This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.mft File: 9Oc28Njp5w8a58qhHFWez3CnKCg.mft (raw, json) Hash identifier: 6i6XRWBo2dkCtu5RPM4q1EhgPcGsS5WbnLrl5QWFgO4= Subject key identifier: EB:12:56:1E:28:4F:17:1A:1B:EC:4D:55:01:92:EB:91:90:21:96:EF Authority key identifier: F4:E7:36:F0:D8:E9:E7:0F:1A:E7:CA:A1:1C:55:9E:CF:70:A7:28:28 Certificate issuer: /CN=f4e736f0d8e9e70f1ae7caa11c559ecf70a72828 Certificate serial: 019B3B6BBB70B379FE53DD9AE007F519F146 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Oc28Njp5w8a58qhHFWez3CnKCg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.mft Manifest number: 1786 Signing time: Sat 20 Dec 2025 11:01:14 +0000 Manifest this update: Sat 20 Dec 2025 11:01:14 +0000 Manifest next update: Sun 21 Dec 2025 11:01:14 +0000 Files and hashes: 1: 9Oc28Njp5w8a58qhHFWez3CnKCg.crl (hash: 2M7PEBeIQ9xvze2Zcpmr2xCnsusllwLWrR6OVQ/He3A=) 2: fGeYBTeIqUGlzWkeYCJZuXTV3NA.roa (hash: NVWcI0sfwe5T87MmDN6gYp0EndXzVclJkGdW6buL8Q8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.crl rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.mft rsync://rpki.ripe.net/repository/DEFAULT/9Oc28Njp5w8a58qhHFWez3CnKCg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:bb:70:b3:79:fe:53:dd:9a:e0:07:f5:19:f1:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4e736f0d8e9e70f1ae7caa11c559ecf70a72828 Validity Not Before: Dec 20 11:01:14 2025 GMT Not After : Dec 21 11:01:14 2025 GMT Subject: CN=eb12561e284f171a1bec4d550192eb91902196ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d5:4e:16:17:ee:d7:99:18:1a:8f:53:a8:02: 40:54:28:3f:89:42:32:8d:33:5e:64:8f:b0:a2:2a: 8b:07:ce:9e:c7:96:32:73:c4:35:5f:96:61:39:4a: f2:e3:bf:72:13:63:f7:b1:57:32:3e:37:01:93:75: 76:a7:ed:d6:af:1e:a8:3a:66:a5:7e:3e:eb:0b:9d: 3b:72:bc:7c:5b:ec:cb:4e:cb:74:5a:d8:97:5d:91: 65:31:1d:ce:80:2d:7f:85:f7:d3:13:4d:29:ec:26: 4a:f4:1b:d2:37:0c:87:eb:b5:c7:5b:e1:68:59:75: c0:5d:8d:07:9d:48:cf:02:a8:08:a2:07:47:2d:9e: e6:1a:40:ba:76:97:50:4b:81:42:0a:2e:2c:68:5f: ed:18:66:e6:57:f3:01:77:6e:cf:40:fe:ec:bc:87: 78:eb:a7:53:d3:22:33:76:1b:38:97:62:12:3f:01: 85:e9:1a:24:15:7a:e9:ea:21:a2:27:ac:d5:35:04: d7:97:be:14:a5:a2:3b:c3:40:ca:bd:2e:2f:29:61: e4:cb:68:e2:3e:12:55:eb:25:a7:ec:40:09:ae:d2: c2:7a:c2:9d:34:87:7d:a3:49:16:72:eb:7e:96:c7: 28:4e:6f:56:97:67:22:89:7b:29:e0:e7:73:93:e4: 1f:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:12:56:1E:28:4F:17:1A:1B:EC:4D:55:01:92:EB:91:90:21:96:EF X509v3 Authority Key Identifier: keyid:F4:E7:36:F0:D8:E9:E7:0F:1A:E7:CA:A1:1C:55:9E:CF:70:A7:28:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Oc28Njp5w8a58qhHFWez3CnKCg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:5c:53:a1:8e:ab:5a:08:f3:2b:ee:c3:c0:f2:be:82:00:10: 96:ee:ef:0e:5b:2b:d1:f7:20:6e:5f:38:e9:9d:ce:c1:6a:68: 54:a0:01:3f:19:8d:3c:f3:89:4f:2f:57:85:f2:0f:c7:6d:50: 09:85:35:73:3b:f9:39:3e:4a:71:82:67:1b:9b:1e:22:8e:e8: 76:84:4d:59:1a:2b:a0:df:ec:c2:44:61:3c:a3:da:d4:b7:42: db:92:d2:b9:ff:ac:25:bf:64:0e:47:9b:1d:04:48:b5:70:e9: b2:1e:ea:40:82:f2:c2:fc:9b:e3:b0:46:6f:8c:d7:c9:b9:2b: fc:eb:e9:2c:19:f3:ab:a6:62:0e:0f:94:ac:b5:db:23:16:97: 6c:b1:42:ce:38:ef:24:54:83:d8:ff:de:d9:ab:b6:3b:91:3f: b2:1b:64:2c:c6:a4:06:fb:76:4e:db:44:60:ee:65:a8:99:be: f0:ae:39:be:19:57:8b:57:32:6d:d3:ff:c7:d5:b1:3e:ec:b0: c6:06:18:98:7a:07:55:75:a1:cd:14:5e:fc:2d:a7:af:40:a2: 76:6e:9a:8d:d1:9e:ef:37:7c:ba:da:4a:ae:06:bc:39:d7:6a: 80:2b:46:9f:cf:62:84:bb:18:b8:b7:ee:f5:1f:a5:79:67:e5: 3e:07:88:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7a7tws3n+U92a4Af1GfFGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0ZTczNmYwZDhlOWU3MGYxYWU3Y2FhMTFjNTU5ZWNmNzBh NzI4MjgwHhcNMjUxMjIwMTEwMTE0WhcNMjUxMjIxMTEwMTE0WjAzMTEwLwYDVQQD EyhlYjEyNTYxZTI4NGYxNzFhMWJlYzRkNTUwMTkyZWI5MTkwMjE5NmVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydVOFhfu15kYGo9TqAJAVCg/iUIy jTNeZI+woiqLB86ex5Yyc8Q1X5ZhOUry479yE2P3sVcyPjcBk3V2p+3Wrx6oOmal fj7rC507crx8W+zLTst0WtiXXZFlMR3OgC1/hffTE00p7CZK9BvSNwyH67XHW+Fo WXXAXY0HnUjPAqgIogdHLZ7mGkC6dpdQS4FCCi4saF/tGGbmV/MBd27PQP7svId4 66dT0yIzdhs4l2ISPwGF6RokFXrp6iGiJ6zVNQTXl74UpaI7w0DKvS4vKWHky2ji PhJV6yWn7EAJrtLCesKdNId9o0kWcut+lscoTm9Wl2ciiXsp4Odzk+QfEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOsSVh4oTxcaG+xNVQGS65GQIZbvMB8GA1UdIwQY MBaAFPTnNvDY6ecPGufKoRxVns9wpygoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOU9jMjhOanA1dzhhNThxaEhGV2V6M0NuS0NnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8zZTJhNzMtZjQ5Ny00OWNjLWI0MjAt ZDdhYjUxNGQ0ZWUyLzEvOU9jMjhOanA1dzhhNThxaEhGV2V6M0NuS0NnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni8zZTJhNzMtZjQ5Ny00OWNjLWI0MjAtZDdhYjUxNGQ0ZWUy LzEvOU9jMjhOanA1dzhhNThxaEhGV2V6M0NuS0NnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPlxToY6r WgjzK+7DwPK+ggAQlu7vDlsr0fcgbl846Z3OwWpoVKABPxmNPPOJTy9XhfIPx21Q CYU1czv5OT5KcYJnG5seIo7odoRNWRoroN/swkRhPKPa1LdC25LSuf+sJb9kDkeb HQRItXDpsh7qQILywvyb47BGb4zXybkr/OvpLBnzq6ZiDg+UrLXbIxaXbLFCzjjv JFSD2P/e2au2O5E/shtkLMakBvt2TttEYO5lqJm+8K45vhlXi1cybdP/x9WxPuyw xgYYmHoHVXWhzRRe/C2nr0Cidm6ajdGe7zd8utpKrga8OddqgCtGn89ihLsYuLfu 9R+leWflPgeI9g== -----END CERTIFICATE-----Generated at Sat Dec 20 18:27:54 2025 by rpki-client