This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/0222d8-8d8a-44c0-a11f-dc0c4f1083c9/1/morKHCZcEygjx4T9qEL3oaBbjLc.mft File: morKHCZcEygjx4T9qEL3oaBbjLc.mft (raw, json) Hash identifier: S28h6saUQJ1ZEc6aBXDJWEJ1y2+TE0VATqopZXiq45o= Subject key identifier: D5:42:C9:D0:44:D6:DE:B9:CF:10:75:92:FB:1F:59:AE:5F:68:43:F6 Authority key identifier: 9A:8A:CA:1C:26:5C:13:28:23:C7:84:FD:A8:42:F7:A1:A0:5B:8C:B7 Certificate issuer: /CN=9a8aca1c265c132823c784fda842f7a1a05b8cb7 Certificate serial: 019B4882C6120DE54FD1504B0DD51480002F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/morKHCZcEygjx4T9qEL3oaBbjLc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/0222d8-8d8a-44c0-a11f-dc0c4f1083c9/1/morKHCZcEygjx4T9qEL3oaBbjLc.mft Manifest number: 0401 Signing time: Tue 23 Dec 2025 00:01:28 +0000 Manifest this update: Tue 23 Dec 2025 00:01:28 +0000 Manifest next update: Wed 24 Dec 2025 00:01:28 +0000 Files and hashes: 1: PXv4MGw4HfMQV8zuoB-3WTegwaw.roa (hash: GqIG1YKim2qQL71fUd8HU7TowoibLsmIA+NjM1XqDss=) 2: morKHCZcEygjx4T9qEL3oaBbjLc.crl (hash: R4C2UIg/9NhxeEeV15EEoxqe8z+8XhHew7keXKFIsss=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/0222d8-8d8a-44c0-a11f-dc0c4f1083c9/1/morKHCZcEygjx4T9qEL3oaBbjLc.crl rsync://rpki.ripe.net/repository/DEFAULT/62/0222d8-8d8a-44c0-a11f-dc0c4f1083c9/1/morKHCZcEygjx4T9qEL3oaBbjLc.mft rsync://rpki.ripe.net/repository/DEFAULT/morKHCZcEygjx4T9qEL3oaBbjLc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:82:c6:12:0d:e5:4f:d1:50:4b:0d:d5:14:80:00:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a8aca1c265c132823c784fda842f7a1a05b8cb7 Validity Not Before: Dec 23 00:01:28 2025 GMT Not After : Dec 24 00:01:28 2025 GMT Subject: CN=d542c9d044d6deb9cf107592fb1f59ae5f6843f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e5:8e:d6:2b:3e:45:98:d0:20:56:e7:60:4f: 14:90:b0:b4:e6:52:3b:31:0c:47:ae:c2:a6:64:02: 8f:85:dc:2d:01:57:de:19:85:38:c1:c1:a3:eb:c5: 3f:a3:a3:b6:29:b8:7f:bd:4c:65:b6:a7:69:e4:b7: ea:a6:da:89:46:56:8b:8a:fd:54:f7:13:7d:a8:04: a0:23:d8:54:81:c0:cf:b9:ba:da:ce:be:51:08:9f: 32:cf:d1:8e:b0:40:6a:f7:d1:5e:3a:61:4d:e1:29: 1d:44:1c:e7:a4:06:f9:a7:42:8c:dc:0f:31:ac:ac: 4f:19:fe:f9:88:2a:c0:d0:c2:55:87:22:1c:95:03: 0a:2e:7e:7b:d2:aa:04:0f:74:9a:f6:4b:f7:cc:2a: 8e:6e:53:d5:37:b7:f2:2d:32:c1:e8:30:69:8f:33: 26:a4:d6:2f:2d:7e:1a:63:8e:00:1f:cf:37:70:f9: 10:f4:e1:77:e9:e7:c4:9e:c6:79:50:89:0d:8d:58: bb:27:39:f7:78:92:c5:ab:91:12:7e:50:bf:ea:61: b8:d5:12:2d:53:ce:31:83:53:d6:4e:74:6c:19:aa: 94:e8:35:83:ed:ac:1e:30:12:e5:65:29:17:5a:0a: 13:aa:7a:00:50:08:ef:90:ed:da:8a:17:69:a7:6a: e0:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:42:C9:D0:44:D6:DE:B9:CF:10:75:92:FB:1F:59:AE:5F:68:43:F6 X509v3 Authority Key Identifier: keyid:9A:8A:CA:1C:26:5C:13:28:23:C7:84:FD:A8:42:F7:A1:A0:5B:8C:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/morKHCZcEygjx4T9qEL3oaBbjLc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0222d8-8d8a-44c0-a11f-dc0c4f1083c9/1/morKHCZcEygjx4T9qEL3oaBbjLc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0222d8-8d8a-44c0-a11f-dc0c4f1083c9/1/morKHCZcEygjx4T9qEL3oaBbjLc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:62:7c:ae:17:2e:97:6d:e6:4f:7b:4d:db:66:e1:ed:07:38: c0:04:45:0d:e0:2c:4b:24:a5:91:62:9d:d8:d5:e4:d5:4d:ba: 2e:7d:21:17:b9:e4:93:9a:ec:19:07:20:14:ca:f4:56:ff:25: b9:4d:71:72:d1:d5:4e:23:58:63:5c:61:69:9f:a9:9b:b6:a1: c3:f8:0c:61:69:04:77:96:7e:32:0d:27:be:4b:b0:1c:0c:2e: 55:8a:fb:b2:49:ea:95:85:44:2b:53:53:a7:6a:3a:bf:a4:5b: a7:20:f5:3e:65:5a:ea:3a:09:fb:ce:a3:ca:96:d9:41:b8:48: 23:fd:5f:aa:b7:7d:ea:ef:5b:cd:b5:b6:22:ac:df:65:8c:55: 38:22:fa:7a:af:d1:72:b9:48:af:7c:23:e3:88:aa:04:a4:a2: 57:96:f4:4f:2a:9f:c8:1a:e0:88:1c:58:11:23:f1:07:0d:58: 23:cb:62:0d:3d:00:85:c1:91:4d:78:f8:60:b3:58:b9:98:b1: a0:82:83:cb:f4:71:b7:33:8b:54:c3:13:f2:19:ac:c8:72:56: a7:f3:58:bd:fd:6d:ba:bc:54:b7:6d:d9:48:6f:5e:7e:ca:b7: bf:56:60:de:7f:1c:8d:67:27:a3:5b:5f:85:0c:d7:45:66:8c: cc:2e:d2:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIgsYSDeVP0VBLDdUUgAAvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhOGFjYTFjMjY1YzEzMjgyM2M3ODRmZGE4NDJmN2ExYTA1 YjhjYjcwHhcNMjUxMjIzMDAwMTI4WhcNMjUxMjI0MDAwMTI4WjAzMTEwLwYDVQQD EyhkNTQyYzlkMDQ0ZDZkZWI5Y2YxMDc1OTJmYjFmNTlhZTVmNjg0M2Y2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyuWO1is+RZjQIFbnYE8UkLC05lI7 MQxHrsKmZAKPhdwtAVfeGYU4wcGj68U/o6O2Kbh/vUxltqdp5LfqptqJRlaLiv1U 9xN9qASgI9hUgcDPubrazr5RCJ8yz9GOsEBq99FeOmFN4SkdRBznpAb5p0KM3A8x rKxPGf75iCrA0MJVhyIclQMKLn570qoED3Sa9kv3zCqOblPVN7fyLTLB6DBpjzMm pNYvLX4aY44AH883cPkQ9OF36efEnsZ5UIkNjVi7Jzn3eJLFq5ESflC/6mG41RIt U84xg1PWTnRsGaqU6DWD7aweMBLlZSkXWgoTqnoAUAjvkO3aihdpp2rgNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNVCydBE1t65zxB1kvsfWa5faEP2MB8GA1UdIwQY MBaAFJqKyhwmXBMoI8eE/ahC96GgW4y3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbW9yS0hDWmNFeWdqeDRUOXFFTDNvYUJiakxjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8wMjIyZDgtOGQ4YS00NGMwLWExMWYt ZGMwYzRmMTA4M2M5LzEvbW9yS0hDWmNFeWdqeDRUOXFFTDNvYUJiakxjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi8wMjIyZDgtOGQ4YS00NGMwLWExMWYtZGMwYzRmMTA4M2M5 LzEvbW9yS0hDWmNFeWdqeDRUOXFFTDNvYUJiakxjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALGJ8rhcu l23mT3tN22bh7Qc4wARFDeAsSySlkWKd2NXk1U26Ln0hF7nkk5rsGQcgFMr0Vv8l uU1xctHVTiNYY1xhaZ+pm7ahw/gMYWkEd5Z+Mg0nvkuwHAwuVYr7sknqlYVEK1NT p2o6v6RbpyD1PmVa6joJ+86jypbZQbhII/1fqrd96u9bzbW2IqzfZYxVOCL6eq/R crlIr3wj44iqBKSiV5b0TyqfyBrgiBxYESPxBw1YI8tiDT0AhcGRTXj4YLNYuZix oIKDy/RxtzOLVMMT8hmsyHJWp/NYvf1turxUt23ZSG9efsq3v1Zg3n8cjWcno1tf hQzXRWaMzC7STQ== -----END CERTIFICATE-----Generated at Tue Dec 23 07:52:20 2025 by rpki-client