This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft File: o9oBlglsEcIx5JuzCJZwuU2_XoA.mft (raw, json) Hash identifier: 83o99MPT5M6kdrf6sKlGxLLQDJT4KxIOWbBS6Gyh/RE= Subject key identifier: 03:36:55:BE:54:F1:40:7D:B2:FE:43:7B:61:81:6A:9E:94:73:95:EF Authority key identifier: A3:DA:01:96:09:6C:11:C2:31:E4:9B:B3:08:96:70:B9:4D:BF:5E:80 Certificate issuer: /CN=a3da0196096c11c231e49bb3089670b94dbf5e80 Certificate serial: 019B18719A08E2931F229EAFE6BBD7E63C1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o9oBlglsEcIx5JuzCJZwuU2_XoA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft Manifest number: 13B9 Signing time: Sat 13 Dec 2025 16:00:56 +0000 Manifest this update: Sat 13 Dec 2025 16:00:56 +0000 Manifest next update: Sun 14 Dec 2025 16:00:56 +0000 Files and hashes: 1: 6qcJyLkGHGKYEWJcRiN4L6Z8qn8.roa (hash: 5OQd3tPQBKWKRhlqwep2BEZpe6x6xAIuVkUwGHnZJ7w=) 2: o9oBlglsEcIx5JuzCJZwuU2_XoA.crl (hash: Nl+2RD26p4lh7kV3Po3o19ROwGsUVtNfdzjIepFE3uA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft rsync://rpki.ripe.net/repository/DEFAULT/o9oBlglsEcIx5JuzCJZwuU2_XoA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 16:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:18:71:9a:08:e2:93:1f:22:9e:af:e6:bb:d7:e6:3c:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3da0196096c11c231e49bb3089670b94dbf5e80 Validity Not Before: Dec 13 16:00:56 2025 GMT Not After : Dec 14 16:00:56 2025 GMT Subject: CN=033655be54f1407db2fe437b61816a9e947395ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:7d:94:32:96:8f:cd:43:48:f5:4f:1e:c9:4c: 14:c4:70:ca:ab:44:2a:b6:4e:8b:d1:60:fc:0f:d9: 9e:b4:72:4d:2b:cf:d3:22:1c:c3:09:5c:96:ca:f1: ee:af:4d:8d:0a:8b:4f:f6:60:a0:c8:b9:85:21:ec: 85:d3:09:ca:6c:83:0d:7e:ec:39:90:c4:9b:23:18: 19:36:f3:c4:f7:3e:9b:24:7e:f6:65:55:3e:7d:aa: af:a4:02:9f:d4:4c:37:3b:ee:19:db:99:9a:90:4a: 80:eb:8e:2b:02:20:a6:c2:4e:aa:63:ff:8d:69:c3: e4:af:83:ba:e8:9a:c7:20:d2:0e:75:bc:62:20:48: 1f:16:9b:7d:52:4f:73:14:50:c5:81:d1:25:f3:5c: 2e:01:e7:6b:36:42:d2:6b:2c:3e:c0:e9:ce:04:bb: c8:00:65:4c:59:49:0c:1d:e5:ed:ab:0e:e1:14:ac: 4f:cc:9b:97:d8:cc:c1:77:02:44:5a:01:c5:06:3a: 45:29:cf:c6:e9:6b:97:ed:6b:9e:f7:a2:6c:5c:15: 5e:01:7a:5b:cc:54:81:af:19:aa:a0:f8:c6:5c:11: 43:b7:0e:22:d6:76:bc:3f:c9:d7:88:52:66:da:4b: 74:f9:80:99:19:8b:51:6a:5b:85:24:2d:3d:a1:f9: 6b:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:36:55:BE:54:F1:40:7D:B2:FE:43:7B:61:81:6A:9E:94:73:95:EF X509v3 Authority Key Identifier: keyid:A3:DA:01:96:09:6C:11:C2:31:E4:9B:B3:08:96:70:B9:4D:BF:5E:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o9oBlglsEcIx5JuzCJZwuU2_XoA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:d1:f1:e7:6a:03:7e:50:70:7c:67:42:01:24:26:60:01:28: ed:e3:42:9d:7a:49:57:d8:87:ed:54:38:b5:04:e5:1e:e4:22: 13:d8:f0:d3:1a:93:28:db:5b:e2:fe:77:b1:3c:fc:cc:04:91: 97:1a:78:eb:b5:1b:3b:c9:d0:4a:38:29:0f:77:fb:0f:46:5f: 25:46:96:a5:2d:cb:12:81:41:0a:c1:49:18:e6:aa:2c:63:17: 18:17:2b:f9:1a:6f:57:07:13:84:40:e5:62:ff:f0:6f:d0:ff: 77:f6:ad:ec:61:ae:67:c8:0f:b0:c2:f2:01:30:9e:f2:fe:a1: 99:64:a6:11:6f:a9:af:bf:b6:c0:26:f0:9a:9a:f2:4a:b6:46: 9c:73:ef:e7:0c:bc:14:4c:56:f0:fd:4f:b3:db:da:a8:53:e9: 16:6f:0a:79:c0:cc:5d:97:9b:b4:dd:07:61:7d:47:75:7d:fb: b1:4f:4b:2a:31:05:23:f8:14:1f:39:44:76:7f:1e:d2:a3:29: e4:17:5a:18:e0:20:8f:51:d9:25:60:94:64:67:49:d1:c8:5f: 35:cd:72:a4:d4:51:94:a1:a9:34:2d:6e:09:f5:0d:25:45:3e: c4:f7:ac:9f:94:87:bb:63:9b:2c:9f:22:b1:fa:63:9c:73:7c: 2b:8f:6c:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsYcZoI4pMfIp6v5rvX5jwcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzZGEwMTk2MDk2YzExYzIzMWU0OWJiMzA4OTY3MGI5NGRi ZjVlODAwHhcNMjUxMjEzMTYwMDU2WhcNMjUxMjE0MTYwMDU2WjAzMTEwLwYDVQQD EygwMzM2NTViZTU0ZjE0MDdkYjJmZTQzN2I2MTgxNmE5ZTk0NzM5NWVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1n2UMpaPzUNI9U8eyUwUxHDKq0Qq tk6L0WD8D9metHJNK8/TIhzDCVyWyvHur02NCotP9mCgyLmFIeyF0wnKbIMNfuw5 kMSbIxgZNvPE9z6bJH72ZVU+faqvpAKf1Ew3O+4Z25makEqA644rAiCmwk6qY/+N acPkr4O66JrHINIOdbxiIEgfFpt9Uk9zFFDFgdEl81wuAedrNkLSayw+wOnOBLvI AGVMWUkMHeXtqw7hFKxPzJuX2MzBdwJEWgHFBjpFKc/G6WuX7Wue96JsXBVeAXpb zFSBrxmqoPjGXBFDtw4i1na8P8nXiFJm2kt0+YCZGYtRaluFJC09oflr+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAM2Vb5U8UB9sv5De2GBap6Uc5XvMB8GA1UdIwQY MBaAFKPaAZYJbBHCMeSbswiWcLlNv16AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzlvQmxnbHNFY0l4NUp1ekNKWnd1VTJfWG9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy83ZDk4NTQtOTY5ZS00ZTM0LWExZGYt YTMwMmY2YTc0YjA4LzEvbzlvQmxnbHNFY0l4NUp1ekNKWnd1VTJfWG9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy83ZDk4NTQtOTY5ZS00ZTM0LWExZGYtYTMwMmY2YTc0YjA4 LzEvbzlvQmxnbHNFY0l4NUp1ekNKWnd1VTJfWG9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAStHx52oD flBwfGdCASQmYAEo7eNCnXpJV9iH7VQ4tQTlHuQiE9jw0xqTKNtb4v53sTz8zASR lxp467UbO8nQSjgpD3f7D0ZfJUaWpS3LEoFBCsFJGOaqLGMXGBcr+RpvVwcThEDl Yv/wb9D/d/at7GGuZ8gPsMLyATCe8v6hmWSmEW+pr7+2wCbwmprySrZGnHPv5wy8 FExW8P1Ps9vaqFPpFm8KecDMXZebtN0HYX1HdX37sU9LKjEFI/gUHzlEdn8e0qMp 5BdaGOAgj1HZJWCUZGdJ0chfNc1ypNRRlKGpNC1uCfUNJUU+xPesn5SHu2ObLJ8i sfpjnHN8K49snQ== -----END CERTIFICATE-----Generated at Sun Dec 14 01:02:27 2025 by rpki-client