This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/f57ef9-9815-4f95-a0bd-f98da546abd3/1/mOUyD4Vr6C6odOktbYC8b5l4MA4.mft File: mOUyD4Vr6C6odOktbYC8b5l4MA4.mft (raw, json) Hash identifier: Dy++okbvKPx+pLD8WPKHzjwaMxLY6Nd0Y2rwttAEBb8= Subject key identifier: 9E:48:A5:B4:FE:F2:09:52:B2:57:70:34:46:E0:13:68:78:71:50:B3 Authority key identifier: 98:E5:32:0F:85:6B:E8:2E:A8:74:E9:2D:6D:80:BC:6F:99:78:30:0E Certificate issuer: /CN=98e5320f856be82ea874e92d6d80bc6f9978300e Certificate serial: 019B115C7C8D1DB19C2C29136FD5891B0B2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mOUyD4Vr6C6odOktbYC8b5l4MA4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/f57ef9-9815-4f95-a0bd-f98da546abd3/1/mOUyD4Vr6C6odOktbYC8b5l4MA4.mft Manifest number: 0126 Signing time: Fri 12 Dec 2025 07:00:32 +0000 Manifest this update: Fri 12 Dec 2025 07:00:32 +0000 Manifest next update: Sat 13 Dec 2025 07:00:32 +0000 Files and hashes: 1: M1nDMBvKLyvHYKynRWFxGxUp7_A.roa (hash: ANLiC691MSmQMktt0fKVwg1wfR0ZV8EIBh2EiLIW0r4=) 2: mOUyD4Vr6C6odOktbYC8b5l4MA4.crl (hash: UcxYy3dx9cObNgNVCLtdiWk81iq1HWINZiYhlmkqAgs=) 3: n032k9FmuIzkkyRidAg8YH7w1hU.roa (hash: xlH82s++yte3uwND1ATPOo20SB9UwXzLCVAcekRQrE0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/f57ef9-9815-4f95-a0bd-f98da546abd3/1/mOUyD4Vr6C6odOktbYC8b5l4MA4.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/f57ef9-9815-4f95-a0bd-f98da546abd3/1/mOUyD4Vr6C6odOktbYC8b5l4MA4.mft rsync://rpki.ripe.net/repository/DEFAULT/mOUyD4Vr6C6odOktbYC8b5l4MA4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:5c:7c:8d:1d:b1:9c:2c:29:13:6f:d5:89:1b:0b:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98e5320f856be82ea874e92d6d80bc6f9978300e Validity Not Before: Dec 12 07:00:32 2025 GMT Not After : Dec 13 07:00:32 2025 GMT Subject: CN=9e48a5b4fef20952b257703446e01368787150b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:e2:62:72:e2:aa:cf:5d:4c:70:ba:f0:74:47: c7:45:f2:9c:31:3b:48:db:cc:61:85:71:48:fb:4f: 35:05:d7:5d:8c:ea:00:84:bd:59:26:98:6e:a3:47: 71:9f:f7:b0:f2:e0:68:05:46:0a:ea:fe:40:2e:98: df:49:df:04:b9:4f:3e:ac:94:c5:04:0d:1b:81:52: 38:06:f9:3e:7e:c0:08:83:7b:a6:cf:71:de:e0:cf: 71:c7:8f:b9:25:50:74:91:75:bf:f2:a1:9a:e7:4e: c2:99:a7:16:ac:5f:96:c5:b6:98:23:34:fb:90:4f: 43:96:83:72:b4:f9:be:c1:81:38:3c:70:54:8a:81: d9:e4:8e:da:01:11:70:f3:d9:ca:59:19:4f:be:4c: 9f:ad:81:18:a5:f9:8e:60:45:88:ec:9b:dd:3f:fc: 84:04:66:f7:04:98:65:59:2a:f7:d7:58:72:b3:23: 19:e4:51:a7:1d:61:0e:af:c5:9f:57:b5:fe:03:58: c7:09:9b:18:00:82:e0:ab:d8:df:98:6f:8f:a4:77: 4a:4c:b3:9e:5b:3d:a6:2c:83:1d:d2:ae:2d:c5:bd: 78:1b:5e:a0:80:0d:9e:8b:f7:fe:79:35:52:a9:65: 98:98:74:f9:06:12:2a:37:06:e2:9a:86:2e:6d:b9: 7c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:48:A5:B4:FE:F2:09:52:B2:57:70:34:46:E0:13:68:78:71:50:B3 X509v3 Authority Key Identifier: