:dc:7d:96:0b:7d:6d:e6:13: 62:0d:2b:88:ff:6d:c5:27:be:5f:61:6e:53:c3:ba: ba:d0:17:a1:b7:4f:cc:58:82:30:07:da:e7:8f:3b: d7:70:c8:a0:c9:97:0e:fb:83:98:af:c4:61:ed:36: 1f:9c:36:91:d2:95:df:7e:a3:2c:20:a0:80:60:23: 37:9f:07:10:09:2c:31:f5:14:c6:01:42:f3:4e:0b: 37:90:94:7b:11:57:ee:20:9f:34:af:77:8e:c5:fe: 26:f2:df:c0:f7:d4:d5:51:d5:d0:2d:55:43:a7:9d: 3c:b8:16:55:33:89:61:a4:c0:35:de:d2:09:53:db: 11:95:88:cb:a8:ec:af:11:d2:71:8e:00:5d:77:6c: 8a:ef:49:9f:cf:38:39:14:a8:d8:e7:2d:9c:04:78: 6f:33:e7:11:6a:76:93:e9:41:5d:76:ee:e7:c0:f2: 02:a9:e8:6d:ed:aa:50:62:b9:57:4f:c4:73:43:3e: f8:70:48:de:29:f1:04:a3:38:f3:91:06:5a:f1:f8: a7:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:23:17:F9:E5:84:F7:28:C7:9C:FB:D1:C0:C2:0A:10:83:C8:E5:92 X509v3 Authority Key Identifier: keyid:9A:80:53:BC:D2:C4:D8:A7:A2:A3:25:E2:B7:46:41:66:A5:E4:8D:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/moBTvNLE2KeioyXit0ZBZqXkjd0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/d96189-eee1-4e9f-9d60-95e8d8293098/1/moBTvNLE2KeioyXit0ZBZqXkjd0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/d96189-eee1-4e9f-9d60-95e8d8293098/1/moBTvNLE2KeioyXit0ZBZqXkjd0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:8c:57:6d:59:75:0b:3d:4f:4e:6a:8f:70:f0:81:07:e7:1b: 70:15:b2:e5:a6:b2:c6:70:d6:d8:ab:38:40:a8:31:72:2a:6d: 48:ac:f8:14:91:9c:49:16:07:cb:6c:f7:29:20:6a:47:04:7d: ca:e9:ef:de:68:2f:12:0f:88:f8:25:8b:ec:de:67:58:6d:aa: 87:36:e6:1c:90:b4:00:01:97:cc:97:06:a5:e6:1b:ef:1e:4b: 79:02:b8:4e:22:20:d7:98:70:fb:3d:4e:61:27:d0:cc:a2:97: 67:20:40:95:42:73:32:b6:15:f4:61:1f:e4:f6:49:92:fd:eb: e4:46:73:75:a6:c1:7c:a6:23:18:c1:b9:4b:a2:8d:6a:4f:a9: 71:65:2f:53:74:89:06:e4:53:5c:af:24:47:af:38:30:12:7d: 11:6d:a0:86:f1:36:ff:dd:28:f3:71:66:69:fb:40:21:c5:28: 52:29:91:db:a4:44:f5:1e:2b:72:80:9f:3e:ff:6c:6e:bc:de: 6c:fc:a6:4c:35:84:82:71:86:94:b1:02:94:63:bb:60:0d:63: 9e:8c:d4:0b:37:d4:ad:c7:9a:1c:5f:08:db:85:7d:03:61:60: 28:a0:d8:8f:24:df:16:cb:ef:e2:c0:91:85:fa:06:5d:bc:72: f9:43:cc:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHV7dhFSUItpWfTnvtt8pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhODA1M2JjZDJjNGQ4YTdhMmEzMjVlMmI3NDY0MTY2YTVl NDhkZGQwHhcNMjUxMjA2MTAwMjU5WhcNMjUxMjA3MTAwMjU5WjAzMTEwLwYDVQQD EyhmYjIzMTdmOWU1ODRmNzI4Yzc5Y2ZiZDFjMGMyMGExMDgzYzhlNTkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1uKk5po/Y1a5nwJSg/ccRyzzJkQe 3SC8WF/JfkhCa2WHm19XrRipQOerjchrqtbv5u/C3H2WC31t5hNiDSuI/23FJ75f YW5Tw7q60Beht0/MWIIwB9rnjzvXcMigyZcO+4OYr8Rh7TYfnDaR0pXffqMsIKCA YCM3nwcQCSwx9RTGAULzTgs3kJR7EVfuIJ80r3eOxf4m8t/A99TVUdXQLVVDp508 uBZVM4lhpMA13tIJU9sRlYjLqOyvEdJxjgBdd2yK70mfzzg5FKjY5y2cBHhvM+cR anaT6UFddu7nwPICqeht7apQYrlXT8RzQz74cEjeKfEEozjzkQZa8finSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPsjF/nlhPcox5z70cDCChCDyOWSMB8GA1UdIwQY MBaAFJqAU7zSxNinoqMl4rdGQWal5I3dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbW9CVHZOTEUyS2Vpb3lYaXQwWkJacVhramQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9kOTYxODktZWVlMS00ZTlmLTlkNjAt OTVlOGQ4MjkzMDk4LzEvbW9CVHZOTEUyS2Vpb3lYaXQwWkJacVhramQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi9kOTYxODktZWVlMS00ZTlmLTlkNjAtOTVlOGQ4MjkzMDk4 LzEvbW9CVHZOTEUyS2Vpb3lYaXQwWkJacVhramQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEoxXbVl1 Cz1PTmqPcPCBB+cbcBWy5aayxnDW2Ks4QKgxciptSKz4FJGcSRYHy2z3KSBqRwR9 yunv3mgvEg+I+CWL7N5nWG2qhzbmHJC0AAGXzJcGpeYb7x5LeQK4TiIg15hw+z1O YSfQzKKXZyBAlUJzMrYV9GEf5PZJkv3r5EZzdabBfKYjGMG5S6KNak+pcWUvU3SJ BuRTXK8kR684MBJ9EW2ghvE2/90o83FmaftAIcUoUimR26RE9R4rcoCfPv9sbrze bPymTDWEgnGGlLEClGO7YA1jnozUCzfUrceaHF8I24V9A2FgKKDYjyTfFsvv4sCR hfoGXbxy+UPMMw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:06:01 2025 by rpki-client