This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/86efb3-ef1e-469c-aeb4-28978c3c7ec5/1/9OcXTG90-poisK3uJRqNZDEjE_I.mft File: 9OcXTG90-poisK3uJRqNZDEjE_I.mft (raw, json) Hash identifier: fOiS6Y3eAMCvJogNyB62XWCIqowXnizTapMyxyuzrk0= Subject key identifier: 0C:13:0E:90:1D:20:25:5B:9F:B2:01:CE:D4:68:4B:53:BF:B0:44:0B Authority key identifier: F4:E7:17:4C:6F:74:FA:9A:22:B0:AD:EE:25:1A:8D:64:31:23:13:F2 Certificate issuer: /CN=f4e7174c6f74fa9a22b0adee251a8d64312313f2 Certificate serial: 019AF31BDDC8FFC838A985366B1BDFD161BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OcXTG90-poisK3uJRqNZDEjE_I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/86efb3-ef1e-469c-aeb4-28978c3c7ec5/1/9OcXTG90-poisK3uJRqNZDEjE_I.mft Manifest number: 16F3 Signing time: Sat 06 Dec 2025 10:01:20 +0000 Manifest this update: Sat 06 Dec 2025 10:01:20 +0000 Manifest next update: Sun 07 Dec 2025 10:01:20 +0000 Files and hashes: 1: 9OcXTG90-poisK3uJRqNZDEjE_I.crl (hash: U3wcKbw3bubZGx+GFEPQj+0htzfa5dwZ+GZTZMr7lq8=) 2: DSwyNAuAz2bJdfrLonxlYBob04I.roa (hash: 3+/CvQ/0iqsF5SqvqkyipksHlcWBh/rqDJFf0zM3tC8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/86efb3-ef1e-469c-aeb4-28978c3c7ec5/1/9OcXTG90-poisK3uJRqNZDEjE_I.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/86efb3-ef1e-469c-aeb4-28978c3c7ec5/1/9OcXTG90-poisK3uJRqNZDEjE_I.mft rsync://rpki.ripe.net/repository/DEFAULT/9OcXTG90-poisK3uJRqNZDEjE_I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:dd:c8:ff:c8:38:a9:85:36:6b:1b:df:d1:61:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4e7174c6f74fa9a22b0adee251a8d64312313f2 Validity Not Before: Dec 6 10:01:20 2025 GMT Not After : Dec 7 10:01:20 2025 GMT Subject: CN=0c130e901d20255b9fb201ced4684b53bfb0440b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:50:9b:7b:1d:08:1b:2a:34:a9:c8:45:2c:c9: 15:70:d4:b6:40:c2:8e:8f:94:b2:02:24:e4:51:f1: 8e:ad:9a:83:29:80:7d:c3:bb:bf:86:f8:06:70:bc: fc:29:a0:64:fe:a6:a4:32:a7:00:32:79:b2:06:eb: 44:ac:5b:1d:e8:be:0f:d7:59:b6:5f:b6:bd:17:a2: c3:6e:b1:f3:80:a3:6b:76:67:f7:a6:7a:6e:bd:be: 03:45:53:d1:76:c0:e9:f1:08:6a:5f:47:2a:fa:fc: 0a:94:38:fa:b6:50:f0:ed:45:ee:83:d9:e0:92:44: 2a:47:1f:c5:9c:94:cf:40:47:cc:2b:b8:62:73:9c: ab:82:be:2e:90:fb:a2:b2:5b:9d:09:0e:40:66:57: 3f:a5:93:2b:45:37:34:93:f2:bc:f9:4e:20:1d:d6: f7:23:33:a4:20:31:19:52:ba:b4:3a:13:31:93:44: a5:bf:3c:5d:01:0c:25:bb:6f:19:1d:5b:ee:d6:9a: 49:db:4e:1b:e7:ea:16:9c:a4:7d:02:73:69:79:e8: e6:99:8e:e6:cb:c3:b1:74:32:61:6a:bc:a1:6d:b9: c8:39:38:7c:f2:25:6c:e3:11:74:b7:95:40:da:43: 13:7f:46:f6:1f:10:98:45:ac:0d:a8:38:4d:f2:c4: 77:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:13:0E:90:1D:20:25:5B:9F:B2:01:CE:D4:68:4B:53:BF:B0:44:0B X509v3 Authority Key Identifier: keyid:F4:E7:17:4C:6F:74:FA:9A:22:B0:AD:EE:25:1A:8D:64:31:23:13:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OcXTG90-poisK3uJRqNZDEjE_I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/86efb3-ef1e-469c-aeb4-28978c3c7ec5/1/9OcXTG90-poisK3uJRqNZDEjE_I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/86efb3-ef1e-469c-aeb4-28978c3c7ec5/1/9OcXTG90-poisK3uJRqNZDEjE_I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:d0:ca:78:bc:8a:59:17:21:13:66:7a:14:d4:b0:96:d4:fc: ef:20:28:58:d6:05:c0:fd:c2:c6:c0:59:7f:78:30:00:3c:19: e9:96:77:55:60:48:d9:9d:b0:46:19:70:00:47:83:4e:79:5e: aa:ab:29:de:cd:c6:8e:03:16:ec:2a:7f:fa:a0:5c:cd:9b:8a: 30:3a:c7:80:52:5d:28:95:52:3a:f5:e7:c1:b7:60:2b:1d:0d: 58:c2:66:71:3a:8a:67:7c:86:76:d5:c3:e7:a4:33:3e:a3:fb: 65:b7:82:d8:c9:a1:63:55:bf:18:ac:f9:10:6f:73:fa:16:3a: c7:18:5e:72:eb:83:36:4b:27:0d:4f:94:ee:1d:52:22:c5:5f: 2b:b4:97:8f:2b:16:67:c7:e5:69:03:4e:8e:42:e5:e9:85:63: b9:d4:d6:64:52:28:12:c9:7a:d1:da:4a:7e:b0:45:d7:40:70: 96:07:3b:37:a2:35:c3:ca:75:09:4b:71:92:91:48:3a:ac:a2: d6:42:2c:88:82:9e:18:51:22:61:64:f1:2b:31:67:4d:c7:e8: 0e:c7:5d:9d:46:4c:49:a6:90:a9:a9:ad:61:d2:67:b4:15:0c: 97:3f:84:87:33:12:83:54:88:ad:a9:8b:05:c6:a7:c2:ba:f4: 81:64:1f:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG93I/8g4qYU2axvf0WG7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0ZTcxNzRjNmY3NGZhOWEyMmIwYWRlZTI1MWE4ZDY0MzEy MzEzZjIwHhcNMjUxMjA2MTAwMTIwWhcNMjUxMjA3MTAwMTIwWjAzMTEwLwYDVQQD EygwYzEzMGU5MDFkMjAyNTViOWZiMjAxY2VkNDY4NGI1M2JmYjA0NDBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFCbex0IGyo0qchFLMkVcNS2QMKO j5SyAiTkUfGOrZqDKYB9w7u/hvgGcLz8KaBk/qakMqcAMnmyButErFsd6L4P11m2 X7a9F6LDbrHzgKNrdmf3pnpuvb4DRVPRdsDp8QhqX0cq+vwKlDj6tlDw7UXug9ng kkQqRx/FnJTPQEfMK7hic5yrgr4ukPuisludCQ5AZlc/pZMrRTc0k/K8+U4gHdb3 IzOkIDEZUrq0OhMxk0SlvzxdAQwlu28ZHVvu1ppJ204b5+oWnKR9AnNpeejmmY7m y8OxdDJharyhbbnIOTh88iVs4xF0t5VA2kMTf0b2HxCYRawNqDhN8sR3eQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAwTDpAdICVbn7IBztRoS1O/sEQLMB8GA1UdIwQY MBaAFPTnF0xvdPqaIrCt7iUajWQxIxPyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOU9jWFRHOTAtcG9pc0szdUpScU5aREVqRV9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi84NmVmYjMtZWYxZS00NjljLWFlYjQt Mjg5NzhjM2M3ZWM1LzEvOU9jWFRHOTAtcG9pc0szdUpScU5aREVqRV9JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi84NmVmYjMtZWYxZS00NjljLWFlYjQtMjg5NzhjM2M3ZWM1 LzEvOU9jWFRHOTAtcG9pc0szdUpScU5aREVqRV9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAddDKeLyK WRchE2Z6FNSwltT87yAoWNYFwP3CxsBZf3gwADwZ6ZZ3VWBI2Z2wRhlwAEeDTnle qqsp3s3GjgMW7Cp/+qBczZuKMDrHgFJdKJVSOvXnwbdgKx0NWMJmcTqKZ3yGdtXD 56QzPqP7ZbeC2MmhY1W/GKz5EG9z+hY6xxhecuuDNksnDU+U7h1SIsVfK7SXjysW Z8flaQNOjkLl6YVjudTWZFIoEsl60dpKfrBF10Bwlgc7N6I1w8p1CUtxkpFIOqyi 1kIsiIKeGFEiYWTxKzFnTcfoDsddnUZMSaaQqamtYdJntBUMlz+EhzMSg1SIramL Bcanwrr0gWQf9g== -----END CERTIFICATE-----Generated at Sat Dec 6 13:50:23 2025 by rpki-client