This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/c53c3e-aa2d-41ab-a312-2637d13338f1/1/O9lDbSE1wISJe3TGrTbaFwCnqY0.mft File: O9lDbSE1wISJe3TGrTbaFwCnqY0.mft (raw, json) Hash identifier: FAMThBOeSOBkJHmZUAQHpTriRdpShYz8mX1E+nMbWaA= Subject key identifier: AF:56:46:65:B9:6F:18:2D:C5:19:7D:49:97:43:60:CB:80:73:9A:A5 Authority key identifier: 3B:D9:43:6D:21:35:C0:84:89:7B:74:C6:AD:36:DA:17:00:A7:A9:8D Certificate issuer: /CN=3bd9436d2135c084897b74c6ad36da1700a7a98d Certificate serial: 019B5ABF2906D86F8BACC464506904062A76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9lDbSE1wISJe3TGrTbaFwCnqY0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/c53c3e-aa2d-41ab-a312-2637d13338f1/1/O9lDbSE1wISJe3TGrTbaFwCnqY0.mft Manifest number: 157E Signing time: Fri 26 Dec 2025 13:00:35 +0000 Manifest this update: Fri 26 Dec 2025 13:00:35 +0000 Manifest next update: Sat 27 Dec 2025 13:00:35 +0000 Files and hashes: 1: MkGUvFc5JSBVNeM_VILad8s5zXE.roa (hash: y7TqFtSF44B35KxghjCNu7WMj5pJpzLxmoZgRpNM7r8=) 2: O9lDbSE1wISJe3TGrTbaFwCnqY0.crl (hash: 9BO2dTeylCjUaH+sUfyB4Ehlx9ZhEMvCs2nXgNXG/iE=) 3: VekG2JeXHUDy0fRDzXtFdNU8lfE.roa (hash: S50KN9jOHHSMt2/wCQRFtxbSHAYvoJTEJC1VbDgG6ns=) 4: XlsfqVnPq85M-ZJSh02UMv7bAq8.roa (hash: RvxcNQlHBl5xgY24wu2zM7ZcwbvvsV992ncfxEdC62I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/c53c3e-aa2d-41ab-a312-2637d13338f1/1/O9lDbSE1wISJe3TGrTbaFwCnqY0.crl rsync://rpki.ripe.net/repository/DEFAULT/78/c53c3e-aa2d-41ab-a312-2637d13338f1/1/O9lDbSE1wISJe3TGrTbaFwCnqY0.mft rsync://rpki.ripe.net/repository/DEFAULT/O9lDbSE1wISJe3TGrTbaFwCnqY0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:29:06:d8:6f:8b:ac:c4:64:50:69:04:06:2a:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bd9436d2135c084897b74c6ad36da1700a7a98d Validity Not Before: Dec 26 13:00:35 2025 GMT Not After : Dec 27 13:00:35 2025 GMT Subject: CN=af564665b96f182dc5197d49974360cb80739aa5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:7b:24:b2:9b:cb:4b:32:67:b5:77:c1:57:3c: dc:00:5b:78:b8:1a:66:22:46:66:17:18:5a:ec:a1: 7e:10:38:71:8c:b2:20:d1:c5:b7:2b:58:a2:20:ac: d7:f4:ea:28:f2:32:0c:4e:34:de:f7:a4:c4:95:61: cb:56:f4:dc:a1:eb:ef:ae:5b:7f:ee:77:a4:b8:b8: c0:59:e5:52:37:11:6f:e3:73:2c:fc:35:d7:c8:41: 5b:a5:f1:10:14:7d:fe:62:c4:5f:5c:94:0f:10:bb: cb:a1:a2:89:26:b4:c5:c4:44:1b:cf:e6:a4:54:81: be:aa:c2:5f:82:4d:13:f8:df:e0:d9:ae:b1:fa:4e: 32:16:bb:34:ed:de:9d:6c:ec:fd:89:c2:b4:9f:8a: 55:ce:3c:e0:9a:24:25:7b:ae:a4:49:76:d0:6c:4c: c1:07:25:f1:65:5b:49:63:5d:ed:d2:db:8c:cb:57: 46:de:63:63:d5:97:36:d7:7b:f4:62:92:2c:40:f1: 67:6f:bf:1a:5f:2d:5e:cc:f7:62:0b:11:a9:53:1f: a5:a5:38:f4:a7:5d:a1:b7:9a:f5:ef:b5:4d:40:3e: 73:68:f6:6b:5b:0d:9a:9b:ec:a8:a6:9e:7f:70:0a: d2:d5:4e:b2:9e:9d:f8:48:0a:4e:5f:38:14:92:1c: 13:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:56:46:65:B9:6F:18:2D:C5:19:7D:49:97:43:60:CB:80:73:9A:A5 X509v3 Authority Key Identifier: keyid:3B:D9:43:6D:21:35:C0:84:89:7B:74:C6:AD:36:DA:17:00:A7:A9:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9lDbSE1wISJe3TGrTbaFwCnqY0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/c53c3e-aa2d-41ab-a312-2637d13338f1/1/O9lDbSE1wISJe3TGrTbaFwCnqY0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/c53c3e-aa2d-41ab-a312-2637d13338f1/1/O9lDbSE1wISJe3TGrTbaFwCnqY0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:54:78:e0:af:5d:f9:68:08:09:0b:f7:c8:e5:6b:64:fa:9e: 54:86:1c:e7:05:da:b4:82:22:c7:ca:09:9b:fc:73:c7:00:82: 2a:2f:c3:5f:85:1b:df:1e:72:2e:12:24:7e:6b:5e:ae:da:b3: e3:0f:3b:63:d0:fe:56:00:20:a0:54:1a:5d:4e:06:2f:7c:0c: e9:82:0f:12:1d:c7:75:b1:78:74:c9:7c:79:cb:fb:73:ae:c1: e4:87:e1:dc:69:ed:49:8e:7f:5a:d7:b3:85:04:dd:c4:a8:82: 8b:34:ad:7d:c6:16:ae:c8:17:66:d5:f1:a3:3d:4d:db:47:4a: b2:d0:c2:cd:1b:e1:8b:6f:a0:41:3d:bf:0e:95:7a:49:d3:04: 13:8b:bf:51:74:4e:88:39:b4:5e:89:37:54:76:eb:33:27:6b: ae:c3:2a:0e:fb:93:57:98:c2:de:b3:23:6d:e6:eb:80:99:39: f7:fb:95:fe:83:81:3c:f8:15:3b:65:51:46:a3:40:5c:ee:10: fb:f3:8a:ef:c5:19:37:fc:44:26:fd:27:33:b0:b3:c6:c5:0d: 9f:ad:58:fb:13:8a:13:d1:0a:61:f0:fb:8a:c2:df:c7:e1:5c: 49:e0:d6:a3:90:fd:4f:4c:1d:74:5f:d0:5b:c7:a4:9e:47:5e: 66:ff:6d:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtavykG2G+LrMRkUGkEBip2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiZDk0MzZkMjEzNWMwODQ4OTdiNzRjNmFkMzZkYTE3MDBh N2E5OGQwHhcNMjUxMjI2MTMwMDM1WhcNMjUxMjI3MTMwMDM1WjAzMTEwLwYDVQQD EyhhZjU2NDY2NWI5NmYxODJkYzUxOTdkNDk5NzQzNjBjYjgwNzM5YWE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3skspvLSzJntXfBVzzcAFt4uBpm IkZmFxha7KF+EDhxjLIg0cW3K1iiIKzX9Ooo8jIMTjTe96TElWHLVvTcoevvrlt/ 7nekuLjAWeVSNxFv43Ms/DXXyEFbpfEQFH3+YsRfXJQPELvLoaKJJrTFxEQbz+ak VIG+qsJfgk0T+N/g2a6x+k4yFrs07d6dbOz9icK0n4pVzjzgmiQle66kSXbQbEzB ByXxZVtJY13t0tuMy1dG3mNj1Zc213v0YpIsQPFnb78aXy1ezPdiCxGpUx+lpTj0 p12ht5r177VNQD5zaPZrWw2am+yopp5/cArS1U6ynp34SApOXzgUkhwTEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK9WRmW5bxgtxRl9SZdDYMuAc5qlMB8GA1UdIwQY MBaAFDvZQ20hNcCEiXt0xq022hcAp6mNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzlsRGJTRTF3SVNKZTNUR3JUYmFGd0NucVkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9jNTNjM2UtYWEyZC00MWFiLWEzMTIt MjYzN2QxMzMzOGYxLzEvTzlsRGJTRTF3SVNKZTNUR3JUYmFGd0NucVkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC9jNTNjM2UtYWEyZC00MWFiLWEzMTItMjYzN2QxMzMzOGYx LzEvTzlsRGJTRTF3SVNKZTNUR3JUYmFGd0NucVkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOlR44K9d +WgICQv3yOVrZPqeVIYc5wXatIIix8oJm/xzxwCCKi/DX4Ub3x5yLhIkfmtertqz 4w87Y9D+VgAgoFQaXU4GL3wM6YIPEh3HdbF4dMl8ecv7c67B5Ifh3GntSY5/Wtez hQTdxKiCizStfcYWrsgXZtXxoz1N20dKstDCzRvhi2+gQT2/DpV6SdMEE4u/UXRO iDm0Xok3VHbrMydrrsMqDvuTV5jC3rMjbebrgJk59/uV/oOBPPgVO2VRRqNAXO4Q +/OK78UZN/xEJv0nM7CzxsUNn61Y+xOKE9EKYfD7isLfx+FcSeDWo5D9T0wddF/Q W8eknkdeZv9tww== -----END CERTIFICATE-----Generated at Fri Dec 26 17:43:37 2025 by rpki-client