This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/c53c3e-aa2d-41ab-a312-2637d13338f1/1/O9lDbSE1wISJe3TGrTbaFwCnqY0.mft File: O9lDbSE1wISJe3TGrTbaFwCnqY0.mft (raw, json) Hash identifier: 9LwpAImVfSxYKwikL2PHLZq1rA117kbiSQFiAhQTrJU= Subject key identifier: AC:91:72:36:94:05:6F:7C:50:57:07:A3:16:53:73:40:70:B8:AF:F6 Authority key identifier: 3B:D9:43:6D:21:35:C0:84:89:7B:74:C6:AD:36:DA:17:00:A7:A9:8D Certificate issuer: /CN=3bd9436d2135c084897b74c6ad36da1700a7a98d Certificate serial: 019B360E285AEBB78A0AB8C1D4A6F9710BA1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9lDbSE1wISJe3TGrTbaFwCnqY0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/c53c3e-aa2d-41ab-a312-2637d13338f1/1/O9lDbSE1wISJe3TGrTbaFwCnqY0.mft Manifest number: 156B Signing time: Fri 19 Dec 2025 10:00:55 +0000 Manifest this update: Fri 19 Dec 2025 10:00:55 +0000 Manifest next update: Sat 20 Dec 2025 10:00:55 +0000 Files and hashes: 1: MkGUvFc5JSBVNeM_VILad8s5zXE.roa (hash: y7TqFtSF44B35KxghjCNu7WMj5pJpzLxmoZgRpNM7r8=) 2: O9lDbSE1wISJe3TGrTbaFwCnqY0.crl (hash: O7K1s8QqV5G1XGdeGMLz0CS991GNT0ZTezNHqeV9XzI=) 3: VekG2JeXHUDy0fRDzXtFdNU8lfE.roa (hash: S50KN9jOHHSMt2/wCQRFtxbSHAYvoJTEJC1VbDgG6ns=) 4: XlsfqVnPq85M-ZJSh02UMv7bAq8.roa (hash: RvxcNQlHBl5xgY24wu2zM7ZcwbvvsV992ncfxEdC62I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/c53c3e-aa2d-41ab-a312-2637d13338f1/1/O9lDbSE1wISJe3TGrTbaFwCnqY0.crl rsync://rpki.ripe.net/repository/DEFAULT/78/c53c3e-aa2d-41ab-a312-2637d13338f1/1/O9lDbSE1wISJe3TGrTbaFwCnqY0.mft rsync://rpki.ripe.net/repository/DEFAULT/O9lDbSE1wISJe3TGrTbaFwCnqY0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:0e:28:5a:eb:b7:8a:0a:b8:c1:d4:a6:f9:71:0b:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bd9436d2135c084897b74c6ad36da1700a7a98d Validity Not Before: Dec 19 10:00:55 2025 GMT Not After : Dec 20 10:00:55 2025 GMT Subject: CN=ac91723694056f7c505707a31653734070b8aff6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b0:54:76:18:f5:68:0b:e2:31:1a:bf:30:f9: f8:77:7d:db:81:b2:f2:2a:d5:32:c8:79:3a:a0:d1: a4:07:48:e7:6f:0b:0b:74:72:0d:57:66:de:52:b4: 15:01:09:12:27:c7:77:8a:06:52:5f:6a:e6:f7:8c: a0:db:c3:08:a9:1f:d0:69:1e:eb:af:81:4b:27:fa: 0b:6b:71:c9:a3:be:cc:36:16:da:0d:f7:13:e0:bc: c8:7e:b2:f7:dc:3e:cd:5e:e0:e5:d1:35:e5:67:20: 70:a7:cd:61:dd:17:73:69:89:3c:cb:3c:5f:a2:10: 6d:ee:fb:54:e2:79:93:ea:82:db:91:21:36:7b:f5: a4:15:7b:61:bb:9b:9e:2e:7d:b5:24:21:3d:73:13: a0:85:6a:da:d5:f3:a5:dd:f1:61:31:d6:24:36:52: 14:2a:4c:7d:d4:9d:4b:49:0f:32:31:83:a9:70:82: 2f:57:c5:74:8b:26:43:21:aa:e3:1e:7e:eb:ed:a3: b9:33:66:f4:f0:1d:19:56:64:96:77:28:13:ca:12: 4c:35:16:55:5d:9f:97:18:ac:25:7a:bf:04:15:73: 84:96:18:3a:4f:9e:e2:7c:e2:1e:d4:ff:ed:9c:94: e2:31:de:c4:eb:3b:8f:6b:18:85:36:93:34:3f:38: a1:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:91:72:36:94:05:6F:7C:50:57:07:A3:16:53:73:40:70:B8:AF:F6 X509v3 Authority Key Identifier: keyid:3B:D9:43:6D:21:35:C0:84:89:7B:74:C6:AD:36:DA:17:00:A7:A9:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9lDbSE1wISJe3TGrTbaFwCnqY0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/c53c3e-aa2d-41ab-a312-2637d13338f1/1/O9lDbSE1wISJe3TGrTbaFwCnqY0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/c53c3e-aa2d-41ab-a312-2637d13338f1/1/O9lDbSE1wISJe3TGrTbaFwCnqY0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:97:94:9f:25:61:fa:db:ad:d5:60:67:83:06:51:11:54:e9: 7d:be:df:0a:a1:64:12:5d:46:21:ff:b4:fc:eb:03:e9:1b:8c: b9:fc:61:b2:00:5f:02:03:6c:c2:73:16:73:d8:91:0d:c2:e5: ea:db:3f:cb:f1:b6:26:9c:fe:2c:d5:bd:a4:45:20:ef:f4:c8: fa:dc:1b:a4:21:38:6e:4c:81:63:4f:65:b4:77:86:e9:9b:1c: f5:3a:57:7f:4e:ba:06:e3:e7:66:e5:69:4a:9e:d6:1f:1a:80: 5e:34:34:40:06:34:95:cd:79:d6:76:8d:52:6e:00:b0:d2:9d: 75:b1:e6:1c:08:10:8d:c7:fc:e5:2e:46:63:0c:d2:07:15:f2: 57:d4:72:57:30:83:d2:06:e8:63:26:ef:d4:45:14:77:b1:85: 3a:e8:ee:60:7e:89:cc:7e:00:0f:4f:e7:54:80:47:72:89:bc: dd:99:ba:85:cc:06:f7:d3:7c:6d:78:c2:21:9a:d0:9f:22:8f: 8e:e7:82:12:c7:b1:ba:78:37:0f:9e:4a:21:1d:5b:8c:78:46: 28:e0:ef:93:77:3e:52:11:b9:ca:1c:fa:b7:3d:1a:65:d0:4d: 29:17:82:79:f8:ad:8e:5d:51:0d:de:0e:1e:5d:fa:e9:57:60: 1a:fc:38:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2Diha67eKCrjB1Kb5cQuhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiZDk0MzZkMjEzNWMwODQ4OTdiNzRjNmFkMzZkYTE3MDBh N2E5OGQwHhcNMjUxMjE5MTAwMDU1WhcNMjUxMjIwMTAwMDU1WjAzMTEwLwYDVQQD EyhhYzkxNzIzNjk0MDU2ZjdjNTA1NzA3YTMxNjUzNzM0MDcwYjhhZmY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrBUdhj1aAviMRq/MPn4d33bgbLy KtUyyHk6oNGkB0jnbwsLdHINV2beUrQVAQkSJ8d3igZSX2rm94yg28MIqR/QaR7r r4FLJ/oLa3HJo77MNhbaDfcT4LzIfrL33D7NXuDl0TXlZyBwp81h3RdzaYk8yzxf ohBt7vtU4nmT6oLbkSE2e/WkFXthu5ueLn21JCE9cxOghWra1fOl3fFhMdYkNlIU Kkx91J1LSQ8yMYOpcIIvV8V0iyZDIarjHn7r7aO5M2b08B0ZVmSWdygTyhJMNRZV XZ+XGKwler8EFXOElhg6T57ifOIe1P/tnJTiMd7E6zuPaxiFNpM0PzihcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKyRcjaUBW98UFcHoxZTc0BwuK/2MB8GA1UdIwQY MBaAFDvZQ20hNcCEiXt0xq022hcAp6mNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzlsRGJTRTF3SVNKZTNUR3JUYmFGd0NucVkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9jNTNjM2UtYWEyZC00MWFiLWEzMTIt MjYzN2QxMzMzOGYxLzEvTzlsRGJTRTF3SVNKZTNUR3JUYmFGd0NucVkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC9jNTNjM2UtYWEyZC00MWFiLWEzMTItMjYzN2QxMzMzOGYx LzEvTzlsRGJTRTF3SVNKZTNUR3JUYmFGd0NucVkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABZeUnyVh +tut1WBngwZREVTpfb7fCqFkEl1GIf+0/OsD6RuMufxhsgBfAgNswnMWc9iRDcLl 6ts/y/G2Jpz+LNW9pEUg7/TI+twbpCE4bkyBY09ltHeG6Zsc9TpXf066BuPnZuVp Sp7WHxqAXjQ0QAY0lc151naNUm4AsNKddbHmHAgQjcf85S5GYwzSBxXyV9RyVzCD 0gboYybv1EUUd7GFOujuYH6JzH4AD0/nVIBHcom83Zm6hcwG99N8bXjCIZrQnyKP jueCEsexung3D55KIR1bjHhGKODvk3c+UhG5yhz6tz0aZdBNKReCefitjl1RDd4O Hl366VdgGvw4iA== -----END CERTIFICATE-----Generated at Fri Dec 19 14:00:07 2025 by rpki-client