This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/b507d6-8ccd-47a4-990d-002ce0c7f70f/1/MOEXssTnX9dTA9FNsD6eL0tyK4g.mft
File: MOEXssTnX9dTA9FNsD6eL0tyK4g.mft (raw, json)
Hash identifier: aZNx+0oVuSu5gTO/V+QcfBsu4PyaAQSGMd+kqXAuNro=
Subject key identifier: 48:8F:E9:29:19:69:57:65:64:CE:D3:90:58:80:BB:C5:0B:E6:20:D2
Authority key identifier: 30:E1:17:B2:C4:E7:5F:D7:53:03:D1:4D:B0:3E:9E:2F:4B:72:2B:88
Certificate issuer: /CN=30e117b2c4e75fd75303d14db03e9e2f4b722b88
Certificate serial: 019C41A1BC465CB488E635E666B9FD874EB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MOEXssTnX9dTA9FNsD6eL0tyK4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/b507d6-8ccd-47a4-990d-002ce0c7f70f/1/MOEXssTnX9dTA9FNsD6eL0tyK4g.mft
Manifest number: 0383
Signing time: Mon 09 Feb 2026 09:00:44 +0000
Manifest this update: Mon 09 Feb 2026 09:00:44 +0000
Manifest next update: Tue 10 Feb 2026 09:00:44 +0000
Files and hashes: 1: MOEXssTnX9dTA9FNsD6eL0tyK4g.crl (hash: SE4VM3plBuOBcNz33bdLUkYX45ubMLJcLTIDr8ZVkIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/b507d6-8ccd-47a4-990d-002ce0c7f70f/1/MOEXssTnX9dTA9FNsD6eL0tyK4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/b507d6-8ccd-47a4-990d-002ce0c7f70f/1/MOEXssTnX9dTA9FNsD6eL0tyK4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/MOEXssTnX9dTA9FNsD6eL0tyK4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 09:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:a1:bc:46:5c:b4:88:e6:35:e6:66:b9:fd:87:4e:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30e117b2c4e75fd75303d14db03e9e2f4b722b88
Validity
Not Before: Feb 9 09:00:44 2026 GMT
Not After : Feb 10 09:00:44 2026 GMT
Subject: CN=488fe9291969576564ced3905880bbc50be620d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e0:68:71:4a:f7:00:29:86:f1:7e:08:28:d2:
c8:88:d6:5b:be:02:5b:eb:ab:a6:4b:c6:60:b0:6b:
cd:2b:c8:2e:66:9d:4a:ee:1c:17:30:a6:49:28:25:
53:08:ec:b2:f8:a2:e7:7e:48:8e:9a:96:e9:17:92:
a4:dc:8e:4a:7a:c8:33:2d:f4:b1:95:42:f3:e8:60:
54:73:c6:20:18:32:af:b0:8b:5e:5c:7d:64:de:e5:
a7:b4:a9:43:ac:4c:71:9b:d9:02:79:60:46:80:2a:
a8:37:84:23:0b:82:cf:4f:12:c3:ee:22:30:15:af:
04:16:85:42:09:62:3d:6b:13:78:5f:e8:33:70:1e:
3c:67:83:d0:a7:e6:11:90:9a:40:9f:64:d1:cb:d2:
d8:58:04:2a:e6:91:6d:f4:85:1a:5f:0c:03:0e:ea:
83:72:47:88:d0:d8:54:dd:72:87:88:86:13:86:ca:
0f:15:6b:06:7e:85:30:4c:77:4e:52:16:5d:21:3c:
0f:df:71:b5:65:06:4b:c8:a4:e2:35:fe:10:5e:4c:
69:55:8e:3b:b7:e3:28:5b:13:9a:85:46:6c:03:31:
98:4e:ac:69:ab:db:aa:34:fc:d6:48:9b:9d:b8:f7:
a3:fd:3d:5d:e9:c2:a2:d3:47:62:d4:5e:0d:eb:36:
cc:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:8F:E9:29:19:69:57:65:64:CE:D3:90:58:80:BB:C5:0B:E6:20:D2
X509v3 Authority Key Identifier:
keyid:30:E1:17:B2:C4:E7:5F:D7:53:03:D1:4D:B0:3E:9E:2F:4B:72:2B:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MOEXssTnX9dTA9FNsD6eL0tyK4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/b507d6-8ccd-47a4-990d-002ce0c7f70f/1/MOEXssTnX9dTA9FNsD6eL0tyK4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/b507d6-8ccd-47a4-990d-002ce0c7f70f/1/MOEXssTnX9dTA9FNsD6eL0tyK4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:60:62:73:14:d0:f9:d7:48:8f:be:bf:e0:81:7b:48:31:b6:
af:9e:62:d2:99:86:5b:69:06:ac:af:23:c5:39:f5:22:c1:d9:
3f:aa:97:8d:c5:49:8e:4d:1b:00:a4:a1:a4:13:12:e8:c1:d3:
66:ad:21:8b:c5:1d:f4:98:5b:9a:04:3a:f4:a2:52:f3:dd:f8:
91:45:48:8a:1d:10:21:d1:c2:fb:dd:25:a8:1f:a7:dd:e8:a2:
6f:95:5e:6b:85:3e:b8:15:82:01:70:a4:50:13:57:3b:26:fe:
43:00:42:ae:c8:bf:17:0b:92:e4:2d:72:fc:39:34:d9:f6:bf:
c9:45:f3:93:11:fa:b6:be:ba:a4:69:65:03:7c:52:89:ae:b9:
a6:36:2f:19:9e:f5:a6:a8:c6:4c:1d:9f:fc:75:45:33:e1:ab:
ae:d0:5c:1f:41:f4:9c:d2:fe:e6:25:69:b7:8c:4b:ad:e0:a3:
df:10:26:96:3a:92:95:48:dd:08:ec:b1:26:3e:a6:bc:1c:46:
67:d8:a6:8d:58:8f:fc:c7:a1:36:61:1c:0d:2d:1e:4d:b3:8e:
41:57:55:4a:54:12:d6:c2:e2:98:ea:66:6b:6d:46:b9:aa:62:
24:11:ce:8c:f0:ef:5c:44:9e:cb:43:e2:72:bd:64:b6:7e:6a:
a1:56:aa:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:54:21 2026 by rpki-client