This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/0bf3b2-4dc4-4e25-9b9b-01f9a7b494da/1/moI9HNrrg3dfH7vV-frkGsXfFxk.mft File: moI9HNrrg3dfH7vV-frkGsXfFxk.mft (raw, json) Hash identifier: DjkH5OIvehgYd8xOU1Z0SHmTdIziRJ7ZNhL2XCdG0Gw= Subject key identifier: 94:AB:F8:A3:44:89:AC:87:67:84:5F:49:A2:8F:52:DC:AD:B6:36:2E Authority key identifier: 9A:82:3D:1C:DA:EB:83:77:5F:1F:BB:D5:F9:FA:E4:1A:C5:DF:17:19 Certificate issuer: /CN=9a823d1cdaeb83775f1fbbd5f9fae41ac5df1719 Certificate serial: 019AF389E213FE6B2C7C43D818184BC18A82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/moI9HNrrg3dfH7vV-frkGsXfFxk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/0bf3b2-4dc4-4e25-9b9b-01f9a7b494da/1/moI9HNrrg3dfH7vV-frkGsXfFxk.mft Manifest number: 079A Signing time: Sat 06 Dec 2025 12:01:30 +0000 Manifest this update: Sat 06 Dec 2025 12:01:30 +0000 Manifest next update: Sun 07 Dec 2025 12:01:30 +0000 Files and hashes: 1: moI9HNrrg3dfH7vV-frkGsXfFxk.crl (hash: 5lx7NMkeb8rKwrzoglAuSnnjvn59JKGjJcvI+4c0i50=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/0bf3b2-4dc4-4e25-9b9b-01f9a7b494da/1/moI9HNrrg3dfH7vV-frkGsXfFxk.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/0bf3b2-4dc4-4e25-9b9b-01f9a7b494da/1/moI9HNrrg3dfH7vV-frkGsXfFxk.mft rsync://rpki.ripe.net/repository/DEFAULT/moI9HNrrg3dfH7vV-frkGsXfFxk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:e2:13:fe:6b:2c:7c:43:d8:18:18:4b:c1:8a:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a823d1cdaeb83775f1fbbd5f9fae41ac5df1719 Validity Not Before: Dec 6 12:01:30 2025 GMT Not After : Dec 7 12:01:30 2025 GMT Subject: CN=94abf8a34489ac8767845f49a28f52dcadb6362e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:8a:e5:bc:3f:2b:05:98:4b:c8:86:7c:cd:a3: 36:0c:49:3e:48:17:50:24:00:a9:e3:5f:7f:b2:19: ed:6e:cf:7d:fe:c8:9b:26:87:d7:7c:a8:47:57:53: 0c:6e:de:40:e3:f5:2c:80:5b:8c:3f:e9:f6:bb:92: 47:15:dc:b2:24:1a:a8:9b:aa:d4:c8:a0:ce:c5:1e: 42:80:9c:d1:2a:81:07:2b:da:ea:13:96:89:7f:9b: 48:ef:da:cf:fa:0e:42:15:b0:02:17:4c:83:8a:92: 24:d8:a9:31:2f:74:36:a5:ca:cd:c5:eb:02:66:6d: 18:e4:2d:78:8a:e0:53:1b:18:cb:66:27:2c:b0:da: aa:51:81:d2:13:63:b8:8b:d7:80:76:16:2f:8a:18: 49:d1:3e:b7:46:ee:5e:4f:da:18:35:c0:54:ec:bf: 40:82:87:a7:cb:39:e9:45:f2:8c:4a:a0:50:2a:d5: 4d:fc:49:52:dc:5b:c9:32:db:13:d1:b8:94:fc:7a: db:8d:1f:8f:ce:b3:4a:e6:ac:a8:ea:8e:57:f1:bb: 4e:de:48:35:59:38:64:ef:24:aa:cd:18:8b:5c:49: 18:53:7c:b7:ba:ec:b0:a7:63:75:0c:f6:78:cd:9f: 35:56:03:3e:10:f6:4c:db:42:d9:1f:22:3e:7c:3a: 71:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:AB:F8:A3:44:89:AC:87:67:84:5F:49:A2:8F:52:DC:AD:B6:36:2E X509v3 Authority Key Identifier: keyid:9A:82:3D:1C:DA:EB:83:77:5F:1F:BB:D5:F9:FA:E4:1A:C5:DF:17:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/moI9HNrrg3dfH7vV-frkGsXfFxk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0bf3b2-4dc4-4e25-9b9b-01f9a7b494da/1/moI9HNrrg3dfH7vV-frkGsXfFxk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0bf3b2-4dc4-4e25-9b9b-01f9a7b494da/1/moI9HNrrg3dfH7vV-frkGsXfFxk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:45:ab:aa:2b:45:bf:ca:ba:7a:70:56:ed:0a:a8:b7:cc:f8: b5:8d:82:ce:d2:3e:d0:3a:10:8b:65:74:e3:55:76:43:a1:47: da:1d:28:72:2e:8e:d5:e2:46:b3:73:87:2a:9d:ea:01:ca:f1: a3:81:23:44:30:48:01:1d:e1:34:97:1a:09:a6:1a:65:14:07: 72:65:fd:a9:38:ec:33:de:0f:b3:df:28:23:b4:a2:c5:3f:00: bb:09:28:24:6b:c6:22:4e:84:02:27:c4:17:e2:91:76:22:93: 39:a6:f9:e9:98:4c:c6:8f:b6:b3:f4:42:7a:4d:9d:a0:7d:98: 8b:cf:19:e6:13:8c:8a:56:c3:8f:31:03:a1:95:ca:d2:77:f5: ed:97:4a:4e:c3:d4:d7:16:94:ba:e0:60:4d:70:08:25:4d:07: 03:77:e2:43:49:77:02:7d:1e:6c:34:53:95:45:d6:31:66:2b: 6c:6f:3d:5a:c2:33:87:60:0c:7d:99:27:3c:a3:6d:be:4f:ea: 83:57:af:17:9f:b8:3c:f6:20:2a:e0:52:cf:fb:97:63:e2:b2: 39:77:b5:27:ae:b0:ec:66:f4:64:75:9e:cf:39:0b:c7:48:65: ba:d4:68:ab:f2:c7:ee:18:61:87:88:39:2c:e1:30:c0:bb:f5: 51:d6:7a:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzieIT/mssfEPYGBhLwYqCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhODIzZDFjZGFlYjgzNzc1ZjFmYmJkNWY5ZmFlNDFhYzVk ZjE3MTkwHhcNMjUxMjA2MTIwMTMwWhcNMjUxMjA3MTIwMTMwWjAzMTEwLwYDVQQD Eyg5NGFiZjhhMzQ0ODlhYzg3Njc4NDVmNDlhMjhmNTJkY2FkYjYzNjJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYrlvD8rBZhLyIZ8zaM2DEk+SBdQ JACp419/shntbs99/sibJofXfKhHV1MMbt5A4/UsgFuMP+n2u5JHFdyyJBqom6rU yKDOxR5CgJzRKoEHK9rqE5aJf5tI79rP+g5CFbACF0yDipIk2KkxL3Q2pcrNxesC Zm0Y5C14iuBTGxjLZicssNqqUYHSE2O4i9eAdhYvihhJ0T63Ru5eT9oYNcBU7L9A goenyznpRfKMSqBQKtVN/ElS3FvJMtsT0biU/HrbjR+PzrNK5qyo6o5X8btO3kg1 WThk7ySqzRiLXEkYU3y3uuywp2N1DPZ4zZ81VgM+EPZM20LZHyI+fDpxnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJSr+KNEiayHZ4RfSaKPUtyttjYuMB8GA1UdIwQY MBaAFJqCPRza64N3Xx+71fn65BrF3xcZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbW9JOUhOcnJnM2RmSDd2Vi1mcmtHc1hmRnhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wYmYzYjItNGRjNC00ZTI1LTliOWIt MDFmOWE3YjQ5NGRhLzEvbW9JOUhOcnJnM2RmSDd2Vi1mcmtHc1hmRnhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8wYmYzYjItNGRjNC00ZTI1LTliOWItMDFmOWE3YjQ5NGRh LzEvbW9JOUhOcnJnM2RmSDd2Vi1mcmtHc1hmRnhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZEWrqitF v8q6enBW7Qqot8z4tY2CztI+0DoQi2V041V2Q6FH2h0oci6O1eJGs3OHKp3qAcrx o4EjRDBIAR3hNJcaCaYaZRQHcmX9qTjsM94Ps98oI7SixT8AuwkoJGvGIk6EAifE F+KRdiKTOab56ZhMxo+2s/RCek2doH2Yi88Z5hOMilbDjzEDoZXK0nf17ZdKTsPU 1xaUuuBgTXAIJU0HA3fiQ0l3An0ebDRTlUXWMWYrbG89WsIzh2AMfZknPKNtvk/q g1evF5+4PPYgKuBSz/uXY+KyOXe1J66w7Gb0ZHWezzkLx0hlutRoq/LH7hhhh4g5 LOEwwLv1UdZ6Lw== -----END CERTIFICATE-----Generated at Sat Dec 6 21:42:44 2025 by rpki-client