This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft File: o9oBlglsEcIx5JuzCJZwuU2_XoA.mft (raw, json) Hash identifier: W55bfgtR8LmY0DPuHNtOoGImDMz/i4oKNE8u/7aVj6k= Subject key identifier: 22:06:B1:34:B2:7A:9D:23:07:2F:9C:A1:63:2F:13:36:67:9D:30:14 Authority key identifier: A3:DA:01:96:09:6C:11:C2:31:E4:9B:B3:08:96:70:B9:4D:BF:5E:80 Certificate issuer: /CN=a3da0196096c11c231e49bb3089670b94dbf5e80 Certificate serial: 019B41002895EB372E1C599EBD29ABD29759 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o9oBlglsEcIx5JuzCJZwuU2_XoA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft Manifest number: 13CE Signing time: Sun 21 Dec 2025 13:01:28 +0000 Manifest this update: Sun 21 Dec 2025 13:01:28 +0000 Manifest next update: Mon 22 Dec 2025 13:01:28 +0000 Files and hashes: 1: 6qcJyLkGHGKYEWJcRiN4L6Z8qn8.roa (hash: 5OQd3tPQBKWKRhlqwep2BEZpe6x6xAIuVkUwGHnZJ7w=) 2: o9oBlglsEcIx5JuzCJZwuU2_XoA.crl (hash: vhnvBPg4qn4wriPjKBVZOa8UL5z7i10NdtAUivfKvnM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft rsync://rpki.ripe.net/repository/DEFAULT/o9oBlglsEcIx5JuzCJZwuU2_XoA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:00:28:95:eb:37:2e:1c:59:9e:bd:29:ab:d2:97:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3da0196096c11c231e49bb3089670b94dbf5e80 Validity Not Before: Dec 21 13:01:28 2025 GMT Not After : Dec 22 13:01:28 2025 GMT Subject: CN=2206b134b27a9d23072f9ca1632f1336679d3014 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:d8:48:3e:c2:9d:27:dc:9d:99:84:61:a2:e0: 0e:39:bb:43:bc:aa:89:8b:81:c7:a2:43:07:06:65: 08:d9:e8:27:07:b5:c9:32:a9:46:71:31:5f:9a:8b: e3:60:18:b3:34:89:85:9b:34:67:76:f2:c7:1d:ff: ca:56:7e:a5:dc:00:65:aa:9d:f6:f5:38:56:d7:38: dd:e9:99:26:95:1d:14:af:f3:d3:f1:d4:98:8f:43: 1c:ff:60:93:d4:75:14:75:dd:01:b8:a5:f3:1d:f5: ae:92:e9:9b:4b:2d:5a:d9:31:02:a8:c5:b3:f3:46: 2b:41:da:5b:9a:58:e4:e3:c4:19:7a:21:8b:93:cd: 5a:80:2c:f1:2b:1e:02:60:f6:e9:ff:29:82:14:ce: 74:57:fb:2a:2e:8e:b7:bf:40:fc:0f:d8:f1:d6:9a: 2f:a4:66:1e:33:ab:46:7f:f2:e8:be:fc:aa:7f:c6: be:d1:4b:77:61:10:95:9c:cb:71:71:22:fd:b3:a8: 4c:20:ba:78:b3:db:b9:a2:f7:0d:3e:3e:32:9f:4a: 12:69:14:cb:c7:85:d7:a4:ec:71:25:b9:b1:0e:74: 74:c0:85:f4:1d:56:4b:bf:ce:5b:d1:02:46:5d:1e: 56:43:00:d7:c6:14:1a:f0:5a:df:04:0e:b8:82:3d: a8:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:06:B1:34:B2:7A:9D:23:07:2F:9C:A1:63:2F:13:36:67:9D:30:14 X509v3 Authority Key Identifier: keyid:A3:DA:01:96:09:6C:11:C2:31:E4:9B:B3:08:96:70:B9:4D:BF:5E:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o9oBlglsEcIx5JuzCJZwuU2_XoA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:43:6c:16:5a:36:c5:e5:37:d5:d7:dd:46:06:e9:ea:8f:1a: e5:fd:d6:31:0a:a9:5d:04:68:5b:21:9d:13:b6:0a:c6:a4:80: e9:04:07:90:40:8a:37:36:a4:bd:6d:92:62:21:f0:ce:fd:1e: 68:fc:e8:47:4d:d7:d8:74:d6:71:d8:aa:b6:22:cb:54:ee:82: 79:18:68:59:77:8c:02:02:fa:72:ba:e3:a3:d1:fb:f0:c4:53: a6:6f:2e:02:3c:bf:5c:21:7c:c4:7a:cd:f8:76:17:7e:a3:b3: 4f:1d:14:29:96:80:b8:6c:ed:a7:6f:38:af:e4:01:7d:67:07: 7d:b9:89:58:a5:d7:4a:43:ff:53:f1:bb:44:35:7b:44:a0:e7: b7:50:61:37:38:9b:b0:5e:13:d2:1f:37:d0:0d:55:8d:3b:10: 4c:e7:5f:bb:3b:38:7b:62:59:9c:0f:06:4b:75:52:50:0f:aa: 4f:0a:46:2b:e2:0a:1e:9f:73:aa:f7:76:72:7f:9a:d6:de:52: b3:08:ad:90:1d:ed:28:3e:21:9c:1f:e8:aa:3c:ab:53:13:2c: e7:90:ae:b3:7f:bf:9c:de:c3:4c:99:29:01:5a:8f:f6:31:46: 6c:ff:b3:a3:68:d2:4d:03:40:51:f2:43:61:37:e1:dc:02:81: b8:8a:01:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBACiV6zcuHFmevSmr0pdZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzZGEwMTk2MDk2YzExYzIzMWU0OWJiMzA4OTY3MGI5NGRi ZjVlODAwHhcNMjUxMjIxMTMwMTI4WhcNMjUxMjIyMTMwMTI4WjAzMTEwLwYDVQQD EygyMjA2YjEzNGIyN2E5ZDIzMDcyZjljYTE2MzJmMTMzNjY3OWQzMDE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA49hIPsKdJ9ydmYRhouAOObtDvKqJ i4HHokMHBmUI2egnB7XJMqlGcTFfmovjYBizNImFmzRndvLHHf/KVn6l3ABlqp32 9ThW1zjd6ZkmlR0Ur/PT8dSYj0Mc/2CT1HUUdd0BuKXzHfWukumbSy1a2TECqMWz 80YrQdpbmljk48QZeiGLk81agCzxKx4CYPbp/ymCFM50V/sqLo63v0D8D9jx1pov pGYeM6tGf/Lovvyqf8a+0Ut3YRCVnMtxcSL9s6hMILp4s9u5ovcNPj4yn0oSaRTL x4XXpOxxJbmxDnR0wIX0HVZLv85b0QJGXR5WQwDXxhQa8FrfBA64gj2o+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCIGsTSyep0jBy+coWMvEzZnnTAUMB8GA1UdIwQY MBaAFKPaAZYJbBHCMeSbswiWcLlNv16AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzlvQmxnbHNFY0l4NUp1ekNKWnd1VTJfWG9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy83ZDk4NTQtOTY5ZS00ZTM0LWExZGYt YTMwMmY2YTc0YjA4LzEvbzlvQmxnbHNFY0l4NUp1ekNKWnd1VTJfWG9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy83ZDk4NTQtOTY5ZS00ZTM0LWExZGYtYTMwMmY2YTc0YjA4 LzEvbzlvQmxnbHNFY0l4NUp1ekNKWnd1VTJfWG9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgUNsFlo2 xeU31dfdRgbp6o8a5f3WMQqpXQRoWyGdE7YKxqSA6QQHkECKNzakvW2SYiHwzv0e aPzoR03X2HTWcdiqtiLLVO6CeRhoWXeMAgL6crrjo9H78MRTpm8uAjy/XCF8xHrN +HYXfqOzTx0UKZaAuGztp284r+QBfWcHfbmJWKXXSkP/U/G7RDV7RKDnt1BhNzib sF4T0h830A1VjTsQTOdfuzs4e2JZnA8GS3VSUA+qTwpGK+IKHp9zqvd2cn+a1t5S switkB3tKD4hnB/oqjyrUxMs55Cus3+/nN7DTJkpAVqP9jFGbP+zo2jSTQNAUfJD YTfh3AKBuIoBIQ== -----END CERTIFICATE-----Generated at Sun Dec 21 19:27:04 2025 by rpki-client