This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/a3b560-b9b5-4052-a862-940c8a0fc770/1/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.mft File: 9OGAX4R-AK_WMXnkwlKjZ-lFsmo.mft (raw, json) Hash identifier: wmBAuvxGEkfut1TiHhmFDu3gVn5xCB1u3biCetZxybw= Subject key identifier: 75:5F:26:55:B1:EC:BD:66:6B:76:F6:C5:AE:EB:F1:70:63:85:E3:B0 Authority key identifier: F4:E1:80:5F:84:7E:00:AF:D6:31:79:E4:C2:52:A3:67:E9:45:B2:6A Certificate issuer: /CN=f4e1805f847e00afd63179e4c252a367e945b26a Certificate serial: 019B5298661592E583578EB7D4EF0381A856 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b560-b9b5-4052-a862-940c8a0fc770/1/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.mft Manifest number: 1690 Signing time: Wed 24 Dec 2025 23:01:17 +0000 Manifest this update: Wed 24 Dec 2025 23:01:17 +0000 Manifest next update: Thu 25 Dec 2025 23:01:17 +0000 Files and hashes: 1: 8XFeAW4Hh2hiz0E_ab2pPciaX2E.roa (hash: BSu5h2EM4QjO3Lopd7DgZosh9ln/mIeDCpEg8qWTiLw=) 2: 9OGAX4R-AK_WMXnkwlKjZ-lFsmo.crl (hash: gEXWHiPJo/157tQZgGEjXP1hvVFiw3ggPdJ0Bim+mw0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b560-b9b5-4052-a862-940c8a0fc770/1/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b560-b9b5-4052-a862-940c8a0fc770/1/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.mft rsync://rpki.ripe.net/repository/DEFAULT/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:98:66:15:92:e5:83:57:8e:b7:d4:ef:03:81:a8:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4e1805f847e00afd63179e4c252a367e945b26a Validity Not Before: Dec 24 23:01:17 2025 GMT Not After : Dec 25 23:01:17 2025 GMT Subject: CN=755f2655b1ecbd666b76f6c5aeebf1706385e3b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:6c:9f:d9:e9:3b:d7:81:80:26:84:ae:f4:3d: 3a:b6:bc:5b:bb:49:4d:57:3d:d8:0a:e5:f8:0c:ef: 73:ab:07:4d:81:75:67:91:af:46:cd:6d:c1:85:da: 54:d1:70:c4:99:8c:f2:99:37:c1:49:c3:17:64:08: ee:2a:b6:91:99:96:79:71:b2:f8:ac:dd:e5:57:e8: bf:84:7b:62:fb:40:4a:1e:d3:9a:bd:49:a5:4f:40: 00:0c:03:41:99:7b:13:9b:b7:d1:86:d9:5a:06:27: 36:7f:d3:2f:ae:c5:f9:32:d2:fa:5f:3a:33:2d:ee: 31:46:3b:3e:f5:c4:e8:1a:e2:4e:06:ce:bd:de:7f: 30:1f:ac:88:97:c4:66:09:2e:9b:3f:7c:06:fa:da: 85:d8:16:38:7a:06:3b:6f:19:cd:0d:5d:98:aa:ea: bb:02:86:9a:9a:3d:e0:dd:f9:e6:2a:9e:ca:a0:16: 40:60:37:c7:c6:20:16:0b:45:4e:46:12:d5:c6:ac: c8:a9:a2:94:15:9e:9b:d3:5b:1a:8d:ee:08:d2:14: 54:fc:3e:e9:6d:84:ac:62:ed:3b:ec:63:bc:e5:6b: 4f:4a:48:f2:85:cf:fd:2b:9b:cd:a9:a4:2d:2c:9a: 17:6b:8e:3f:f7:11:41:93:bf:1f:82:09:7d:fe:6a: 7a:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:5F:26:55:B1:EC:BD:66:6B:76:F6:C5:AE:EB:F1:70:63:85:E3:B0 X509v3 Authority Key Identifier: keyid:F4:E1:80:5F:84:7E:00:AF:D6:31:79:E4:C2:52:A3:67:E9:45:B2:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b560-b9b5-4052-a862-940c8a0fc770/1/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b560-b9b5-4052-a862-940c8a0fc770/1/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:9e:18:b2:7c:87:01:20:6b:62:ac:10:33:63:8f:f6:b9:de: 73:d2:1e:74:af:d5:80:60:b2:e4:d4:85:2d:f2:c1:5d:46:ad: 75:e6:f8:ba:59:69:06:ac:40:7c:91:5a:48:e7:ae:28:62:92: b6:30:2d:52:40:7f:33:8d:70:88:34:44:2d:ab:b6:06:0f:5c: 71:a5:e5:82:81:f3:37:b5:c4:d0:27:52:a2:db:3c:ef:c7:66: f0:36:3f:82:dc:ec:46:42:de:9c:5a:6b:53:51:21:e1:62:5c: 79:f0:e1:18:06:e9:5d:37:52:3b:3d:9c:10:fc:cd:b7:e7:ae: b1:3c:9f:92:6c:ba:47:9e:e4:75:f9:ce:e1:b7:ed:cb:a0:2d: e3:b3:d9:d0:60:13:70:18:b6:b3:47:76:de:17:3d:05:02:e1: f9:25:20:80:c7:a5:3d:97:b6:2d:1d:04:ea:e5:3e:7d:c6:1f: d9:e7:71:7a:e1:3f:0c:42:e1:d5:3c:15:88:c1:dd:f1:89:a6: 77:ec:bb:99:55:d1:9e:03:48:99:e2:23:0d:d3:ad:77:29:71: 2b:91:36:9d:d7:49:29:c7:1d:33:09:bd:ed:41:b2:21:db:7c: bc:cb:c5:88:f6:c7:58:80:1f:70:a0:65:9d:fe:33:b0:a0:aa: fa:ce:86:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSmGYVkuWDV4631O8DgahWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0ZTE4MDVmODQ3ZTAwYWZkNjMxNzllNGMyNTJhMzY3ZTk0 NWIyNmEwHhcNMjUxMjI0MjMwMTE3WhcNMjUxMjI1MjMwMTE3WjAzMTEwLwYDVQQD Eyg3NTVmMjY1NWIxZWNiZDY2NmI3NmY2YzVhZWViZjE3MDYzODVlM2IwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Gyf2ek714GAJoSu9D06trxbu0lN Vz3YCuX4DO9zqwdNgXVnka9GzW3BhdpU0XDEmYzymTfBScMXZAjuKraRmZZ5cbL4 rN3lV+i/hHti+0BKHtOavUmlT0AADANBmXsTm7fRhtlaBic2f9MvrsX5MtL6Xzoz Le4xRjs+9cToGuJOBs693n8wH6yIl8RmCS6bP3wG+tqF2BY4egY7bxnNDV2Yquq7 Aoaamj3g3fnmKp7KoBZAYDfHxiAWC0VORhLVxqzIqaKUFZ6b01saje4I0hRU/D7p bYSsYu077GO85WtPSkjyhc/9K5vNqaQtLJoXa44/9xFBk78fggl9/mp67QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHVfJlWx7L1ma3b2xa7r8XBjheOwMB8GA1UdIwQY MBaAFPThgF+EfgCv1jF55MJSo2fpRbJqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOU9HQVg0Ui1BS19XTVhua3dsS2paLWxGc21vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9hM2I1NjAtYjliNS00MDUyLWE4NjIt OTQwYzhhMGZjNzcwLzEvOU9HQVg0Ui1BS19XTVhua3dsS2paLWxGc21vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS9hM2I1NjAtYjliNS00MDUyLWE4NjItOTQwYzhhMGZjNzcw LzEvOU9HQVg0Ui1BS19XTVhua3dsS2paLWxGc21vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQJ4YsnyH ASBrYqwQM2OP9rnec9IedK/VgGCy5NSFLfLBXUatdeb4ullpBqxAfJFaSOeuKGKS tjAtUkB/M41wiDRELau2Bg9ccaXlgoHzN7XE0CdSots878dm8DY/gtzsRkLenFpr U1Eh4WJcefDhGAbpXTdSOz2cEPzNt+eusTyfkmy6R57kdfnO4bfty6At47PZ0GAT cBi2s0d23hc9BQLh+SUggMelPZe2LR0E6uU+fcYf2edxeuE/DELh1TwViMHd8Ymm d+y7mVXRngNImeIjDdOtdylxK5E2nddJKccdMwm97UGyIdt8vMvFiPbHWIAfcKBl nf4zsKCq+s6G5A== -----END CERTIFICATE-----Generated at Thu Dec 25 04:31:32 2025 by rpki-client