This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.mft File: o1E9KI2r3n3uBpvbY2Vzzpw-y2A.mft (raw, json) Hash identifier: aeM8t6XCy5S9orYCsf4QvgnBAgLHB+o3IW8k9QPmWFQ= Subject key identifier: 23:FF:24:0D:A2:72:21:79:FC:6D:D2:3D:34:DA:F7:EA:A5:D5:DD:58 Authority key identifier: A3:51:3D:28:8D:AB:DE:7D:EE:06:9B:DB:63:65:73:CE:9C:3E:CB:60 Certificate issuer: /CN=a3513d288dabde7dee069bdb636573ce9c3ecb60 Certificate serial: 019B2AAEBD22E14EB28D6985235F8D40FBBE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.mft Manifest number: 129D Signing time: Wed 17 Dec 2025 05:00:53 +0000 Manifest this update: Wed 17 Dec 2025 05:00:53 +0000 Manifest next update: Thu 18 Dec 2025 05:00:53 +0000 Files and hashes: 1: H2RF39UMeGnrnH4hABvhDfDQDsY.roa (hash: Vk4ntYI2atEB2b8/hcEiIs2GfEy58IxLj9FRg/PgQG0=) 2: Pcc8I-k2KPNs-XB7v4Mf0KvmjNI.roa (hash: G/ILdpnlQM/05QVAavE3OhnAKNi1LoszjvjcIB+1APE=) 3: o1E9KI2r3n3uBpvbY2Vzzpw-y2A.crl (hash: vwryou+qitEZRiB/v3Ln8QQEgFhTq5pjcVl9gxwMGuk=) 4: syr1WAsKdpbK3B-2acqa83QBouY.roa (hash: 7AhmNgpdXoA3dOcpljZ7vHI4I+47jOSplCREprRNiXg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.mft rsync://rpki.ripe.net/repository/DEFAULT/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2a:ae:bd:22:e1:4e:b2:8d:69:85:23:5f:8d:40:fb:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3513d288dabde7dee069bdb636573ce9c3ecb60 Validity Not Before: Dec 17 05:00:53 2025 GMT Not After : Dec 18 05:00:53 2025 GMT Subject: CN=23ff240da2722179fc6dd23d34daf7eaa5d5dd58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:9f:2a:ea:72:a1:70:de:83:40:0c:d1:5a:98: 48:22:99:e5:97:f7:e7:8e:b8:5d:73:86:61:9c:33: 71:c6:5d:b6:b9:96:47:1a:e8:70:ad:c2:4c:cb:34: fc:9b:84:0e:3f:0d:18:83:8b:e5:98:a9:8c:c2:87: 5c:07:7b:51:92:d6:5d:2b:01:51:31:54:43:45:79: 84:84:28:38:2a:3e:43:24:dd:be:80:df:c0:94:44: 54:5e:61:df:ef:8c:1e:26:51:ca:73:47:04:62:21: 34:eb:2c:66:7f:f7:0d:c5:c5:1d:2c:70:30:52:8e: 8f:88:0e:74:3f:06:69:92:77:22:8c:e0:2d:fa:08: 00:41:34:26:6a:6c:85:fb:60:3b:91:68:e8:63:2a: 7b:d4:22:6c:29:db:0b:e9:fe:57:e0:3a:48:2b:e3: 85:d7:52:f6:3a:36:6f:99:5e:a9:de:fc:86:ff:ac: f5:7e:93:8e:d9:b1:dd:31:1e:56:de:54:cf:20:58: e4:7d:c1:fe:c0:f3:13:9c:57:83:fe:94:9c:e7:de: b1:4a:f7:8a:20:2e:f4:27:4d:6c:84:a2:c4:61:fc: b0:d7:52:8b:29:52:6c:73:32:d0:11:ab:2f:3c:93: da:a4:e0:98:7b:39:e8:83:4d:9a:ae:a7:88:22:44: 31:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:FF:24:0D:A2:72:21:79:FC:6D:D2:3D:34:DA:F7:EA:A5:D5:DD:58 X509v3 Authority Key Identifier: keyid:A3:51:3D:28:8D:AB:DE:7D:EE:06:9B:DB:63:65:73:CE:9C:3E:CB:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:59:00:f5:fc:b5:f1:1d:66:25:5e:a1:98:7b:b6:1c:7b:ef: 34:21:18:85:b0:a8:6c:35:e8:d2:00:f2:1c:3e:54:3f:f1:94: 7d:27:71:f6:04:77:84:b2:4f:03:9d:17:10:f4:11:06:b9:17: 77:3c:29:64:84:df:7d:aa:40:fb:bd:3c:dd:35:9f:4a:e3:3f: 81:8c:49:84:7b:9f:13:8a:6c:02:a3:73:24:98:2b:c2:b0:75: e1:f1:cc:8f:13:1c:d5:7f:f3:df:0a:4f:c6:82:4d:20:13:90: cd:99:20:94:87:30:d0:1c:1b:c6:ed:c3:ac:a9:99:77:5f:63: ae:b8:c8:af:e1:90:fa:7d:8d:de:ff:2e:fc:53:9a:4f:35:43: ea:38:08:90:59:87:45:7e:5b:13:71:6f:30:ea:23:71:9c:29: 11:40:a2:f9:e5:98:d3:df:d4:d0:7e:b1:e7:fa:c4:17:02:d2: 66:08:91:35:6c:c5:b0:06:fe:5b:82:bd:67:54:44:b9:7c:42: 48:11:d5:d8:86:ba:45:f2:78:05:7f:f6:36:29:d5:e1:37:02: a4:ba:1a:27:bc:1b:b1:71:bc:32:cc:a4:15:9f:20:39:d3:04: bc:3d:53:0c:da:d6:a6:e5:a7:8c:42:14:22:08:46:7f:9c:f7: 9c:dd:52:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsqrr0i4U6yjWmFI1+NQPu+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzNTEzZDI4OGRhYmRlN2RlZTA2OWJkYjYzNjU3M2NlOWMz ZWNiNjAwHhcNMjUxMjE3MDUwMDUzWhcNMjUxMjE4MDUwMDUzWjAzMTEwLwYDVQQD EygyM2ZmMjQwZGEyNzIyMTc5ZmM2ZGQyM2QzNGRhZjdlYWE1ZDVkZDU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJ8q6nKhcN6DQAzRWphIIpnll/fn jrhdc4ZhnDNxxl22uZZHGuhwrcJMyzT8m4QOPw0Yg4vlmKmMwodcB3tRktZdKwFR MVRDRXmEhCg4Kj5DJN2+gN/AlERUXmHf74weJlHKc0cEYiE06yxmf/cNxcUdLHAw Uo6PiA50PwZpkncijOAt+ggAQTQmamyF+2A7kWjoYyp71CJsKdsL6f5X4DpIK+OF 11L2OjZvmV6p3vyG/6z1fpOO2bHdMR5W3lTPIFjkfcH+wPMTnFeD/pSc596xSveK IC70J01shKLEYfyw11KLKVJsczLQEasvPJPapOCYeznog02arqeIIkQx+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCP/JA2iciF5/G3SPTTa9+ql1d1YMB8GA1UdIwQY MBaAFKNRPSiNq9597gab22Nlc86cPstgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzFFOUtJMnIzbjN1QnB2YlkyVnp6cHcteTJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS83OTIxMTMtZTEzYy00M2VlLTg0ZDct ZTBkN2RkNWUyZTZmLzEvbzFFOUtJMnIzbjN1QnB2YlkyVnp6cHcteTJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS83OTIxMTMtZTEzYy00M2VlLTg0ZDctZTBkN2RkNWUyZTZm LzEvbzFFOUtJMnIzbjN1QnB2YlkyVnp6cHcteTJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY1kA9fy1 8R1mJV6hmHu2HHvvNCEYhbCobDXo0gDyHD5UP/GUfSdx9gR3hLJPA50XEPQRBrkX dzwpZITffapA+7083TWfSuM/gYxJhHufE4psAqNzJJgrwrB14fHMjxMc1X/z3wpP xoJNIBOQzZkglIcw0Bwbxu3DrKmZd19jrrjIr+GQ+n2N3v8u/FOaTzVD6jgIkFmH RX5bE3FvMOojcZwpEUCi+eWY09/U0H6x5/rEFwLSZgiRNWzFsAb+W4K9Z1REuXxC SBHV2Ia6RfJ4BX/2NinV4TcCpLoaJ7wbsXG8MsykFZ8gOdMEvD1TDNrWpuWnjEIU IghGf5z3nN1Sog== -----END CERTIFICATE-----Generated at Wed Dec 17 09:44:07 2025 by rpki-client