This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/106b3f-55a3-4558-8013-4bee3274c698/1/MQmo1w-kR4k1sFwGIfaIlVJAXa8.mft File: MQmo1w-kR4k1sFwGIfaIlVJAXa8.mft (raw, json) Hash identifier: nhhcJhdvwed4wKuJAuJuZ3sWedodru/V2ZbB8iFzoWI= Subject key identifier: 20:6C:9B:95:95:76:92:40:8C:AA:05:20:C7:1B:73:6F:77:F8:7E:CD Authority key identifier: 31:09:A8:D7:0F:A4:47:89:35:B0:5C:06:21:F6:88:95:52:40:5D:AF Certificate issuer: /CN=3109a8d70fa4478935b05c0621f6889552405daf Certificate serial: 019AF12CF3A7E18B17EBD56C4DA121EB9FCE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MQmo1w-kR4k1sFwGIfaIlVJAXa8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/106b3f-55a3-4558-8013-4bee3274c698/1/MQmo1w-kR4k1sFwGIfaIlVJAXa8.mft Manifest number: 01D7 Signing time: Sat 06 Dec 2025 01:00:46 +0000 Manifest this update: Sat 06 Dec 2025 01:00:46 +0000 Manifest next update: Sun 07 Dec 2025 01:00:46 +0000 Files and hashes: 1: MQmo1w-kR4k1sFwGIfaIlVJAXa8.crl (hash: 2gB2GYyBmKnUgV+gD3gF3IdG4/FvwcL9z8wYcDLOt9E=) 2: yIyDsEh1dvcmsUPH7E2Ou8dLDUQ.roa (hash: wtZTOXp1JfHeuiQ37lVv2g4xea2Kfo548MrcJ05G7l8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/106b3f-55a3-4558-8013-4bee3274c698/1/MQmo1w-kR4k1sFwGIfaIlVJAXa8.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/106b3f-55a3-4558-8013-4bee3274c698/1/MQmo1w-kR4k1sFwGIfaIlVJAXa8.mft rsync://rpki.ripe.net/repository/DEFAULT/MQmo1w-kR4k1sFwGIfaIlVJAXa8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:f3:a7:e1:8b:17:eb:d5:6c:4d:a1:21:eb:9f:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3109a8d70fa4478935b05c0621f6889552405daf Validity Not Before: Dec 6 01:00:46 2025 GMT Not After : Dec 7 01:00:46 2025 GMT Subject: CN=206c9b95957692408caa0520c71b736f77f87ecd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:eb:a0:1b:17:c8:ce:03:f3:bf:e7:7e:08:2e: 19:ef:f6:c5:a6:e9:53:6f:8b:b0:18:ea:8b:24:42: 34:6b:50:09:b9:c3:34:36:ea:03:65:53:e8:37:70: cf:5f:d6:1a:2b:bc:f7:30:1e:94:e0:63:09:e0:bb: 9f:42:17:19:a6:ab:27:c5:e8:80:98:d5:f6:e6:c9: a3:61:22:08:b4:84:0d:7c:6e:a7:0a:11:b8:28:c0: a2:0c:c9:33:7e:80:cd:74:43:92:c8:19:94:00:17: b0:4d:fc:06:16:28:de:a5:ce:ac:07:17:7d:c4:a7: 7d:4b:f0:ed:33:d9:e6:99:5f:2d:b3:1f:55:5c:c2: 47:84:c7:53:e8:a9:49:7c:fb:2d:df:b4:c5:51:69: 7c:13:e0:31:ac:26:86:1a:31:7e:80:fa:c9:b6:52: c9:b4:fd:b3:4c:be:ba:1b:55:31:73:02:83:8e:39: 4b:5b:52:ed:b2:81:cd:f5:7f:a2:95:ec:a1:3e:c3: 0d:89:79:ad:4d:7b:58:f4:5a:3d:95:1f:bf:30:6f: 06:85:da:b1:a8:af:3b:1c:20:04:2f:61:7a:bd:ff: 68:3d:c4:f7:4f:d9:f9:e0:9f:79:fc:d3:5e:19:4c: 94:50:84:14:33:07:25:23:a8:8d:4e:dc:fa:49:3c: 20:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:6C:9B:95:95:76:92:40:8C:AA:05:20:C7:1B:73:6F:77:F8:7E:CD X509v3 Authority Key Identifier: