This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.mft File: O9n7V_Sw8lP5r4WDA-a0alKcGU4.mft (raw, json) Hash identifier: 4iDROljqv68g03bt8poVB4XE5VTGh/gWZm0sF5y9xsk= Subject key identifier: 44:F8:C6:07:61:2F:73:E8:1E:3C:49:94:0F:6F:92:CB:0E:30:7F:F2 Authority key identifier: 3B:D9:FB:57:F4:B0:F2:53:F9:AF:85:83:03:E6:B4:6A:52:9C:19:4E Certificate issuer: /CN=3bd9fb57f4b0f253f9af858303e6b46a529c194e Certificate serial: 019B410042256E1CCDA9275847470EDB7DEB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9n7V_Sw8lP5r4WDA-a0alKcGU4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.mft Manifest number: 140E Signing time: Sun 21 Dec 2025 13:01:34 +0000 Manifest this update: Sun 21 Dec 2025 13:01:34 +0000 Manifest next update: Mon 22 Dec 2025 13:01:34 +0000 Files and hashes: 1: O9n7V_Sw8lP5r4WDA-a0alKcGU4.crl (hash: 8DMouvje561tIrRfaz5pGD+zKPNkSmwet0RsMV9CUJk=) 2: OcIpHvqAwT2M9dTBJHDbqY1xej4.roa (hash: gnCvl1Md/DWtZz5X5Y7WYVBP9HfFDhgD11ts2150gvI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.mft rsync://rpki.ripe.net/repository/DEFAULT/O9n7V_Sw8lP5r4WDA-a0alKcGU4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:00:42:25:6e:1c:cd:a9:27:58:47:47:0e:db:7d:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bd9fb57f4b0f253f9af858303e6b46a529c194e Validity Not Before: Dec 21 13:01:34 2025 GMT Not After : Dec 22 13:01:34 2025 GMT Subject: CN=44f8c607612f73e81e3c49940f6f92cb0e307ff2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:e3:65:fb:ba:d5:af:84:f9:3e:d0:ab:ee:33: f4:be:8c:f0:e5:cc:a6:ed:04:6e:14:25:96:18:10: bc:f1:5a:fe:05:5d:d8:a7:a5:a0:eb:43:ec:47:05: f8:87:0f:0d:dd:11:ba:e9:92:93:51:1d:26:87:32: fb:4f:bf:cb:71:44:d4:d5:2c:63:91:db:c2:dc:e6: 6a:f9:bd:3f:e4:aa:9b:60:1c:ba:4c:e7:17:41:cd: 54:b9:8a:c8:58:97:bf:cb:75:50:b9:62:b0:0a:b8: fa:9d:25:44:62:32:6b:00:c5:cf:f1:30:12:7e:c4: 4a:8e:0d:2d:29:9f:8d:ab:b6:9e:3b:93:08:72:60: 38:a7:9c:de:75:a5:b1:4c:a7:82:12:94:60:1a:16: 12:82:9b:15:14:16:ca:a3:20:0f:df:c8:f7:7e:83: 49:1d:ad:42:dd:f4:cf:3c:c2:ed:57:ea:11:66:1a: 00:37:1c:7b:61:c9:dd:f9:d6:81:71:8e:ed:2c:e1: 26:d6:bb:d9:d2:a4:66:ee:f5:07:8b:84:0f:65:64: 1d:35:59:0f:76:78:d0:91:b4:37:7f:03:60:b6:21: 49:02:ea:4f:30:8a:15:e1:fe:ca:a6:63:55:10:8f: 2c:ad:59:7f:5e:62:aa:6f:ab:5e:7f:6d:6d:11:e9: 19:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:F8:C6:07:61:2F:73:E8:1E:3C:49:94:0F:6F:92:CB:0E:30:7F:F2 X509v3 Authority Key Identifier: keyid:3B:D9:FB:57:F4:B0:F2:53:F9:AF:85:83:03:E6:B4:6A:52:9C:19:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9n7V_Sw8lP5r4WDA-a0alKcGU4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:fa:9c:0d:6b:d5:4b:bb:64:1a:5a:d5:3d:ca:60:80:f5:33: 85:cc:8e:2c:43:ba:2a:ba:c5:07:86:89:83:0d:85:4b:a1:23: 28:15:8e:38:94:80:b1:65:a8:a3:60:c4:01:8e:3b:cf:3c:d5: 29:08:41:e8:1b:98:24:4e:46:34:10:36:bb:55:4d:d2:ac:dd: 09:3c:7e:1d:10:86:4f:7c:37:07:d1:b9:3f:a6:aa:1a:1e:f7: d1:93:9f:84:7d:13:57:1e:72:68:07:8d:ec:17:c2:44:01:97: f6:92:2a:0c:cc:21:12:23:b3:f7:34:13:1d:19:0b:8e:7c:2f: 73:05:4d:b5:c8:cc:bb:96:ea:7f:16:5c:55:f9:2c:2e:21:15: 50:3e:6d:81:01:d1:53:27:6a:4b:5f:55:f8:84:f6:17:18:aa: 03:d7:f0:0b:d2:72:fc:e5:bd:ab:24:fe:de:39:85:a5:08:62: 6f:f0:d3:1b:4b:c5:97:a5:e5:ad:e6:a5:57:5f:bb:c3:46:d7: 4a:e4:e3:e2:e9:99:a3:6a:a1:38:3e:6a:e8:08:b8:9c:13:76: c6:fa:1b:3c:2f:2e:f3:b3:d3:c5:82:7a:c7:06:5f:2c:09:82: 6d:f8:29:99:8d:5f:a4:d8:3d:85:bc:81:5d:31:96:7b:12:c6: 5d:1d:23:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBAEIlbhzNqSdYR0cO233rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiZDlmYjU3ZjRiMGYyNTNmOWFmODU4MzAzZTZiNDZhNTI5 YzE5NGUwHhcNMjUxMjIxMTMwMTM0WhcNMjUxMjIyMTMwMTM0WjAzMTEwLwYDVQQD Eyg0NGY4YzYwNzYxMmY3M2U4MWUzYzQ5OTQwZjZmOTJjYjBlMzA3ZmYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ONl+7rVr4T5PtCr7jP0vozw5cym 7QRuFCWWGBC88Vr+BV3Yp6Wg60PsRwX4hw8N3RG66ZKTUR0mhzL7T7/LcUTU1Sxj kdvC3OZq+b0/5KqbYBy6TOcXQc1UuYrIWJe/y3VQuWKwCrj6nSVEYjJrAMXP8TAS fsRKjg0tKZ+Nq7aeO5MIcmA4p5zedaWxTKeCEpRgGhYSgpsVFBbKoyAP38j3foNJ Ha1C3fTPPMLtV+oRZhoANxx7Ycnd+daBcY7tLOEm1rvZ0qRm7vUHi4QPZWQdNVkP dnjQkbQ3fwNgtiFJAupPMIoV4f7KpmNVEI8srVl/XmKqb6tef21tEekZ6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFET4xgdhL3PoHjxJlA9vkssOMH/yMB8GA1UdIwQY MBaAFDvZ+1f0sPJT+a+FgwPmtGpSnBlOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzluN1ZfU3c4bFA1cjRXREEtYTBhbEtjR1U0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8yMDRjZGYtZjZlNy00ODc0LTk4MDIt NjUwZGQxMzhlNmEyLzEvTzluN1ZfU3c4bFA1cjRXREEtYTBhbEtjR1U0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS8yMDRjZGYtZjZlNy00ODc0LTk4MDItNjUwZGQxMzhlNmEy LzEvTzluN1ZfU3c4bFA1cjRXREEtYTBhbEtjR1U0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARfqcDWvV S7tkGlrVPcpggPUzhcyOLEO6KrrFB4aJgw2FS6EjKBWOOJSAsWWoo2DEAY47zzzV KQhB6BuYJE5GNBA2u1VN0qzdCTx+HRCGT3w3B9G5P6aqGh730ZOfhH0TVx5yaAeN 7BfCRAGX9pIqDMwhEiOz9zQTHRkLjnwvcwVNtcjMu5bqfxZcVfksLiEVUD5tgQHR UydqS19V+IT2FxiqA9fwC9Jy/OW9qyT+3jmFpQhib/DTG0vFl6XlrealV1+7w0bX SuTj4umZo2qhOD5q6Ai4nBN2xvobPC8u87PTxYJ6xwZfLAmCbfgpmY1fpNg9hbyB XTGWexLGXR0jkw== -----END CERTIFICATE-----Generated at Sun Dec 21 22:47:36 2025 by rpki-client