This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.mft File: O9_XYE36DriuIOkPzxMDk7ioVko.mft (raw, json) Hash identifier: +Luw+QW8ryZNFgjisMN9RsZn1bNhyJp08TZmcbQU6jA= Subject key identifier: 87:0B:B0:6F:D4:84:D1:8E:DB:CE:5C:6E:1F:E6:7F:AB:08:1A:1F:2B Authority key identifier: 3B:DF:D7:60:4D:FA:0E:B8:AE:20:E9:0F:CF:13:03:93:B8:A8:56:4A Certificate issuer: /CN=3bdfd7604dfa0eb8ae20e90fcf130393b8a8564a Certificate serial: 019B32D5E63BC731CE31BCBFB089DFB078A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9_XYE36DriuIOkPzxMDk7ioVko.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.mft Manifest number: 1783 Signing time: Thu 18 Dec 2025 19:00:37 +0000 Manifest this update: Thu 18 Dec 2025 19:00:37 +0000 Manifest next update: Fri 19 Dec 2025 19:00:37 +0000 Files and hashes: 1: O9_XYE36DriuIOkPzxMDk7ioVko.crl (hash: uneKGr+kUwBzoJZYWbSO9nEhTHHBFUspgAJehXPo1+o=) 2: m0kgiTT_WYsp23pJuD7SLX4KQwM.roa (hash: VIdUf2MaaJNNuBUU6XlHsX2gourJRTd5TApzwygVz+Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.mft rsync://rpki.ripe.net/repository/DEFAULT/O9_XYE36DriuIOkPzxMDk7ioVko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d5:e6:3b:c7:31:ce:31:bc:bf:b0:89:df:b0:78:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bdfd7604dfa0eb8ae20e90fcf130393b8a8564a Validity Not Before: Dec 18 19:00:37 2025 GMT Not After : Dec 19 19:00:37 2025 GMT Subject: CN=870bb06fd484d18edbce5c6e1fe67fab081a1f2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:7d:df:b5:45:da:32:20:a9:e7:80:12:f8:6b: 33:1a:41:82:38:6d:a4:84:9a:ce:de:83:2c:c1:4c: a7:6f:e0:f6:7e:e5:ad:8f:fe:5c:11:6d:5c:4b:c9: ba:fa:08:b3:90:19:24:4d:f7:e4:68:cb:01:dd:8b: 69:d5:3b:9c:09:55:a0:82:ef:3e:29:39:59:0e:ae: 71:b1:54:bf:4e:82:05:39:05:dd:e1:cb:c2:db:c4: ce:f7:a9:c0:64:0c:25:3a:db:63:45:0a:73:47:a2: 69:f0:ef:41:0d:2a:65:64:5c:7d:a4:ab:7b:2e:92: 49:d8:38:f3:d9:82:48:6e:51:00:23:82:40:63:98: b2:13:86:fb:73:0c:cb:a4:94:42:af:4e:e8:75:00: eb:b1:a1:4f:a5:b1:b1:54:21:57:b7:f1:36:82:eb: 2d:19:6a:a4:18:22:5f:60:ca:8b:7f:98:1c:9f:5b: 3e:97:b6:cd:75:15:34:2e:83:67:6d:22:a2:a3:e9: af:d5:e4:96:3e:94:4a:cf:82:14:80:d8:7a:ff:3d: 28:2b:9f:6f:54:b1:7c:68:81:6a:a7:71:16:01:40: 47:75:80:e2:e9:64:fc:ff:7e:8c:e6:30:78:fd:28: 66:ec:a8:d1:05:a0:b6:79:52:ae:f7:cc:0d:33:54: ab:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:0B:B0:6F:D4:84:D1:8E:DB:CE:5C:6E:1F:E6:7F:AB:08:1A:1F:2B X509v3 Authority Key Identifier: keyid:3B:DF:D7:60:4D:FA:0E:B8:AE:20:E9:0F:CF:13:03:93:B8:A8:56:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9_XYE36DriuIOkPzxMDk7ioVko.