This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.mft File: O9VD0EZeovb-uCjxhQSwP0A6xmk.mft (raw, json) Hash identifier: m562NDRzgoPSAEEugr/wYnas0Zim9Ycum8dxs0iFdZo= Subject key identifier: 81:D0:78:BA:A4:1B:7B:0D:96:4C:01:79:20:EE:C4:D5:81:62:A8:F6 Authority key identifier: 3B:D5:43:D0:46:5E:A2:F6:FE:B8:28:F1:85:04:B0:3F:40:3A:C6:69 Certificate issuer: /CN=3bd543d0465ea2f6feb828f18504b03f403ac669 Certificate serial: 019B4BF2D650581FF66521EEB437F6EA1A1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9VD0EZeovb-uCjxhQSwP0A6xmk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.mft Manifest number: 11CA Signing time: Tue 23 Dec 2025 16:02:44 +0000 Manifest this update: Tue 23 Dec 2025 16:02:44 +0000 Manifest next update: Wed 24 Dec 2025 16:02:44 +0000 Files and hashes: 1: O9VD0EZeovb-uCjxhQSwP0A6xmk.crl (hash: OW9Af3r8UDt6fVk/AXcBatNEaRB9nwjtLYDEbbkCn/A=) 2: x4WRkvTk4Qfvxow9VzZXx3rDXCk.roa (hash: RyOgBcFttRpc6DEmQeaGYO0tOWZlEQp1Uhl8vvwB5VE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.crl rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.mft rsync://rpki.ripe.net/repository/DEFAULT/O9VD0EZeovb-uCjxhQSwP0A6xmk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 16:02:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:f2:d6:50:58:1f:f6:65:21:ee:b4:37:f6:ea:1a:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bd543d0465ea2f6feb828f18504b03f403ac669 Validity Not Before: Dec 23 16:02:44 2025 GMT Not After : Dec 24 16:02:44 2025 GMT Subject: CN=81d078baa41b7b0d964c017920eec4d58162a8f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:1a:18:4b:70:35:a1:61:3d:30:26:2c:b2:bd: b2:48:10:5e:62:a5:d1:9f:81:40:98:73:9f:6c:bb: cb:5c:f1:17:24:c8:b6:76:07:df:1f:a1:50:e0:7b: 5e:24:a0:be:b5:e9:03:23:37:ed:ff:a6:05:73:b9: ab:6f:ab:ac:87:4c:82:c4:f9:57:f3:94:60:f3:9e: 28:9f:29:d6:81:e6:a4:93:6e:2d:96:a2:f8:eb:22: 93:0a:53:3d:be:85:6a:45:5d:6f:99:a2:91:06:6f: 2a:1b:b5:75:75:68:b1:07:83:82:bd:82:f0:f4:22: 39:f6:11:7a:62:bb:ad:48:0c:ca:4d:5e:19:1d:a8: 60:02:5e:eb:5e:b1:d2:92:f1:a9:71:21:b0:6e:ba: 29:fa:27:0b:c5:03:17:99:56:76:e6:a5:02:3e:d1: f5:3b:6e:19:e9:7f:8b:11:19:7f:d2:c7:52:41:89: 9a:9f:9f:98:3e:b4:6a:52:7c:28:21:e2:60:58:27: d0:8e:fd:ea:4a:34:46:82:9f:8f:a3:97:b8:a2:c9: 77:1f:91:bd:a8:ed:c2:77:ea:0a:19:c8:e0:37:ed: 1a:c1:c2:74:6d:d3:f7:da:5b:64:09:8d:a4:10:15: 9b:c9:f0:39:8e:c3:b0:71:57:39:66:9e:58:29:40: cb:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:D0:78:BA:A4:1B:7B:0D:96:4C:01:79:20:EE:C4:D5:81:62:A8:F6 X509v3 Authority Key Identifier: keyid:3B:D5:43:D0:46:5E:A2:F6:FE:B8:28:F1:85:04:B0:3F:40:3A:C6:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9VD0EZeovb-uCjxhQSwP0A6xmk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:48:88:79:10:bb:9c:b4:61:3d:82:4b:dc:ed:5b:f5:cf:04: 8d:f7:fc:ca:86:8f:3c:d6:f8:5f:be:0a:40:f0:d9:b0:51:88: 36:62:08:f2:ba:9d:a6:a3:71:14:e2:71:fc:ed:e0:7b:91:50: 9c:7f:55:7e:3e:18:ec:7d:e5:25:1c:79:b1:02:6d:8e:7e:22: 36:64:43:bc:e0:df:68:12:ec:6e:c5:8a:e2:42:dc:f1:1f:cb: 7c:3b:3e:79:da:bc:4c:d6:f8:08:7b:a1:ae:de:0f:aa:0a:b1: 32:18:17:96:43:92:d2:b4:7e:cb:09:8c:4d:9c:c9:a2:1f:45: 4c:d8:ef:fb:d3:a9:9b:4f:a9:9c:8e:0e:90:c9:1b:d9:ae:31: f9:c0:ac:92:58:8b:37:a3:16:a1:62:67:47:e9:ed:7a:0f:67: e2:e5:65:2e:63:0d:5d:49:19:94:55:49:c5:51:a7:4a:f3:89: 3c:19:ef:8e:53:dc:18:5e:43:dd:88:61:af:d6:71:6c:89:8a: f5:07:d1:5b:bf:c8:84:64:c9:3f:f0:25:5a:d6:00:b2:9d:26: 62:62:67:a8:32:d2:13:6f:83:fb:f8:b0:97:f7:c6:a8:7d:de: 07:56:e9:d2:02:93:39:ac:78:fd:72:54:94:26:fe:f9:27:02: 49:f1:9d:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtL8tZQWB/2ZSHutDf26hobMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiZDU0M2QwNDY1ZWEyZjZmZWI4MjhmMTg1MDRiMDNmNDAz YWM2NjkwHhcNMjUxMjIzMTYwMjQ0WhcNMjUxMjI0MTYwMjQ0WjAzMTEwLwYDVQQD Eyg4MWQwNzhiYWE0MWI3YjBkOTY0YzAxNzkyMGVlYzRkNTgxNjJhOGY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBoYS3A1oWE9MCYssr2ySBBeYqXR n4FAmHOfbLvLXPEXJMi2dgffH6FQ4HteJKC+tekDIzft/6YFc7mrb6ush0yCxPlX 85Rg854onynWgeakk24tlqL46yKTClM9voVqRV1vmaKRBm8qG7V1dWixB4OCvYLw 9CI59hF6YrutSAzKTV4ZHahgAl7rXrHSkvGpcSGwbrop+icLxQMXmVZ25qUCPtH1 O24Z6X+LERl/0sdSQYman5+YPrRqUnwoIeJgWCfQjv3qSjRGgp+Po5e4osl3H5G9 qO3Cd+oKGcjgN+0awcJ0bdP32ltkCY2kEBWbyfA5jsOwcVc5Zp5YKUDLkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIHQeLqkG3sNlkwBeSDuxNWBYqj2MB8GA1UdIwQY MBaAFDvVQ9BGXqL2/rgo8YUEsD9AOsZpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzlWRDBFWmVvdmItdUNqeGhRU3dQMEE2eG1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy83OGZlYTktZWZhYy00OTgzLWFjMmIt ZGY0NTA1NGRkOTM0LzEvTzlWRDBFWmVvdmItdUNqeGhRU3dQMEE2eG1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy83OGZlYTktZWZhYy00OTgzLWFjMmItZGY0NTA1NGRkOTM0 LzEvTzlWRDBFWmVvdmItdUNqeGhRU3dQMEE2eG1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKEiIeRC7 nLRhPYJL3O1b9c8Ejff8yoaPPNb4X74KQPDZsFGINmII8rqdpqNxFOJx/O3ge5FQ nH9Vfj4Y7H3lJRx5sQJtjn4iNmRDvODfaBLsbsWK4kLc8R/LfDs+edq8TNb4CHuh rt4PqgqxMhgXlkOS0rR+ywmMTZzJoh9FTNjv+9Opm0+pnI4OkMkb2a4x+cCskliL N6MWoWJnR+nteg9n4uVlLmMNXUkZlFVJxVGnSvOJPBnvjlPcGF5D3Yhhr9ZxbImK 9QfRW7/IhGTJP/AlWtYAsp0mYmJnqDLSE2+D+/iwl/fGqH3eB1bp0gKTOax4/XJU lCb++ScCSfGdVw== -----END CERTIFICATE-----Generated at Wed Dec 24 02:19:34 2025 by rpki-client