keyid:31:09:A8:D7:0F:A4:47:89:35:B0:5C:06:21:F6:88:95:52:40:5D:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MQmo1w-kR4k1sFwGIfaIlVJAXa8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/106b3f-55a3-4558-8013-4bee3274c698/1/MQmo1w-kR4k1sFwGIfaIlVJAXa8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/106b3f-55a3-4558-8013-4bee3274c698/1/MQmo1w-kR4k1sFwGIfaIlVJAXa8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:16:11:1b:af:45:84:0c:21:18:7b:1a:b9:44:fc:71:fd:72: 53:2f:bb:8c:3e:ec:84:cd:c1:35:8b:fc:5a:28:10:65:b6:bc: 90:01:8c:fe:08:db:2d:f9:16:e2:18:a5:7d:55:6b:72:22:99: 93:6f:84:28:74:ad:0c:a1:54:43:57:ba:80:1b:eb:36:fb:f0: 9e:14:54:d4:ef:4e:0d:20:e0:cb:fc:f0:02:fd:b6:c0:64:ff: 8f:9d:6f:2a:bb:67:72:fb:67:ae:65:83:5f:6c:af:4f:93:cb: c9:1c:37:db:fd:96:7c:78:72:71:03:f5:5e:bd:3d:f8:9a:ef: 87:0e:e4:18:37:5d:15:56:c9:6e:79:d1:d2:55:ec:e0:e3:e1: 0b:c6:da:62:b6:5b:d6:7f:14:e0:5f:72:7a:4a:2c:eb:44:e6: a7:bc:6b:3d:55:01:aa:86:3b:b5:f1:c1:e7:da:df:c0:66:4c: e1:c3:84:6a:1b:73:76:6b:49:a1:b8:15:d5:de:99:d4:a0:a5: 2d:9b:4c:77:51:24:e5:bb:ef:1f:74:b6:fc:b1:e7:36:91:d3: bf:84:c7:dc:ff:21:26:c8:d8:d1:d7:50:7e:5f:91:13:fd:bb: 24:9e:60:6b:23:27:b3:1c:a6:dd:75:cd:41:e1:21:20:e5:fe: 0f:cd:a0:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLPOn4YsX69VsTaEh65/OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxMDlhOGQ3MGZhNDQ3ODkzNWIwNWMwNjIxZjY4ODk1NTI0 MDVkYWYwHhcNMjUxMjA2MDEwMDQ2WhcNMjUxMjA3MDEwMDQ2WjAzMTEwLwYDVQQD EygyMDZjOWI5NTk1NzY5MjQwOGNhYTA1MjBjNzFiNzM2Zjc3Zjg3ZWNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOugGxfIzgPzv+d+CC4Z7/bFpulT b4uwGOqLJEI0a1AJucM0NuoDZVPoN3DPX9YaK7z3MB6U4GMJ4LufQhcZpqsnxeiA mNX25smjYSIItIQNfG6nChG4KMCiDMkzfoDNdEOSyBmUABewTfwGFijepc6sBxd9 xKd9S/DtM9nmmV8tsx9VXMJHhMdT6KlJfPst37TFUWl8E+AxrCaGGjF+gPrJtlLJ tP2zTL66G1UxcwKDjjlLW1LtsoHN9X+ileyhPsMNiXmtTXtY9Fo9lR+/MG8Ghdqx qK87HCAEL2F6vf9oPcT3T9n54J95/NNeGUyUUIQUMwclI6iNTtz6STwgTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCBsm5WVdpJAjKoFIMcbc293+H7NMB8GA1UdIwQY MBaAFDEJqNcPpEeJNbBcBiH2iJVSQF2vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVFtbzF3LWtSNGsxc0Z3R0lmYUlsVkpBWGE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8xMDZiM2YtNTVhMy00NTU4LTgwMTMt NGJlZTMyNzRjNjk4LzEvTVFtbzF3LWtSNGsxc0Z3R0lmYUlsVkpBWGE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC8xMDZiM2YtNTVhMy00NTU4LTgwMTMtNGJlZTMyNzRjNjk4 LzEvTVFtbzF3LWtSNGsxc0Z3R0lmYUlsVkpBWGE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmxYRG69F hAwhGHsauUT8cf1yUy+7jD7shM3BNYv8WigQZba8kAGM/gjbLfkW4hilfVVrciKZ k2+EKHStDKFUQ1e6gBvrNvvwnhRU1O9ODSDgy/zwAv22wGT/j51vKrtncvtnrmWD X2yvT5PLyRw32/2WfHhycQP1Xr09+Jrvhw7kGDddFVbJbnnR0lXs4OPhC8baYrZb 1n8U4F9yekos60Tmp7xrPVUBqoY7tfHB59rfwGZM4cOEahtzdmtJobgV1d6Z1KCl LZtMd1Ek5bvvH3S2/LHnNpHTv4TH3P8hJsjY0ddQfl+RE/27JJ5gayMnsxym3XXN QeEhIOX+D82gKQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:56:17 2025 by rpki-client