This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.mft File: OS9u5u40bDGRK3Yw2rFM5TxODJk.mft (raw, json) Hash identifier: bXSUYGO6ETBmHWVJ96dgMoGtSutdpgP7mM1NFrY9nnw= Subject key identifier: 89:97:0A:85:EF:BE:9A:6D:2E:9C:48:8C:16:C4:74:9B:10:D7:E4:A6 Authority key identifier: 39:2F:6E:E6:EE:34:6C:31:91:2B:76:30:DA:B1:4C:E5:3C:4E:0C:99 Certificate issuer: /CN=392f6ee6ee346c31912b7630dab14ce53c4e0c99 Certificate serial: 019B22F4EAE2FFC303A9479089505539394A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OS9u5u40bDGRK3Yw2rFM5TxODJk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.mft Manifest number: 04BA Signing time: Mon 15 Dec 2025 17:00:34 +0000 Manifest this update: Mon 15 Dec 2025 17:00:34 +0000 Manifest next update: Tue 16 Dec 2025 17:00:34 +0000 Files and hashes: 1: OS9u5u40bDGRK3Yw2rFM5TxODJk.crl (hash: vITFUL2ZG+HgvcGR9vf8yJX1py3N6TBv9+jBdLPXwpo=) 2: byq9jEJ8I-x78db4YmLa9HioKo8.roa (hash: QYVcPpPrnjWxAxRBsq739GpWzHWctl66pKlaoafsOic=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.mft rsync://rpki.ripe.net/repository/DEFAULT/OS9u5u40bDGRK3Yw2rFM5TxODJk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:f4:ea:e2:ff:c3:03:a9:47:90:89:50:55:39:39:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=392f6ee6ee346c31912b7630dab14ce53c4e0c99 Validity Not Before: Dec 15 17:00:34 2025 GMT Not After : Dec 16 17:00:34 2025 GMT Subject: CN=89970a85efbe9a6d2e9c488c16c4749b10d7e4a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:cc:ac:21:e3:03:dc:4c:f1:47:c1:af:ef:c2: 5b:30:55:ae:4e:94:21:5c:3d:b3:6d:ef:44:d7:69: b1:da:52:e2:05:89:d7:f9:e2:a0:32:81:95:db:f8: 61:66:ff:42:7a:b5:13:52:95:86:11:ed:24:f1:e6: 26:65:ff:53:19:2e:6e:40:95:bc:9a:49:cb:8a:72: 4f:1d:74:0b:29:ce:a6:ef:ef:7d:94:8e:49:00:f6: 5d:6e:45:33:54:35:b2:29:2a:56:a3:31:6d:ab:c2: ed:6c:9e:12:07:bb:80:35:a6:ef:a0:d6:f1:53:33: a8:00:e7:84:f7:a9:80:18:c8:91:32:57:95:b8:dc: ce:e9:5d:33:ed:02:21:b7:da:f8:48:fe:ee:be:ef: c2:dd:fb:fd:e4:87:4f:fe:6b:b4:3c:68:0e:c3:c4: ac:f7:e1:2a:49:6d:b4:c3:ba:9c:8b:e6:b9:b1:47: 63:dc:53:ad:cf:ec:d5:8e:66:f7:af:c5:30:de:b9: ae:2b:ae:17:66:a0:3f:bb:6c:a2:55:89:c4:d9:9a: 51:66:fd:15:3d:1a:bb:73:b9:ae:cc:10:0e:68:7b: bc:66:42:e6:2d:ae:e2:b7:f8:c8:53:a9:83:bc:7e: fd:d6:c0:15:d3:4f:d9:87:cc:25:72:22:cd:f1:3c: ce:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:97:0A:85:EF:BE:9A:6D:2E:9C:48:8C:16:C4:74:9B:10:D7:E4:A6 X509v3 Authority Key Identifier: keyid:39:2F:6E:E6:EE:34:6C:31:91:2B:76:30:DA:B1:4C:E5:3C:4E:0C:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OS9u5u40bDGRK3Yw2rFM5TxODJk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:dd:5a:68:4a:dd:af:79:74:ce:a9:da:21:f7:61:f1:90:c8: 60:7f:c0:f6:6b:72:77:eb:6a:bd:e1:82:6d:54:c8:b2:93:a8: 3a:8b:24:e0:30:8c:f8:b2:2a:55:63:2a:b1:8b:b2:fd:28:2f: 50:4e:d4:b4:f7:69:30:0e:33:dd:5c:2c:9e:8c:98:30:74:2d: 2b:9a:2e:ff:e5:16:eb:b3:00:e6:b1:d1:ed:6b:ad:e7:b6:22: b7:69:cc:a2:b8:df:ca:9a:37:fb:09:c5:12:21:f7:04:65:96: 80:b5:72:b4:93:e5:2f:ba:ca:b5:e4:7d:c0:bf:ab:b5:91:cb: b4:80:24:3b:c2:62:c8:e3:f6:77:2c:44:0f:a7:c1:1c:72:76: 96:88:c6:fb:6c:28:28:4a:29:e7:f4:5d:88:72:9d:09:c9:18: 0f:44:74:3b:67:2d:b4:01:06:ea:2c:e3:28:4f:0c:44:71:e9: b8:5e:b6:05:64:32:60:b6:88:13:0c:86:71:72:ec:15:f5:20: a4:a1:0f:9b:5a:39:15:20:99:94:64:57:51:e8:47:9f:76:94: 9a:73:d8:c9:ea:97:00:e5:5d:bf:1f:74:30:e9:b4:a6:f5:7b: 60:55:21:69:7c:24:bd:ec:d9:fb:a6:0f:09:68:16:5c:15:0a: fc:1b:b4:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsi9Ori/8MDqUeQiVBVOTlKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5MmY2ZWU2ZWUzNDZjMzE5MTJiNzYzMGRhYjE0Y2U1M2M0 ZTBjOTkwHhcNMjUxMjE1MTcwMDM0WhcNMjUxMjE2MTcwMDM0WjAzMTEwLwYDVQQD Eyg4OTk3MGE4NWVmYmU5YTZkMmU5YzQ4OGMxNmM0NzQ5YjEwZDdlNGE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMysIeMD3EzxR8Gv78JbMFWuTpQh XD2zbe9E12mx2lLiBYnX+eKgMoGV2/hhZv9CerUTUpWGEe0k8eYmZf9TGS5uQJW8 mknLinJPHXQLKc6m7+99lI5JAPZdbkUzVDWyKSpWozFtq8LtbJ4SB7uANabvoNbx UzOoAOeE96mAGMiRMleVuNzO6V0z7QIht9r4SP7uvu/C3fv95IdP/mu0PGgOw8Ss 9+EqSW20w7qci+a5sUdj3FOtz+zVjmb3r8Uw3rmuK64XZqA/u2yiVYnE2ZpRZv0V PRq7c7muzBAOaHu8ZkLmLa7it/jIU6mDvH791sAV00/Zh8wlciLN8TzO5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFImXCoXvvpptLpxIjBbEdJsQ1+SmMB8GA1UdIwQY MBaAFDkvbubuNGwxkSt2MNqxTOU8TgyZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1M5dTV1NDBiREdSSzNZdzJyRk01VHhPREprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi80NWQ5N2UtNDBmZS00N2UwLWIyZTYt OGE3MmExYjZhZjg1LzEvT1M5dTV1NDBiREdSSzNZdzJyRk01VHhPREprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi80NWQ5N2UtNDBmZS00N2UwLWIyZTYtOGE3MmExYjZhZjg1 LzEvT1M5dTV1NDBiREdSSzNZdzJyRk01VHhPREprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAat1aaErd r3l0zqnaIfdh8ZDIYH/A9mtyd+tqveGCbVTIspOoOosk4DCM+LIqVWMqsYuy/Sgv UE7UtPdpMA4z3VwsnoyYMHQtK5ou/+UW67MA5rHR7Wut57Yit2nMorjfypo3+wnF EiH3BGWWgLVytJPlL7rKteR9wL+rtZHLtIAkO8JiyOP2dyxED6fBHHJ2lojG+2wo KEop5/RdiHKdCckYD0R0O2cttAEG6izjKE8MRHHpuF62BWQyYLaIEwyGcXLsFfUg pKEPm1o5FSCZlGRXUehHn3aUmnPYyeqXAOVdvx90MOm0pvV7YFUhaXwkvezZ+6YP CWgWXBUK/Bu0Gw== -----END CERTIFICATE-----Generated at Mon Dec 15 21:52:11 2025 by rpki-client