This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/3f6b4f-7590-4d05-853c-106ed1590129/1/0o9VSu1_jnFG6ctj9eMaXbHhupM.mft File: 0o9VSu1_jnFG6ctj9eMaXbHhupM.mft (raw, json) Hash identifier: hwQm6BVVu6O5YF5wSy2v22jE7sR/ppgl5mEJ6PjmSJc= Subject key identifier: 77:95:9D:C1:3C:0C:4A:61:7D:24:BF:ED:A3:89:A3:19:29:B4:EE:A1 Authority key identifier: D2:8F:55:4A:ED:7F:8E:71:46:E9:CB:63:F5:E3:1A:5D:B1:E1:BA:93 Certificate issuer: /CN=d28f554aed7f8e7146e9cb63f5e31a5db1e1ba93 Certificate serial: 019AF1D2634A1DB949F252542D7B51757C28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0o9VSu1_jnFG6ctj9eMaXbHhupM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/3f6b4f-7590-4d05-853c-106ed1590129/1/0o9VSu1_jnFG6ctj9eMaXbHhupM.mft Manifest number: 175B Signing time: Sat 06 Dec 2025 04:01:28 +0000 Manifest this update: Sat 06 Dec 2025 04:01:28 +0000 Manifest next update: Sun 07 Dec 2025 04:01:28 +0000 Files and hashes: 1: 0o9VSu1_jnFG6ctj9eMaXbHhupM.crl (hash: x0HvXfVDF4r1+hY+tQWEYGLrvqUVdJB8LTN2J/MDzos=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/3f6b4f-7590-4d05-853c-106ed1590129/1/0o9VSu1_jnFG6ctj9eMaXbHhupM.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/3f6b4f-7590-4d05-853c-106ed1590129/1/0o9VSu1_jnFG6ctj9eMaXbHhupM.mft rsync://rpki.ripe.net/repository/DEFAULT/0o9VSu1_jnFG6ctj9eMaXbHhupM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:63:4a:1d:b9:49:f2:52:54:2d:7b:51:75:7c:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d28f554aed7f8e7146e9cb63f5e31a5db1e1ba93 Validity Not Before: Dec 6 04:01:28 2025 GMT Not After : Dec 7 04:01:28 2025 GMT Subject: CN=77959dc13c0c4a617d24bfeda389a31929b4eea1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:0e:16:0f:bf:fc:ed:a1:22:6e:a2:ef:4e:df: 67:08:b9:3a:1f:be:7f:5f:36:42:3a:ee:95:ad:2e: 2b:72:43:d5:ab:1f:c7:d5:66:ec:de:a0:5a:1a:c4: 90:d9:a0:6a:12:d4:0a:d9:63:d0:20:50:7f:3d:02: 86:4c:f1:07:4d:52:22:da:28:f6:09:a1:69:f6:e9: e5:14:42:a9:cf:74:9c:56:95:5d:1a:8b:f4:de:e3: 38:cd:23:bb:7c:0f:a4:0a:b1:fb:44:27:d1:29:65: f0:d7:ca:a2:55:f6:70:af:9e:5e:9b:87:c3:d8:67: 05:d3:f1:17:11:3b:e9:5f:4a:53:be:75:00:4c:3b: ea:6e:2a:6c:2a:60:24:d7:71:05:d3:6a:8c:ad:d0: 7c:cb:31:df:6d:0c:cd:3a:79:c5:8e:73:5f:9f:14: 82:59:67:44:fb:ad:7e:0b:de:bc:7c:4a:f7:27:fe: 70:b8:99:9e:1e:06:8f:d8:ef:65:47:f3:92:03:7a: 25:3c:c2:a7:a2:24:b4:a4:03:d7:b4:c7:95:75:00: 18:1c:f2:4c:8f:b8:d5:95:f5:e5:23:04:53:ae:ab: f5:31:68:46:6b:97:8b:39:59:95:17:14:83:43:eb: e9:97:fa:12:ed:1a:64:24:42:9e:31:82:15:6b:5b: 4c:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:95:9D:C1:3C:0C:4A:61:7D:24:BF:ED:A3:89:A3:19:29:B4:EE:A1 X509v3 Authority Key Identifier: keyid:D2:8F:55:4A:ED:7F:8E:71:46:E9:CB:63:F5:E3:1A:5D:B1:E1:BA:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0o9VSu1_jnFG6ctj9eMaXbHhupM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3f6b4f-7590-4d05-853c-106ed1590129/1/0o9VSu1_jnFG6ctj9eMaXbHhupM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3f6b4f-7590-4d05-853c-106ed1590129/1/0o9VSu1_jnFG6ctj9eMaXbHhupM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:ad:32:9c:fd:4b:0b:31:73:81:97:5a:e3:d8:56:1a:c7:c0: 1d:f2:af:d1:19:6d:a5:4c:ac:6b:ee:aa:3a:d4:ce:c1:69:d3: e5:7e:6b:26:63:90:31:47:56:61:f8:6d:be:25:aa:25:20:39: e2:b5:76:fc:6f:c2:4b:d9:09:13:ee:15:4b:c4:c7:9a:4d:5f: df:be:08:b5:5e:ad:ef:20:89:c0:dd:30:f4:53:7f:35:03:d2: b4:f9:2e:4d:38:d4:43:f5:7e:6b:92:1a:75:39:34:b0:61:9a: 4a:12:65:54:54:49:85:78:f8:dd:d0:8b:65:88:6f:e8:45:2e: 16:67:f4:83:3d:1f:9d:ad:99:63:34:cb:b6:ce:55:71:29:88: 5b:80:de:51:5b:67:3b:5d:60:71:20:ec:bd:09:c7:b6:ad:59: 66:ea:68:8b:1e:76:ac:18:19:e5:81:e6:71:86:cb:ef:26:69: 04:5b:3d:1d:a0:e6:72:87:3a:5b:ae:73:06:13:dd:e4:ea:41: 5b:ff:11:70:a0:c4:64:a4:88:e4:16:ae:24:d5:ce:04:27:d2: c8:f2:2a:3a:28:73:d4:6f:a7:ee:62:95:06:de:d3:10:8e:ae: 21:dc:51:38:53:a9:fb:8b:e5:94:fa:c3:85:1e:ca:db:c4:8b: fc:20:a6:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0mNKHblJ8lJULXtRdXwoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyOGY1NTRhZWQ3ZjhlNzE0NmU5Y2I2M2Y1ZTMxYTVkYjFl MWJhOTMwHhcNMjUxMjA2MDQwMTI4WhcNMjUxMjA3MDQwMTI4WjAzMTEwLwYDVQQD Eyg3Nzk1OWRjMTNjMGM0YTYxN2QyNGJmZWRhMzg5YTMxOTI5YjRlZWExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1g4WD7/87aEibqLvTt9nCLk6H75/ XzZCOu6VrS4rckPVqx/H1Wbs3qBaGsSQ2aBqEtQK2WPQIFB/PQKGTPEHTVIi2ij2 CaFp9unlFEKpz3ScVpVdGov03uM4zSO7fA+kCrH7RCfRKWXw18qiVfZwr55em4fD 2GcF0/EXETvpX0pTvnUATDvqbipsKmAk13EF02qMrdB8yzHfbQzNOnnFjnNfnxSC WWdE+61+C968fEr3J/5wuJmeHgaP2O9lR/OSA3olPMKnoiS0pAPXtMeVdQAYHPJM j7jVlfXlIwRTrqv1MWhGa5eLOVmVFxSDQ+vpl/oS7RpkJEKeMYIVa1tMUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHeVncE8DEphfSS/7aOJoxkptO6hMB8GA1UdIwQY MBaAFNKPVUrtf45xRunLY/XjGl2x4bqTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMG85VlN1MV9qbkZHNmN0ajllTWFYYkhodXBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi8zZjZiNGYtNzU5MC00ZDA1LTg1M2Mt MTA2ZWQxNTkwMTI5LzEvMG85VlN1MV9qbkZHNmN0ajllTWFYYkhodXBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi8zZjZiNGYtNzU5MC00ZDA1LTg1M2MtMTA2ZWQxNTkwMTI5 LzEvMG85VlN1MV9qbkZHNmN0ajllTWFYYkhodXBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJq0ynP1L CzFzgZda49hWGsfAHfKv0RltpUysa+6qOtTOwWnT5X5rJmOQMUdWYfhtviWqJSA5 4rV2/G/CS9kJE+4VS8THmk1f374ItV6t7yCJwN0w9FN/NQPStPkuTTjUQ/V+a5Ia dTk0sGGaShJlVFRJhXj43dCLZYhv6EUuFmf0gz0fna2ZYzTLts5VcSmIW4DeUVtn O11gcSDsvQnHtq1ZZupoix52rBgZ5YHmcYbL7yZpBFs9HaDmcoc6W65zBhPd5OpB W/8RcKDEZKSI5BauJNXOBCfSyPIqOihz1G+n7mKVBt7TEI6uIdxROFOp+4vllPrD hR7K28SL/CCmvg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:06:50 2025 by rpki-client