This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.mft File: O9_XYE36DriuIOkPzxMDk7ioVko.mft (raw, json) Hash identifier: Ub6XwONIa5N0BiRnz3ucc5H9TpxsN32ji8PYE38nrvI= Subject key identifier: A9:A5:45:33:DC:99:D7:C2:95:5C:F7:8D:79:C9:80:04:8C:07:1A:17 Authority key identifier: 3B:DF:D7:60:4D:FA:0E:B8:AE:20:E9:0F:CF:13:03:93:B8:A8:56:4A Certificate issuer: /CN=3bdfd7604dfa0eb8ae20e90fcf130393b8a8564a Certificate serial: 019AF50A344503117A08C44C110D6BC952E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9_XYE36DriuIOkPzxMDk7ioVko.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 19:01:17 +0000 Manifest this update: Sat 06 Dec 2025 19:01:17 +0000 Manifest next update: Sun 07 Dec 2025 19:01:17 +0000 Files and hashes: 1: O9_XYE36DriuIOkPzxMDk7ioVko.crl (hash: NxYGprGaYosh4OfqXlC/tNPOtos1R2bn4A4SZdKHM7s=) 2: m0kgiTT_WYsp23pJuD7SLX4KQwM.roa (hash: VIdUf2MaaJNNuBUU6XlHsX2gourJRTd5TApzwygVz+Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.mft rsync://rpki.ripe.net/repository/DEFAULT/O9_XYE36DriuIOkPzxMDk7ioVko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:34:45:03:11:7a:08:c4:4c:11:0d:6b:c9:52:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bdfd7604dfa0eb8ae20e90fcf130393b8a8564a Validity Not Before: Dec 6 19:01:17 2025 GMT Not After : Dec 7 19:01:17 2025 GMT Subject: CN=a9a54533dc99d7c2955cf78d79c980048c071a17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e1:bb:1a:2c:aa:df:a8:74:da:1c:36:77:cb: f7:d7:5d:1a:d6:17:23:62:fd:94:3a:43:92:d6:b8: c1:62:58:9c:dc:ba:c3:1d:25:3d:1e:cc:0a:01:10: 67:ec:c0:fc:10:d0:18:d8:04:10:74:e8:0c:5d:24: fe:95:4d:8b:cd:cb:0c:ac:b4:a1:ad:8a:ca:35:ad: a6:7c:ab:72:5e:2e:ca:6a:ff:00:8f:93:ad:8e:a0: 42:2c:15:a3:6b:f8:60:82:1b:fc:1a:56:b3:8f:a4: 71:77:a9:3f:0b:4c:f7:22:38:d1:6c:5b:50:02:7a: a0:07:ed:ef:f0:56:f5:e7:7e:b5:0d:b5:88:9f:88: 42:a8:f7:7f:c2:cd:a0:b6:0b:0e:56:cb:78:9d:0d: 3b:9f:e9:d2:78:99:9c:77:7b:b0:f9:33:f2:6e:5a: 7a:89:c0:e0:7d:24:9f:e3:50:db:d7:63:66:61:13: 98:c2:96:8a:ba:38:b8:fc:78:68:db:75:9d:99:95: 28:f2:22:cc:b7:be:c7:6c:9b:17:4b:4c:bf:58:2c: ef:01:45:d9:92:e1:a8:2e:24:6d:68:63:06:c4:3a: 32:e8:ec:9f:8b:f7:3e:34:71:a1:6f:27:1c:05:a0: c4:9d:d1:47:14:15:bb:a1:b5:91:8f:f1:82:a0:ba: b2:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:A5:45:33:DC:99:D7:C2:95:5C:F7:8D:79:C9:80:04:8C:07:1A:17 X509v3 Authority Key Identifier: keyid:3B:DF:D7:60:4D:FA:0E:B8:AE:20:E9:0F:CF:13:03:93:B8:A8:56:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9_XYE36DriuIOkPzxMDk7ioVko.