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:8e:81:79:ac:18:35:19:06:14:89:98:53:b5:e6:45:e9:ae: 1c:f0:51:ac:2f:ab:73:ee:83:8c:b6:b9:20:82:ae:af:7c:1c: 19:42:e1:13:44:f9:45:e9:5c:8c:38:89:1e:08:97:c9:87:d8: 15:9b:db:71:15:02:1b:bb:fc:fb:36:58:d7:f7:e3:39:14:01: 54:26:8e:14:c5:a5:64:fd:e6:51:7c:03:f0:91:bf:ca:40:47: 11:2e:64:80:d4:c2:6b:5b:73:26:36:de:b7:e3:c7:d1:67:24: 3d:c5:7a:01:b7:a0:49:db:2d:24:9a:8c:69:f0:4c:31:be:ba: 71:20:3b:a0:cb:34:5f:6f:d9:7e:63:d1:06:75:d0:77:58:b6: cf:0c:de:8c:29:29:8d:97:2b:0d:3c:24:7e:ff:47:38:07:42: 46:32:ad:7c:59:96:2b:9c:d9:ff:45:a7:72:a7:71:cd:f9:0b: 12:28:1d:46:86:31:bd:15:4e:99:8e:9d:10:7e:5e:80:c7:28: 4e:7e:50:7b:f7:67:36:4d:37:0e:2f:e9:f5:b5:85:95:1b:79: 43:8f:40:23:97:51:14:8e:a5:75:06:72:c6:c8:f1:6e:08:37: 13:19:40:b8:d5:82:58:e5:23:70:18:7e:70:d9:00:c4:70:18: c0:aa:40:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1eY7xzHOMby/sInfsHipMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiZGZkNzYwNGRmYTBlYjhhZTIwZTkwZmNmMTMwMzkzYjhh ODU2NGEwHhcNMjUxMjE4MTkwMDM3WhcNMjUxMjE5MTkwMDM3WjAzMTEwLwYDVQQD Eyg4NzBiYjA2ZmQ0ODRkMThlZGJjZTVjNmUxZmU2N2ZhYjA4MWExZjJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyX3ftUXaMiCp54AS+GszGkGCOG2k hJrO3oMswUynb+D2fuWtj/5cEW1cS8m6+gizkBkkTffkaMsB3Ytp1TucCVWggu8+ KTlZDq5xsVS/ToIFOQXd4cvC28TO96nAZAwlOttjRQpzR6Jp8O9BDSplZFx9pKt7 LpJJ2Djz2YJIblEAI4JAY5iyE4b7cwzLpJRCr07odQDrsaFPpbGxVCFXt/E2gust GWqkGCJfYMqLf5gcn1s+l7bNdRU0LoNnbSKio+mv1eSWPpRKz4IUgNh6/z0oK59v VLF8aIFqp3EWAUBHdYDi6WT8/36M5jB4/Shm7KjRBaC2eVKu98wNM1SrTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIcLsG/UhNGO285cbh/mf6sIGh8rMB8GA1UdIwQY MBaAFDvf12BN+g64riDpD88TA5O4qFZKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzlfWFlFMzZEcml1SU9rUHp4TURrN2lvVmtvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS84ZGMyYzctM2ZjMC00NDZkLTgwN2Mt ZWY2YzllYWQ2MTFjLzEvTzlfWFlFMzZEcml1SU9rUHp4TURrN2lvVmtvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS84ZGMyYzctM2ZjMC00NDZkLTgwN2MtZWY2YzllYWQ2MTFj LzEvTzlfWFlFMzZEcml1SU9rUHp4TURrN2lvVmtvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT46BeawY NRkGFImYU7XmRemuHPBRrC+rc+6DjLa5IIKur3wcGULhE0T5RelcjDiJHgiXyYfY FZvbcRUCG7v8+zZY1/fjORQBVCaOFMWlZP3mUXwD8JG/ykBHES5kgNTCa1tzJjbe t+PH0WckPcV6AbegSdstJJqMafBMMb66cSA7oMs0X2/ZfmPRBnXQd1i2zwzejCkp jZcrDTwkfv9HOAdCRjKtfFmWK5zZ/0WncqdxzfkLEigdRoYxvRVOmY6dEH5egMco Tn5Qe/dnNk03Di/p9bWFlRt5Q49AI5dRFI6ldQZyxsjxbgg3ExlAuNWCWOUjcBh+ cNkAxHAYwKpAlw== -----END CERTIFICATE-----Generated at Thu Dec 18 21:46:20 2025 by rpki-client