This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/4630fd-a0ca-48a0-bcab-90a8c6e785c9/1/rOSXY9L9uQmGRpQDBmy15qeCXww.mft File: rOSXY9L9uQmGRpQDBmy15qeCXww.mft (raw, json) Hash identifier: 18sGw2qS7qgu95xFJRM70yQYPxzHKoLehXfpW2SdcsY= Subject key identifier: 2E:93:EF:A5:EA:C6:E3:1C:AD:AA:C7:31:4C:0C:5D:35:88:B3:D1:F9 Authority key identifier: AC:E4:97:63:D2:FD:B9:09:86:46:94:03:06:6C:B5:E6:A7:82:5F:0C Certificate issuer: /CN=ace49763d2fdb90986469403066cb5e6a7825f0c Certificate serial: 019AF209285BC641A1BCC57A132A61B27332 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rOSXY9L9uQmGRpQDBmy15qeCXww.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/4630fd-a0ca-48a0-bcab-90a8c6e785c9/1/rOSXY9L9uQmGRpQDBmy15qeCXww.mft Manifest number: 0934 Signing time: Sat 06 Dec 2025 05:01:17 +0000 Manifest this update: Sat 06 Dec 2025 05:01:17 +0000 Manifest next update: Sun 07 Dec 2025 05:01:17 +0000 Files and hashes: 1: D_Ap7aX55j2mvnDRbvve0G_OwsM.roa (hash: rFKERfrglcdmlPd1vXc+xLBg8nNvQQZtBdRb9+OODlU=) 2: rOSXY9L9uQmGRpQDBmy15qeCXww.crl (hash: EEYun/JbDJD735obzx64gLlz5YLEMW2gZU6UQ40cw38=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/4630fd-a0ca-48a0-bcab-90a8c6e785c9/1/rOSXY9L9uQmGRpQDBmy15qeCXww.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/4630fd-a0ca-48a0-bcab-90a8c6e785c9/1/rOSXY9L9uQmGRpQDBmy15qeCXww.mft rsync://rpki.ripe.net/repository/DEFAULT/rOSXY9L9uQmGRpQDBmy15qeCXww.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:28:5b:c6:41:a1:bc:c5:7a:13:2a:61:b2:73:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ace49763d2fdb90986469403066cb5e6a7825f0c Validity Not Before: Dec 6 05:01:17 2025 GMT Not After : Dec 7 05:01:17 2025 GMT Subject: CN=2e93efa5eac6e31cadaac7314c0c5d3588b3d1f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:fb:77:6f:43:8f:b1:ae:22:c9:fd:a5:04:bc: 93:57:f6:08:5f:d8:42:d3:80:8a:51:0c:72:5f:0a: 85:25:b7:bb:25:d3:a7:e3:bb:41:e5:e8:70:fa:80: 8d:cf:c4:38:e8:b8:70:42:4e:32:08:81:c2:b7:fa: 84:be:11:9b:56:7f:f5:f0:f1:c7:3d:07:71:ec:62: 69:c0:55:36:03:fc:01:9b:6f:93:88:7e:84:9a:37: 81:da:97:30:ca:a2:79:ec:54:89:a3:dc:de:19:55: f4:11:4e:00:ab:2e:57:5d:2c:d4:f7:d7:d7:3d:4d: 89:00:2a:04:ef:df:85:aa:d9:42:fa:a5:1c:50:a5: 3d:6c:03:22:57:d6:e8:ce:59:68:fa:55:bf:45:16: c2:af:62:41:7b:3a:d1:50:a3:92:55:b9:6d:83:49: 8d:d1:19:e2:1d:75:7f:68:19:7a:d2:2a:42:cf:67: b4:7e:bb:3e:32:46:77:91:1d:c8:8f:11:c8:dd:74: 37:c3:b3:1a:09:ef:07:00:cb:dd:d7:99:14:db:1a: d2:62:2a:0d:c8:ed:81:40:dd:f2:a9:b4:f9:4e:5d: f1:f9:9e:6d:f8:94:fa:5e:ba:40:9d:67:97:d2:a1: b1:a5:fd:53:b9:d7:3d:9a:fa:b1:ad:1e:25:bd:a8: bc:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:93:EF:A5:EA:C6:E3:1C:AD:AA:C7:31:4C:0C:5D:35:88:B3:D1:F9 X509v3 Authority Key Identifier: keyid:AC:E4:97:63:D2:FD:B9:09:86:46:94:03:06:6C:B5:E6:A7:82:5F:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rOSXY9L9uQmGRpQDBmy15qeCXww.