This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.mft File: O9n7V_Sw8lP5r4WDA-a0alKcGU4.mft (raw, json) Hash identifier: 3LU+6NDQECflZey1Nx+a9GriAud2szTBdK5BHrZkZ1c= Subject key identifier: F2:F2:DB:0A:62:FF:16:8D:48:A0:A0:32:44:D9:03:49:A9:BA:E8:3D Authority key identifier: 3B:D9:FB:57:F4:B0:F2:53:F9:AF:85:83:03:E6:B4:6A:52:9C:19:4E Certificate issuer: /CN=3bd9fb57f4b0f253f9af858303e6b46a529c194e Certificate serial: 019AF1D1BA6231A7E6320192C6B0A98A5A99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9n7V_Sw8lP5r4WDA-a0alKcGU4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.mft Manifest number: 13E5 Signing time: Sat 06 Dec 2025 04:00:45 +0000 Manifest this update: Sat 06 Dec 2025 04:00:45 +0000 Manifest next update: Sun 07 Dec 2025 04:00:45 +0000 Files and hashes: 1: O9n7V_Sw8lP5r4WDA-a0alKcGU4.crl (hash: lNCI3s4rk1thLNH3ghXklur4ib5OIeq4abSJPWHHQXg=) 2: OcIpHvqAwT2M9dTBJHDbqY1xej4.roa (hash: gnCvl1Md/DWtZz5X5Y7WYVBP9HfFDhgD11ts2150gvI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.mft rsync://rpki.ripe.net/repository/DEFAULT/O9n7V_Sw8lP5r4WDA-a0alKcGU4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:ba:62:31:a7:e6:32:01:92:c6:b0:a9:8a:5a:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bd9fb57f4b0f253f9af858303e6b46a529c194e Validity Not Before: Dec 6 04:00:45 2025 GMT Not After : Dec 7 04:00:45 2025 GMT Subject: CN=f2f2db0a62ff168d48a0a03244d90349a9bae83d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:9c:36:84:81:87:85:23:a9:a8:30:78:6b:27: d6:74:c9:cb:0a:f2:25:b1:c6:5f:6e:18:83:09:a6: fc:31:d2:64:0d:4b:e8:45:df:0f:05:a1:dd:2c:46: 37:46:ea:d4:c1:cb:47:5f:6c:81:f8:ab:61:f0:ed: b1:cc:af:94:dd:e0:98:22:66:1d:40:c0:aa:ae:d1: 5d:9c:ad:30:a9:7d:50:0f:70:41:fa:7f:5d:49:af: f6:2d:de:47:4c:3e:3b:00:e9:a5:1b:c0:1f:20:e9: 75:36:24:f1:49:06:ed:a6:09:ca:32:07:50:6e:f4: 7c:fa:ca:e9:f4:74:87:fa:59:6e:39:33:6b:a7:76: 45:60:b4:1d:68:69:f6:80:7e:7c:c7:c4:61:e5:2a: 72:17:85:bf:b9:3a:5b:57:8f:23:fe:78:77:c5:9a: 58:c1:cf:33:c4:3b:8b:47:ac:e4:e0:d2:94:81:8c: 35:76:cb:2a:41:aa:71:d0:34:a7:b8:ff:44:56:56: f8:06:39:af:6b:da:f0:40:5e:71:61:5a:d0:56:62: 36:0d:07:e1:a8:7f:05:3e:2f:65:91:fc:85:ac:07: b1:41:99:a3:27:f0:24:66:c3:e8:7d:15:22:11:15: 78:3c:e2:65:c4:7e:04:cc:aa:4d:80:18:9b:39:70: ee:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:F2:DB:0A:62:FF:16:8D:48:A0:A0:32:44:D9:03:49:A9:BA:E8:3D X509v3 Authority Key Identifier: keyid:3B:D9:FB:57:F4:B0:F2:53:F9:AF:85:83:03:E6:B4:6A:52:9C:19:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9n7V_Sw8lP5r4WDA-a0alKcGU4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:d0:8a:5b:a9:9c:af:cd:9c:fa:c8:4f:bf:33:7a:41:b7:74: 4c:93:f4:a6:90:d2:d7:d3:20:29:a0:e7:4f:d8:ac:76:4e:c8: ec:cf:05:20:8b:1d:9a:92:91:ee:0e:72:82:33:2c:fe:77:6e: 21:db:3b:1e:68:70:71:30:78:d2:4a:a8:7f:03:d5:e5:1e:5c: 56:57:53:0b:79:8c:7d:8f:5f:20:fd:72:e8:23:ca:2b:9a:89: 6d:26:61:b5:cc:23:63:3e:eb:87:e2:aa:24:b6:70:5f:3f:fb: 03:29:5e:d1:6d:75:d7:1f:89:21:1d:3d:60:10:62:a5:99:35: 93:d5:3a:04:22:16:e1:fb:91:3b:be:dd:6d:e5:33:58:d1:d9: e1:5b:38:8a:db:f1:9d:c1:cc:a7:f1:2a:53:24:be:16:d3:3a: 11:49:62:4c:07:54:b7:2e:83:0a:4b:d5:f2:a2:13:6f:eb:d3: 5d:9e:bb:e8:87:8e:d5:c0:b6:17:3f:8e:4b:13:3a:55:99:9f: 95:c2:c7:3f:93:28:d8:cf:bd:90:fa:1e:dd:3f:e3:47:a6:fb: ce:f1:cb:51:c8:b5:a0:c0:03:1e:fb:6a:aa:d3:14:c9:e4:1b: ac:8b:f2:fc:09:ff:c9:5f:4a:95:a5:39:d2:05:4a:8d:ef:b3: ba:7d:f3:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0bpiMafmMgGSxrCpilqZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiZDlmYjU3ZjRiMGYyNTNmOWFmODU4MzAzZTZiNDZhNTI5 YzE5NGUwHhcNMjUxMjA2MDQwMDQ1WhcNMjUxMjA3MDQwMDQ1WjAzMTEwLwYDVQQD EyhmMmYyZGIwYTYyZmYxNjhkNDhhMGEwMzI0NGQ5MDM0OWE5YmFlODNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZw2hIGHhSOpqDB4ayfWdMnLCvIl scZfbhiDCab8MdJkDUvoRd8PBaHdLEY3RurUwctHX2yB+Kth8O2xzK+U3eCYImYd QMCqrtFdnK0wqX1QD3BB+n9dSa/2Ld5HTD47AOmlG8AfIOl1NiTxSQbtpgnKMgdQ bvR8+srp9HSH+lluOTNrp3ZFYLQdaGn2gH58x8Rh5SpyF4W/uTpbV48j/nh3xZpY wc8zxDuLR6zk4NKUgYw1dssqQapx0DSnuP9EVlb4Bjmva9rwQF5xYVrQVmI2DQfh qH8FPi9lkfyFrAexQZmjJ/AkZsPofRUiERV4POJlxH4EzKpNgBibOXDuKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPLy2wpi/xaNSKCgMkTZA0mpuug9MB8GA1UdIwQY MBaAFDvZ+1f0sPJT+a+FgwPmtGpSnBlOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzluN1ZfU3c4bFA1cjRXREEtYTBhbEtjR1U0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8yMDRjZGYtZjZlNy00ODc0LTk4MDIt NjUwZGQxMzhlNmEyLzEvTzluN1ZfU3c4bFA1cjRXREEtYTBhbEtjR1U0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS8yMDRjZGYtZjZlNy00ODc0LTk4MDItNjUwZGQxMzhlNmEy LzEvTzluN1ZfU3c4bFA1cjRXREEtYTBhbEtjR1U0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbNCKW6mc r82c+shPvzN6Qbd0TJP0ppDS19MgKaDnT9isdk7I7M8FIIsdmpKR7g5ygjMs/ndu Ids7HmhwcTB40kqofwPV5R5cVldTC3mMfY9fIP1y6CPKK5qJbSZhtcwjYz7rh+Kq JLZwXz/7Ayle0W111x+JIR09YBBipZk1k9U6BCIW4fuRO77dbeUzWNHZ4Vs4itvx ncHMp/EqUyS+FtM6EUliTAdUty6DCkvV8qITb+vTXZ676IeO1cC2Fz+OSxM6VZmf lcLHP5Mo2M+9kPoe3T/jR6b7zvHLUci1oMADHvtqqtMUyeQbrIvy/An/yV9KlaU5 0gVKje+zun3zLg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:08:12 2025 by rpki-client