This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/0Mo8Cxlv3gunTBSHvcucX6BTZks.mft File: 0Mo8Cxlv3gunTBSHvcucX6BTZks.mft (raw, json) Hash identifier: dpA+NdbgnbY+6cKYYr6T6pzFIDz1fXboNYifwbb5ePk= Subject key identifier: 84:31:9D:14:EF:95:BC:64:3D:DB:7B:3B:E6:19:62:D5:80:32:34:11 Authority key identifier: D0:CA:3C:0B:19:6F:DE:0B:A7:4C:14:87:BD:CB:9C:5F:A0:53:66:4B Certificate issuer: /CN=d0ca3c0b196fde0ba74c1487bdcb9c5fa053664b Certificate serial: 019B34FB511DC031DD72BCCE2F27C85D03B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Mo8Cxlv3gunTBSHvcucX6BTZks.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/0Mo8Cxlv3gunTBSHvcucX6BTZks.mft Manifest number: 1785 Signing time: Fri 19 Dec 2025 05:00:44 +0000 Manifest this update: Fri 19 Dec 2025 05:00:44 +0000 Manifest next update: Sat 20 Dec 2025 05:00:44 +0000 Files and hashes: 1: 0Mo8Cxlv3gunTBSHvcucX6BTZks.crl (hash: to0rrmAWaMOk55wMsoMLRAhqRYCYtAY1oreDYo7TIOE=) 2: 5Iq99HGOQym0RGozEyZTnwgi5-c.roa (hash: 81JX76zEEyAwuma2A2j1xpYjvTQiYo/8wBvDbJx61DE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/0Mo8Cxlv3gunTBSHvcucX6BTZks.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/0Mo8Cxlv3gunTBSHvcucX6BTZks.mft rsync://rpki.ripe.net/repository/DEFAULT/0Mo8Cxlv3gunTBSHvcucX6BTZks.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:fb:51:1d:c0:31:dd:72:bc:ce:2f:27:c8:5d:03:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0ca3c0b196fde0ba74c1487bdcb9c5fa053664b Validity Not Before: Dec 19 05:00:44 2025 GMT Not After : Dec 20 05:00:44 2025 GMT Subject: CN=84319d14ef95bc643ddb7b3be61962d580323411 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:fd:bb:fe:cc:ac:fb:98:70:9b:74:47:f9:c7: 21:b6:eb:7a:bc:ef:33:be:71:2d:66:01:c7:2e:4f: 8e:71:26:83:8e:62:29:d7:86:c3:f8:9d:2e:5c:47: b6:63:80:8a:1c:27:d7:3a:50:ae:0a:b0:91:81:6c: fc:09:2e:88:1a:99:92:ba:b2:4c:77:04:b6:a6:91: 84:94:8c:d4:c8:63:8c:a4:76:b3:ea:81:e5:e7:42: 39:b9:6c:ac:ef:85:10:33:dc:56:5b:73:22:0b:54: 5e:b6:07:02:0d:52:8d:1f:d0:8c:b8:f0:04:38:af: 9b:34:0d:84:17:34:88:9a:d3:ad:d0:e3:06:52:38: 01:fe:c9:17:7c:50:a8:d6:9c:1f:63:27:fe:3c:4e: 08:a9:41:8d:aa:9c:53:df:d0:9f:e3:58:69:4c:7a: 12:05:35:26:4b:b1:78:67:55:e8:06:92:a3:c5:47: 4c:62:72:fb:5e:64:e8:3f:df:91:65:20:13:aa:40: 36:18:cc:60:52:6c:7a:e4:3a:fd:35:ba:03:5a:41: 51:65:a3:89:45:6c:e1:d8:0f:18:9d:8f:94:c8:c9: db:fd:2b:05:39:5d:62:f3:a4:cb:33:3b:f2:b9:2c: 6d:68:8f:71:d7:5e:50:9f:83:e1:1e:bc:c7:af:70: 07:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:31:9D:14:EF:95:BC:64:3D:DB:7B:3B:E6:19:62:D5:80:32:34:11 X509v3 Authority Key Identifier: keyid:D0:CA:3C:0B:19:6F:DE:0B:A7:4C:14:87:BD:CB:9C:5F:A0:53:66:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Mo8Cxlv3gunTBSHvcucX6BTZks.