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:b3:50:98:78:a1:16:59:dc:03:99:19:af:32:7a:a4:0b:e6: 3d:33:1e:b0:32:46:54:41:69:96:bb:17:59:84:61:8e:10:0c: 39:ac:99:17:ff:6a:6b:4b:69:5b:39:29:55:0e:07:c4:97:15: 38:bf:42:44:4d:f2:58:46:da:bc:20:90:cd:c2:ea:01:ae:75: d7:1f:5b:8d:3b:ab:b7:a7:7f:1b:18:26:2a:5e:dd:ff:d9:ef: a7:e7:8b:f6:72:87:1f:27:c1:68:4f:a5:2f:b1:c2:8f:a5:62: d3:a3:63:8c:87:83:4e:13:08:cc:63:9d:bd:1f:37:bb:38:14: 7f:0f:01:88:75:4a:51:3d:2e:80:96:20:93:a2:b7:d7:da:a0: f3:40:3c:12:ee:b6:44:e6:9e:f2:2c:27:cf:67:23:2c:a4:e3: 9d:1c:14:a5:98:1a:2f:16:45:f4:a6:f3:5a:ff:d3:9f:a5:49: b6:b0:07:11:a4:89:4d:6a:d5:d3:fa:91:38:5d:84:19:70:50: 8f:db:c4:6a:02:4d:31:30:64:57:b7:82:51:ec:a9:ad:91:15: 55:11:ae:81:70:db:f6:f5:a3:37:b9:9a:51:9c:c8:3d:f2:bc: c6:ea:0c:a3:c4:0a:74:13:9a:c9:87:b4:ae:1f:bc:4f:a1:c3: 43:1a:0d:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CjRFAxF6CMRMEQ1ryVLoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiZGZkNzYwNGRmYTBlYjhhZTIwZTkwZmNmMTMwMzkzYjhh ODU2NGEwHhcNMjUxMjA2MTkwMTE3WhcNMjUxMjA3MTkwMTE3WjAzMTEwLwYDVQQD EyhhOWE1NDUzM2RjOTlkN2MyOTU1Y2Y3OGQ3OWM5ODAwNDhjMDcxYTE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuG7Giyq36h02hw2d8v3110a1hcj Yv2UOkOS1rjBYlic3LrDHSU9HswKARBn7MD8ENAY2AQQdOgMXST+lU2LzcsMrLSh rYrKNa2mfKtyXi7Kav8Aj5OtjqBCLBWja/hgghv8Glazj6Rxd6k/C0z3IjjRbFtQ AnqgB+3v8Fb15361DbWIn4hCqPd/ws2gtgsOVst4nQ07n+nSeJmcd3uw+TPyblp6 icDgfSSf41Db12NmYROYwpaKuji4/Hho23WdmZUo8iLMt77HbJsXS0y/WCzvAUXZ kuGoLiRtaGMGxDoy6Oyfi/c+NHGhbyccBaDEndFHFBW7obWRj/GCoLqywwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKmlRTPcmdfClVz3jXnJgASMBxoXMB8GA1UdIwQY MBaAFDvf12BN+g64riDpD88TA5O4qFZKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzlfWFlFMzZEcml1SU9rUHp4TURrN2lvVmtvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS84ZGMyYzctM2ZjMC00NDZkLTgwN2Mt ZWY2YzllYWQ2MTFjLzEvTzlfWFlFMzZEcml1SU9rUHp4TURrN2lvVmtvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS84ZGMyYzctM2ZjMC00NDZkLTgwN2MtZWY2YzllYWQ2MTFj LzEvTzlfWFlFMzZEcml1SU9rUHp4TURrN2lvVmtvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb7NQmHih FlncA5kZrzJ6pAvmPTMesDJGVEFplrsXWYRhjhAMOayZF/9qa0tpWzkpVQ4HxJcV OL9CRE3yWEbavCCQzcLqAa511x9bjTurt6d/GxgmKl7d/9nvp+eL9nKHHyfBaE+l L7HCj6Vi06NjjIeDThMIzGOdvR83uzgUfw8BiHVKUT0ugJYgk6K319qg80A8Eu62 ROae8iwnz2cjLKTjnRwUpZgaLxZF9KbzWv/Tn6VJtrAHEaSJTWrV0/qROF2EGXBQ j9vEagJNMTBkV7eCUeyprZEVVRGugXDb9vWjN7maUZzIPfK8xuoMo8QKdBOayYe0 rh+8T6HDQxoNeA== -----END CERTIFICATE-----Generated at Sun Dec 7 03:59:14 2025 by rpki-client