This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.mft File: O9_XYE36DriuIOkPzxMDk7ioVko.mft (raw, json) Hash identifier: 1TRsynwf54Loo6DexsbKCymixrRbOAw72Tbvs/ajai0= Subject key identifier: 71:34:D2:6A:FC:70:D5:33:23:99:40:87:B6:1F:1A:92:57:B2:F1:7C Authority key identifier: 3B:DF:D7:60:4D:FA:0E:B8:AE:20:E9:0F:CF:13:03:93:B8:A8:56:4A Certificate issuer: /CN=3bdfd7604dfa0eb8ae20e90fcf130393b8a8564a Certificate serial: 019B3E6CEFFA8E94B8513A48729AF9DE04D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9_XYE36DriuIOkPzxMDk7ioVko.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.mft Manifest number: 1789 Signing time: Sun 21 Dec 2025 01:01:25 +0000 Manifest this update: Sun 21 Dec 2025 01:01:25 +0000 Manifest next update: Mon 22 Dec 2025 01:01:25 +0000 Files and hashes: 1: O9_XYE36DriuIOkPzxMDk7ioVko.crl (hash: HhBlrG2083Q+wa+nCDit/5FMtpPK4aQLDtMzUcoylIU=) 2: m0kgiTT_WYsp23pJuD7SLX4KQwM.roa (hash: VIdUf2MaaJNNuBUU6XlHsX2gourJRTd5TApzwygVz+Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.mft rsync://rpki.ripe.net/repository/DEFAULT/O9_XYE36DriuIOkPzxMDk7ioVko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:ef:fa:8e:94:b8:51:3a:48:72:9a:f9:de:04:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bdfd7604dfa0eb8ae20e90fcf130393b8a8564a Validity Not Before: Dec 21 01:01:25 2025 GMT Not After : Dec 22 01:01:25 2025 GMT Subject: CN=7134d26afc70d53323994087b61f1a9257b2f17c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:19:9f:ff:97:8f:56:0b:34:68:b6:62:51:d3: 2b:2f:db:7d:6e:d9:cd:fe:e7:27:e9:58:90:06:3a: 80:17:37:e1:19:be:a4:b7:57:79:22:6c:a9:36:8b: 10:f7:78:bf:91:33:a2:74:fc:f1:50:a2:a1:7e:21: 62:0f:47:fd:e5:e3:1d:b5:64:de:96:ca:58:37:64: dd:aa:db:4b:eb:ca:9b:93:ac:44:f2:2b:d0:70:2e: 67:73:96:a3:35:9d:e7:74:7f:a8:b7:4e:fb:f5:75: 3e:cc:86:5d:1e:cd:3b:56:ba:64:cf:a3:9a:9d:50: ed:77:52:b7:b9:9f:65:b1:4f:a1:72:6e:34:26:fb: fb:74:24:9b:0e:d7:3d:b0:71:30:53:cf:c1:fa:31: 4d:22:3d:24:ea:65:c1:35:dd:36:ff:49:62:0f:eb: f6:24:2f:1a:54:e9:f4:c6:7d:19:71:fe:dc:49:c0: 5b:a8:8b:c0:d5:e0:a9:2f:21:8f:61:a0:b6:ca:bc: 83:8b:70:e2:cc:6c:c6:33:26:86:55:d6:d3:cb:4b: 00:01:4f:0e:74:5f:80:be:70:23:1f:18:02:33:a0: f2:c5:32:77:b5:8a:ec:d4:66:c5:f9:ca:c0:09:ca: cf:d2:32:37:54:0d:86:6c:7b:92:9f:a5:3f:a9:32: b0:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:34:D2:6A:FC:70:D5:33:23:99:40:87:B6:1F:1A:92:57:B2:F1:7C X509v3 Authority Key Identifier: keyid:3B:DF:D7:60:4D:FA:0E:B8:AE:20:E9:0F:CF:13:03:93:B8:A8:56:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9_XYE36DriuIOkPzxMDk7ioVko.