This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/4ff3ef-970d-41f1-84ab-54bee6aa57eb/1/momArWm4s3dOSrL3BbUlO0CT2rk.mft File: momArWm4s3dOSrL3BbUlO0CT2rk.mft (raw, json) Hash identifier: m0ofLyNUXv81+uwsEuyAclhpEw5mS45TgIOzLgJ90i4= Subject key identifier: E6:CC:6B:46:59:23:F3:CD:89:97:D5:FC:52:58:F1:94:75:13:A6:0A Authority key identifier: 9A:89:80:AD:69:B8:B3:77:4E:4A:B2:F7:05:B5:25:3B:40:93:DA:B9 Certificate issuer: /CN=9a8980ad69b8b3774e4ab2f705b5253b4093dab9 Certificate serial: 019B5AF66E3B414A010A27060E749D5F3844 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/momArWm4s3dOSrL3BbUlO0CT2rk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/4ff3ef-970d-41f1-84ab-54bee6aa57eb/1/momArWm4s3dOSrL3BbUlO0CT2rk.mft Manifest number: 96 Signing time: Fri 26 Dec 2025 14:00:58 +0000 Manifest this update: Fri 26 Dec 2025 14:00:58 +0000 Manifest next update: Sat 27 Dec 2025 14:00:58 +0000 Files and hashes: 1: momArWm4s3dOSrL3BbUlO0CT2rk.crl (hash: 3v6eT9ZxDLAcF+PvAV5Qy/+tuvYZwgjQTbr0vgmFMME=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/4ff3ef-970d-41f1-84ab-54bee6aa57eb/1/momArWm4s3dOSrL3BbUlO0CT2rk.crl rsync://rpki.ripe.net/repository/DEFAULT/38/4ff3ef-970d-41f1-84ab-54bee6aa57eb/1/momArWm4s3dOSrL3BbUlO0CT2rk.mft rsync://rpki.ripe.net/repository/DEFAULT/momArWm4s3dOSrL3BbUlO0CT2rk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:f6:6e:3b:41:4a:01:0a:27:06:0e:74:9d:5f:38:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a8980ad69b8b3774e4ab2f705b5253b4093dab9 Validity Not Before: Dec 26 14:00:58 2025 GMT Not After : Dec 27 14:00:58 2025 GMT Subject: CN=e6cc6b465923f3cd8997d5fc5258f1947513a60a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c7:7f:4f:23:2b:86:ac:d3:a5:c4:f7:ed:5e: 5d:2c:7a:ff:ae:97:dd:d9:69:37:f5:d5:2b:ef:1b: 6c:28:49:c5:b7:98:7e:2a:f7:f6:1f:51:23:7d:30: e0:ae:d1:cb:e3:43:ba:7a:b6:f9:4b:f8:c5:32:5f: 8a:48:d3:ec:7a:a3:57:75:d5:98:fd:26:68:37:e7: 66:aa:9c:df:9c:f3:52:76:f0:87:e9:87:da:cd:53: b9:23:34:22:31:bf:e8:53:4f:22:f6:fa:a8:95:9f: 65:a6:13:43:31:a7:0f:2d:33:bf:c1:fc:ee:91:de: ca:a8:1b:90:38:b7:30:f0:1d:42:55:08:c1:c6:94: 07:60:82:e2:ed:fb:c4:89:e1:66:3b:7a:0d:b9:cc: 3b:d7:5e:0d:c0:d0:91:ce:57:84:e9:24:63:c8:b2: 55:76:9a:0a:c1:05:ee:ca:2b:1c:87:8b:18:a6:cf: 87:d1:34:a8:dd:ad:97:5a:1f:3c:c0:ca:cc:b9:66: 87:83:a8:e5:b4:db:78:02:76:df:23:83:e9:e2:ec: aa:33:f0:84:44:9a:3a:e4:4e:57:dc:2d:e7:1a:7f: ff:62:df:88:e4:36:86:f6:43:44:6e:f2:c8:75:20: 92:40:7a:7c:22:bf:f7:93:bd:2e:2a:8c:6d:a9:2d: 4f:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:CC:6B:46:59:23:F3:CD:89:97:D5:FC:52:58:F1:94:75:13:A6:0A X509v3 Authority Key Identifier: keyid:9A:89:80:AD:69:B8:B3:77:4E:4A:B2:F7:05:B5:25:3B:40:93:DA:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/momArWm4s3dOSrL3BbUlO0CT2rk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4ff3ef-970d-41f1-84ab-54bee6aa57eb/1/momArWm4s3dOSrL3BbUlO0CT2rk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4ff3ef-970d-41f1-84ab-54bee6aa57eb/1/momArWm4s3dOSrL3BbUlO0CT2rk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:09:be:d5:b3:3a:70:3b:c3:df:ad:b0:a8:81:e1:68:75:df: 0c:4d:8c:b3:cf:5b:27:89:cb:54:25:ce:83:7c:9f:04:ff:29: f1:1e:87:4d:e2:fb:a5:17:8a:78:1b:77:6e:8f:80:9f:9f:4a: d9:da:9a:bc:a9:37:8f:00:1e:e4:1d:cb:23:fa:7e:6c:8a:cb: c2:ce:40:51:47:41:02:9a:b0:12:42:5d:16:1b:06:b6:ec:0f: 6a:7c:52:d9:05:21:aa:d9:20:80:6a:2b:ba:d9:89:58:83:7b: 9b:bc:6b:8b:d6:9f:11:91:07:9a:33:25:9f:7e:35:14:a8:f5: 50:ab:da:28:75:52:0d:e2:41:c7:53:f4:98:61:5d:71:50:2c: d0:b2:62:40:13:bf:b9:da:13:60:c1:55:00:41:05:9d:6b:56: cd:1f:c4:75:46:5d:04:b2:65:26:a9:81:88:db:3d:0c:f9:e5: e8:a0:3b:06:c7:ae:a7:6b:cb:b7:d0:01:de:a0:8b:4e:dc:ff: 4c:53:56:51:2f:68:55:c1:5b:be:11:c3:73:f1:85:97:5a:8f: 02:51:66:d8:7b:9a:20:f7:02:ae:04:55:25:b6:9e:f2:96:d4: 2b:0c:4a:a7:54:6a:ef:55:ce:f2:cf:01:99:9b:b4:2d:d6:9b: f9:bf:4c:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZta9m47QUoBCicGDnSdXzhEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhODk4MGFkNjliOGIzNzc0ZTRhYjJmNzA1YjUyNTNiNDA5 M2RhYjkwHhcNMjUxMjI2MTQwMDU4WhcNMjUxMjI3MTQwMDU4WjAzMTEwLwYDVQQD EyhlNmNjNmI0NjU5MjNmM2NkODk5N2Q1ZmM1MjU4ZjE5NDc1MTNhNjBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8d/TyMrhqzTpcT37V5dLHr/rpfd 2Wk39dUr7xtsKEnFt5h+Kvf2H1EjfTDgrtHL40O6erb5S/jFMl+KSNPseqNXddWY /SZoN+dmqpzfnPNSdvCH6YfazVO5IzQiMb/oU08i9vqolZ9lphNDMacPLTO/wfzu kd7KqBuQOLcw8B1CVQjBxpQHYILi7fvEieFmO3oNucw7114NwNCRzleE6SRjyLJV dpoKwQXuyisch4sYps+H0TSo3a2XWh88wMrMuWaHg6jltNt4AnbfI4Pp4uyqM/CE RJo65E5X3C3nGn//Yt+I5DaG9kNEbvLIdSCSQHp8Ir/3k70uKoxtqS1PiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFObMa0ZZI/PNiZfV/FJY8ZR1E6YKMB8GA1UdIwQY MBaAFJqJgK1puLN3Tkqy9wW1JTtAk9q5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbW9tQXJXbTRzM2RPU3JMM0JiVWxPMENUMnJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC80ZmYzZWYtOTcwZC00MWYxLTg0YWIt NTRiZWU2YWE1N2ViLzEvbW9tQXJXbTRzM2RPU3JMM0JiVWxPMENUMnJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC80ZmYzZWYtOTcwZC00MWYxLTg0YWItNTRiZWU2YWE1N2Vi LzEvbW9tQXJXbTRzM2RPU3JMM0JiVWxPMENUMnJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArAm+1bM6 cDvD362wqIHhaHXfDE2Ms89bJ4nLVCXOg3yfBP8p8R6HTeL7pReKeBt3bo+An59K 2dqavKk3jwAe5B3LI/p+bIrLws5AUUdBApqwEkJdFhsGtuwPanxS2QUhqtkggGor utmJWIN7m7xri9afEZEHmjMln341FKj1UKvaKHVSDeJBx1P0mGFdcVAs0LJiQBO/ udoTYMFVAEEFnWtWzR/EdUZdBLJlJqmBiNs9DPnl6KA7Bseup2vLt9AB3qCLTtz/ TFNWUS9oVcFbvhHDc/GFl1qPAlFm2HuaIPcCrgRVJbae8pbUKwxKp1Rq71XO8s8B mZu0Ldab+b9Mvw== -----END CERTIFICATE-----Generated at Fri Dec 26 16:05:26 2025 by rpki-client