This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/c3b68d-bc5e-4a42-b1b6-dfe41088cc03/1/o9KLNY1BezfsyLKRv5nBUVvOj3I.mft File: o9KLNY1BezfsyLKRv5nBUVvOj3I.mft (raw, json) Hash identifier: keGNKNJ9DVNsLIHYOHnxBWgKvBPOIlYZ5k2WEmJPmCU= Subject key identifier: 7C:77:BB:AE:49:43:1E:9C:71:0F:08:39:5F:1E:27:D9:FF:51:AD:74 Authority key identifier: A3:D2:8B:35:8D:41:7B:37:EC:C8:B2:91:BF:99:C1:51:5B:CE:8F:72 Certificate issuer: /CN=a3d28b358d417b37ecc8b291bf99c1515bce8f72 Certificate serial: 019AF12DC117270C6DA75F252743F155FD38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o9KLNY1BezfsyLKRv5nBUVvOj3I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/c3b68d-bc5e-4a42-b1b6-dfe41088cc03/1/o9KLNY1BezfsyLKRv5nBUVvOj3I.mft Manifest number: 12DF Signing time: Sat 06 Dec 2025 01:01:38 +0000 Manifest this update: Sat 06 Dec 2025 01:01:38 +0000 Manifest next update: Sun 07 Dec 2025 01:01:38 +0000 Files and hashes: 1: o9KLNY1BezfsyLKRv5nBUVvOj3I.crl (hash: bgLLdkcdJa2T6GyPRA8Q0mL10oHs2BPNPaKdB8D2bx4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/c3b68d-bc5e-4a42-b1b6-dfe41088cc03/1/o9KLNY1BezfsyLKRv5nBUVvOj3I.crl rsync://rpki.ripe.net/repository/DEFAULT/55/c3b68d-bc5e-4a42-b1b6-dfe41088cc03/1/o9KLNY1BezfsyLKRv5nBUVvOj3I.mft rsync://rpki.ripe.net/repository/DEFAULT/o9KLNY1BezfsyLKRv5nBUVvOj3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:c1:17:27:0c:6d:a7:5f:25:27:43:f1:55:fd:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3d28b358d417b37ecc8b291bf99c1515bce8f72 Validity Not Before: Dec 6 01:01:38 2025 GMT Not After : Dec 7 01:01:38 2025 GMT Subject: CN=7c77bbae49431e9c710f08395f1e27d9ff51ad74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:fa:32:5a:ec:70:3c:86:3f:b0:0a:24:a9:ef: 33:68:a6:bc:ff:07:0d:ec:24:76:57:13:f6:e2:51: 18:e3:01:54:24:4f:6e:2a:9c:47:28:1c:b4:1f:2d: ea:ed:e7:c4:1d:27:99:5a:d6:5d:15:97:89:c3:ca: 23:9b:b1:6d:76:2c:82:fa:1b:8a:85:7d:fc:c4:ff: 6b:ce:e2:f8:a5:50:3f:39:98:c0:03:86:ea:07:67: 17:3e:61:82:0c:ce:5a:ba:d6:ed:a6:0d:c0:c0:ee: 3f:5f:be:69:e5:ff:04:ac:2b:ea:5d:5e:99:3c:c5: 19:60:5a:50:7b:27:72:93:2e:d8:f0:f8:cc:db:b7: 43:07:8d:c1:1d:bc:cb:bf:2e:75:b2:bc:6e:96:a0: b8:c7:44:6d:36:33:d3:a4:58:cb:d7:cf:15:1d:23: 82:6d:3e:9c:73:ad:e7:be:8b:29:87:b4:38:d2:a6: 29:36:e6:f8:f0:20:4c:ba:89:58:1a:84:16:c7:ea: 86:ef:66:a9:70:df:c8:55:5e:4e:78:9c:cf:c2:c2: 8d:d1:65:d6:a5:06:17:7e:1f:8f:0f:ce:0f:12:bf: 2e:c7:34:70:2e:6e:73:99:3a:15:c5:b3:41:af:de: b7:8b:e3:fb:46:64:7c:d3:db:f9:48:5f:4c:0b:84: 24:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:77:BB:AE:49:43:1E:9C:71:0F:08:39:5F:1E:27:D9:FF:51:AD:74 X509v3 Authority Key Identifier: