This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/e738c9-c821-434e-a26e-8a84bfd8f099/1/Mo1NdPJBWjV_502-BA8BVPHaz3w.mft File: Mo1NdPJBWjV_502-BA8BVPHaz3w.mft (raw, json) Hash identifier: N1E+2XBcHARdPNKu91kSNdPZAJSQTdSGOlI0q0MRlaQ= Subject key identifier: FD:EC:AE:4E:7F:9E:6A:23:B0:8C:CD:ED:55:FC:13:AD:20:BE:C2:F8 Authority key identifier: 32:8D:4D:74:F2:41:5A:35:7F:E7:4D:BE:04:0F:01:54:F1:DA:CF:7C Certificate issuer: /CN=328d4d74f2415a357fe74dbe040f0154f1dacf7c Certificate serial: 019AF509A24707D4680FE5E530CB6491519B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mo1NdPJBWjV_502-BA8BVPHaz3w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/e738c9-c821-434e-a26e-8a84bfd8f099/1/Mo1NdPJBWjV_502-BA8BVPHaz3w.mft Manifest number: 0AE3 Signing time: Sat 06 Dec 2025 19:00:40 +0000 Manifest this update: Sat 06 Dec 2025 19:00:40 +0000 Manifest next update: Sun 07 Dec 2025 19:00:40 +0000 Files and hashes: 1: K-39Hqy0AFDZY_cxbUsSzlTGpbc.roa (hash: HOWSSaTxDqgiwOmso54SMRF/DSbrMg9/uUoQhZYJC/c=) 2: Mo1NdPJBWjV_502-BA8BVPHaz3w.crl (hash: taOq7CR10l24kBaXI4RYjbwtXIYX6qGT+frzwrgmcEk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/e738c9-c821-434e-a26e-8a84bfd8f099/1/Mo1NdPJBWjV_502-BA8BVPHaz3w.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/e738c9-c821-434e-a26e-8a84bfd8f099/1/Mo1NdPJBWjV_502-BA8BVPHaz3w.mft rsync://rpki.ripe.net/repository/DEFAULT/Mo1NdPJBWjV_502-BA8BVPHaz3w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:a2:47:07:d4:68:0f:e5:e5:30:cb:64:91:51:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=328d4d74f2415a357fe74dbe040f0154f1dacf7c Validity Not Before: Dec 6 19:00:40 2025 GMT Not After : Dec 7 19:00:40 2025 GMT Subject: CN=fdecae4e7f9e6a23b08ccded55fc13ad20bec2f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:ad:1e:85:e7:12:53:3c:4e:3f:72:41:62:0e: c2:73:55:6a:71:bb:0e:3d:9b:09:e1:12:ab:b0:ea: 75:ca:2d:05:cd:b6:f6:ea:74:16:9a:6f:4f:b4:ba: fa:2c:26:1f:c4:5a:59:ac:d4:89:06:21:ba:9b:eb: bf:17:ae:d5:23:0b:d9:73:7f:17:48:cf:a2:3f:f7: 34:ef:01:29:fd:df:db:cd:7d:36:dd:67:f0:b6:08: 26:ed:2e:d6:aa:e5:dc:e1:b9:9d:bd:82:0d:e2:ee: db:11:a3:51:c5:3b:3c:e2:55:d3:a4:77:3a:c6:3a: 0d:cb:09:db:68:22:c0:32:a6:6f:e5:89:c9:63:3f: 9b:ad:09:82:06:84:5e:ac:42:31:dc:ad:40:f2:bc: cf:3d:45:53:67:9a:c7:2e:0b:91:13:a8:ab:07:5e: 3a:93:2c:92:ca:62:3d:ef:96:6d:44:4f:30:5d:58: 67:cd:7b:56:7e:fd:fd:13:54:fc:32:00:4b:6d:74: 32:c6:8a:9b:32:07:42:67:69:7c:15:c6:1c:fc:9f: 0b:26:c4:0c:6a:4d:0d:84:48:c5:e9:f6:13:d2:1a: c8:67:0a:2e:a5:ac:9d:57:ad:47:b5:9c:b7:65:f4: 29:60:09:7f:d9:12:13:ec:0b:21:b1:99:cc:42:b2: 23:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:EC:AE:4E:7F:9E:6A:23:B0:8C:CD:ED:55:FC:13:AD:20:BE:C2:F8 X509v3 Authority Key Identifier: