This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/9OQPA5eaP05K052pg7Z7p-YhXA0.mft File: 9OQPA5eaP05K052pg7Z7p-YhXA0.mft (raw, json) Hash identifier: YHqkiFZE/VreZBdz7oTX6Esz6GCB3MpDdemcfMWoVOQ= Subject key identifier: B5:4C:0D:A7:66:6E:4E:3C:CE:B5:59:A0:C1:5D:55:FF:29:B0:0C:46 Authority key identifier: F4:E4:0F:03:97:9A:3F:4E:4A:D3:9D:A9:83:B6:7B:A7:E6:21:5C:0D Certificate issuer: /CN=f4e40f03979a3f4e4ad39da983b67ba7e6215c0d Certificate serial: 019B451393E57F6AA9636B09295AA02D80BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OQPA5eaP05K052pg7Z7p-YhXA0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/9OQPA5eaP05K052pg7Z7p-YhXA0.mft Manifest number: 178E Signing time: Mon 22 Dec 2025 08:01:09 +0000 Manifest this update: Mon 22 Dec 2025 08:01:09 +0000 Manifest next update: Tue 23 Dec 2025 08:01:09 +0000 Files and hashes: 1: 9OQPA5eaP05K052pg7Z7p-YhXA0.crl (hash: I9QZo7l+DKXsGV+JSbkWYEugW4ey4QKKbIQE/1e4BSQ=) 2: scYwC-e6lFDetGsqMlwn-CerbGM.roa (hash: zF9JwzHkhXPpsqlzXkaGHeYsm+/OmjpyP3gHhfOOwfo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/9OQPA5eaP05K052pg7Z7p-YhXA0.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/9OQPA5eaP05K052pg7Z7p-YhXA0.mft rsync://rpki.ripe.net/repository/DEFAULT/9OQPA5eaP05K052pg7Z7p-YhXA0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 08:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:13:93:e5:7f:6a:a9:63:6b:09:29:5a:a0:2d:80:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4e40f03979a3f4e4ad39da983b67ba7e6215c0d Validity Not Before: Dec 22 08:01:09 2025 GMT Not After : Dec 23 08:01:09 2025 GMT Subject: CN=b54c0da7666e4e3cceb559a0c15d55ff29b00c46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:7f:62:70:4c:8f:54:70:2b:45:97:2f:2e:a1: 46:c2:95:1e:d6:7c:ea:8b:5f:ec:90:87:bc:0c:51: 3c:7d:b5:14:87:6a:fb:c7:58:90:b0:69:dc:3c:b2: cd:3a:91:d6:ab:d5:c6:24:58:d5:22:ab:5a:59:eb: 5c:ae:06:4d:fd:a5:09:7c:3a:2f:f6:15:47:62:cb: 71:49:a4:fd:2d:5c:35:24:93:9a:a8:68:81:bb:da: e8:8b:e0:2b:9a:66:69:07:7c:ba:99:21:28:e0:23: 14:e1:37:b4:08:fc:61:70:2e:a7:62:6d:e4:6b:78: 91:44:0d:26:44:44:bc:89:dc:4b:9a:b5:da:f5:f7: 52:2c:05:59:38:6d:3a:01:00:19:8f:f2:86:1f:38: c7:7a:f6:b4:9b:66:8c:db:0e:66:91:41:d1:07:0f: 3e:93:f3:3e:06:f0:5d:8a:de:7a:48:d1:55:82:80: ea:4b:e0:1d:9b:69:a4:ad:ed:b3:87:ad:3d:f9:0c: a9:7e:5f:b8:89:2d:50:d0:12:f0:d7:9d:75:78:36: 85:09:77:d3:7f:36:e5:0b:2c:9a:ec:50:30:09:25: 87:b8:ec:71:4d:f3:e9:e5:01:85:ac:ed:c3:18:b3: be:f6:64:c9:fd:8e:a8:c3:17:be:ca:f8:71:4f:a9: b1:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:4C:0D:A7:66:6E:4E:3C:CE:B5:59:A0:C1:5D:55:FF:29:B0:0C:46 X509v3 Authority Key Identifier: keyid:F4:E4:0F:03:97:9A:3F:4E:4A:D3:9D:A9:83:B6:7B:A7:E6:21:5C:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OQPA5eaP05K052pg7Z7p-YhXA0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/9OQPA5eaP05K052pg7Z7p-YhXA0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/9OQPA5eaP05K052pg7Z7p-YhXA0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:a2:c5:70:5e:68:b9:b2:e8:10:c7:94:c0:10:c5:7e:8f:3e: fd:88:7c:79:1d:3b:ab:0d:bb:c2:c5:1b:87:03:f6:f2:c7:e7: 76:a3:b9:bc:78:79:1d:1b:e4:d3:ca:59:fb:40:e0:f1:91:64: 8a:24:2d:81:6f:55:2a:7d:54:f5:52:f4:fe:32:2c:9a:86:b6: d2:5c:8c:96:50:18:f8:1e:d4:8f:68:e3:52:1c:09:b4:ce:2b: 4e:ab:48:3b:4e:4c:5b:80:f4:02:43:1a:fe:85:69:1d:73:fb: 4b:56:92:8c:d2:55:6d:b3:f2:a7:f9:33:da:e1:c5:d4:8c:17: 26:c2:ec:45:58:81:aa:b6:3d:5c:74:db:c4:ab:5d:d3:80:9a: 34:df:0b:94:86:86:7e:75:3f:e4:3b:54:72:00:37:ec:8c:58: 1a:47:a0:ea:19:7c:26:f7:ea:d1:c9:37:b8:4a:bb:ef:7c:73: 07:3e:5a:31:71:fb:0f:34:43:5a:fe:3d:05:57:ef:99:b2:6f: 65:be:d5:aa:5a:2f:17:78:43:ec:80:08:d8:40:69:4f:84:15: 73:a2:40:0b:42:01:90:81:a5:6f:9d:6a:74:07:48:e5:15:ca: 82:7f:a0:13:c4:a0:ee:47:31:3d:87:6c:c2:d4:e2:e7:32:0c: ca:3e:f7:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFE5Plf2qpY2sJKVqgLYC9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0ZTQwZjAzOTc5YTNmNGU0YWQzOWRhOTgzYjY3YmE3ZTYy MTVjMGQwHhcNMjUxMjIyMDgwMTA5WhcNMjUxMjIzMDgwMTA5WjAzMTEwLwYDVQQD EyhiNTRjMGRhNzY2NmU0ZTNjY2ViNTU5YTBjMTVkNTVmZjI5YjAwYzQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArX9icEyPVHArRZcvLqFGwpUe1nzq i1/skIe8DFE8fbUUh2r7x1iQsGncPLLNOpHWq9XGJFjVIqtaWetcrgZN/aUJfDov 9hVHYstxSaT9LVw1JJOaqGiBu9roi+ArmmZpB3y6mSEo4CMU4Te0CPxhcC6nYm3k a3iRRA0mRES8idxLmrXa9fdSLAVZOG06AQAZj/KGHzjHeva0m2aM2w5mkUHRBw8+ k/M+BvBdit56SNFVgoDqS+Adm2mkre2zh609+Qypfl+4iS1Q0BLw1511eDaFCXfT fzblCyya7FAwCSWHuOxxTfPp5QGFrO3DGLO+9mTJ/Y6owxe+yvhxT6mxeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLVMDadmbk48zrVZoMFdVf8psAxGMB8GA1UdIwQY MBaAFPTkDwOXmj9OStOdqYO2e6fmIVwNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOU9RUEE1ZWFQMDVLMDUycGc3WjdwLVloWEEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9kNGZmYzAtYTUyZC00NjFiLTk3MTkt YTkxNGUzY2UzOTQxLzEvOU9RUEE1ZWFQMDVLMDUycGc3WjdwLVloWEEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS9kNGZmYzAtYTUyZC00NjFiLTk3MTktYTkxNGUzY2UzOTQx LzEvOU9RUEE1ZWFQMDVLMDUycGc3WjdwLVloWEEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANKLFcF5o ubLoEMeUwBDFfo8+/Yh8eR07qw27wsUbhwP28sfndqO5vHh5HRvk08pZ+0Dg8ZFk iiQtgW9VKn1U9VL0/jIsmoa20lyMllAY+B7Uj2jjUhwJtM4rTqtIO05MW4D0AkMa /oVpHXP7S1aSjNJVbbPyp/kz2uHF1IwXJsLsRViBqrY9XHTbxKtd04CaNN8LlIaG fnU/5DtUcgA37IxYGkeg6hl8Jvfq0ck3uEq773xzBz5aMXH7DzRDWv49BVfvmbJv Zb7VqlovF3hD7IAI2EBpT4QVc6JAC0IBkIGlb51qdAdI5RXKgn+gE8Sg7kcxPYds wtTi5zIMyj73RQ== -----END CERTIFICATE-----Generated at Mon Dec 22 11:28:53 2025 by rpki-client