This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.mft File: oN9_W2YYvaI8g77RG0QgQfH7RW0.mft (raw, json) Hash identifier: gNXnUg0JUnkaeX0+p90MZ1zn+3iDfdDJmfJvDL2dwfU= Subject key identifier: 55:4E:E6:4C:52:3D:58:60:04:C9:7B:2C:7F:72:A2:DB:AD:21:2F:68 Authority key identifier: A0:DF:7F:5B:66:18:BD:A2:3C:83:BE:D1:1B:44:20:41:F1:FB:45:6D Certificate issuer: /CN=a0df7f5b6618bda23c83bed11b442041f1fb456d Certificate serial: 019AF1D222ECB727EF8EF55C5024AAFCAACE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oN9_W2YYvaI8g77RG0QgQfH7RW0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.mft Manifest number: 1023 Signing time: Sat 06 Dec 2025 04:01:11 +0000 Manifest this update: Sat 06 Dec 2025 04:01:11 +0000 Manifest next update: Sun 07 Dec 2025 04:01:11 +0000 Files and hashes: 1: M6-0ilcboil8V3qdXWtXp8FSrwU.roa (hash: WRf8o79b0NMGHVx92f3msPfTUcZhCgsvW5xiza5z8ZI=) 2: alnV74vFSam3rQx6Dmd1DNDuigc.roa (hash: MKKETCkbJ8gLUuVxMB/kJlGwLoMwUcWOoOci82/CtNA=) 3: dMb0PjxW_FKRnnqCOxhUGiKYQfU.roa (hash: SEn9C8PYQsCWBmkbIckjpQRAnohpBTNoR7109sqhxa8=) 4: l5fucFsRI8YqdsxQQ1gM3icDFgY.roa (hash: F8cwyE/KovnNrO6uesrwG6iPrTntm+Jn5JO1juTZFLQ=) 5: oN9_W2YYvaI8g77RG0QgQfH7RW0.crl (hash: qVln1PHePmkH8assVdnvU7D4nYgF7XwDksRA5ei81oU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.mft rsync://rpki.ripe.net/repository/DEFAULT/oN9_W2YYvaI8g77RG0QgQfH7RW0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:22:ec:b7:27:ef:8e:f5:5c:50:24:aa:fc:aa:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0df7f5b6618bda23c83bed11b442041f1fb456d Validity Not Before: Dec 6 04:01:11 2025 GMT Not After : Dec 7 04:01:11 2025 GMT Subject: CN=554ee64c523d586004c97b2c7f72a2dbad212f68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:d3:49:62:dd:df:23:76:5e:38:a9:7a:42:16: ac:93:d0:d7:f7:c4:48:52:74:a7:ca:2b:41:7d:cf: e9:c0:3d:2b:b5:a6:7a:9e:62:ae:66:9a:db:6b:9e: 46:48:54:c2:78:b0:9d:1f:04:c7:25:36:3d:85:09: b9:01:86:00:07:04:bd:05:ec:a9:fa:0d:8b:15:0e: a6:db:d1:1c:5d:fd:22:c2:f7:27:35:cb:81:f3:af: b4:28:c0:e0:70:a9:d3:95:19:f4:ab:c3:68:94:15: d0:1d:ed:f3:9c:52:5e:f8:72:3b:34:c7:a9:2e:39: 76:c6:f5:0e:2b:ac:15:84:ba:89:0e:0a:38:00:0f: 28:5d:04:e2:1f:1f:20:3f:b4:bd:7e:73:74:d6:b2: 68:68:05:ea:44:3e:91:4f:fb:69:f1:7d:48:b2:65: 2f:e8:db:fe:f4:4d:ee:fd:fa:5e:4e:c2:78:7d:b2: e6:86:ac:a9:25:8b:18:33:62:3f:0f:44:2d:64:f6: 4a:b9:e5:91:85:c6:a0:0d:65:b6:6c:87:9c:8c:c9: dd:c6:5a:15:74:e8:87:83:c2:80:60:25:91:46:31: 72:3d:71:69:45:24:db:36:6c:f8:66:ce:f6:e2:5d: 1b:8b:ca:1b:54:df:98:ba:36:2c:70:6d:88:13:ff: 8f:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:4E:E6:4C:52:3D:58:60:04:C9:7B:2C:7F:72:A2:DB:AD:21:2F:68 X509v3 Authority Key