This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/9OQPA5eaP05K052pg7Z7p-YhXA0.mft File: 9OQPA5eaP05K052pg7Z7p-YhXA0.mft (raw, json) Hash identifier: /APXRyraN2HpN8O3GUmMOzxzyh2fNOOyAQbeIgzkzhs= Subject key identifier: D6:96:07:FF:D2:90:4E:01:DB:55:78:CA:2F:7F:58:2E:51:3E:F7:84 Authority key identifier: F4:E4:0F:03:97:9A:3F:4E:4A:D3:9D:A9:83:B6:7B:A7:E6:21:5C:0D Certificate issuer: /CN=f4e40f03979a3f4e4ad39da983b67ba7e6215c0d Certificate serial: 019AF20926FC6BE327957206EE08B590BC2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OQPA5eaP05K052pg7Z7p-YhXA0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/9OQPA5eaP05K052pg7Z7p-YhXA0.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 05:01:17 +0000 Manifest this update: Sat 06 Dec 2025 05:01:17 +0000 Manifest next update: Sun 07 Dec 2025 05:01:17 +0000 Files and hashes: 1: 9OQPA5eaP05K052pg7Z7p-YhXA0.crl (hash: Z1q2HrYHKZGk/rcHxBqoo6JKV6REFENIsuZ93/PJ/3Y=) 2: scYwC-e6lFDetGsqMlwn-CerbGM.roa (hash: zF9JwzHkhXPpsqlzXkaGHeYsm+/OmjpyP3gHhfOOwfo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/9OQPA5eaP05K052pg7Z7p-YhXA0.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/9OQPA5eaP05K052pg7Z7p-YhXA0.mft rsync://rpki.ripe.net/repository/DEFAULT/9OQPA5eaP05K052pg7Z7p-YhXA0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:26:fc:6b:e3:27:95:72:06:ee:08:b5:90:bc:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4e40f03979a3f4e4ad39da983b67ba7e6215c0d Validity Not Before: Dec 6 05:01:17 2025 GMT Not After : Dec 7 05:01:17 2025 GMT Subject: CN=d69607ffd2904e01db5578ca2f7f582e513ef784 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:1f:11:9d:2b:d4:b1:bc:87:5d:74:b8:5d:d2: 68:57:2c:e1:20:ac:3e:d1:97:08:28:fa:ba:1b:16: fa:58:97:44:02:78:55:e6:85:5f:e5:78:62:64:75: ee:10:87:79:20:3b:5c:f9:76:ee:a4:b6:c8:1d:e3: 02:b1:a1:60:6b:82:32:87:6b:f1:32:67:d5:ea:d6: ab:6b:c0:d1:42:5f:ff:ec:27:aa:5b:86:72:20:1f: 31:6f:de:12:b6:60:62:3e:43:ba:6c:e5:8e:09:17: 5d:92:bf:4b:1b:8f:c2:66:2d:f2:de:f6:c1:38:62: 05:29:07:cc:e1:6c:18:f7:72:df:2f:98:37:7a:c0: 39:dc:01:a9:11:0a:7a:0e:cb:f7:1e:72:6e:11:8f: 05:1e:35:ac:0a:6b:ee:92:ed:39:86:95:ce:3d:0d: ce:85:a1:d5:86:a1:3d:fd:d5:af:7e:4b:80:c5:c5: 1f:c0:73:03:39:60:ab:3e:10:53:6d:e0:28:8f:c2: 8e:0a:05:6e:1d:67:a3:51:7d:c3:40:a8:9f:9a:85: c4:b2:ef:d3:91:42:b1:05:75:e2:d9:ce:25:ce:ed: 13:72:ec:a6:b8:42:01:91:4e:d5:13:8c:77:ce:88: fc:ca:6f:a3:5a:81:e0:12:67:48:82:cd:ea:ca:41: d6:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:96:07:FF:D2:90:4E:01:DB:55:78:CA:2F:7F:58:2E:51:3E:F7:84 X509v3 Authority Key Identifier: keyid:F4:E4:0F:03:97:9A:3F:4E:4A:D3:9D:A9:83:B6:7B:A7:E6:21:5C:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OQPA5eaP05K052pg7Z7p-YhXA0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/9OQPA5eaP05K052pg7Z7p-YhXA0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/9OQPA5eaP05K052pg7Z7p-YhXA0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:08:fa:13:21:39:b4:c7:39:75:2c:01:31:b8:61:46:fe:0c: eb:bd:87:4e:a1:64:34:11:4c:6d:df:9e:c9:0d:d4:25:64:c5: e7:58:60:69:7b:b5:1b:b4:31:1a:3c:a1:a4:68:98:e0:15:a8: 5e:b9:65:d4:12:82:a0:91:99:00:3e:21:f3:1c:41:22:bc:02: dc:80:ed:33:ec:d7:03:5c:e7:0e:0a:ad:53:c8:85:80:80:53: 61:9a:41:22:3b:47:5f:00:e0:67:c1:13:db:09:2e:b8:af:52: 76:4d:74:1e:7a:ed:d5:ac:0d:c6:f7:59:97:11:60:a6:93:61: a4:1a:71:e6:d9:17:44:83:04:e8:36:2b:61:a7:e5:76:b9:7d: 15:05:ed:c2:aa:56:5c:39:13:16:3d:a2:c6:8f:0e:98:43:55: f6:ad:ba:13:18:e3:97:b7:37:47:cd:7a:ef:f2:2d:e1:5e:5f: db:0d:7c:d0:46:59:92:e3:04:23:6a:7d:93:70:8d:30:fb:12: aa:aa:a2:f2:e8:ff:1e:bb:14:ba:56:95:19:a9:43:d6:c3:33: ec:07:64:b3:9e:c3:82:84:c6:62:73:1b:43:30:9e:56:89:a2: 3f:4e:33:d9:a4:fa:9b:1b:b5:f0:bc:4f:b8:cb:6f:31:e3:d6: d9:fb:84:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCSb8a+MnlXIG7gi1kLwrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0ZTQwZjAzOTc5YTNmNGU0YWQzOWRhOTgzYjY3YmE3ZTYy MTVjMGQwHhcNMjUxMjA2MDUwMTE3WhcNMjUxMjA3MDUwMTE3WjAzMTEwLwYDVQQD EyhkNjk2MDdmZmQyOTA0ZTAxZGI1NTc4Y2EyZjdmNTgyZTUxM2VmNzg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqB8RnSvUsbyHXXS4XdJoVyzhIKw+ 0ZcIKPq6Gxb6WJdEAnhV5oVf5XhiZHXuEId5IDtc+XbupLbIHeMCsaFga4Iyh2vx MmfV6tara8DRQl//7CeqW4ZyIB8xb94StmBiPkO6bOWOCRddkr9LG4/CZi3y3vbB OGIFKQfM4WwY93LfL5g3esA53AGpEQp6Dsv3HnJuEY8FHjWsCmvuku05hpXOPQ3O haHVhqE9/dWvfkuAxcUfwHMDOWCrPhBTbeAoj8KOCgVuHWejUX3DQKifmoXEsu/T kUKxBXXi2c4lzu0TcuymuEIBkU7VE4x3zoj8ym+jWoHgEmdIgs3qykHWvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNaWB//SkE4B21V4yi9/WC5RPveEMB8GA1UdIwQY MBaAFPTkDwOXmj9OStOdqYO2e6fmIVwNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOU9RUEE1ZWFQMDVLMDUycGc3WjdwLVloWEEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9kNGZmYzAtYTUyZC00NjFiLTk3MTkt YTkxNGUzY2UzOTQxLzEvOU9RUEE1ZWFQMDVLMDUycGc3WjdwLVloWEEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS9kNGZmYzAtYTUyZC00NjFiLTk3MTktYTkxNGUzY2UzOTQx LzEvOU9RUEE1ZWFQMDVLMDUycGc3WjdwLVloWEEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKQj6EyE5 tMc5dSwBMbhhRv4M672HTqFkNBFMbd+eyQ3UJWTF51hgaXu1G7QxGjyhpGiY4BWo Xrll1BKCoJGZAD4h8xxBIrwC3IDtM+zXA1znDgqtU8iFgIBTYZpBIjtHXwDgZ8ET 2wkuuK9Sdk10Hnrt1awNxvdZlxFgppNhpBpx5tkXRIME6DYrYafldrl9FQXtwqpW XDkTFj2ixo8OmENV9q26Exjjl7c3R8167/It4V5f2w180EZZkuMEI2p9k3CNMPsS qqqi8uj/HrsUulaVGalD1sMz7Adks57DgoTGYnMbQzCeVomiP04z2aT6mxu18LxP uMtvMePW2fuElQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:19:03 2025 by rpki-client