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/0Mo8Cxlv3gunTBSHvcucX6BTZks.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/0Mo8Cxlv3gunTBSHvcucX6BTZks.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:f3:8e:9b:74:e8:56:e8:ae:1d:75:11:39:66:f7:68:57:15: 23:28:5f:1b:01:90:27:34:86:e7:4f:0a:38:91:5e:26:ec:9e: 21:3c:63:17:95:05:8b:e5:3a:50:22:58:30:98:37:b3:97:e5: e5:56:cc:57:9d:cd:2e:04:f2:44:1d:a8:30:f6:97:bc:94:1f: 27:99:09:89:c9:8d:b7:c0:c1:47:4c:2e:0c:16:29:44:53:12: e6:7b:45:77:e5:b6:f9:5e:69:3c:b0:d0:51:0c:df:24:a4:a7: 3c:a7:3b:b1:cd:6c:bc:d0:21:b9:9e:71:79:82:2e:4d:67:6d: 95:13:52:5c:ec:13:d9:fd:71:68:b8:90:d4:3d:2e:51:51:f6: 70:3d:62:49:c6:89:3f:2a:e8:93:77:1c:19:65:d6:4b:72:43: 4d:45:02:5f:0e:ec:25:a7:fe:4c:e6:0c:08:74:18:d8:14:3c: ea:3d:0e:8c:fd:b9:bf:bf:fe:5e:08:f1:82:48:de:85:85:4e: c6:6e:cc:95:a4:71:fe:a8:60:cd:88:12:5f:26:68:8f:8f:ff: 97:28:dd:02:f0:3a:25:ba:89:d4:69:d4:f1:68:4f:3b:4e:e2: 18:87:8e:14:67:e2:c0:f4:96:4b:c9:02:f2:a6:0c:7f:13:10: c4:ba:96:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0+1EdwDHdcrzOLyfIXQO3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwY2EzYzBiMTk2ZmRlMGJhNzRjMTQ4N2JkY2I5YzVmYTA1 MzY2NGIwHhcNMjUxMjE5MDUwMDQ0WhcNMjUxMjIwMDUwMDQ0WjAzMTEwLwYDVQQD Eyg4NDMxOWQxNGVmOTViYzY0M2RkYjdiM2JlNjE5NjJkNTgwMzIzNDExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1f27/sys+5hwm3RH+cchtut6vO8z vnEtZgHHLk+OcSaDjmIp14bD+J0uXEe2Y4CKHCfXOlCuCrCRgWz8CS6IGpmSurJM dwS2ppGElIzUyGOMpHaz6oHl50I5uWys74UQM9xWW3MiC1RetgcCDVKNH9CMuPAE OK+bNA2EFzSImtOt0OMGUjgB/skXfFCo1pwfYyf+PE4IqUGNqpxT39Cf41hpTHoS BTUmS7F4Z1XoBpKjxUdMYnL7XmToP9+RZSATqkA2GMxgUmx65Dr9NboDWkFRZaOJ RWzh2A8YnY+UyMnb/SsFOV1i86TLMzvyuSxtaI9x115Qn4PhHrzHr3AHpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIQxnRTvlbxkPdt7O+YZYtWAMjQRMB8GA1UdIwQY MBaAFNDKPAsZb94Lp0wUh73LnF+gU2ZLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvME1vOEN4bHYzZ3VuVEJTSHZjdWNYNkJUWmtzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi84MTAyNGYtNTE3MS00N2M0LWI1Y2Et NmI2MzMzMWVmZjAyLzEvME1vOEN4bHYzZ3VuVEJTSHZjdWNYNkJUWmtzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi84MTAyNGYtNTE3MS00N2M0LWI1Y2EtNmI2MzMzMWVmZjAy LzEvME1vOEN4bHYzZ3VuVEJTSHZjdWNYNkJUWmtzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlPOOm3To VuiuHXUROWb3aFcVIyhfGwGQJzSG508KOJFeJuyeITxjF5UFi+U6UCJYMJg3s5fl 5VbMV53NLgTyRB2oMPaXvJQfJ5kJicmNt8DBR0wuDBYpRFMS5ntFd+W2+V5pPLDQ UQzfJKSnPKc7sc1svNAhuZ5xeYIuTWdtlRNSXOwT2f1xaLiQ1D0uUVH2cD1iScaJ Pyrok3ccGWXWS3JDTUUCXw7sJaf+TOYMCHQY2BQ86j0OjP25v7/+XgjxgkjehYVO xm7MlaRx/qhgzYgSXyZoj4//lyjdAvA6JbqJ1GnU8WhPO07iGIeOFGfiwPSWS8kC 8qYMfxMQxLqWSg== -----END CERTIFICATE-----Generated at Fri Dec 19 08:02:18 2025 by rpki-client