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/4630fd-a0ca-48a0-bcab-90a8c6e785c9/1/rOSXY9L9uQmGRpQDBmy15qeCXww.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/4630fd-a0ca-48a0-bcab-90a8c6e785c9/1/rOSXY9L9uQmGRpQDBmy15qeCXww.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:65:92:5b:a1:0b:ac:eb:9b:e8:83:1b:17:79:a3:fa:62:25: c4:06:31:58:43:35:48:52:be:18:1f:4a:95:8d:0e:3c:c9:7c: 30:19:27:72:88:eb:18:aa:84:0b:52:c4:9e:db:99:be:b9:f0: 51:c7:6a:a3:8c:74:cc:fd:0e:42:7e:07:52:f0:38:3b:58:ee: a6:9a:6c:d0:7c:a1:34:3c:f2:74:b0:7b:87:2d:f1:8d:97:51: ae:b3:f5:42:4e:ef:95:3d:de:23:09:b5:c8:57:d1:1d:c3:0f: 02:7c:b3:be:d4:04:27:d5:01:a9:b6:a3:25:f3:2c:44:22:b0: 36:52:40:60:9c:9b:dd:7d:89:7a:2a:9c:bf:fb:a2:66:91:28: 27:f6:9a:14:98:5b:d0:fd:b0:cc:ca:98:46:88:89:8b:c7:46: 04:4e:e3:0e:10:23:1a:3e:6f:eb:fa:e6:4e:1a:bb:fd:80:c8: fb:1b:9f:2e:98:3b:76:a0:1b:8b:f9:f6:dc:2c:13:e2:45:f1: 06:58:cf:24:85:b7:e4:c8:d1:9c:c6:03:ad:f9:87:91:aa:a8: 84:a3:b3:b3:38:01:b2:ae:0b:25:da:60:f4:11:65:57:21:d0: 00:be:1b:98:d3:17:e5:d9:e1:6c:77:7a:34:a8:93:8c:32:f4: bb:1c:ea:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCShbxkGhvMV6EyphsnMyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjZTQ5NzYzZDJmZGI5MDk4NjQ2OTQwMzA2NmNiNWU2YTc4 MjVmMGMwHhcNMjUxMjA2MDUwMTE3WhcNMjUxMjA3MDUwMTE3WjAzMTEwLwYDVQQD EygyZTkzZWZhNWVhYzZlMzFjYWRhYWM3MzE0YzBjNWQzNTg4YjNkMWY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvt3b0OPsa4iyf2lBLyTV/YIX9hC 04CKUQxyXwqFJbe7JdOn47tB5ehw+oCNz8Q46LhwQk4yCIHCt/qEvhGbVn/18PHH PQdx7GJpwFU2A/wBm2+TiH6EmjeB2pcwyqJ57FSJo9zeGVX0EU4Aqy5XXSzU99fX PU2JACoE79+FqtlC+qUcUKU9bAMiV9bozllo+lW/RRbCr2JBezrRUKOSVbltg0mN 0RniHXV/aBl60ipCz2e0frs+MkZ3kR3IjxHI3XQ3w7MaCe8HAMvd15kU2xrSYioN yO2BQN3yqbT5Tl3x+Z5t+JT6XrpAnWeX0qGxpf1Tudc9mvqxrR4lvai8zQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC6T76XqxuMcrarHMUwMXTWIs9H5MB8GA1UdIwQY MBaAFKzkl2PS/bkJhkaUAwZsteangl8MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvck9TWFk5TDl1UW1HUnBRREJteTE1cWVDWHd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS80NjMwZmQtYTBjYS00OGEwLWJjYWIt OTBhOGM2ZTc4NWM5LzEvck9TWFk5TDl1UW1HUnBRREJteTE1cWVDWHd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS80NjMwZmQtYTBjYS00OGEwLWJjYWItOTBhOGM2ZTc4NWM5 LzEvck9TWFk5TDl1UW1HUnBRREJteTE1cWVDWHd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQGWSW6EL rOub6IMbF3mj+mIlxAYxWEM1SFK+GB9KlY0OPMl8MBkncojrGKqEC1LEntuZvrnw Ucdqo4x0zP0OQn4HUvA4O1juppps0HyhNDzydLB7hy3xjZdRrrP1Qk7vlT3eIwm1 yFfRHcMPAnyzvtQEJ9UBqbajJfMsRCKwNlJAYJyb3X2Jeiqcv/uiZpEoJ/aaFJhb 0P2wzMqYRoiJi8dGBE7jDhAjGj5v6/rmThq7/YDI+xufLpg7dqAbi/n23CwT4kXx BljPJIW35MjRnMYDrfmHkaqohKOzszgBsq4LJdpg9BFlVyHQAL4bmNMX5dnhbHd6 NKiTjDL0uxzqtw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:05:14 2025 by rpki-client