This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.mft File: o1E9KI2r3n3uBpvbY2Vzzpw-y2A.mft (raw, json) Hash identifier: N1T8oHlvpH1OUiagxGrZ50C2DhRkJYOfd3L5pmmNvEE= Subject key identifier: C9:15:DC:DA:5E:6E:7F:18:8E:13:BA:9A:E3:A7:F4:E6:97:12:29:9F Authority key identifier: A3:51:3D:28:8D:AB:DE:7D:EE:06:9B:DB:63:65:73:CE:9C:3E:CB:60 Certificate issuer: /CN=a3513d288dabde7dee069bdb636573ce9c3ecb60 Certificate serial: 019AF0F5C6B1AE4F421E52ABFF16AB5414DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.mft Manifest number: 127F Signing time: Sat 06 Dec 2025 00:00:30 +0000 Manifest this update: Sat 06 Dec 2025 00:00:30 +0000 Manifest next update: Sun 07 Dec 2025 00:00:30 +0000 Files and hashes: 1: 2K91_HI3yRMddEE3CCdohZUgZwo.roa (hash: L2hHrr+jKFFMceiT1hMQ07sIlZ5+5KK9MtoxNrnP1Sc=) 2: H2RF39UMeGnrnH4hABvhDfDQDsY.roa (hash: Vk4ntYI2atEB2b8/hcEiIs2GfEy58IxLj9FRg/PgQG0=) 3: o1E9KI2r3n3uBpvbY2Vzzpw-y2A.crl (hash: vCswEjtTdFSXFy7gVQjUTuHeHop5ABPNQnWHuC+IW6c=) 4: syr1WAsKdpbK3B-2acqa83QBouY.roa (hash: 7AhmNgpdXoA3dOcpljZ7vHI4I+47jOSplCREprRNiXg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.mft rsync://rpki.ripe.net/repository/DEFAULT/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:f5:c6:b1:ae:4f:42:1e:52:ab:ff:16:ab:54:14:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3513d288dabde7dee069bdb636573ce9c3ecb60 Validity Not Before: Dec 6 00:00:30 2025 GMT Not After : Dec 7 00:00:30 2025 GMT Subject: CN=c915dcda5e6e7f188e13ba9ae3a7f4e69712299f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:a3:4f:2b:a6:81:89:82:69:31:4e:e4:47:da: 91:e0:24:a9:fc:03:39:43:96:eb:cf:76:f3:b7:ea: c2:e8:ea:51:34:5a:9b:78:74:09:e5:aa:2f:b2:44: b7:bd:5f:43:df:a4:f9:38:25:e5:89:99:87:de:d8: 57:94:c0:aa:57:bd:f0:b6:b1:ef:3c:4d:7d:d0:bd: b6:a2:f3:07:f1:e1:75:bf:ff:41:a0:f1:69:a1:22: 4f:8d:f8:0b:02:4f:7f:1d:6e:34:38:a8:3a:8f:20: 9b:e6:0f:24:23:5f:c3:ec:ea:56:5a:64:eb:6f:1c: b0:34:e8:fc:ab:7b:27:9a:80:b0:e5:48:a1:99:61: da:e6:ae:72:6e:03:b6:a2:ce:64:77:87:49:d4:b6: 33:43:d5:77:fa:7e:f9:43:c4:98:72:26:5e:d6:de: 46:e3:25:18:eb:92:a7:21:49:84:64:c9:29:12:37: a1:1f:70:5a:b7:a6:8a:14:5a:97:58:13:0b:ef:9e: c5:40:0b:fc:6a:95:e3:13:c4:bf:3f:08:54:9b:a6: c7:04:51:46:8a:cc:72:d8:f4:d4:e6:ea:9d:8d:70: 53:47:3c:ed:06:28:02:f7:53:31:6d:d4:65:16:79: f8:d2:26:db:c3:31:40:82:a9:7a:1f:e4:5f:0e:f0: ac:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:15:DC:DA:5E:6E:7F:18:8E:13:BA:9A:E3:A7:F4:E6:97:12:29:9F X509v3 Authority Key Identifier: keyid:A3:51:3D:28:8D:AB:DE:7D:EE:06:9B:DB:63:65:73:CE:9C:3E:CB:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:85:bd:8f:43:6e:07:59:23:5e:78:f6:5f:7e:ef:55:2d:5c: bf:5f:dc:c1:9c:1b:19:58:c7:b0:65:46:e0:ef:30:85:29:1c: 4c:4a:8b:8b:0a:f8:18:35:5e:01:56:31:95:7c:a4:5c:23:e7: 46:de:3c:1e:17:70:ad:d4:f3:65:98:12:39:c1:9f:ac:05:a3: bd:ed:13:0e:b6:fc:19:3c:bd:51:2d:0d:82:12:5d:cd:f6:b0: b3:6b:bd:c7:a2:79:fa:5b:80:5c:7c:6a:1c:ac:20:f3:3b:0b: af:f7:a5:93:e2:f1:4c:e1:9d:9a:7e:6d:1d:3d:7a:e5:4a:85: d6:26:b5:25:16:52:98:63:3b:02:bf:f0:82:2a:ce:01:a2:32: 67:72:03:ed:06:9d:47:0e:ac:1b:87:9f:c0:9e:9d:a2:6c:c8: 53:8a:fc:f8:d2:2a:90:cf:7d:af:ef:1d:01:cb:ea:7c:9b:0d: a0:03:91:20:0c:92:5b:3b:99:8e:85:bc:6a:34:34:ff:5c:03: 01:eb:49:67:1d:54:d8:97:8b:4c:93:1d:cf:56:6e:0c:5e:d1: 13:a5:85:27:5b:e1:f8:a6:63:bd:9e:53:32:e2:bc:8d:05:b2: 46:8c:88:12:8b:da:cc:df:83:32:48:9e:e1:36:f5:3d:4c:8e: 67:f4:22:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrw9caxrk9CHlKr/xarVBTfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzNTEzZDI4OGRhYmRlN2RlZTA2OWJkYjYzNjU3M2NlOWMz ZWNiNjAwHhcNMjUxMjA2MDAwMDMwWhcNMjUxMjA3MDAwMDMwWjAzMTEwLwYDVQQD EyhjOTE1ZGNkYTVlNmU3ZjE4OGUxM2JhOWFlM2E3ZjRlNjk3MTIyOTlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5aNPK6aBiYJpMU7kR9qR4CSp/AM5 Q5brz3bzt+rC6OpRNFqbeHQJ5aovskS3vV9D36T5OCXliZmH3thXlMCqV73wtrHv PE190L22ovMH8eF1v/9BoPFpoSJPjfgLAk9/HW40OKg6jyCb5g8kI1/D7OpWWmTr bxywNOj8q3snmoCw5UihmWHa5q5ybgO2os5kd4dJ1LYzQ9V3+n75Q8SYciZe1t5G 4yUY65KnIUmEZMkpEjehH3Bat6aKFFqXWBML757FQAv8apXjE8S/PwhUm6bHBFFG isxy2PTU5uqdjXBTRzztBigC91MxbdRlFnn40ibbwzFAgql6H+RfDvCsaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMkV3Npebn8YjhO6muOn9OaXEimfMB8GA1UdIwQY MBaAFKNRPSiNq9597gab22Nlc86cPstgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzFFOUtJMnIzbjN1QnB2YlkyVnp6cHcteTJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS83OTIxMTMtZTEzYy00M2VlLTg0ZDct ZTBkN2RkNWUyZTZmLzEvbzFFOUtJMnIzbjN1QnB2YlkyVnp6cHcteTJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS83OTIxMTMtZTEzYy00M2VlLTg0ZDctZTBkN2RkNWUyZTZm LzEvbzFFOUtJMnIzbjN1QnB2YlkyVnp6cHcteTJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYIW9j0Nu B1kjXnj2X37vVS1cv1/cwZwbGVjHsGVG4O8whSkcTEqLiwr4GDVeAVYxlXykXCPn Rt48HhdwrdTzZZgSOcGfrAWjve0TDrb8GTy9US0NghJdzfaws2u9x6J5+luAXHxq HKwg8zsLr/elk+LxTOGdmn5tHT165UqF1ia1JRZSmGM7Ar/wgirOAaIyZ3ID7Qad Rw6sG4efwJ6domzIU4r8+NIqkM99r+8dAcvqfJsNoAORIAySWzuZjoW8ajQ0/1wD AetJZx1U2JeLTJMdz1ZuDF7RE6WFJ1vh+KZjvZ5TMuK8jQWyRoyIEovazN+DMkie 4Tb1PUyOZ/Qitg== -----END CERTIFICATE-----Generated at Sat Dec 6 06:57:35 2025 by rpki-client