Identifier: keyid:A0:DF:7F:5B:66:18:BD:A2:3C:83:BE:D1:1B:44:20:41:F1:FB:45:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oN9_W2YYvaI8g77RG0QgQfH7RW0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:be:19:44:83:9b:ff:c1:5b:fc:7d:cc:69:2e:dc:db:ce:d2: 87:7f:29:97:66:3d:b3:7f:82:98:ec:95:cd:52:d9:48:9e:be: 2b:c0:5b:f6:d8:7e:ca:4a:ec:6b:23:c9:cf:0c:07:74:25:fa: 3f:50:9a:c8:33:05:92:2a:67:ac:7a:bd:54:42:36:2f:1c:17: c0:dd:1c:61:b8:ee:53:be:6e:e1:79:4c:87:35:a2:9d:c7:15: 39:5e:bc:4e:12:7a:bb:50:fe:bb:0a:c8:4e:4c:7a:7b:81:35: ce:34:4b:02:6d:22:88:de:4a:82:7b:b6:cf:b1:2b:82:b9:23: 55:e4:e7:8f:e2:bf:12:ea:16:15:67:96:27:b0:f6:bf:d2:e5: 37:65:40:d1:08:a0:fb:8f:4c:ce:bc:e3:a2:7a:48:60:3d:9f: 54:d4:d1:e8:cc:1f:5b:c1:c2:42:41:f7:5b:df:c4:8f:7a:ef: 01:22:6c:80:7c:aa:54:0a:3c:2c:85:73:96:23:91:c5:10:8d: 9a:65:ba:6e:2f:ce:f4:8a:c6:c0:c9:57:37:fd:66:8e:a1:61: 5d:cc:2d:e9:63:88:fb:ae:85:aa:1a:90:08:55:83:ae:cc:e1: f9:53:21:20:f0:19:d5:3e:fd:99:39:52:7a:cb:0f:1d:a4:f5: f8:47:d2:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0iLstyfvjvVcUCSq/KrOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwZGY3ZjViNjYxOGJkYTIzYzgzYmVkMTFiNDQyMDQxZjFm YjQ1NmQwHhcNMjUxMjA2MDQwMTExWhcNMjUxMjA3MDQwMTExWjAzMTEwLwYDVQQD Eyg1NTRlZTY0YzUyM2Q1ODYwMDRjOTdiMmM3ZjcyYTJkYmFkMjEyZjY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6tNJYt3fI3ZeOKl6Qhask9DX98RI UnSnyitBfc/pwD0rtaZ6nmKuZprba55GSFTCeLCdHwTHJTY9hQm5AYYABwS9Beyp +g2LFQ6m29EcXf0iwvcnNcuB86+0KMDgcKnTlRn0q8NolBXQHe3znFJe+HI7NMep Ljl2xvUOK6wVhLqJDgo4AA8oXQTiHx8gP7S9fnN01rJoaAXqRD6RT/tp8X1IsmUv 6Nv+9E3u/fpeTsJ4fbLmhqypJYsYM2I/D0QtZPZKueWRhcagDWW2bIecjMndxloV dOiHg8KAYCWRRjFyPXFpRSTbNmz4Zs724l0bi8obVN+YujYscG2IE/+P2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFVO5kxSPVhgBMl7LH9yotutIS9oMB8GA1UdIwQY MBaAFKDff1tmGL2iPIO+0RtEIEHx+0VtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb045X1cyWVl2YUk4Zzc3UkcwUWdRZkg3UlcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9hNTcyOGItYTM2ZC00ZmJhLTkzYWEt NWY0YmM5MDBjMDNkLzEvb045X1cyWVl2YUk4Zzc3UkcwUWdRZkg3UlcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi9hNTcyOGItYTM2ZC00ZmJhLTkzYWEtNWY0YmM5MDBjMDNk LzEvb045X1cyWVl2YUk4Zzc3UkcwUWdRZkg3UlcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOL4ZRIOb /8Fb/H3MaS7c287Sh38pl2Y9s3+CmOyVzVLZSJ6+K8Bb9th+ykrsayPJzwwHdCX6 P1CayDMFkipnrHq9VEI2LxwXwN0cYbjuU75u4XlMhzWinccVOV68ThJ6u1D+uwrI Tkx6e4E1zjRLAm0iiN5Kgnu2z7ErgrkjVeTnj+K/EuoWFWeWJ7D2v9LlN2VA0Qig +49MzrzjonpIYD2fVNTR6MwfW8HCQkH3W9/Ej3rvASJsgHyqVAo8LIVzliORxRCN mmW6bi/O9IrGwMlXN/1mjqFhXcwt6WOI+66FqhqQCFWDrszh+VMhIPAZ1T79mTlS essPHaT1+EfSLg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:08:33 2025 by rpki-client