This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft File: o9oBlglsEcIx5JuzCJZwuU2_XoA.mft (raw, json) Hash identifier: xoEA/hjjSQz20xFC9FFi+187kiW0Fhddmr+M7UgmhsY= Subject key identifier: AA:D7:10:9D:37:F7:14:5A:91:70:9C:AC:C0:76:6A:B3:AE:6E:6A:9D Authority key identifier: A3:DA:01:96:09:6C:11:C2:31:E4:9B:B3:08:96:70:B9:4D:BF:5E:80 Certificate issuer: /CN=a3da0196096c11c231e49bb3089670b94dbf5e80 Certificate serial: 019AF1D1D74B87CE19BE90A4D2FE913A8C00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o9oBlglsEcIx5JuzCJZwuU2_XoA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft Manifest number: 13A5 Signing time: Sat 06 Dec 2025 04:00:52 +0000 Manifest this update: Sat 06 Dec 2025 04:00:52 +0000 Manifest next update: Sun 07 Dec 2025 04:00:52 +0000 Files and hashes: 1: 6qcJyLkGHGKYEWJcRiN4L6Z8qn8.roa (hash: 5OQd3tPQBKWKRhlqwep2BEZpe6x6xAIuVkUwGHnZJ7w=) 2: o9oBlglsEcIx5JuzCJZwuU2_XoA.crl (hash: fviO1PEJ7pO6pG0EsK4mbHz/0dse8N1FjRyo3XoFGoo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft rsync://rpki.ripe.net/repository/DEFAULT/o9oBlglsEcIx5JuzCJZwuU2_XoA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:d7:4b:87:ce:19:be:90:a4:d2:fe:91:3a:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3da0196096c11c231e49bb3089670b94dbf5e80 Validity Not Before: Dec 6 04:00:52 2025 GMT Not After : Dec 7 04:00:52 2025 GMT Subject: CN=aad7109d37f7145a91709cacc0766ab3ae6e6a9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0e:a9:80:5f:53:b6:7b:fb:d8:04:43:45:22: c0:68:70:0b:30:6c:3c:36:c9:5a:b1:96:67:bc:df: 1d:15:b3:12:e3:09:21:3b:38:ab:73:32:18:93:0a: 40:e5:f3:ac:1e:08:8d:61:d0:f4:6f:a1:a4:61:aa: 99:7b:42:df:c0:87:cc:38:72:ec:0a:ba:5a:3c:7c: 7d:49:f6:d7:0e:e8:bf:9c:09:7b:36:b3:ee:36:0f: c1:cb:4a:c8:cd:6e:0b:83:ce:2b:dd:5a:50:11:f4: 6f:96:2b:17:76:50:c3:19:0b:eb:46:98:06:0d:ee: ac:b9:30:89:3b:92:30:ce:20:73:a2:9a:6e:cf:18: 36:f3:9b:05:12:21:00:02:22:68:89:1e:e1:9c:13: 3b:4b:d6:11:6d:27:fa:d8:a8:f9:dd:29:35:d5:7a: 24:2b:d1:ce:21:5f:7b:82:fa:a4:c6:26:2f:d9:0f: c4:94:6f:b6:3e:54:fa:1f:e5:a0:71:3b:ab:4b:7f: 9d:2c:d8:d4:a6:64:46:b9:eb:d7:8a:90:d8:58:59: 3e:09:eb:6f:1b:8f:4b:93:ef:cc:5d:30:ed:b0:b0: 52:8b:6a:38:fe:25:d9:42:e9:2e:30:3c:17:a5:4c: a2:43:89:e3:9c:a3:0d:bc:d2:91:53:bf:1c:bc:59: 19:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:D7:10:9D:37:F7:14:5A:91:70:9C:AC:C0:76:6A:B3:AE:6E:6A:9D X509v3 Authority Key Identifier: keyid:A3:DA:01:96:09:6C:11:C2:31:E4:9B:B3:08:96:70:B9:4D:BF:5E:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o9oBlglsEcIx5JuzCJZwuU2_XoA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:19:63:22:ee:70:48:1b:10:c0:00:50:05:9a:4e:8e:2b:e7: 