This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/d03982-e753-4e56-ab35-b0adec934671/1/o2n0t4zE2TX7Hzm73syKQTsPr50.mft File: o2n0t4zE2TX7Hzm73syKQTsPr50.mft (raw, json) Hash identifier: cGdMbb0RANPfzzsFhly9OoZW/MZzaHuOHJswe8HgZZI= Subject key identifier: 90:2C:18:BB:9D:17:0F:81:54:59:5C:32:84:9E:E9:73:9F:29:03:FE Authority key identifier: A3:69:F4:B7:8C:C4:D9:35:FB:1F:39:BB:DE:CC:8A:41:3B:0F:AF:9D Certificate issuer: /CN=a369f4b78cc4d935fb1f39bbdecc8a413b0faf9d Certificate serial: 019B077DA697F6826BF10C5D7C55716D2669 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2n0t4zE2TX7Hzm73syKQTsPr50.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/d03982-e753-4e56-ab35-b0adec934671/1/o2n0t4zE2TX7Hzm73syKQTsPr50.mft Manifest number: 9C Signing time: Wed 10 Dec 2025 09:00:33 +0000 Manifest this update: Wed 10 Dec 2025 09:00:33 +0000 Manifest next update: Thu 11 Dec 2025 09:00:33 +0000 Files and hashes: 1: cErth6LGJ37Tdtl1lcefLoJD4nM.roa (hash: OoCTZM3oJW/h0+9oZEB+kSNNGcZqSaTzGyAN+23CU/M=) 2: o2n0t4zE2TX7Hzm73syKQTsPr50.crl (hash: PoutpQyJA4vD4rJ6IitJ+LpO3cRh2Auwmyj+Hq4HFbI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/d03982-e753-4e56-ab35-b0adec934671/1/o2n0t4zE2TX7Hzm73syKQTsPr50.crl rsync://rpki.ripe.net/repository/DEFAULT/92/d03982-e753-4e56-ab35-b0adec934671/1/o2n0t4zE2TX7Hzm73syKQTsPr50.mft rsync://rpki.ripe.net/repository/DEFAULT/o2n0t4zE2TX7Hzm73syKQTsPr50.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 09:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:7d:a6:97:f6:82:6b:f1:0c:5d:7c:55:71:6d:26:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a369f4b78cc4d935fb1f39bbdecc8a413b0faf9d Validity Not Before: Dec 10 09:00:33 2025 GMT Not After : Dec 11 09:00:33 2025 GMT Subject: CN=902c18bb9d170f8154595c32849ee9739f2903fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:fb:9f:11:33:e5:f6:2d:e4:89:de:dd:88:5f: 6a:f9:02:0e:53:d0:ff:34:7c:eb:96:a1:2f:e6:5b: 4b:20:24:40:d6:c9:ab:64:30:13:a1:e0:28:3a:96: d4:ef:a9:fe:47:d0:ce:93:c8:ae:90:64:cb:3f:1c: 87:3d:37:90:c8:2a:51:69:9e:91:13:a0:58:bd:1d: e3:33:0b:0b:9c:f0:70:aa:22:d7:d2:12:ab:5f:8e: 01:2b:35:07:6b:33:ce:b4:0f:4d:e3:26:75:ed:29: 5c:82:4b:ac:61:e1:22:bc:98:d7:c1:01:e0:ad:cf: 96:17:b3:f9:ca:ab:eb:ff:88:f1:66:f4:1e:f1:97: ed:6c:e5:2b:e6:94:37:49:c8:21:bd:01:2e:8c:a1: bd:34:3c:d5:81:c0:71:fe:57:a1:b5:0f:b1:c8:41: b3:0a:49:65:cc:d6:42:0f:ec:05:f5:7d:cb:be:53: a2:06:a5:fd:b8:34:7c:59:fe:9b:39:46:b7:b7:c1: 15:38:17:f9:17:b9:d7:13:4e:e4:f8:f2:0b:16:0e: f2:87:2d:07:95:8b:f8:62:7f:ba:e2:3e:4d:3a:e3: 77:75:7c:eb:eb:75:8c:f1:db:3d:62:e9:56:e6:26: 8e:5d:b7:35:c1:c7:02:18:c9:57:48:e8:5b:00:c2: b0:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:2C:18:BB:9D:17:0F:81:54:59:5C:32:84:9E:E9:73:9F:29:03:FE X509v3 Authority Key Identifier: keyid:A3:69:F4:B7:8C:C4:D9:35:FB:1F:39:BB:DE:CC:8A:41:3B:0F:AF:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2n0t4zE2TX7Hzm73syKQTsPr50.