This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.mft File: 9Oc28Njp5w8a58qhHFWez3CnKCg.mft (raw, json) Hash identifier: RyhZnXa4C3jUPeJet2qNxUM8EyUtY5NGTBW+jtlnE78= Subject key identifier: 74:7E:14:82:AF:1C:A3:7D:DA:7D:E9:B1:15:96:37:87:F4:3B:0E:F8 Authority key identifier: F4:E7:36:F0:D8:E9:E7:0F:1A:E7:CA:A1:1C:55:9E:CF:70:A7:28:28 Certificate issuer: /CN=f4e736f0d8e9e70f1ae7caa11c559ecf70a72828 Certificate serial: 019AF3F735927080F835B352FB3993D403D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Oc28Njp5w8a58qhHFWez3CnKCg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 14:00:55 +0000 Manifest this update: Sat 06 Dec 2025 14:00:55 +0000 Manifest next update: Sun 07 Dec 2025 14:00:55 +0000 Files and hashes: 1: 9Oc28Njp5w8a58qhHFWez3CnKCg.crl (hash: d/MV15WwEYqpCLpxWUVKwG+DRiJG0qKKi/+3nHWK2rs=) 2: fGeYBTeIqUGlzWkeYCJZuXTV3NA.roa (hash: NVWcI0sfwe5T87MmDN6gYp0EndXzVclJkGdW6buL8Q8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.crl rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.mft rsync://rpki.ripe.net/repository/DEFAULT/9Oc28Njp5w8a58qhHFWez3CnKCg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:35:92:70:80:f8:35:b3:52:fb:39:93:d4:03:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4e736f0d8e9e70f1ae7caa11c559ecf70a72828 Validity Not Before: Dec 6 14:00:55 2025 GMT Not After : Dec 7 14:00:55 2025 GMT Subject: CN=747e1482af1ca37dda7de9b115963787f43b0ef8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ed:0b:2d:cd:79:06:9a:c2:e3:f5:7e:0c:50: fa:46:cd:1c:51:5c:f2:50:1b:e8:75:17:5c:b0:ea: e9:6e:0e:81:a3:7d:17:df:f1:e5:f1:34:4e:c4:9a: e8:b2:68:88:1a:dd:c9:c8:59:9c:b4:95:80:4a:a7: b1:17:c5:dd:db:df:99:ce:1a:83:ac:6f:86:53:68: ab:47:5f:86:1a:6e:dd:38:2d:4b:40:6a:2f:3a:a4: 81:88:90:6a:f8:5b:59:aa:00:81:3a:16:8f:0a:96: a0:5d:1b:cd:7f:4c:9f:4b:4e:fb:29:06:58:87:16: 73:4c:3d:1b:bb:22:67:3c:6b:5e:51:d8:12:db:55: 6a:a9:f7:1d:d9:e4:56:df:c6:1c:d1:4d:78:a5:a7: 1a:5d:46:48:e8:3b:c8:df:c7:81:31:0a:56:ef:8a: 19:a6:07:7e:e8:1f:03:44:cb:88:1c:e0:65:33:e3: 83:cf:ff:ab:a2:07:bc:e1:14:5a:7f:85:88:b2:19: 46:77:1b:ff:c0:74:5f:9f:3b:44:14:a5:93:90:7d: 76:02:15:f0:57:6a:b4:54:44:9c:48:94:12:08:56: 32:d7:f8:13:ed:1b:ad:6f:92:62:cf:c5:b3:74:16: 58:a4:98:a2:89:86:a7:6a:ca:13:8f:82:14:36:a0: 83:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:7E:14:82:AF:1C:A3:7D:DA:7D:E9:B1:15:96:37:87:F4:3B:0E:F8 X509v3 Authority Key Identifier: keyid:F4:E7:36:F0:D8:E9:E7:0F:1A:E7:CA:A1:1C:55:9E:CF:70:A7:28:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Oc28Njp5w8a58qhHFWez3CnKCg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:2f:c0:54:a9:10:38:a4:51:6b:2e:91:aa:ef:62:b2:c9:03: c9:8e:a3:14:a8:12:13:64:74:4a:b0:5a:6a:79:d8:8d:3a:2e: 34:55:e6:1e:89:16:48:99:32:da:b3:ca:41:ae:45:77:9d:f4: d4:21:9c:67:d1:e7:2d:52:2f:83:07:c1:4a:46:3d:06:c6:15: 1a:41:4a:f0:62:a9:12:7e:92:2e:74:6a:06:00:3b:5f:d7:3b: ce:f2:df:3c:36:b5:df:73:8e:89:08:09:e6:fe:e6:a0:17:8b: 71:13:2c:24:5d:55:fa:7f:6a:66:43:9f:50:e2:98:b6:a7:29: ae:9e:d4:30:18:bd:42:b7:f5:bc:4f:e7:0e:92:96:22:cd:7d: be:84:eb:40:5f:06:87:af:ed:82:6d:f7:b8:86:f1:ce:f3:f7: a5:fd:3a:d7:f8:6e:ac:5a:33:14:68:b4:71:a7:e2:07:4b:36: 37:1c:3f:7b:43:d0:84:cf:d1:9c:87:ac:26:df:07:d7:c3:4e: b3:4f:c5:2e:ae:44:d1:a9:bf:d3:34:4c:11:06:77:60:40:84: 07:dd:e9:a1:6a:52:d6:77:c1:24:ec:89:58:d0:cf:fc:09:6e: f7:d3:d8:c0:8a:ea:68:d7:df:b7:57:f3:c8:3b:88:a4:94:46: 71:d5:6d:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz9zWScID4NbNS+zmT1APQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0ZTczNmYwZDhlOWU3MGYxYWU3Y2FhMTFjNTU5ZWNmNzBh NzI4MjgwHhcNMjUxMjA2MTQwMDU1WhcNMjUxMjA3MTQwMDU1WjAzMTEwLwYDVQQD Eyg3NDdlMTQ4MmFmMWNhMzdkZGE3ZGU5YjExNTk2Mzc4N2Y0M2IwZWY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2O0LLc15BprC4/V+DFD6Rs0cUVzy UBvodRdcsOrpbg6Bo30X3/Hl8TROxJrosmiIGt3JyFmctJWASqexF8Xd29+ZzhqD rG+GU2irR1+GGm7dOC1LQGovOqSBiJBq+FtZqgCBOhaPCpagXRvNf0yfS077KQZY hxZzTD0buyJnPGteUdgS21Vqqfcd2eRW38Yc0U14pacaXUZI6DvI38eBMQpW74oZ pgd+6B8DRMuIHOBlM+ODz/+roge84RRaf4WIshlGdxv/wHRfnztEFKWTkH12AhXw V2q0VEScSJQSCFYy1/gT7Rutb5Jiz8WzdBZYpJiiiYanasoTj4IUNqCD0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHR+FIKvHKN92n3psRWWN4f0Ow74MB8GA1UdIwQY MBaAFPTnNvDY6ecPGufKoRxVns9wpygoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOU9jMjhOanA1dzhhNThxaEhGV2V6M0NuS0NnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8zZTJhNzMtZjQ5Ny00OWNjLWI0MjAt ZDdhYjUxNGQ0ZWUyLzEvOU9jMjhOanA1dzhhNThxaEhGV2V6M0NuS0NnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni8zZTJhNzMtZjQ5Ny00OWNjLWI0MjAtZDdhYjUxNGQ0ZWUy LzEvOU9jMjhOanA1dzhhNThxaEhGV2V6M0NuS0NnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACS/AVKkQ OKRRay6Rqu9isskDyY6jFKgSE2R0SrBaannYjTouNFXmHokWSJky2rPKQa5Fd530 1CGcZ9HnLVIvgwfBSkY9BsYVGkFK8GKpEn6SLnRqBgA7X9c7zvLfPDa133OOiQgJ 5v7moBeLcRMsJF1V+n9qZkOfUOKYtqcprp7UMBi9Qrf1vE/nDpKWIs19voTrQF8G h6/tgm33uIbxzvP3pf061/hurFozFGi0cafiB0s2Nxw/e0PQhM/RnIesJt8H18NO s0/FLq5E0am/0zRMEQZ3YECEB93poWpS1nfBJOyJWNDP/Alu99PYwIrqaNfft1fz yDuIpJRGcdVtxg== -----END CERTIFICATE-----Generated at Sat Dec 6 22:07:19 2025 by rpki-client