This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.mft File: O9VD0EZeovb-uCjxhQSwP0A6xmk.mft (raw, json) Hash identifier: DJGLvwDQJojNPMvP39IhxzZSxCqqjc637XwlNicbVzU= Subject key identifier: ED:03:49:3E:A5:EC:F5:32:94:97:15:93:E3:A4:FE:DD:37:A2:99:2F Authority key identifier: 3B:D5:43:D0:46:5E:A2:F6:FE:B8:28:F1:85:04:B0:3F:40:3A:C6:69 Certificate issuer: /CN=3bd543d0465ea2f6feb828f18504b03f403ac669 Certificate serial: 019AF50A3D973E050000BE64908A1C25627F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9VD0EZeovb-uCjxhQSwP0A6xmk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.mft Manifest number: 119D Signing time: Sat 06 Dec 2025 19:01:20 +0000 Manifest this update: Sat 06 Dec 2025 19:01:20 +0000 Manifest next update: Sun 07 Dec 2025 19:01:20 +0000 Files and hashes: 1: O9VD0EZeovb-uCjxhQSwP0A6xmk.crl (hash: CUjZXzgADkVThRKYH6oiERkJ8fhlDMhHPoA9Zgmj5+c=) 2: x4WRkvTk4Qfvxow9VzZXx3rDXCk.roa (hash: RyOgBcFttRpc6DEmQeaGYO0tOWZlEQp1Uhl8vvwB5VE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.crl rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.mft rsync://rpki.ripe.net/repository/DEFAULT/O9VD0EZeovb-uCjxhQSwP0A6xmk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:3d:97:3e:05:00:00:be:64:90:8a:1c:25:62:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bd543d0465ea2f6feb828f18504b03f403ac669 Validity Not Before: Dec 6 19:01:20 2025 GMT Not After : Dec 7 19:01:20 2025 GMT Subject: CN=ed03493ea5ecf53294971593e3a4fedd37a2992f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:86:04:fc:2a:eb:4d:e4:8c:71:64:95:0a:5d: 38:82:0c:a2:ce:be:c5:cf:d6:04:57:6c:bc:e4:0f: 13:14:70:49:1d:cb:b7:74:e3:e0:3a:d5:12:ca:c0: 0f:89:03:a1:ea:52:8f:fc:49:52:53:61:83:01:b6: 3f:5b:78:59:d1:de:49:74:6f:72:1b:1f:d3:b0:47: 3c:38:df:4d:1b:36:fa:01:e0:e0:f4:c1:39:62:87: e1:89:ba:38:a9:f9:d3:ce:8d:d0:92:35:94:f8:9f: 4a:56:43:c7:39:ae:ad:ee:ea:f5:81:c2:b0:15:0c: 30:1f:c0:ed:3d:47:6c:5f:f0:f0:39:b0:22:f4:d9: ac:11:ab:33:b7:4c:d0:53:d6:c8:0e:85:8f:af:15: 9b:d9:01:d0:83:df:61:77:6c:4f:d0:57:d8:ba:7f: 87:e9:23:29:3b:d7:bb:d7:60:47:3b:5a:77:5f:42: cb:28:6f:14:f3:9e:85:42:d5:82:cc:9e:be:df:55: 4d:e2:6e:82:37:2d:46:37:95:2d:1a:12:b7:b5:85: a6:1e:60:74:8e:a5:39:7a:4d:4f:a1:7f:38:7f:f7: 0d:09:7e:05:70:e1:50:d2:8c:10:e9:a4:18:a5:64: 36:ee:7a:c2:a9:d0:04:71:99:8d:e9:1f:e0:aa:90: 28:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:03:49:3E:A5:EC:F5:32:94:97:15:93:E3:A4:FE:DD:37:A2:99:2F X509v3 Authority Key Identifier: keyid:3B:D5:43:D0:46:5E:A2:F6:FE:B8:28:F1:85:04:B0:3F:40:3A:C6:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9VD0EZeovb-uCjxhQSwP0A6xmk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:ca:f7:61:b2:88:e5:2f:b0:25:ff:92:6a:79:f0:d7:b7:80: bf:d6:c2:bc:8d:7e:15:70:43:dd:56:82:b2:91:95:d1:b3:c8: 68:72:26:f4:fa:47:ea:fd:80:02:28:c5:2c:b1:3c:56:9b:d5: 51:7c:21:92:ec:66:66:45:16:ed:3e:79:7d:b8:5d:e5:dc:a8: 35:11:e8:5a:6d:c0:35:ee:5d:1b:79:11:ac:83:9b:28:36:85: 11:cb:88:39:15:05:e5:fb:24:e7:02:7d:67:f5:0c:ae:3f:ca: 53:b9:31:37:d7:56:be:d1:10:0b:9c:80:d2:a8:f5:da:e5:b1: a6:b8:57:ba:14:46:85:4c:3b:de:e6:7e:30:99:f5:05:63:33: cc:cb:47:6c:56:06:f0:8d:1b:d7:36:aa:5c:e9:de:98:fe:33: 8f:a1:55:6b:55:f0:b3:57:d0:e6:90:90:a4:1f:ed:71:96:17: 80:15:55:af:3a:d7:23:ca:91:06:6b:d6:93:59:16:74:e1:72: 2b:6e:c9:fc:b5:79:d7:7a:95:1b:64:55:69:85:52:f9:d4:bd: fb:88:31:0c:48:7d:b0:7b:9c:94:64:3b:73:b3:7e:05:af:d5: 7e:9c:26:10:05:41:64:e7:4f:db:3b:82:4a:72:27:68:74:a5: 23:09:63:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1Cj2XPgUAAL5kkIocJWJ/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiZDU0M2QwNDY1ZWEyZjZmZWI4MjhmMTg1MDRiMDNmNDAz YWM2NjkwHhcNMjUxMjA2MTkwMTIwWhcNMjUxMjA3MTkwMTIwWjAzMTEwLwYDVQQD EyhlZDAzNDkzZWE1ZWNmNTMyOTQ5NzE1OTNlM2E0ZmVkZDM3YTI5OTJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0IYE/CrrTeSMcWSVCl04ggyizr7F z9YEV2y85A8TFHBJHcu3dOPgOtUSysAPiQOh6lKP/ElSU2GDAbY/W3hZ0d5JdG9y Gx/TsEc8ON9NGzb6AeDg9ME5Yofhibo4qfnTzo3QkjWU+J9KVkPHOa6t7ur1gcKw FQwwH8DtPUdsX/DwObAi9NmsEaszt0zQU9bIDoWPrxWb2QHQg99hd2xP0FfYun+H 6SMpO9e712BHO1p3X0LLKG8U856FQtWCzJ6+31VN4m6CNy1GN5UtGhK3tYWmHmB0 jqU5ek1PoX84f/cNCX4FcOFQ0owQ6aQYpWQ27nrCqdAEcZmN6R/gqpAoRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO0DST6l7PUylJcVk+Ok/t03opkvMB8GA1UdIwQY MBaAFDvVQ9BGXqL2/rgo8YUEsD9AOsZpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzlWRDBFWmVvdmItdUNqeGhRU3dQMEE2eG1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy83OGZlYTktZWZhYy00OTgzLWFjMmIt ZGY0NTA1NGRkOTM0LzEvTzlWRDBFWmVvdmItdUNqeGhRU3dQMEE2eG1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy83OGZlYTktZWZhYy00OTgzLWFjMmItZGY0NTA1NGRkOTM0 LzEvTzlWRDBFWmVvdmItdUNqeGhRU3dQMEE2eG1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABsr3YbKI 5S+wJf+Sannw17eAv9bCvI1+FXBD3VaCspGV0bPIaHIm9PpH6v2AAijFLLE8VpvV UXwhkuxmZkUW7T55fbhd5dyoNRHoWm3ANe5dG3kRrIObKDaFEcuIORUF5fsk5wJ9 Z/UMrj/KU7kxN9dWvtEQC5yA0qj12uWxprhXuhRGhUw73uZ+MJn1BWMzzMtHbFYG 8I0b1zaqXOnemP4zj6FVa1Xws1fQ5pCQpB/tcZYXgBVVrzrXI8qRBmvWk1kWdOFy K27J/LV513qVG2RVaYVS+dS9+4gxDEh9sHuclGQ7c7N+Ba/VfpwmEAVBZOdP2zuC SnInaHSlIwljUw== -----END CERTIFICATE-----Generated at Sun Dec 7 01:39:16 2025 by rpki-client