This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.mft File: 9Oc28Njp5w8a58qhHFWez3CnKCg.mft (raw, json) Hash identifier: YvZzXy2xWqbJ+j8f/Nj1g/SutNRAUdOeK8G95MDn/rs= Subject key identifier: B6:D3:92:A4:63:DF:0B:47:59:53:1C:84:80:46:E5:D7:8B:79:33:72 Authority key identifier: F4:E7:36:F0:D8:E9:E7:0F:1A:E7:CA:A1:1C:55:9E:CF:70:A7:28:28 Certificate issuer: /CN=f4e736f0d8e9e70f1ae7caa11c559ecf70a72828 Certificate serial: 019AF5E652092324CC3EB15A0205DB9EC787 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Oc28Njp5w8a58qhHFWez3CnKCg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 23:01:43 +0000 Manifest this update: Sat 06 Dec 2025 23:01:43 +0000 Manifest next update: Sun 07 Dec 2025 23:01:43 +0000 Files and hashes: 1: 9Oc28Njp5w8a58qhHFWez3CnKCg.crl (hash: tpbQsRKIVpJlep0W3G9E/GL+hOb5TXYZhVlgnh/vLUI=) 2: fGeYBTeIqUGlzWkeYCJZuXTV3NA.roa (hash: NVWcI0sfwe5T87MmDN6gYp0EndXzVclJkGdW6buL8Q8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.crl rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.mft rsync://rpki.ripe.net/repository/DEFAULT/9Oc28Njp5w8a58qhHFWez3CnKCg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e6:52:09:23:24:cc:3e:b1:5a:02:05:db:9e:c7:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4e736f0d8e9e70f1ae7caa11c559ecf70a72828 Validity Not Before: Dec 6 23:01:43 2025 GMT Not After : Dec 7 23:01:43 2025 GMT Subject: CN=b6d392a463df0b4759531c848046e5d78b793372 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:bb:3e:8e:bb:e0:7f:00:b1:a4:9c:88:39:b5: fb:7f:6f:9c:f9:a7:16:b9:0c:47:5c:3e:a0:47:d3: d3:92:65:33:af:d2:f1:f0:3e:ce:3e:0f:82:e0:47: 46:83:ab:76:a4:61:2c:7a:9f:06:de:ce:d8:18:5a: ed:ba:bc:7f:77:7f:31:c5:2d:55:67:4b:91:3b:70: 79:35:63:fa:d0:bc:b5:31:db:f4:c5:f6:94:e2:bd: 17:c2:a2:13:51:39:47:7e:c3:d5:85:54:da:f5:b8: 68:67:da:e0:26:e7:74:4e:24:07:97:ec:47:7c:56: c2:9b:f9:95:5e:bf:a3:a2:0e:92:59:76:98:80:41: 1f:3c:d7:32:9d:39:b2:24:60:30:78:b4:24:d2:62: 6b:b3:e6:11:5a:53:a1:1d:77:10:10:dc:fd:b8:c6: be:c3:05:f7:ce:83:c7:a6:0e:32:81:ec:de:aa:b6: 9e:c1:6a:c8:8c:54:6d:99:63:d0:33:18:cb:b8:28: a4:7e:3d:33:0f:00:6d:91:65:8c:55:03:89:aa:7f: 20:f7:a9:c4:e6:0e:31:a4:06:ae:7f:48:fe:e1:2e: 3f:99:39:6d:3e:bb:c9:27:c8:c9:16:28:74:99:f5: 26:1a:e6:f8:40:42:d0:c5:e2:32:44:df:50:71:a7: a3:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:D3:92:A4:63:DF:0B:47:59:53:1C:84:80:46:E5:D7:8B:79:33:72 X509v3 Authority Key Identifier: keyid:F4:E7:36:F0:D8:E9:E7:0F:1A:E7:CA:A1:1C:55:9E:CF:70:A7:28:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Oc28Njp5w8a58qhHFWez3CnKCg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:b5:2f:d7:66:a9:06:ed:cb:24:5e:3e:a0:51:7f:89:5c:a4: b0:aa:3f:b9:ad:8e:8f:2e:92:da:ea:44:54:56:30:1d:e9:91: b9:33:04:a3:76:5e:66:ee:b3:1b:05:c9:7f:7b:52:2a:73:d0: ae:62:ce:a9:7d:64:a8:16:f9:cb:c9:1d:2e:1f:64:8c:a4:e1: 52:15:c7:ac:ab:be:01:b6:5b:19:9c:85:df:0a:07:4e:98:11: 9d:5e:8d:fa:6d:13:fa:c0:2a:a3:25:72:af:1e:24:96:19:f8: 87:af:f2:74:1b:09:a8:46:fa:bc:3f:17:4d:c7:02:01:67:1f: fe:f3:ba:68:a0:ca:d4:b8:fd:74:54:16:79:a4:b4:e9:db:93: 44:62:11:6a:ed:d5:9c:30:e1:e9:7e:d3:d9:f1:d5:5f:e6:5d: 43:cf:79:92:90:d5:da:ec:dd:5d:48:44:0e:4f:db:b5:0c:f6: 40:fa:de:4e:ce:15:33:4b:32:13:68:03:2f:1a:80:7c:63:10: 90:db:55:ec:21:55:cb:a5:7e:7a:28:b4:f5:34:4e:f1:7f:3a: 1d:05:58:c1:ba:84:36:e0:51:62:34:c3:04:8e:b8:ec:20:ec: 39:ba:be:83:31:0c:fe:e9:25:35:a8:f8:a9:7d:a0:59:1c:73: f9:e0:f0:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15lIJIyTMPrFaAgXbnseHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0ZTczNmYwZDhlOWU3MGYxYWU3Y2FhMTFjNTU5ZWNmNzBh NzI4MjgwHhcNMjUxMjA2MjMwMTQzWhcNMjUxMjA3MjMwMTQzWjAzMTEwLwYDVQQD EyhiNmQzOTJhNDYzZGYwYjQ3NTk1MzFjODQ4MDQ2ZTVkNzhiNzkzMzcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAybs+jrvgfwCxpJyIObX7f2+c+acW uQxHXD6gR9PTkmUzr9Lx8D7OPg+C4EdGg6t2pGEsep8G3s7YGFrturx/d38xxS1V Z0uRO3B5NWP60Ly1Mdv0xfaU4r0XwqITUTlHfsPVhVTa9bhoZ9rgJud0TiQHl+xH fFbCm/mVXr+jog6SWXaYgEEfPNcynTmyJGAweLQk0mJrs+YRWlOhHXcQENz9uMa+ wwX3zoPHpg4ygezeqraewWrIjFRtmWPQMxjLuCikfj0zDwBtkWWMVQOJqn8g96nE 5g4xpAauf0j+4S4/mTltPrvJJ8jJFih0mfUmGub4QELQxeIyRN9Qcaej8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLbTkqRj3wtHWVMchIBG5deLeTNyMB8GA1UdIwQY MBaAFPTnNvDY6ecPGufKoRxVns9wpygoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOU9jMjhOanA1dzhhNThxaEhGV2V6M0NuS0NnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8zZTJhNzMtZjQ5Ny00OWNjLWI0MjAt ZDdhYjUxNGQ0ZWUyLzEvOU9jMjhOanA1dzhhNThxaEhGV2V6M0NuS0NnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni8zZTJhNzMtZjQ5Ny00OWNjLWI0MjAtZDdhYjUxNGQ0ZWUy LzEvOU9jMjhOanA1dzhhNThxaEhGV2V6M0NuS0NnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfLUv12ap Bu3LJF4+oFF/iVyksKo/ua2Ojy6S2upEVFYwHemRuTMEo3ZeZu6zGwXJf3tSKnPQ rmLOqX1kqBb5y8kdLh9kjKThUhXHrKu+AbZbGZyF3woHTpgRnV6N+m0T+sAqoyVy rx4klhn4h6/ydBsJqEb6vD8XTccCAWcf/vO6aKDK1Lj9dFQWeaS06duTRGIRau3V nDDh6X7T2fHVX+ZdQ895kpDV2uzdXUhEDk/btQz2QPreTs4VM0syE2gDLxqAfGMQ kNtV7CFVy6V+eii09TRO8X86HQVYwbqENuBRYjTDBI647CDsObq+gzEM/uklNaj4 qX2gWRxz+eDwoQ== -----END CERTIFICATE-----Generated at Sun Dec 7 04:16:49 2025 by rpki-client