keyid:A3:D2:8B:35:8D:41:7B:37:EC:C8:B2:91:BF:99:C1:51:5B:CE:8F:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o9KLNY1BezfsyLKRv5nBUVvOj3I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/c3b68d-bc5e-4a42-b1b6-dfe41088cc03/1/o9KLNY1BezfsyLKRv5nBUVvOj3I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/c3b68d-bc5e-4a42-b1b6-dfe41088cc03/1/o9KLNY1BezfsyLKRv5nBUVvOj3I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:f2:ab:46:42:8a:ea:75:24:38:84:f9:c9:b0:8b:32:52:2e: 22:65:3a:12:10:61:3b:86:a6:76:75:7b:3a:8d:7b:66:57:90: 0c:f2:a2:7c:50:a2:69:db:0d:ef:7f:e3:6b:b9:dd:83:f3:77: c8:b5:6f:b6:ce:fe:98:0e:80:c1:a2:c9:9f:d9:ca:ce:33:5d: 58:52:46:3c:e6:9e:68:a6:65:76:17:24:33:f5:fd:6b:0d:47: 92:c0:4b:ff:e9:49:90:d3:09:56:f8:15:bc:7c:e8:da:be:cb: 4f:05:a1:fe:f9:9a:5a:0f:35:b2:a6:b3:65:cb:52:07:20:08: d8:a0:80:88:a2:4c:61:2d:9a:81:a9:a3:09:8b:83:b7:a9:f3: 71:1e:15:3f:be:77:73:d4:f4:9e:f0:a5:df:68:a6:53:de:20: 48:3d:21:43:29:09:0c:b3:12:08:62:35:56:16:2d:e2:a4:cf: 2f:20:94:67:91:13:7c:e4:20:85:98:04:20:d8:23:ac:83:eb: af:75:d3:37:ff:1c:96:38:e3:49:e5:ea:a8:2a:fe:12:bc:1a: 5a:a0:61:3a:91:0a:d2:9c:2f:4c:8e:40:e2:42:c6:56:21:ac: f9:6b:d6:19:fa:a1:d8:7f:0b:51:49:b2:2f:8b:fa:22:cd:c5: 84:5c:bf:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLcEXJwxtp18lJ0PxVf04MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzZDI4YjM1OGQ0MTdiMzdlY2M4YjI5MWJmOTljMTUxNWJj ZThmNzIwHhcNMjUxMjA2MDEwMTM4WhcNMjUxMjA3MDEwMTM4WjAzMTEwLwYDVQQD Eyg3Yzc3YmJhZTQ5NDMxZTljNzEwZjA4Mzk1ZjFlMjdkOWZmNTFhZDc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvoyWuxwPIY/sAokqe8zaKa8/wcN 7CR2VxP24lEY4wFUJE9uKpxHKBy0Hy3q7efEHSeZWtZdFZeJw8ojm7FtdiyC+huK hX38xP9rzuL4pVA/OZjAA4bqB2cXPmGCDM5autbtpg3AwO4/X75p5f8ErCvqXV6Z PMUZYFpQeydyky7Y8PjM27dDB43BHbzLvy51srxulqC4x0RtNjPTpFjL188VHSOC bT6cc63nvosph7Q40qYpNub48CBMuolYGoQWx+qG72apcN/IVV5OeJzPwsKN0WXW pQYXfh+PD84PEr8uxzRwLm5zmToVxbNBr963i+P7RmR809v5SF9MC4QkwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHx3u65JQx6ccQ8IOV8eJ9n/Ua10MB8GA1UdIwQY MBaAFKPSizWNQXs37Miykb+ZwVFbzo9yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzlLTE5ZMUJlemZzeUxLUnY1bkJVVnZPajNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9jM2I2OGQtYmM1ZS00YTQyLWIxYjYt ZGZlNDEwODhjYzAzLzEvbzlLTE5ZMUJlemZzeUxLUnY1bkJVVnZPajNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9jM2I2OGQtYmM1ZS00YTQyLWIxYjYtZGZlNDEwODhjYzAz LzEvbzlLTE5ZMUJlemZzeUxLUnY1bkJVVnZPajNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADPKrRkKK 6nUkOIT5ybCLMlIuImU6EhBhO4amdnV7Oo17ZleQDPKifFCiadsN73/ja7ndg/N3 yLVvts7+mA6AwaLJn9nKzjNdWFJGPOaeaKZldhckM/X9aw1HksBL/+lJkNMJVvgV vHzo2r7LTwWh/vmaWg81sqazZctSByAI2KCAiKJMYS2agamjCYuDt6nzcR4VP753 c9T0nvCl32imU94gSD0hQykJDLMSCGI1VhYt4qTPLyCUZ5ETfOQghZgEINgjrIPr r3XTN/8cljjjSeXqqCr+ErwaWqBhOpEK0pwvTI5A4kLGViGs+WvWGfqh2H8LUUmy L4v6Is3FhFy/wA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:58:33 2025 by rpki-client