This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/a1d84e-0c5d-4fb5-9dd1-8c8524e160f7/1/Onp2YdSgHs7iQ4TRUux5qhyAe-c.mft File: Onp2YdSgHs7iQ4TRUux5qhyAe-c.mft (raw, json) Hash identifier: nnKWfEBwos8WS+KfYU2f6+fIc2+oYxZJ3oTbtBeAZko= Subject key identifier: DD:2E:1D:32:B8:0F:5B:48:09:0E:E8:3E:A0:76:C8:07:0A:A8:DC:AA Authority key identifier: 3A:7A:76:61:D4:A0:1E:CE:E2:43:84:D1:52:EC:79:AA:1C:80:7B:E7 Certificate issuer: /CN=3a7a7661d4a01ecee24384d152ec79aa1c807be7 Certificate serial: 019B300C4618E3896D0B0AF1F70DBBFDD93A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Onp2YdSgHs7iQ4TRUux5qhyAe-c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/a1d84e-0c5d-4fb5-9dd1-8c8524e160f7/1/Onp2YdSgHs7iQ4TRUux5qhyAe-c.mft Manifest number: 04 Signing time: Thu 18 Dec 2025 06:01:09 +0000 Manifest this update: Thu 18 Dec 2025 06:01:09 +0000 Manifest next update: Fri 19 Dec 2025 06:01:09 +0000 Files and hashes: 1: OVKvymFrbX43XOljNNooa7WThWs.asa (hash: 1FTm/6RnYDK0EBULBUTl49w/2xuw2jLBEG4MKGTL100=) 2: Onp2YdSgHs7iQ4TRUux5qhyAe-c.crl (hash: H+XvECQHa2V0kpDwJFlYEu1NzbG5ZCh3P6AJdn4//MQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/a1d84e-0c5d-4fb5-9dd1-8c8524e160f7/1/Onp2YdSgHs7iQ4TRUux5qhyAe-c.crl rsync://rpki.ripe.net/repository/DEFAULT/84/a1d84e-0c5d-4fb5-9dd1-8c8524e160f7/1/Onp2YdSgHs7iQ4TRUux5qhyAe-c.mft rsync://rpki.ripe.net/repository/DEFAULT/Onp2YdSgHs7iQ4TRUux5qhyAe-c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 06:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:0c:46:18:e3:89:6d:0b:0a:f1:f7:0d:bb:fd:d9:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a7a7661d4a01ecee24384d152ec79aa1c807be7 Validity Not Before: Dec 18 06:01:09 2025 GMT Not After : Dec 19 06:01:09 2025 GMT Subject: CN=dd2e1d32b80f5b48090ee83ea076c8070aa8dcaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e4:68:63:0c:9c:33:b7:2e:53:e0:ab:6d:54: c1:91:f5:f6:7a:b0:39:68:85:48:03:e9:0a:61:5b: 9e:da:f0:e0:18:34:6c:cf:cf:72:49:87:99:41:4e: 59:d7:3a:10:c5:cf:44:d6:9c:11:7c:a5:6a:98:09: 73:fe:44:11:8a:dd:6d:dc:4a:a5:c0:48:ad:5a:99: e2:b4:5a:3d:7e:1a:c4:fe:c2:bb:6f:ee:a1:98:40: da:3e:96:30:e1:ff:ab:d5:22:0c:81:63:75:cf:f3: 26:30:fa:88:46:30:10:31:46:57:d6:d7:69:93:45: fc:d3:4b:dd:54:f1:e8:dd:71:ed:92:85:e4:dc:27: 89:33:bd:21:36:23:8a:75:7f:fa:dc:88:47:fa:82: a1:82:a3:e4:6d:ad:36:e3:f9:f2:d6:0d:77:7f:3d: 7f:ff:3a:cb:32:ac:0a:ff:67:41:4e:5a:22:78:4a: 8b:31:ce:c5:d0:62:ea:18:97:d8:17:dc:e8:57:ec: 6d:be:15:b1:46:a7:df:b4:18:51:29:fa:bd:b8:aa: 0b:94:ba:64:5a:c0:da:0c:f1:77:fc:33:cd:59:50: bc:8f:cd:68:f7:76:09:71:4e:eb:8a:ef:4b:7e:96: 4c:cb:51:7d:a4:cf:5a:1d:e7:fd:cb:57:15:4d:88: 7d:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:2E:1D:32:B8:0F:5B:48:09:0E:E8:3E:A0:76:C8:07:0A:A8:DC:AA X509v3 Authority Key Identifier: