This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/febeb6-79e6-4d97-9c92-b79968e0e174/1/MOalwxNr0v3TbISgzHJb98sP6rU.mft File: MOalwxNr0v3TbISgzHJb98sP6rU.mft (raw, json) Hash identifier: siC2jlOtUhhW24izllNqKp9n5vTVw8rMBbHW+jfTeUw= Subject key identifier: 80:7C:99:08:01:A8:3E:FB:D2:76:22:50:31:95:55:22:FC:69:86:F2 Authority key identifier: 30:E6:A5:C3:13:6B:D2:FD:D3:6C:84:A0:CC:72:5B:F7:CB:0F:EA:B5 Certificate issuer: /CN=30e6a5c3136bd2fdd36c84a0cc725bf7cb0feab5 Certificate serial: 019B59ACFAE419FE1543FF298ABF2DCF719B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MOalwxNr0v3TbISgzHJb98sP6rU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/febeb6-79e6-4d97-9c92-b79968e0e174/1/MOalwxNr0v3TbISgzHJb98sP6rU.mft Manifest number: 1277 Signing time: Fri 26 Dec 2025 08:01:06 +0000 Manifest this update: Fri 26 Dec 2025 08:01:06 +0000 Manifest next update: Sat 27 Dec 2025 08:01:06 +0000 Files and hashes: 1: HqsZJgL9LBUTcewanQzxQHLDph8.roa (hash: UQ79eEyJ8LyCIFyjDtOvtd/bCzwLuuC1qKDG3mAmlzU=) 2: MOalwxNr0v3TbISgzHJb98sP6rU.crl (hash: yEeuiRZKj2DIuzJabk0N5pOV7be6amIq6cKtcbE1ndg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/febeb6-79e6-4d97-9c92-b79968e0e174/1/MOalwxNr0v3TbISgzHJb98sP6rU.crl rsync://rpki.ripe.net/repository/DEFAULT/62/febeb6-79e6-4d97-9c92-b79968e0e174/1/MOalwxNr0v3TbISgzHJb98sP6rU.mft rsync://rpki.ripe.net/repository/DEFAULT/MOalwxNr0v3TbISgzHJb98sP6rU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ac:fa:e4:19:fe:15:43:ff:29:8a:bf:2d:cf:71:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30e6a5c3136bd2fdd36c84a0cc725bf7cb0feab5 Validity Not Before: Dec 26 08:01:06 2025 GMT Not After : Dec 27 08:01:06 2025 GMT Subject: CN=807c990801a83efbd276225031955522fc6986f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:0a:d8:58:4d:ec:41:3c:a9:22:ea:ed:57:d3: c5:84:2c:af:06:7b:18:ae:f9:da:4c:e0:b2:c2:cc: e9:2f:e3:42:c3:aa:af:10:f7:7d:90:53:49:77:75: 38:dd:76:aa:14:5a:75:07:91:17:88:66:fd:2c:60: 71:3d:76:fc:f7:ed:b8:eb:ff:4b:5d:dc:05:1c:32: 0f:ea:2b:9a:70:f3:a5:f5:72:73:1e:71:14:d9:42: b8:ab:0c:3c:78:d1:8b:27:12:71:c3:d7:c7:a4:fa: a3:3e:bd:cb:81:82:5b:78:6d:f9:e1:cb:fd:bd:47: 00:e9:92:c6:66:51:a8:95:ac:c2:7a:77:be:4f:ad: fa:26:70:cf:1e:97:6d:d9:b8:25:03:21:0c:b4:6a: 4d:65:c2:4a:ba:24:51:0a:ac:88:2a:37:64:9c:f9: 9c:74:80:40:13:07:fa:2c:b5:40:93:2d:31:b0:30: 0e:9e:fb:02:a4:2c:25:ec:ef:f5:ff:1c:05:d3:d5: 61:9e:7b:5c:a4:9c:66:fa:fc:0b:ee:34:9e:d0:c7: 88:1c:dc:58:33:0f:cc:3a:15:15:bf:d0:cc:d7:01: 8d:e0:22:2f:0a:cc:a9:03:98:57:c6:c5:cc:6e:9b: 49:2a:c5:e2:9f:05:18:e5:b9:63:e1:93:61:9c:cd: 3c:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:7C:99:08:01:A8:3E:FB:D2:76:22:50:31:95:55:22:FC:69:86:F2 X509v3 Authority Key Identifier: