This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/e738c9-c821-434e-a26e-8a84bfd8f099/1/Mo1NdPJBWjV_502-BA8BVPHaz3w.mft File: Mo1NdPJBWjV_502-BA8BVPHaz3w.mft (raw, json) Hash identifier: Dc4KRWUwwf+M8eHY66IRTMDRMqqb73Ik1p0EV6g36kc= Subject key identifier: 5F:92:8D:3D:59:B6:62:27:18:7C:B5:F3:A0:EF:75:6D:F4:D4:2C:92 Authority key identifier: 32:8D:4D:74:F2:41:5A:35:7F:E7:4D:BE:04:0F:01:54:F1:DA:CF:7C Certificate issuer: /CN=328d4d74f2415a357fe74dbe040f0154f1dacf7c Certificate serial: 019B21767434F47CCA8F0388088DFCD6E4DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mo1NdPJBWjV_502-BA8BVPHaz3w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/e738c9-c821-434e-a26e-8a84bfd8f099/1/Mo1NdPJBWjV_502-BA8BVPHaz3w.mft Manifest number: 0AFA Signing time: Mon 15 Dec 2025 10:02:49 +0000 Manifest this update: Mon 15 Dec 2025 10:02:49 +0000 Manifest next update: Tue 16 Dec 2025 10:02:49 +0000 Files and hashes: 1: K-39Hqy0AFDZY_cxbUsSzlTGpbc.roa (hash: HOWSSaTxDqgiwOmso54SMRF/DSbrMg9/uUoQhZYJC/c=) 2: Mo1NdPJBWjV_502-BA8BVPHaz3w.crl (hash: gaGMzzOEuFLD8VegD6eur9Qd1W0g692cpJfydbI85Xk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/e738c9-c821-434e-a26e-8a84bfd8f099/1/Mo1NdPJBWjV_502-BA8BVPHaz3w.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/e738c9-c821-434e-a26e-8a84bfd8f099/1/Mo1NdPJBWjV_502-BA8BVPHaz3w.mft rsync://rpki.ripe.net/repository/DEFAULT/Mo1NdPJBWjV_502-BA8BVPHaz3w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:76:74:34:f4:7c:ca:8f:03:88:08:8d:fc:d6:e4:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=328d4d74f2415a357fe74dbe040f0154f1dacf7c Validity Not Before: Dec 15 10:02:49 2025 GMT Not After : Dec 16 10:02:49 2025 GMT Subject: CN=5f928d3d59b66227187cb5f3a0ef756df4d42c92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a5:dd:56:10:70:d7:39:00:c6:90:26:a7:e1: d4:1e:33:44:e7:77:c6:66:6d:30:05:80:0a:89:84: 24:75:3f:4a:01:1a:1d:8c:18:60:b5:f7:73:72:8b: f0:c6:46:61:94:6b:6a:97:e2:fc:bd:60:98:5d:06: 7b:fd:5f:ec:e6:1a:27:7b:07:f7:31:0b:e7:bc:74: d0:5d:05:35:a5:c9:97:17:ba:47:1f:1a:8d:47:a8: ac:da:80:1b:48:72:d4:37:20:7d:2e:7b:3f:a0:32: b3:f5:d4:30:8d:36:16:9d:ff:9e:7c:ee:49:22:d0: 31:f6:cd:06:31:79:9e:6c:ac:76:0f:f3:87:4c:b3: 00:7c:97:35:50:ab:e0:46:49:d2:92:41:78:18:b6: b3:6b:7e:47:11:2b:d3:b0:7a:ec:f3:ac:6b:05:b2: cc:af:f4:b4:dc:a1:7d:98:cc:cb:aa:a6:f6:80:46: bd:a8:5e:4d:69:53:e2:24:a5:9f:34:e4:c8:3a:c7: 70:f8:f9:97:65:a0:b9:7d:92:7e:dc:f0:58:68:8e: 36:d3:e5:75:e1:25:72:a7:0e:03:d9:9c:76:9f:0a: ab:82:65:8b:f6:ef:07:50:c9:6b:f9:ac:56:9f:66: 6e:f5:5a:b7:d9:54:9a:85:ad:a5:b8:2b:2a:17:b6: 29:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:92:8D:3D:59:B6:62:27:18:7C:B5:F3:A0:EF:75:6D:F4:D4:2C:92 X509v3 Authority Key Identifier: keyid:32:8D:4D:74:F2:41:5A:35:7F:E7:4D:BE:04:0F:01:54:F1:DA:CF:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mo1NdPJBWjV_502-BA8BVPHaz3w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/e738c9-c821-434e-a26e-8a84bfd8f099/1/Mo1NdPJBWjV_502-BA8BVPHaz3w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/e738c9-c821-434e-a26e-8a84bfd8f099/1/Mo1NdPJBWjV_502-BA8BVPHaz3w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:95:17:84:48:5c:8f:82:d2:e0:27:2f:c2:2b:c8:66:7a:0b: dc:9d:a9:ef:ac:14:de:a9:40:c6:e3:13:b8:11:c1:2a:f3:b7: 49:29:52:99:cd:58:dd:20:b7:f5:f5:72:2d:a6:02:d7:07:7a: f0:69:62:2c:e0:12:e7:49:ee:55:32:68:c4:df:19:5f:0a:bc: a0:f5:1d:b7:a4:5e:be:fb:e3:ac:5b:fc:fa:02:0e:06:66:98: a8:db:78:20:ef:d9:69:c1:90:6c:23:82:7b:9c:7d:7c:9d:ce: 3a:4c:23:9d:51:78:c7:af:76:0b:76:cb:33:93:d7:2e:24:b8: f5:07:a2:ce:04:81:6b:d5:ca:ed:d2:e3:d8:2b:a4:a4:d5:34: b5:8a:05:5f:f8:8f:09:44:ed:46:65:c8:36:ce:d2:74:49:9f: 9f:4c:0f:c3:46:d6:9d:33:5e:e9:92:fa:c3:c7:41:8e:5a:82: de:37:3c:a1:b5:f0:35:58:44:47:e5:4f:30:be:2e:7a:ca:7a: b0:ce:12:80:90:f9:57:60:f8:e6:a2:32:ae:b6:ad:0a:b4:4b: db:0d:d9:7f:0c:25:56:f2:cd:7c:29:07:84:66:65:ab:6b:ee: cc:2a:33:e5:67:5e:ce:cf:e7:1c:7d:b7:97:ab:b6:a9:12:87: 23:8a:c0:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshdnQ09HzKjwOICI381uTbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyOGQ0ZDc0ZjI0MTVhMzU3ZmU3NGRiZTA0MGYwMTU0ZjFk YWNmN2MwHhcNMjUxMjE1MTAwMjQ5WhcNMjUxMjE2MTAwMjQ5WjAzMTEwLwYDVQQD Eyg1ZjkyOGQzZDU5YjY2MjI3MTg3Y2I1ZjNhMGVmNzU2ZGY0ZDQyYzkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKXdVhBw1zkAxpAmp+HUHjNE53fG Zm0wBYAKiYQkdT9KARodjBhgtfdzcovwxkZhlGtql+L8vWCYXQZ7/V/s5honewf3 MQvnvHTQXQU1pcmXF7pHHxqNR6is2oAbSHLUNyB9Lns/oDKz9dQwjTYWnf+efO5J ItAx9s0GMXmebKx2D/OHTLMAfJc1UKvgRknSkkF4GLaza35HESvTsHrs86xrBbLM r/S03KF9mMzLqqb2gEa9qF5NaVPiJKWfNOTIOsdw+PmXZaC5fZJ+3PBYaI420+V1 4SVypw4D2Zx2nwqrgmWL9u8HUMlr+axWn2Zu9Vq32VSaha2luCsqF7YpcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF+SjT1ZtmInGHy186DvdW301CySMB8GA1UdIwQY MBaAFDKNTXTyQVo1f+dNvgQPAVTx2s98MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTW8xTmRQSkJXalZfNTAyLUJBOEJWUEhhejN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9lNzM4YzktYzgyMS00MzRlLWEyNmUt OGE4NGJmZDhmMDk5LzEvTW8xTmRQSkJXalZfNTAyLUJBOEJWUEhhejN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9lNzM4YzktYzgyMS00MzRlLWEyNmUtOGE4NGJmZDhmMDk5 LzEvTW8xTmRQSkJXalZfNTAyLUJBOEJWUEhhejN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkpUXhEhc j4LS4CcvwivIZnoL3J2p76wU3qlAxuMTuBHBKvO3SSlSmc1Y3SC39fVyLaYC1wd6 8GliLOAS50nuVTJoxN8ZXwq8oPUdt6RevvvjrFv8+gIOBmaYqNt4IO/ZacGQbCOC e5x9fJ3OOkwjnVF4x692C3bLM5PXLiS49QeizgSBa9XK7dLj2CukpNU0tYoFX/iP CUTtRmXINs7SdEmfn0wPw0bWnTNe6ZL6w8dBjlqC3jc8obXwNVhER+VPML4uesp6 sM4SgJD5V2D45qIyrratCrRL2w3ZfwwlVvLNfCkHhGZlq2vuzCoz5Wdezs/nHH23 l6u2qRKHI4rApQ== -----END CERTIFICATE-----Generated at Mon Dec 15 13:17:32 2025 by rpki-client