keyid:32:8D:4D:74:F2:41:5A:35:7F:E7:4D:BE:04:0F:01:54:F1:DA:CF:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mo1NdPJBWjV_502-BA8BVPHaz3w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/e738c9-c821-434e-a26e-8a84bfd8f099/1/Mo1NdPJBWjV_502-BA8BVPHaz3w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/e738c9-c821-434e-a26e-8a84bfd8f099/1/Mo1NdPJBWjV_502-BA8BVPHaz3w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:7e:bc:c5:c2:af:e3:a4:fc:d5:d5:3f:f5:28:f8:84:ca:5c: 63:a9:77:3d:f5:bf:1a:89:65:91:d1:3c:15:82:b3:e5:69:30: e3:c4:32:c7:fa:b9:2b:9a:19:44:c6:dd:78:16:be:35:ee:20: cb:78:a3:39:68:73:48:71:55:f9:49:8b:65:d7:86:78:27:f2: 8d:23:ad:a5:b0:2d:3f:a7:8e:48:bd:17:df:11:e3:48:ff:41: 2a:3c:8d:4f:19:e4:11:c5:85:40:8d:66:6c:ea:fc:a8:3a:20: 83:68:93:fb:26:11:d1:1f:38:33:45:6b:b4:94:a1:e6:23:9e: fa:ff:b9:37:a4:ec:c9:6f:8d:8f:54:c8:67:25:05:4d:0b:ce: dc:cc:c3:c3:12:fd:59:bb:12:9e:70:e7:e8:3c:65:c4:6e:fb: 52:27:77:e9:35:9e:1d:b9:ce:ad:87:a6:83:5a:c0:bd:0c:28: 2b:ec:e6:fb:57:04:a4:f5:b5:b7:a9:8b:0e:cf:8c:82:d2:bf: 67:c3:a5:ad:b4:16:b8:87:3f:d3:ac:cd:05:76:22:0c:d5:28: e9:c8:e2:24:7d:95:1e:ed:7c:d3:41:d8:f7:a8:da:e6:fa:af: be:32:16:8a:a9:de:22:3f:c0:c7:e6:9f:bd:91:a3:99:46:db: 79:6d:18:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CaJHB9RoD+XlMMtkkVGbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyOGQ0ZDc0ZjI0MTVhMzU3ZmU3NGRiZTA0MGYwMTU0ZjFk YWNmN2MwHhcNMjUxMjA2MTkwMDQwWhcNMjUxMjA3MTkwMDQwWjAzMTEwLwYDVQQD EyhmZGVjYWU0ZTdmOWU2YTIzYjA4Y2NkZWQ1NWZjMTNhZDIwYmVjMmY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2a0ehecSUzxOP3JBYg7Cc1VqcbsO PZsJ4RKrsOp1yi0Fzbb26nQWmm9PtLr6LCYfxFpZrNSJBiG6m+u/F67VIwvZc38X SM+iP/c07wEp/d/bzX023Wfwtggm7S7WquXc4bmdvYIN4u7bEaNRxTs84lXTpHc6 xjoNywnbaCLAMqZv5YnJYz+brQmCBoRerEIx3K1A8rzPPUVTZ5rHLguRE6irB146 kyySymI975ZtRE8wXVhnzXtWfv39E1T8MgBLbXQyxoqbMgdCZ2l8FcYc/J8LJsQM ak0NhEjF6fYT0hrIZwoupaydV61HtZy3ZfQpYAl/2RIT7AshsZnMQrIjBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP3srk5/nmojsIzN7VX8E60gvsL4MB8GA1UdIwQY MBaAFDKNTXTyQVo1f+dNvgQPAVTx2s98MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTW8xTmRQSkJXalZfNTAyLUJBOEJWUEhhejN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9lNzM4YzktYzgyMS00MzRlLWEyNmUt OGE4NGJmZDhmMDk5LzEvTW8xTmRQSkJXalZfNTAyLUJBOEJWUEhhejN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9lNzM4YzktYzgyMS00MzRlLWEyNmUtOGE4NGJmZDhmMDk5 LzEvTW8xTmRQSkJXalZfNTAyLUJBOEJWUEhhejN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfX68xcKv 46T81dU/9Sj4hMpcY6l3PfW/GollkdE8FYKz5Wkw48Qyx/q5K5oZRMbdeBa+Ne4g y3ijOWhzSHFV+UmLZdeGeCfyjSOtpbAtP6eOSL0X3xHjSP9BKjyNTxnkEcWFQI1m bOr8qDogg2iT+yYR0R84M0VrtJSh5iOe+v+5N6TsyW+Nj1TIZyUFTQvO3MzDwxL9 WbsSnnDn6DxlxG77Uid36TWeHbnOrYemg1rAvQwoK+zm+1cEpPW1t6mLDs+MgtK/ Z8OlrbQWuIc/06zNBXYiDNUo6cjiJH2VHu1800HY96ja5vqvvjIWiqneIj/Ax+af vZGjmUbbeW0YrA== -----END CERTIFICATE-----Generated at Sat Dec 6 23:13:03 2025 by rpki-client