31:88:8d:64:32:d7:90:00:30:0f:71:34:35:58:a7:6e:99:fa: 4b:61:00:bd:9e:93:2f:82:6d:46:3f:4e:ef:75:fa:24:94:dc: 94:47:6a:22:e0:7d:96:ce:bf:48:f1:09:45:09:d9:90:5f:ac: e2:c2:65:46:ae:6f:5f:68:99:e6:d2:fd:1f:f3:58:94:a6:48: e1:0f:86:93:c6:e2:aa:d9:ef:1a:29:7f:42:ae:0b:fa:de:9f: 14:a6:9b:7f:d6:bb:fb:c3:e6:67:1f:9d:4a:54:6e:2a:7d:3c: 00:06:a5:9e:43:bd:ae:65:4a:a7:0b:70:80:97:61:b8:7c:36: 1c:ea:0f:06:fb:7c:ad:fe:47:60:3d:df:8f:62:96:3c:a2:5c: 7a:6b:5c:ad:8b:7d:31:0a:bd:71:39:06:61:2a:92:32:d4:bb: f2:0e:eb:6a:a7:71:2a:42:dd:4d:a5:c3:56:a0:89:b4:60:c9: e1:33:4a:67:1e:40:03:94:c4:f1:36:4b:46:5e:0a:69:d5:e9: e9:14:67:ea:90:dd:b0:49:83:f2:14:98:14:71:20:c7:c0:1b: 2e:4d:83:d2:54:09:b1:e8:61:41:8a:25:ef:0d:3a:83:8f:91: bc:be:cd:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0ddLh84ZvpCk0v6ROowAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzZGEwMTk2MDk2YzExYzIzMWU0OWJiMzA4OTY3MGI5NGRi ZjVlODAwHhcNMjUxMjA2MDQwMDUyWhcNMjUxMjA3MDQwMDUyWjAzMTEwLwYDVQQD EyhhYWQ3MTA5ZDM3ZjcxNDVhOTE3MDljYWNjMDc2NmFiM2FlNmU2YTlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArg6pgF9Ttnv72ARDRSLAaHALMGw8 NslasZZnvN8dFbMS4wkhOzirczIYkwpA5fOsHgiNYdD0b6GkYaqZe0LfwIfMOHLs CrpaPHx9SfbXDui/nAl7NrPuNg/By0rIzW4Lg84r3VpQEfRvlisXdlDDGQvrRpgG De6suTCJO5IwziBzoppuzxg285sFEiEAAiJoiR7hnBM7S9YRbSf62Kj53Sk11Xok K9HOIV97gvqkxiYv2Q/ElG+2PlT6H+WgcTurS3+dLNjUpmRGuevXipDYWFk+Cetv G49Lk+/MXTDtsLBSi2o4/iXZQukuMDwXpUyiQ4njnKMNvNKRU78cvFkZ/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKrXEJ039xRakXCcrMB2arOubmqdMB8GA1UdIwQY MBaAFKPaAZYJbBHCMeSbswiWcLlNv16AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzlvQmxnbHNFY0l4NUp1ekNKWnd1VTJfWG9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy83ZDk4NTQtOTY5ZS00ZTM0LWExZGYt YTMwMmY2YTc0YjA4LzEvbzlvQmxnbHNFY0l4NUp1ekNKWnd1VTJfWG9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy83ZDk4NTQtOTY5ZS00ZTM0LWExZGYtYTMwMmY2YTc0YjA4 LzEvbzlvQmxnbHNFY0l4NUp1ekNKWnd1VTJfWG9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUhljIu5w SBsQwABQBZpOjivnMYiNZDLXkAAwD3E0NVinbpn6S2EAvZ6TL4JtRj9O73X6JJTc lEdqIuB9ls6/SPEJRQnZkF+s4sJlRq5vX2iZ5tL9H/NYlKZI4Q+Gk8biqtnvGil/ Qq4L+t6fFKabf9a7+8PmZx+dSlRuKn08AAalnkO9rmVKpwtwgJdhuHw2HOoPBvt8 rf5HYD3fj2KWPKJcemtcrYt9MQq9cTkGYSqSMtS78g7raqdxKkLdTaXDVqCJtGDJ 4TNKZx5AA5TE8TZLRl4KadXp6RRn6pDdsEmD8hSYFHEgx8AbLk2D0lQJsehhQYol 7w06g4+RvL7NqA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:21:00 2025 by rpki-client