keyid:30:E6:A5:C3:13:6B:D2:FD:D3:6C:84:A0:CC:72:5B:F7:CB:0F:EA:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MOalwxNr0v3TbISgzHJb98sP6rU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/febeb6-79e6-4d97-9c92-b79968e0e174/1/MOalwxNr0v3TbISgzHJb98sP6rU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/febeb6-79e6-4d97-9c92-b79968e0e174/1/MOalwxNr0v3TbISgzHJb98sP6rU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:5f:65:d5:c2:be:03:d6:f7:50:46:9d:29:b0:92:3d:dd:1b: 66:49:b6:28:a8:51:c5:7d:c0:b4:c4:85:b8:35:07:41:73:56: 6d:07:b8:b7:15:41:f3:24:58:fd:f2:97:b0:38:98:92:d8:7d: 1c:e7:6b:24:aa:ea:e5:39:fe:04:d7:f8:27:14:37:d7:30:59: bd:85:a9:50:31:d8:f2:77:a2:5d:84:91:1b:88:0b:bd:72:89: bf:04:0f:78:71:23:e9:66:42:9f:50:25:a8:a7:f5:ed:96:9a: 78:28:c4:57:37:28:24:0c:02:2d:56:07:81:51:e0:db:55:ae: 01:9e:59:a4:bf:5c:e0:86:bd:8d:41:06:39:61:9f:75:13:2a: eb:29:4a:45:28:9a:c9:67:e9:d2:c1:1a:a0:5f:ea:08:db:6d: 44:97:52:a0:a9:77:07:1a:fc:85:9c:0d:67:16:c7:8f:0e:53: 65:59:0e:cf:54:74:c3:5b:ac:75:ef:1d:65:77:f5:58:cf:94: 72:ea:14:ba:8f:8e:e2:77:a9:82:6f:f8:1b:2a:ea:69:30:dc: 36:b5:9c:40:15:d6:44:aa:d2:85:f6:8f:d6:25:91:f4:a9:2a: b1:13:af:03:a7:bc:95:c2:ef:93:5c:4b:28:ac:5c:b3:57:55: 15:f6:73:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrPrkGf4VQ/8pir8tz3GbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwZTZhNWMzMTM2YmQyZmRkMzZjODRhMGNjNzI1YmY3Y2Iw ZmVhYjUwHhcNMjUxMjI2MDgwMTA2WhcNMjUxMjI3MDgwMTA2WjAzMTEwLwYDVQQD Eyg4MDdjOTkwODAxYTgzZWZiZDI3NjIyNTAzMTk1NTUyMmZjNjk4NmYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2QrYWE3sQTypIurtV9PFhCyvBnsY rvnaTOCywszpL+NCw6qvEPd9kFNJd3U43XaqFFp1B5EXiGb9LGBxPXb89+246/9L XdwFHDIP6iuacPOl9XJzHnEU2UK4qww8eNGLJxJxw9fHpPqjPr3LgYJbeG354cv9 vUcA6ZLGZlGolazCene+T636JnDPHpdt2bglAyEMtGpNZcJKuiRRCqyIKjdknPmc dIBAEwf6LLVAky0xsDAOnvsCpCwl7O/1/xwF09VhnntcpJxm+vwL7jSe0MeIHNxY Mw/MOhUVv9DM1wGN4CIvCsypA5hXxsXMbptJKsXinwUY5blj4ZNhnM08TQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIB8mQgBqD770nYiUDGVVSL8aYbyMB8GA1UdIwQY MBaAFDDmpcMTa9L902yEoMxyW/fLD+q1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTU9hbHd4TnIwdjNUYklTZ3pISmI5OHNQNnJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9mZWJlYjYtNzllNi00ZDk3LTljOTIt Yjc5OTY4ZTBlMTc0LzEvTU9hbHd4TnIwdjNUYklTZ3pISmI5OHNQNnJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi9mZWJlYjYtNzllNi00ZDk3LTljOTItYjc5OTY4ZTBlMTc0 LzEvTU9hbHd4TnIwdjNUYklTZ3pISmI5OHNQNnJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGV9l1cK+ A9b3UEadKbCSPd0bZkm2KKhRxX3AtMSFuDUHQXNWbQe4txVB8yRY/fKXsDiYkth9 HOdrJKrq5Tn+BNf4JxQ31zBZvYWpUDHY8neiXYSRG4gLvXKJvwQPeHEj6WZCn1Al qKf17ZaaeCjEVzcoJAwCLVYHgVHg21WuAZ5ZpL9c4Ia9jUEGOWGfdRMq6ylKRSia yWfp0sEaoF/qCNttRJdSoKl3Bxr8hZwNZxbHjw5TZVkOz1R0w1usde8dZXf1WM+U cuoUuo+O4nepgm/4GyrqaTDcNrWcQBXWRKrShfaP1iWR9KkqsROvA6e8lcLvk1xL KKxcs1dVFfZzyA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:18:23 2025 by rpki-client