keyid:98:E5:32:0F:85:6B:E8:2E:A8:74:E9:2D:6D:80:BC:6F:99:78:30:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mOUyD4Vr6C6odOktbYC8b5l4MA4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f57ef9-9815-4f95-a0bd-f98da546abd3/1/mOUyD4Vr6C6odOktbYC8b5l4MA4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f57ef9-9815-4f95-a0bd-f98da546abd3/1/mOUyD4Vr6C6odOktbYC8b5l4MA4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:f8:3b:51:5c:58:64:ae:6f:8d:65:f8:85:50:1b:a2:c2:e0: ed:53:bd:2b:3e:04:cf:89:f0:cf:5b:0f:14:51:91:5d:72:ed: 3b:2d:50:e4:82:fa:8d:9e:c5:c6:84:fd:c3:e4:5c:96:94:40: 18:a8:ea:05:ce:d4:48:63:d3:f1:9c:ce:f6:20:ef:e0:83:77: a8:db:84:50:6c:c2:aa:fd:7e:61:00:52:ff:d8:44:44:de:57: d0:10:8b:64:c6:c6:15:7b:91:07:23:eb:8b:4d:cf:5c:05:b3: 46:38:8a:4a:9f:2e:e8:2d:3a:71:b0:4d:3e:8e:f3:fd:1c:23: 52:b3:8a:c1:fb:51:d4:de:59:3a:5d:96:36:68:27:a9:e6:ba: c2:e9:a8:b6:a4:80:ff:fe:ef:11:e7:02:2a:2f:0d:3e:8e:33: dd:19:02:7a:26:9f:a5:49:34:5c:2b:05:5b:12:13:2a:ba:6f: 21:bc:b9:37:e0:92:4e:90:5a:6d:58:cc:9b:ae:dd:4e:f4:df: 27:d2:85:b8:10:96:29:7a:cc:f9:7c:11:06:90:d9:ff:98:d0: 80:ea:7f:68:a8:dd:b9:ff:7b:e8:93:69:c9:67:23:b9:79:9e: be:0d:1c:08:11:37:e6:9a:69:a9:67:2d:88:16:5a:30:d5:a0: f6:7b:fb:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsRXHyNHbGcLCkTb9WJGwssMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4ZTUzMjBmODU2YmU4MmVhODc0ZTkyZDZkODBiYzZmOTk3 ODMwMGUwHhcNMjUxMjEyMDcwMDMyWhcNMjUxMjEzMDcwMDMyWjAzMTEwLwYDVQQD Eyg5ZTQ4YTViNGZlZjIwOTUyYjI1NzcwMzQ0NmUwMTM2ODc4NzE1MGIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6uJicuKqz11McLrwdEfHRfKcMTtI 28xhhXFI+081BdddjOoAhL1ZJphuo0dxn/ew8uBoBUYK6v5ALpjfSd8EuU8+rJTF BA0bgVI4Bvk+fsAIg3umz3He4M9xx4+5JVB0kXW/8qGa507CmacWrF+WxbaYIzT7 kE9DloNytPm+wYE4PHBUioHZ5I7aARFw89nKWRlPvkyfrYEYpfmOYEWI7JvdP/yE BGb3BJhlWSr311hysyMZ5FGnHWEOr8WfV7X+A1jHCZsYAILgq9jfmG+PpHdKTLOe Wz2mLIMd0q4txb14G16ggA2ei/f+eTVSqWWYmHT5BhIqNwbimoYubbl8GQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ5IpbT+8glSsldwNEbgE2h4cVCzMB8GA1UdIwQY MBaAFJjlMg+Fa+guqHTpLW2AvG+ZeDAOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbU9VeUQ0VnI2QzZvZE9rdGJZQzhiNWw0TUE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9mNTdlZjktOTgxNS00Zjk1LWEwYmQt Zjk4ZGE1NDZhYmQzLzEvbU9VeUQ0VnI2QzZvZE9rdGJZQzhiNWw0TUE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9mNTdlZjktOTgxNS00Zjk1LWEwYmQtZjk4ZGE1NDZhYmQz LzEvbU9VeUQ0VnI2QzZvZE9rdGJZQzhiNWw0TUE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPvg7UVxY ZK5vjWX4hVAbosLg7VO9Kz4Ez4nwz1sPFFGRXXLtOy1Q5IL6jZ7FxoT9w+RclpRA GKjqBc7USGPT8ZzO9iDv4IN3qNuEUGzCqv1+YQBS/9hERN5X0BCLZMbGFXuRByPr i03PXAWzRjiKSp8u6C06cbBNPo7z/RwjUrOKwftR1N5ZOl2WNmgnqea6wumotqSA //7vEecCKi8NPo4z3RkCeiafpUk0XCsFWxITKrpvIby5N+CSTpBabVjMm67dTvTf J9KFuBCWKXrM+XwRBpDZ/5jQgOp/aKjduf976JNpyWcjuXmevg0cCBE35pppqWct iBZaMNWg9nv7jw== -----END CERTIFICATE-----Generated at Fri Dec 12 08:41:32 2025 by rpki-client