This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/4630fd-a0ca-48a0-bcab-90a8c6e785c9/1/rOSXY9L9uQmGRpQDBmy15qeCXww.mft File: rOSXY9L9uQmGRpQDBmy15qeCXww.mft (raw, json) Hash identifier: wFumpHRHBFnZEHAf/fzQ0OhtXvXVFHHjvPhfHsU0z3c= Subject key identifier: 59:97:4F:8E:C7:0D:B1:21:DB:11:EA:EF:CD:91:59:63:35:92:44:3A Authority key identifier: AC:E4:97:63:D2:FD:B9:09:86:46:94:03:06:6C:B5:E6:A7:82:5F:0C Certificate issuer: /CN=ace49763d2fdb90986469403066cb5e6a7825f0c Certificate serial: 019B35A06E7E64131648A4E970CD9AE353C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rOSXY9L9uQmGRpQDBmy15qeCXww.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/4630fd-a0ca-48a0-bcab-90a8c6e785c9/1/rOSXY9L9uQmGRpQDBmy15qeCXww.mft Manifest number: 0957 Signing time: Fri 19 Dec 2025 08:01:05 +0000 Manifest this update: Fri 19 Dec 2025 08:01:05 +0000 Manifest next update: Sat 20 Dec 2025 08:01:05 +0000 Files and hashes: 1: D_Ap7aX55j2mvnDRbvve0G_OwsM.roa (hash: rFKERfrglcdmlPd1vXc+xLBg8nNvQQZtBdRb9+OODlU=) 2: rOSXY9L9uQmGRpQDBmy15qeCXww.crl (hash: nRxAk2Ar0jRiKdUDYjtSzDfF4zWIgVT3XUoBGNTmSB4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/4630fd-a0ca-48a0-bcab-90a8c6e785c9/1/rOSXY9L9uQmGRpQDBmy15qeCXww.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/4630fd-a0ca-48a0-bcab-90a8c6e785c9/1/rOSXY9L9uQmGRpQDBmy15qeCXww.mft rsync://rpki.ripe.net/repository/DEFAULT/rOSXY9L9uQmGRpQDBmy15qeCXww.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:a0:6e:7e:64:13:16:48:a4:e9:70:cd:9a:e3:53:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ace49763d2fdb90986469403066cb5e6a7825f0c Validity Not Before: Dec 19 08:01:05 2025 GMT Not After : Dec 20 08:01:05 2025 GMT Subject: CN=59974f8ec70db121db11eaefcd9159633592443a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:6f:2a:9e:49:b6:5d:05:e1:b3:8a:13:93:59: 43:80:1a:c9:20:a0:c1:2a:50:cf:c1:ed:75:24:51: 43:28:b0:cd:a9:ee:54:52:65:d9:9e:dc:d2:59:74: 47:28:6a:b9:6a:86:a1:41:ad:47:ad:a1:63:f8:93: cf:12:a7:07:11:7c:ff:13:90:d3:f6:49:b4:30:2f: 17:57:46:5b:e8:2f:a5:1b:0a:42:40:f6:c3:c9:f1: 09:61:d2:c5:fb:18:9a:32:c4:93:a4:ec:f3:d6:78: 51:3d:2e:ab:01:81:3f:e4:ae:d5:dd:a2:01:e6:d9: a5:36:d2:25:08:f5:de:3b:ba:f0:69:be:5a:31:a2: ef:b3:ce:d6:ef:94:14:5a:7f:73:6b:d4:38:b6:00: bc:ec:7a:77:ea:e8:7b:86:06:64:28:39:76:e5:35: 40:31:2c:99:b4:cb:25:a6:fb:a0:3a:96:d0:0b:e9: 91:a1:60:9a:91:1b:29:0c:55:78:28:bc:21:5c:c9: 62:47:d9:1c:1f:8c:48:20:24:6c:11:9c:69:01:97: 6b:0d:9b:fb:ea:ab:d8:03:6b:62:76:68:88:b7:a7: 85:e8:ac:0f:83:41:ef:c0:87:e0:15:c5:4f:a3:f3: 59:45:02:bb:3f:d0:0e:6b:bf:82:ca:82:aa:4d:d2: 01:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:97:4F:8E:C7:0D:B1:21:DB:11:EA:EF:CD:91:59:63:35:92:44:3A X509v3 Authority Key Identifier: keyid:AC:E4:97:63:D2:FD:B9:09:86:46:94:03:06:6C:B5:E6:A7:82:5F:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rOSXY9L9uQmGRpQDBmy15qeCXww.