This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.mft File: O9mhd7td-26r5MrXne-PiwBd9lY.mft (raw, json) Hash identifier: DSmfVV7IvL0MEf8q5CKFD24bsTldm8lPDQEVciBFmYU= Subject key identifier: 14:A2:0C:2B:50:94:49:4C:1B:66:8F:AD:5C:B1:C4:F0:65:6C:61:D3 Authority key identifier: 3B:D9:A1:77:BB:5D:FB:6E:AB:E4:CA:D7:9D:EF:8F:8B:00:5D:F6:56 Certificate issuer: /CN=3bd9a177bb5dfb6eabe4cad79def8f8b005df656 Certificate serial: 019AF2E43A124765A11EDE45453B207CCFD2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9mhd7td-26r5MrXne-PiwBd9lY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.mft Manifest number: 12A4 Signing time: Sat 06 Dec 2025 09:00:34 +0000 Manifest this update: Sat 06 Dec 2025 09:00:34 +0000 Manifest next update: Sun 07 Dec 2025 09:00:34 +0000 Files and hashes: 1: 4n60dmESH0S_t55G5kL7m5-9nPQ.roa (hash: 8Yl7mPdCOASLn21jFFZtRnqVACPq2IcHgd8DlOM4RfQ=) 2: BibofgsXi1m02E0sydv0lSzcS6M.roa (hash: 6kPi5tOuSZ0eERv1ZZd/XUAaafp/Tbm9N/8PWSqizA4=) 3: O9mhd7td-26r5MrXne-PiwBd9lY.crl (hash: 5/QSQE6YjDULjtAXmMSrVD+AH6SK6eYmoDnVrvBcAz8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.crl rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.mft rsync://rpki.ripe.net/repository/DEFAULT/O9mhd7td-26r5MrXne-PiwBd9lY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:e4:3a:12:47:65:a1:1e:de:45:45:3b:20:7c:cf:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bd9a177bb5dfb6eabe4cad79def8f8b005df656 Validity Not Before: Dec 6 09:00:34 2025 GMT Not After : Dec 7 09:00:34 2025 GMT Subject: CN=14a20c2b5094494c1b668fad5cb1c4f0656c61d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ec:ae:b4:e3:6c:2e:d0:ed:07:6a:59:f1:60: e0:d9:54:37:93:37:9d:87:77:e8:8e:5d:72:0e:36: 5e:68:20:f4:41:37:12:c9:de:1f:65:ee:1d:e4:42: 49:1c:30:3e:1e:3a:e1:97:49:72:79:15:8e:64:93: 41:74:ee:92:ac:e5:9e:44:24:be:76:c3:ab:e7:f6: 1a:eb:75:b0:74:4a:d7:81:d9:a8:4c:67:6f:0f:7f: df:9d:81:92:88:ed:b7:9f:b2:40:d0:07:f0:c7:a9: 65:90:4e:57:37:02:93:44:01:73:90:3a:eb:41:69: d6:c4:6a:92:ca:59:dc:ce:41:00:f2:c1:dd:05:91: 99:1c:24:36:90:fa:51:d9:91:d6:3b:f6:43:40:1a: 50:8a:25:f7:4a:d6:b8:08:2e:0f:ae:4b:38:e6:01: c7:ea:1b:de:2c:ee:01:eb:b6:1a:0a:c0:09:a9:9d: 80:80:7b:dd:5c:47:12:d4:67:d8:e1:33:94:db:3f: c1:3d:21:0c:60:60:16:44:8d:9e:db:13:ef:54:3d: 2c:9a:f1:e8:f9:e3:7e:41:e8:76:1f:69:6a:93:8f: 44:30:a0:cf:5c:27:4c:d1:f6:39:84:0d:0c:62:20: 4d:dd:c1:96:7a:d2:f6:01:f6:5a:68:09:dd:4b:3c: c2:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:A2:0C:2B:50:94:49:4C:1B:66:8F:AD:5C:B1:C4:F0:65:6C:61:D3 X509v3 Authority Key Identifier: keyid:3B:D9:A1:77:BB:5D:FB:6E:AB:E4:CA:D7:9D:EF:8F:8B:00:5D:F6:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9mhd7td-26r5MrXne-PiwBd9lY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:2d:f2:ec:f0:3b:d2:3e:6d:d9:d8:da:75:b9:f2:c8:14:8a: 98:15:86:d0:a7:a5:f4:76:58:56:e2:cd:34:4b:e3:fc:ba:8a: e3:03:69:7f:06:f4:21:5b:20:04:64:99:f5:1f:d3:d1:d0:98: 72:52:9e:0a:19:29:07:08:61:97:49:28:e5:27:d4:e8:26:ee: 20:b0:b9:df:61:dd:66:24:ad:9d:9f:45:24:df:cf:d8:73:3e: a0:6d:1c:74:bd:b6:ae:79:2c:a4:e4:2a:52:63:b9:7b:74:5c: c1:96:ad:7e:0e:b4:ac:9b:f4:23:6b:66:79:8c:a9:91:9f:fd: 15:6f:dc:41:3e:88:4d:0c:c6:63:a9:33:c8:6f:5f:4c:1e:a3: 36:31:5d:f4:d8:17:58:d0:5a:81:68:b9:4d:32:cb:79:15:a7: e1:88:d6:64:d8:7c:3f:52:9d:54:6b:2e:26:04:4a:62:b0:34: 44:06:f2:e5:e0:9b:8d:24:a7:05:c8:46:e4:d3:a5:d1:8e:ea: 3b:39:41:5f:e2:10:34:62:87:d4:de:c6:d8:b7:1f:9a:34:53: aa:77:91:37:e1:9c:7a:b9:98:c3:8a:b3:d7:6a:3d:81:0a:9d: 3d:9f:6b:c3:23:f2:c8:50:06:23:4c:59:e1:3f:f6:c3:5b:4c: 47:3a:42:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZry5DoSR2WhHt5FRTsgfM/SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiZDlhMTc3YmI1ZGZiNmVhYmU0Y2FkNzlkZWY4ZjhiMDA1 ZGY2NTYwHhcNMjUxMjA2MDkwMDM0WhcNMjUxMjA3MDkwMDM0WjAzMTEwLwYDVQQD EygxNGEyMGMyYjUwOTQ0OTRjMWI2NjhmYWQ1Y2IxYzRmMDY1NmM2MWQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1OyutONsLtDtB2pZ8WDg2VQ3kzed h3fojl1yDjZeaCD0QTcSyd4fZe4d5EJJHDA+Hjrhl0lyeRWOZJNBdO6SrOWeRCS+ dsOr5/Ya63WwdErXgdmoTGdvD3/fnYGSiO23n7JA0Afwx6llkE5XNwKTRAFzkDrr QWnWxGqSylnczkEA8sHdBZGZHCQ2kPpR2ZHWO/ZDQBpQiiX3Sta4CC4Prks45gHH 6hveLO4B67YaCsAJqZ2AgHvdXEcS1GfY4TOU2z/BPSEMYGAWRI2e2xPvVD0smvHo +eN+Qeh2H2lqk49EMKDPXCdM0fY5hA0MYiBN3cGWetL2AfZaaAndSzzCYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBSiDCtQlElMG2aPrVyxxPBlbGHTMB8GA1UdIwQY MBaAFDvZoXe7Xftuq+TK153vj4sAXfZWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzltaGQ3dGQtMjZyNU1yWG5lLVBpd0JkOWxZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9jMGQ0NjctZjYyYS00MTljLWJlODUt ZTM4MDMwYjY5ZDVhLzEvTzltaGQ3dGQtMjZyNU1yWG5lLVBpd0JkOWxZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi9jMGQ0NjctZjYyYS00MTljLWJlODUtZTM4MDMwYjY5ZDVh LzEvTzltaGQ3dGQtMjZyNU1yWG5lLVBpd0JkOWxZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGy3y7PA7 0j5t2djadbnyyBSKmBWG0Kel9HZYVuLNNEvj/LqK4wNpfwb0IVsgBGSZ9R/T0dCY clKeChkpBwhhl0ko5SfU6CbuILC532HdZiStnZ9FJN/P2HM+oG0cdL22rnkspOQq UmO5e3RcwZatfg60rJv0I2tmeYypkZ/9FW/cQT6ITQzGY6kzyG9fTB6jNjFd9NgX WNBagWi5TTLLeRWn4YjWZNh8P1KdVGsuJgRKYrA0RAby5eCbjSSnBchG5NOl0Y7q OzlBX+IQNGKH1N7G2LcfmjRTqneRN+GcermYw4qz12o9gQqdPZ9rwyPyyFAGI0xZ 4T/2w1tMRzpCwQ== -----END CERTIFICATE-----Generated at Sat Dec 6 13:53:31 2025 by rpki-client