This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/9faed1-f642-4e82-8a73-ed99ef64adbf/1/O-0CE2aYcB90xJ-KKp5z6E7JgbY.mft File: O-0CE2aYcB90xJ-KKp5z6E7JgbY.mft (raw, json) Hash identifier: BEi5mz7UC94KDLNPw+a1AJsYG7OEROK4xz0aWjEcsGk= Subject key identifier: 09:97:B7:BC:66:4C:0E:89:D9:C2:E8:3A:4E:98:E5:6A:71:85:B8:22 Authority key identifier: 3B:ED:02:13:66:98:70:1F:74:C4:9F:8A:2A:9E:73:E8:4E:C9:81:B6 Certificate issuer: /CN=3bed02136698701f74c49f8a2a9e73e84ec981b6 Certificate serial: 019AF653409E99D5C1D60EE2CBE2877C6506 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-0CE2aYcB90xJ-KKp5z6E7JgbY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/9faed1-f642-4e82-8a73-ed99ef64adbf/1/O-0CE2aYcB90xJ-KKp5z6E7JgbY.mft Manifest number: 0B9C Signing time: Sun 07 Dec 2025 01:00:42 +0000 Manifest this update: Sun 07 Dec 2025 01:00:42 +0000 Manifest next update: Mon 08 Dec 2025 01:00:42 +0000 Files and hashes: 1: O-0CE2aYcB90xJ-KKp5z6E7JgbY.crl (hash: WfMvy7eNCqKbbdwtwqdUqdZrB0gET6EI9HDZ6pYHipQ=) 2: w9ICT6cKkgB_pyRYfsBkT7I_e5A.roa (hash: Ogtb5a6VjW8bSqLn3V6UgYjH3Wl670+DPbn1H5LtdUE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/9faed1-f642-4e82-8a73-ed99ef64adbf/1/O-0CE2aYcB90xJ-KKp5z6E7JgbY.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/9faed1-f642-4e82-8a73-ed99ef64adbf/1/O-0CE2aYcB90xJ-KKp5z6E7JgbY.mft rsync://rpki.ripe.net/repository/DEFAULT/O-0CE2aYcB90xJ-KKp5z6E7JgbY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:53:40:9e:99:d5:c1:d6:0e:e2:cb:e2:87:7c:65:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bed02136698701f74c49f8a2a9e73e84ec981b6 Validity Not Before: Dec 7 01:00:42 2025 GMT Not After : Dec 8 01:00:42 2025 GMT Subject: CN=0997b7bc664c0e89d9c2e83a4e98e56a7185b822 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:9f:3c:84:8e:1d:74:fe:f5:ce:d5:61:08:2e: 2f:93:78:10:5b:09:d1:bf:a3:11:fb:2a:94:4e:96: 8b:09:bd:6e:73:a9:ee:4d:45:ee:a0:52:79:5e:15: 21:79:08:d5:7d:98:6d:b2:8d:0d:a0:24:2e:0c:e9: 2d:8f:41:ac:98:58:b8:7a:d7:5d:a5:0c:2f:a0:c0: a4:87:0a:3d:2e:15:7c:85:b8:ca:69:50:cc:50:23: a5:7f:49:34:84:08:26:67:2f:74:b4:4b:24:b6:17: a2:af:96:4a:9b:9e:85:c0:a2:49:65:f9:34:74:a6: 32:f9:ba:0d:87:c9:b3:04:f7:05:b1:4e:2e:b9:89: 7b:99:3f:0c:07:07:40:65:d1:ed:4b:24:28:fd:86: 9d:c0:80:6d:76:f9:78:1d:54:55:8e:fb:8d:42:06: 91:fb:7f:d3:1a:2e:d8:ea:ba:71:52:6a:a4:76:c9: f6:12:c3:89:3b:e2:e5:cc:8a:9d:35:c7:c5:07:50: 4b:5c:99:16:31:ee:ce:50:63:4a:63:a3:d2:c3:b8: e1:9b:5a:55:bb:be:6d:13:5a:42:ed:7e:58:70:fd: b9:c7:e9:ca:4f:d8:6e:99:de:5c:af:9b:7b:ad:bf: c7:ce:72:5b:a7:ed:d6:40:c2:fe:a5:3c:33:98:1b: a5:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:97:B7:BC:66:4C:0E:89:D9:C2:E8:3A:4E:98:E5:6A:71:85:B8:22 X509v3 Authority Key Identifier: keyid:3B:ED:02:13:66:98:70:1F:74:C4:9F:8A:2A:9E:73:E8:4E:C9:81:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-0CE2aYcB90xJ-KKp5z6E7JgbY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9faed1-f642-4e82-8a73-ed99ef64adbf/1/O-0CE2aYcB90xJ-KKp5z6E7JgbY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9faed1-f642-4e82-8a73-ed99ef64adbf/1/O-0CE2aYcB90xJ-KKp5z6E7JgbY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:45:7b:4a:2c:ab:dd:8f:be:f6:da:f9:58:1f:ce:26:1f:ac: 57:30:f5:9d:95:4b:9c:b4:03:1e:c2:29:29:78:96:4e:70:2d: f0:6d:17:93:50:f9:e8:dd:4a:6a:6f:4e:5b:d6:84:38:cd:68: ae:c0:bb:63:56:e7:c5:37:ee:75:17:52:3f:f9:65:c9:c7:cc: bd:65:db:59:a1:5c:3e:14:42:8c:83:75:02:3d:09:73:7b:30: c9:0c:d1:8b:6e:69:6e:98:11:73:54:7a:9e:89:3f:d2:91:a1: a2:72:8c:9b:54:d9:df:40:2f:0c:d0:1e:b6:bd:2d:25:f6:0a: 37:b0:a9:4c:11:7b:98:c1:a1:f0:03:52:f5:ee:24:54:68:c4: cc:20:4c:e1:63:d0:13:f7:a9:cc:4f:99:7f:c6:64:9a:ee:84: 5e:ce:38:34:b3:bc:77:8b:f7:f5:03:34:e3:db:ce:48:61:a5: 24:96:24:fe:fc:b9:a9:8a:1f:cd:c2:07:37:9f:68:c4:ac:71: cb:e0:b0:94:a5:44:55:cb:85:12:c5:8d:47:11:46:18:dd:a2: d9:ac:83:a0:26:5d:de:05:5c:b4:b5:8c:a8:6d:39:70:1d:29: a7:67:1e:b4:d0:ac:3e:b6:f2:eb:3d:d5:89:d2:a8:cc:f9:4d: 5f:31:c5:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2U0CemdXB1g7iy+KHfGUGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiZWQwMjEzNjY5ODcwMWY3NGM0OWY4YTJhOWU3M2U4NGVj OTgxYjYwHhcNMjUxMjA3MDEwMDQyWhcNMjUxMjA4MDEwMDQyWjAzMTEwLwYDVQQD EygwOTk3YjdiYzY2NGMwZTg5ZDljMmU4M2E0ZTk4ZTU2YTcxODViODIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZ88hI4ddP71ztVhCC4vk3gQWwnR v6MR+yqUTpaLCb1uc6nuTUXuoFJ5XhUheQjVfZhtso0NoCQuDOktj0GsmFi4etdd pQwvoMCkhwo9LhV8hbjKaVDMUCOlf0k0hAgmZy90tEsktheir5ZKm56FwKJJZfk0 dKYy+boNh8mzBPcFsU4uuYl7mT8MBwdAZdHtSyQo/YadwIBtdvl4HVRVjvuNQgaR +3/TGi7Y6rpxUmqkdsn2EsOJO+LlzIqdNcfFB1BLXJkWMe7OUGNKY6PSw7jhm1pV u75tE1pC7X5YcP25x+nKT9humd5cr5t7rb/HznJbp+3WQML+pTwzmBul+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAmXt7xmTA6J2cLoOk6Y5WpxhbgiMB8GA1UdIwQY MBaAFDvtAhNmmHAfdMSfiiqec+hOyYG2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTy0wQ0UyYVljQjkweEotS0twNXo2RTdKZ2JZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS85ZmFlZDEtZjY0Mi00ZTgyLThhNzMt ZWQ5OWVmNjRhZGJmLzEvTy0wQ0UyYVljQjkweEotS0twNXo2RTdKZ2JZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS85ZmFlZDEtZjY0Mi00ZTgyLThhNzMtZWQ5OWVmNjRhZGJm LzEvTy0wQ0UyYVljQjkweEotS0twNXo2RTdKZ2JZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY0V7Siyr 3Y++9tr5WB/OJh+sVzD1nZVLnLQDHsIpKXiWTnAt8G0Xk1D56N1Kam9OW9aEOM1o rsC7Y1bnxTfudRdSP/llycfMvWXbWaFcPhRCjIN1Aj0Jc3swyQzRi25pbpgRc1R6 nok/0pGhonKMm1TZ30AvDNAetr0tJfYKN7CpTBF7mMGh8ANS9e4kVGjEzCBM4WPQ E/epzE+Zf8Zkmu6EXs44NLO8d4v39QM049vOSGGlJJYk/vy5qYofzcIHN59oxKxx y+CwlKVEVcuFEsWNRxFGGN2i2ayDoCZd3gVctLWMqG05cB0pp2cetNCsPrby6z3V idKozPlNXzHFYw== -----END CERTIFICATE-----Generated at Sun Dec 7 03:45:34 2025 by rpki-client