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/d03982-e753-4e56-ab35-b0adec934671/1/o2n0t4zE2TX7Hzm73syKQTsPr50.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/d03982-e753-4e56-ab35-b0adec934671/1/o2n0t4zE2TX7Hzm73syKQTsPr50.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:7a:87:c6:49:4f:c2:6f:5d:1c:96:27:74:ba:27:b4:83:2f: 33:7e:af:f2:57:95:01:41:1b:fb:0f:60:8e:6b:99:d2:f5:20: 23:a5:4d:09:97:ee:8c:35:e4:b3:24:f5:9d:f6:b4:e1:91:8d: 5e:0d:87:8f:58:a1:5d:8e:f4:55:21:f5:d0:02:cd:98:ce:e7: f5:25:69:6c:70:b8:10:8e:64:37:d4:d0:2d:71:43:10:13:61: 5a:bf:b0:6b:ac:eb:bf:b0:be:67:4f:e0:94:8e:8e:aa:62:63: 40:37:38:cb:17:7f:96:09:29:a5:44:ce:f4:a4:5f:fc:f5:c9: ea:86:17:e8:8e:9a:07:43:00:48:c0:b1:ee:cc:50:c5:b0:3f: 8b:5b:b3:30:d4:ef:da:08:41:48:79:3c:4e:91:bc:79:31:fe: 66:6b:0b:eb:df:1b:7d:9e:33:98:87:73:88:b6:f1:4d:50:a6: 8b:f0:ee:ab:7f:e6:95:ca:a8:84:c0:a9:46:46:e6:b2:9e:df: 04:d7:21:02:96:d7:fd:84:e1:fe:c8:44:d9:fd:3f:ec:90:d7: 94:ee:74:4b:3d:fd:07:8a:3a:a4:5a:30:8f:be:4f:0a:b9:ed: bb:e9:c2:0c:05:71:ac:83:66:77:a1:40:49:70:91:3e:53:1e: b9:e6:2f:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsHfaaX9oJr8QxdfFVxbSZpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzNjlmNGI3OGNjNGQ5MzVmYjFmMzliYmRlY2M4YTQxM2Iw ZmFmOWQwHhcNMjUxMjEwMDkwMDMzWhcNMjUxMjExMDkwMDMzWjAzMTEwLwYDVQQD Eyg5MDJjMThiYjlkMTcwZjgxNTQ1OTVjMzI4NDllZTk3MzlmMjkwM2ZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/ufETPl9i3kid7diF9q+QIOU9D/ NHzrlqEv5ltLICRA1smrZDAToeAoOpbU76n+R9DOk8iukGTLPxyHPTeQyCpRaZ6R E6BYvR3jMwsLnPBwqiLX0hKrX44BKzUHazPOtA9N4yZ17SlcgkusYeEivJjXwQHg rc+WF7P5yqvr/4jxZvQe8ZftbOUr5pQ3ScghvQEujKG9NDzVgcBx/lehtQ+xyEGz CkllzNZCD+wF9X3LvlOiBqX9uDR8Wf6bOUa3t8EVOBf5F7nXE07k+PILFg7yhy0H lYv4Yn+64j5NOuN3dXzr63WM8ds9YulW5iaOXbc1wccCGMlXSOhbAMKwkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJAsGLudFw+BVFlcMoSe6XOfKQP+MB8GA1UdIwQY MBaAFKNp9LeMxNk1+x85u97MikE7D6+dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzJuMHQ0ekUyVFg3SHptNzNzeUtRVHNQcjUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9kMDM5ODItZTc1My00ZTU2LWFiMzUt YjBhZGVjOTM0NjcxLzEvbzJuMHQ0ekUyVFg3SHptNzNzeUtRVHNQcjUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi9kMDM5ODItZTc1My00ZTU2LWFiMzUtYjBhZGVjOTM0Njcx LzEvbzJuMHQ0ekUyVFg3SHptNzNzeUtRVHNQcjUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn3qHxklP wm9dHJYndLontIMvM36v8leVAUEb+w9gjmuZ0vUgI6VNCZfujDXksyT1nfa04ZGN Xg2Hj1ihXY70VSH10ALNmM7n9SVpbHC4EI5kN9TQLXFDEBNhWr+wa6zrv7C+Z0/g lI6OqmJjQDc4yxd/lgkppUTO9KRf/PXJ6oYX6I6aB0MASMCx7sxQxbA/i1uzMNTv 2ghBSHk8TpG8eTH+ZmsL698bfZ4zmIdziLbxTVCmi/Duq3/mlcqohMCpRkbmsp7f BNchApbX/YTh/shE2f0/7JDXlO50Sz39B4o6pFowj75PCrntu+nCDAVxrINmd6FA SXCRPlMeueYv8g== -----END CERTIFICATE-----Generated at Wed Dec 10 17:21:02 2025 by rpki-client