This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/3b4d8e-06e8-4ea2-927b-a79630b06d93/1/OndQiZTKTSzBidNfM4KiqKtXuEs.mft File: OndQiZTKTSzBidNfM4KiqKtXuEs.mft (raw, json) Hash identifier: rX+Hh+EhgtflOvjE6zXEt91N4jnPx+nUh7iogIqjlac= Subject key identifier: 63:57:BD:77:CF:E8:D2:1A:BC:64:82:7A:49:D4:91:F0:21:66:83:A9 Authority key identifier: 3A:77:50:89:94:CA:4D:2C:C1:89:D3:5F:33:82:A2:A8:AB:57:B8:4B Certificate issuer: /CN=3a77508994ca4d2cc189d35f3382a2a8ab57b84b Certificate serial: 019AF23F9484652A119B71583EC0DF773DA4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OndQiZTKTSzBidNfM4KiqKtXuEs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/3b4d8e-06e8-4ea2-927b-a79630b06d93/1/OndQiZTKTSzBidNfM4KiqKtXuEs.mft Manifest number: 0846 Signing time: Sat 06 Dec 2025 06:00:44 +0000 Manifest this update: Sat 06 Dec 2025 06:00:44 +0000 Manifest next update: Sun 07 Dec 2025 06:00:44 +0000 Files and hashes: 1: OndQiZTKTSzBidNfM4KiqKtXuEs.crl (hash: FTjW6B3IAsSRaL2tUmlpm5G/UsjcMUnoQNUzN4ycAQE=) 2: Wwk65fWkkC0KWWHed6RDHU5zdWE.roa (hash: OdE2ZmnpDqD8iDsUuCtPuylwN6Gs7CMSGI3EhFPXcxg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/3b4d8e-06e8-4ea2-927b-a79630b06d93/1/OndQiZTKTSzBidNfM4KiqKtXuEs.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/3b4d8e-06e8-4ea2-927b-a79630b06d93/1/OndQiZTKTSzBidNfM4KiqKtXuEs.mft rsync://rpki.ripe.net/repository/DEFAULT/OndQiZTKTSzBidNfM4KiqKtXuEs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:94:84:65:2a:11:9b:71:58:3e:c0:df:77:3d:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a77508994ca4d2cc189d35f3382a2a8ab57b84b Validity Not Before: Dec 6 06:00:44 2025 GMT Not After : Dec 7 06:00:44 2025 GMT Subject: CN=6357bd77cfe8d21abc64827a49d491f0216683a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:52:1c:3a:4c:65:1e:23:88:6d:c7:07:63:6b: b4:eb:e6:7c:d6:c9:4f:f6:69:01:38:f1:28:2a:64: 5c:fa:30:c7:05:05:4b:eb:0e:74:01:a4:f0:5a:c2: d7:c9:d6:2a:7d:c3:c6:8a:2b:48:98:26:9b:3c:89: 63:79:67:29:e5:79:71:48:10:3c:1d:8b:8c:09:35: bc:5d:36:8d:9d:5f:25:b4:fb:50:ef:fb:18:9e:18: fb:f0:9a:4c:db:90:24:37:45:a1:f4:0e:11:d3:cc: e7:82:3e:56:e5:c7:df:86:50:48:df:ed:03:c8:75: 5b:29:8f:62:45:28:51:23:a6:66:b9:8e:80:56:46: ac:a0:f9:72:f7:d4:28:79:ae:be:c9:32:2d:3b:8c: b8:2a:b7:d6:83:e0:55:b2:b9:38:2e:9a:ea:dd:2d: 7b:d0:33:8d:53:af:b6:ba:9f:b3:35:4f:ed:91:6c: 15:3e:ff:6b:98:90:28:1c:dc:51:06:36:79:cc:6c: cf:b3:6b:36:26:d2:03:16:0c:7d:d1:ab:fd:74:c8: 22:19:a3:9d:b3:de:6b:df:bc:2b:da:23:6c:aa:dc: 87:68:bb:52:bc:b3:27:53:44:62:24:df:ba:8e:fd: d8:ff:55:e9:05:d8:92:7e:a7:2c:da:a0:e5:e9:3c: dc:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:57:BD:77:CF:E8:D2:1A:BC:64:82:7A:49:D4:91:F0:21:66:83:A9 X509v3 Authority Key Identifier: keyid:3A:77:50:89:94:CA:4D:2C:C1:89:D3:5F:33:82:A2:A8:AB:57:B8:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OndQiZTKTSzBidNfM4KiqKtXuEs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/3b4d8e-06e8-4ea2-927b-a79630b06d93/1/OndQiZTKTSzBidNfM4KiqKtXuEs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/3b4d8e-06e8-4ea2-927b-a79630b06d93/1/OndQiZTKTSzBidNfM4KiqKtXuEs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:d6:9b:46:f7:72:aa:71:9a:09:2c:4f:19:cb:9e:27:7a:a9: a4:b3:42:b3:33:52:a6:6e:d0:84:7e:9c:d2:fd:19:03:16:1d: 63:6d:a7:b6:28:11:09:30:e9:2b:7e:ae:88:16:62:73:25:ee: a5:e5:27:2b:fb:3e:4e:6e:60:22:57:7d:fa:1e:94:4f:10:1d: e6:87:60:0b:05:39:be:f8:a0:d5:6b:bf:30:e5:33:02:e2:90: 86:4e:4f:b1:d6:2a:b7:b0:20:2e:c8:a1:e8:de:c8:f8:c1:9b: 56:a7:87:b0:b1:aa:63:70:82:82:2c:44:1f:a0:30:71:61:41: 06:a7:8a:cd:11:a8:c6:52:11:5c:23:54:6b:04:a8:23:7d:a6: 6f:20:94:9a:cb:37:54:61:b0:c3:be:03:cc:e1:61:06:cb:9b: 96:c8:d1:b7:79:cb:ba:e9:10:d2:c8:e8:80:c0:8a:39:7c:8f: 0d:21:db:b3:5e:37:98:9e:00:fe:60:79:f1:fa:d4:6c:9a:9a: 50:ef:8d:85:7b:28:d7:32:e2:3e:c4:0e:af:ca:f1:09:1d:d1: c2:84:f4:73:68:5c:4a:b6:98:cd:71:7b:54:3e:d9:43:cb:03: a1:d5:84:c1:6a:91:bb:fe:07:70:45:84:26:37:3e:b6:cd:a8: 60:ed:b3:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP5SEZSoRm3FYPsDfdz2kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhNzc1MDg5OTRjYTRkMmNjMTg5ZDM1ZjMzODJhMmE4YWI1 N2I4NGIwHhcNMjUxMjA2MDYwMDQ0WhcNMjUxMjA3MDYwMDQ0WjAzMTEwLwYDVQQD Eyg2MzU3YmQ3N2NmZThkMjFhYmM2NDgyN2E0OWQ0OTFmMDIxNjY4M2E5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFIcOkxlHiOIbccHY2u06+Z81slP 9mkBOPEoKmRc+jDHBQVL6w50AaTwWsLXydYqfcPGiitImCabPIljeWcp5XlxSBA8 HYuMCTW8XTaNnV8ltPtQ7/sYnhj78JpM25AkN0Wh9A4R08zngj5W5cffhlBI3+0D yHVbKY9iRShRI6ZmuY6AVkasoPly99Qoea6+yTItO4y4KrfWg+BVsrk4Lprq3S17 0DONU6+2up+zNU/tkWwVPv9rmJAoHNxRBjZ5zGzPs2s2JtIDFgx90av9dMgiGaOd s95r37wr2iNsqtyHaLtSvLMnU0RiJN+6jv3Y/1XpBdiSfqcs2qDl6TzcvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGNXvXfP6NIavGSCeknUkfAhZoOpMB8GA1UdIwQY MBaAFDp3UImUyk0swYnTXzOCoqirV7hLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT25kUWlaVEtUU3pCaWROZk00S2lxS3RYdUVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8zYjRkOGUtMDZlOC00ZWEyLTkyN2It YTc5NjMwYjA2ZDkzLzEvT25kUWlaVEtUU3pCaWROZk00S2lxS3RYdUVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8zYjRkOGUtMDZlOC00ZWEyLTkyN2ItYTc5NjMwYjA2ZDkz LzEvT25kUWlaVEtUU3pCaWROZk00S2lxS3RYdUVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW9abRvdy qnGaCSxPGcueJ3qppLNCszNSpm7QhH6c0v0ZAxYdY22ntigRCTDpK36uiBZicyXu peUnK/s+Tm5gIld9+h6UTxAd5odgCwU5vvig1Wu/MOUzAuKQhk5PsdYqt7AgLsih 6N7I+MGbVqeHsLGqY3CCgixEH6AwcWFBBqeKzRGoxlIRXCNUawSoI32mbyCUmss3 VGGww74DzOFhBsublsjRt3nLuukQ0sjogMCKOXyPDSHbs143mJ4A/mB58frUbJqa UO+NhXso1zLiPsQOr8rxCR3RwoT0c2hcSraYzXF7VD7ZQ8sDodWEwWqRu/4HcEWE Jjc+ts2oYO2zqA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:52:03 2025 by rpki-client