keyid:3A:7A:76:61:D4:A0:1E:CE:E2:43:84:D1:52:EC:79:AA:1C:80:7B:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Onp2YdSgHs7iQ4TRUux5qhyAe-c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a1d84e-0c5d-4fb5-9dd1-8c8524e160f7/1/Onp2YdSgHs7iQ4TRUux5qhyAe-c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a1d84e-0c5d-4fb5-9dd1-8c8524e160f7/1/Onp2YdSgHs7iQ4TRUux5qhyAe-c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:ea:73:ce:d0:20:ed:d5:76:34:8f:8d:ef:de:f4:2c:05:58: 0c:81:78:39:1a:88:16:c0:96:24:2f:d9:e8:16:cc:ee:5c:bc: bf:f9:7d:2d:98:6d:4b:77:fa:a4:87:41:f5:f2:50:67:96:cf: cc:0c:f9:4c:af:7f:8b:ef:de:9d:8d:f5:a0:da:61:5a:a8:40: c8:af:94:c0:19:f0:eb:38:6c:66:39:f9:c9:0d:a9:75:1e:b9: cc:d4:d8:bb:2e:c0:4e:84:60:af:4c:b8:41:d4:b7:41:ba:b7: ec:f6:5a:91:7b:bb:4a:20:9f:dc:19:4c:4c:05:cb:18:5f:52: ab:ee:eb:ca:32:fe:93:a2:a1:ce:9f:29:ad:d7:c9:df:4a:01: 09:59:36:64:b3:2d:90:fd:07:89:ac:94:51:d0:63:37:b4:d1: 3c:47:1e:1e:33:0b:03:99:7d:2d:21:1e:f6:39:28:06:3d:98: 17:90:10:bf:f6:5a:08:b1:5a:b0:33:bd:2d:6e:5e:37:08:88: 0e:da:06:a0:9f:38:7b:2d:4d:a8:27:a0:30:fe:42:37:bd:b0: 94:02:1a:4e:db:ad:de:7e:3a:a4:16:7e:eb:f7:b7:71:09:1f: 4a:26:fe:6a:f8:4c:37:78:13:fd:a7:19:4c:b9:76:7b:ab:80: 48:05:28:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZswDEYY44ltCwrx9w27/dk6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhN2E3NjYxZDRhMDFlY2VlMjQzODRkMTUyZWM3OWFhMWM4 MDdiZTcwHhcNMjUxMjE4MDYwMTA5WhcNMjUxMjE5MDYwMTA5WjAzMTEwLwYDVQQD EyhkZDJlMWQzMmI4MGY1YjQ4MDkwZWU4M2VhMDc2YzgwNzBhYThkY2FhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuRoYwycM7cuU+CrbVTBkfX2erA5 aIVIA+kKYVue2vDgGDRsz89ySYeZQU5Z1zoQxc9E1pwRfKVqmAlz/kQRit1t3Eql wEitWpnitFo9fhrE/sK7b+6hmEDaPpYw4f+r1SIMgWN1z/MmMPqIRjAQMUZX1tdp k0X800vdVPHo3XHtkoXk3CeJM70hNiOKdX/63IhH+oKhgqPkba024/ny1g13fz1/ /zrLMqwK/2dBTloieEqLMc7F0GLqGJfYF9zoV+xtvhWxRqfftBhRKfq9uKoLlLpk WsDaDPF3/DPNWVC8j81o93YJcU7riu9LfpZMy1F9pM9aHef9y1cVTYh9lwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN0uHTK4D1tICQ7oPqB2yAcKqNyqMB8GA1UdIwQY MBaAFDp6dmHUoB7O4kOE0VLseaocgHvnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT25wMllkU2dIczdpUTRUUlV1eDVxaHlBZS1jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9hMWQ4NGUtMGM1ZC00ZmI1LTlkZDEt OGM4NTI0ZTE2MGY3LzEvT25wMllkU2dIczdpUTRUUlV1eDVxaHlBZS1jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC9hMWQ4NGUtMGM1ZC00ZmI1LTlkZDEtOGM4NTI0ZTE2MGY3 LzEvT25wMllkU2dIczdpUTRUUlV1eDVxaHlBZS1jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyepzztAg 7dV2NI+N7970LAVYDIF4ORqIFsCWJC/Z6BbM7ly8v/l9LZhtS3f6pIdB9fJQZ5bP zAz5TK9/i+/enY31oNphWqhAyK+UwBnw6zhsZjn5yQ2pdR65zNTYuy7AToRgr0y4 QdS3Qbq37PZakXu7SiCf3BlMTAXLGF9Sq+7ryjL+k6Khzp8prdfJ30oBCVk2ZLMt kP0HiayUUdBjN7TRPEceHjMLA5l9LSEe9jkoBj2YF5AQv/ZaCLFasDO9LW5eNwiI DtoGoJ84ey1NqCegMP5CN72wlAIaTtut3n46pBZ+6/e3cQkfSib+avhMN3gT/acZ TLl2e6uASAUoPA== -----END CERTIFICATE-----Generated at Thu Dec 18 16:38:04 2025 by rpki-client