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/4630fd-a0ca-48a0-bcab-90a8c6e785c9/1/rOSXY9L9uQmGRpQDBmy15qeCXww.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/4630fd-a0ca-48a0-bcab-90a8c6e785c9/1/rOSXY9L9uQmGRpQDBmy15qeCXww.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:a6:c7:9f:68:90:79:b0:4e:b2:69:0c:c1:49:05:df:e1:05: bf:92:a9:9c:23:49:64:7f:42:28:49:08:e7:7f:de:75:5a:47: 9e:89:3a:78:af:b4:3b:77:ee:f4:db:01:14:cc:c1:a0:36:fe: c3:76:a7:b5:bb:ba:2d:e2:13:5f:e7:1e:43:cd:c8:69:c7:e5: 7a:18:19:88:36:80:9e:67:92:2d:5d:04:c0:4f:88:08:34:be: 91:be:2f:ad:61:c7:11:85:64:c3:3a:1c:32:81:50:62:5d:8c: ee:4b:b8:9e:67:95:90:00:24:b2:26:b5:91:a6:91:8f:31:f3: da:89:9f:7d:78:5b:f1:5b:34:4e:8e:59:13:01:0e:cd:ca:74: 9d:86:02:49:20:a6:5e:81:3a:c3:d2:7e:9f:e9:69:70:eb:49: cb:e4:1d:2d:98:40:a2:dc:fa:34:a4:59:93:b4:00:df:6d:ab: a9:52:8c:93:14:ee:31:64:18:e7:53:ea:ab:2c:62:df:54:e8: 82:c7:b3:00:74:a5:f0:60:69:be:61:84:47:68:0d:5b:3a:fe: 81:a8:81:dd:f8:4b:1c:ae:d4:bc:4a:87:35:c0:d9:06:df:e6: 15:7f:97:83:46:44:ef:14:1d:c0:5d:c4:63:b8:7b:ed:e9:f0: 46:52:9a:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1oG5+ZBMWSKTpcM2a41PAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjZTQ5NzYzZDJmZGI5MDk4NjQ2OTQwMzA2NmNiNWU2YTc4 MjVmMGMwHhcNMjUxMjE5MDgwMTA1WhcNMjUxMjIwMDgwMTA1WjAzMTEwLwYDVQQD Eyg1OTk3NGY4ZWM3MGRiMTIxZGIxMWVhZWZjZDkxNTk2MzM1OTI0NDNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr28qnkm2XQXhs4oTk1lDgBrJIKDB KlDPwe11JFFDKLDNqe5UUmXZntzSWXRHKGq5aoahQa1HraFj+JPPEqcHEXz/E5DT 9km0MC8XV0Zb6C+lGwpCQPbDyfEJYdLF+xiaMsSTpOzz1nhRPS6rAYE/5K7V3aIB 5tmlNtIlCPXeO7rwab5aMaLvs87W75QUWn9za9Q4tgC87Hp36uh7hgZkKDl25TVA MSyZtMslpvugOpbQC+mRoWCakRspDFV4KLwhXMliR9kcH4xIICRsEZxpAZdrDZv7 6qvYA2tidmiIt6eF6KwPg0HvwIfgFcVPo/NZRQK7P9AOa7+CyoKqTdIBMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFmXT47HDbEh2xHq782RWWM1kkQ6MB8GA1UdIwQY MBaAFKzkl2PS/bkJhkaUAwZsteangl8MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvck9TWFk5TDl1UW1HUnBRREJteTE1cWVDWHd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS80NjMwZmQtYTBjYS00OGEwLWJjYWIt OTBhOGM2ZTc4NWM5LzEvck9TWFk5TDl1UW1HUnBRREJteTE1cWVDWHd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS80NjMwZmQtYTBjYS00OGEwLWJjYWItOTBhOGM2ZTc4NWM5 LzEvck9TWFk5TDl1UW1HUnBRREJteTE1cWVDWHd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWKbHn2iQ ebBOsmkMwUkF3+EFv5KpnCNJZH9CKEkI53/edVpHnok6eK+0O3fu9NsBFMzBoDb+ w3antbu6LeITX+ceQ83IacflehgZiDaAnmeSLV0EwE+ICDS+kb4vrWHHEYVkwzoc MoFQYl2M7ku4nmeVkAAksia1kaaRjzHz2omffXhb8Vs0To5ZEwEOzcp0nYYCSSCm XoE6w9J+n+lpcOtJy+QdLZhAotz6NKRZk7QA322rqVKMkxTuMWQY51Pqqyxi31To gsezAHSl8GBpvmGER2gNWzr+gaiB3fhLHK7UvEqHNcDZBt/mFX+Xg0ZE7xQdwF3E Y7h77enwRlKahg== -----END CERTIFICATE-----Generated at Fri Dec 19 10:42:11 2025 by rpki-client