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:49:38:c4:31:17:8c:d2:a6:ee:63:9f:28:65:b5:81:b1:ba: 1a:98:62:b1:b0:74:85:69:6b:46:6c:94:fe:37:bb:a7:15:a4: 13:95:38:4a:e2:5f:f4:ac:bd:15:61:c2:eb:37:bc:f2:be:e4: 3e:4b:de:15:dd:40:60:9a:0f:3b:70:a8:70:47:1b:f4:ec:87: fe:aa:83:34:d3:15:e5:34:5c:24:ab:7c:8d:3b:ed:39:d0:fc: 9e:99:8c:6b:e7:06:a3:89:52:14:11:b1:ad:02:fc:a7:22:5e: ae:03:6f:df:83:0f:97:ad:af:7e:75:b3:50:df:2b:5d:2c:39: 97:f1:c0:ec:56:68:d5:50:a9:db:c7:d2:cf:8d:5e:a4:a7:57: 6b:52:72:df:7b:5f:1c:51:58:1c:2a:44:8f:3e:6a:e8:85:c9: a4:e6:6d:9e:b3:3e:02:40:c8:4a:cc:ec:46:05:cf:86:56:43: 20:2d:7f:e4:15:e2:ba:68:f3:6d:4c:6a:fb:f2:a8:90:fe:a5: 91:08:f3:af:eb:f3:ac:de:06:0c:cd:0c:22:e7:10:e3:17:35: e4:be:cc:a4:02:dd:73:16:dc:95:d0:71:d9:62:5b:23:45:9f: 22:c5:a7:28:c2:03:16:cc:00:63:6d:29:ae:c1:e8:1f:ac:a8: 7c:33:8f:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bO/6jpS4UTpIcpr53gTUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiZGZkNzYwNGRmYTBlYjhhZTIwZTkwZmNmMTMwMzkzYjhh ODU2NGEwHhcNMjUxMjIxMDEwMTI1WhcNMjUxMjIyMDEwMTI1WjAzMTEwLwYDVQQD Eyg3MTM0ZDI2YWZjNzBkNTMzMjM5OTQwODdiNjFmMWE5MjU3YjJmMTdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5hmf/5ePVgs0aLZiUdMrL9t9btnN /ucn6ViQBjqAFzfhGb6kt1d5ImypNosQ93i/kTOidPzxUKKhfiFiD0f95eMdtWTe lspYN2TdqttL68qbk6xE8ivQcC5nc5ajNZ3ndH+ot0779XU+zIZdHs07Vrpkz6Oa nVDtd1K3uZ9lsU+hcm40Jvv7dCSbDtc9sHEwU8/B+jFNIj0k6mXBNd02/0liD+v2 JC8aVOn0xn0Zcf7cScBbqIvA1eCpLyGPYaC2yryDi3DizGzGMyaGVdbTy0sAAU8O dF+AvnAjHxgCM6DyxTJ3tYrs1GbF+crACcrP0jI3VA2GbHuSn6U/qTKwkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHE00mr8cNUzI5lAh7YfGpJXsvF8MB8GA1UdIwQY MBaAFDvf12BN+g64riDpD88TA5O4qFZKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzlfWFlFMzZEcml1SU9rUHp4TURrN2lvVmtvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS84ZGMyYzctM2ZjMC00NDZkLTgwN2Mt ZWY2YzllYWQ2MTFjLzEvTzlfWFlFMzZEcml1SU9rUHp4TURrN2lvVmtvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS84ZGMyYzctM2ZjMC00NDZkLTgwN2MtZWY2YzllYWQ2MTFj LzEvTzlfWFlFMzZEcml1SU9rUHp4TURrN2lvVmtvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgEk4xDEX jNKm7mOfKGW1gbG6GphisbB0hWlrRmyU/je7pxWkE5U4SuJf9Ky9FWHC6ze88r7k PkveFd1AYJoPO3CocEcb9OyH/qqDNNMV5TRcJKt8jTvtOdD8npmMa+cGo4lSFBGx rQL8pyJergNv34MPl62vfnWzUN8rXSw5l/HA7FZo1VCp28fSz41epKdXa1Jy33tf HFFYHCpEjz5q6IXJpOZtnrM+AkDISszsRgXPhlZDIC1/5BXiumjzbUxq+/KokP6l kQjzr+vzrN4GDM0MIucQ4xc15L7MpALdcxbcldBx2WJbI0WfIsWnKMIDFswAY20p rsHoH6yofDOPZg== -----END CERTIFICATE-----Generated at Sun Dec 21 07:02:33 2025 by rpki-client