This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.mft File: OS9u5u40bDGRK3Yw2rFM5TxODJk.mft (raw, json) Hash identifier: pCHq0mYuWMnNZZ+23uwD2TRpPeYHW06sCk97I2EAcdI= Subject key identifier: 9C:AD:E2:D8:D0:CE:B6:1D:BC:82:FA:F9:35:0C:B6:05:54:F9:69:F7 Authority key identifier: 39:2F:6E:E6:EE:34:6C:31:91:2B:76:30:DA:B1:4C:E5:3C:4E:0C:99 Certificate issuer: /CN=392f6ee6ee346c31912b7630dab14ce53c4e0c99 Certificate serial: 019AF2AD8D5EB2BA12D9EE9666AB288095E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OS9u5u40bDGRK3Yw2rFM5TxODJk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.mft Manifest number: 04A1 Signing time: Sat 06 Dec 2025 08:00:51 +0000 Manifest this update: Sat 06 Dec 2025 08:00:51 +0000 Manifest next update: Sun 07 Dec 2025 08:00:51 +0000 Files and hashes: 1: OS9u5u40bDGRK3Yw2rFM5TxODJk.crl (hash: X1K4RXs6LJqOI8il3MUGl0IfyXIqmxWylJdul3S0WNY=) 2: byq9jEJ8I-x78db4YmLa9HioKo8.roa (hash: QYVcPpPrnjWxAxRBsq739GpWzHWctl66pKlaoafsOic=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.mft rsync://rpki.ripe.net/repository/DEFAULT/OS9u5u40bDGRK3Yw2rFM5TxODJk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:8d:5e:b2:ba:12:d9:ee:96:66:ab:28:80:95:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=392f6ee6ee346c31912b7630dab14ce53c4e0c99 Validity Not Before: Dec 6 08:00:51 2025 GMT Not After : Dec 7 08:00:51 2025 GMT Subject: CN=9cade2d8d0ceb61dbc82faf9350cb60554f969f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:5b:81:89:b4:88:3a:b4:50:c6:0d:8d:bd:71: c7:39:d3:a1:2d:2a:00:91:70:ae:85:f5:f8:16:e2: e3:80:00:4c:5b:eb:7e:59:7b:ef:71:c7:dc:4b:35: fb:cb:e1:1e:bc:c6:37:e6:6e:c2:78:ad:3d:63:ba: 64:43:77:65:e5:d8:62:ae:5f:a4:31:1a:10:58:70: fc:85:72:30:a3:76:57:b7:0a:99:29:01:85:72:99: a0:2e:c1:75:ef:42:22:64:a9:78:2c:1c:ef:4e:d5: 2c:cf:34:f7:10:1d:9c:df:25:1e:53:ac:25:b8:6e: e4:16:46:83:db:30:06:5a:73:ca:ed:64:6f:bc:82: 96:19:47:e8:c6:9b:b2:ba:6d:99:2a:ea:a3:41:46: 20:5e:7b:b2:15:59:5a:9c:94:08:9f:08:59:80:3c: fb:e4:5e:4e:1a:47:36:b4:2c:f1:f3:93:9a:b1:e7: 76:02:70:8e:f1:1d:e5:ad:b9:7c:60:82:09:4a:66: 5f:f2:29:00:cd:e1:0d:9f:b6:34:2a:c0:1e:26:48: 35:5d:9e:80:1d:70:af:ef:db:88:83:6a:07:9b:ea: 7f:48:2e:3c:53:1d:4d:cb:1d:57:a3:10:45:d4:0a: 80:1e:b0:cf:f9:da:dd:b0:0f:e0:86:33:5f:ea:7f: 7e:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:AD:E2:D8:D0:CE:B6:1D:BC:82:FA:F9:35:0C:B6:05:54:F9:69:F7 X509v3 Authority Key Identifier: keyid:39:2F:6E:E6:EE:34:6C:31:91:2B:76:30:DA:B1:4C:E5:3C:4E:0C:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OS9u5u40bDGRK3Yw2rFM5TxODJk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:0a:54:2c:c2:4b:5f:51:d1:70:53:8c:24:1c:26:de:e8:21: 25:e2:d3:a5:85:86:1f:46:de:b4:a8:58:bc:f7:60:49:57:7a: 8b:a3:f2:ca:4c:88:c9:3b:ce:13:ca:cd:47:86:20:e6:a9:9b: b4:91:7a:14:bd:75:20:08:60:0d:92:ed:13:ee:47:97:99:db: 42:74:30:cc:11:9d:2d:7d:26:c0:e1:c1:03:3d:a6:9d:6d:71: 0c:3a:f4:b6:81:e3:5e:ea:e1:8b:96:b5:b5:7e:89:54:c3:d1: 93:26:17:11:78:41:e5:d4:6d:17:9b:48:6d:ed:04:ff:1c:c5: 9c:c6:72:e9:09:78:45:35:8c:bb:ec:ea:69:53:a3:b7:1c:38: 4d:b6:1d:58:b6:1a:44:1d:f3:1b:fe:2f:9d:59:a9:52:b4:f1: a4:bb:5a:9c:ee:d2:59:03:47:c2:c5:49:e2:b3:e2:91:f8:48: d0:5d:30:ca:f6:6d:8f:e6:b7:fa:91:b7:f1:de:79:ec:31:7b: 70:f6:bb:7b:72:67:30:84:2e:40:3a:aa:58:2f:61:b5:33:4c: 4a:a3:43:de:e0:68:25:71:73:07:c4:5c:38:c0:6d:a5:1d:85: 6e:c6:11:39:24:3a:c2:a7:f6:54:83:07:3a:1a:c5:76:8f:2c: f9:c0:69:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrY1esroS2e6WZqsogJXkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5MmY2ZWU2ZWUzNDZjMzE5MTJiNzYzMGRhYjE0Y2U1M2M0 ZTBjOTkwHhcNMjUxMjA2MDgwMDUxWhcNMjUxMjA3MDgwMDUxWjAzMTEwLwYDVQQD Eyg5Y2FkZTJkOGQwY2ViNjFkYmM4MmZhZjkzNTBjYjYwNTU0Zjk2OWY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFuBibSIOrRQxg2NvXHHOdOhLSoA kXCuhfX4FuLjgABMW+t+WXvvccfcSzX7y+EevMY35m7CeK09Y7pkQ3dl5dhirl+k MRoQWHD8hXIwo3ZXtwqZKQGFcpmgLsF170IiZKl4LBzvTtUszzT3EB2c3yUeU6wl uG7kFkaD2zAGWnPK7WRvvIKWGUfoxpuyum2ZKuqjQUYgXnuyFVlanJQInwhZgDz7 5F5OGkc2tCzx85Oased2AnCO8R3lrbl8YIIJSmZf8ikAzeENn7Y0KsAeJkg1XZ6A HXCv79uIg2oHm+p/SC48Ux1Nyx1XoxBF1AqAHrDP+drdsA/ghjNf6n9+IwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJyt4tjQzrYdvIL6+TUMtgVU+Wn3MB8GA1UdIwQY MBaAFDkvbubuNGwxkSt2MNqxTOU8TgyZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1M5dTV1NDBiREdSSzNZdzJyRk01VHhPREprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi80NWQ5N2UtNDBmZS00N2UwLWIyZTYt OGE3MmExYjZhZjg1LzEvT1M5dTV1NDBiREdSSzNZdzJyRk01VHhPREprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi80NWQ5N2UtNDBmZS00N2UwLWIyZTYtOGE3MmExYjZhZjg1 LzEvT1M5dTV1NDBiREdSSzNZdzJyRk01VHhPREprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdQpULMJL X1HRcFOMJBwm3ughJeLTpYWGH0betKhYvPdgSVd6i6PyykyIyTvOE8rNR4Yg5qmb tJF6FL11IAhgDZLtE+5Hl5nbQnQwzBGdLX0mwOHBAz2mnW1xDDr0toHjXurhi5a1 tX6JVMPRkyYXEXhB5dRtF5tIbe0E/xzFnMZy6Ql4RTWMu+zqaVOjtxw4TbYdWLYa RB3zG/4vnVmpUrTxpLtanO7SWQNHwsVJ4rPikfhI0F0wyvZtj+a3+pG38d557DF7 cPa7e3JnMIQuQDqqWC9htTNMSqND3uBoJXFzB8RcOMBtpR2FbsYROSQ6wqf2VIMH OhrFdo8s+cBpnw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:44:52 2025 by rpki-client