This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft File: oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft (raw, json) Hash identifier: 16cTAqduW9XAcnnQI99cHmizdQDl0wbEPThN1bR4Y0E= Subject key identifier: 52:9F:AE:33:0C:11:05:DD:58:F2:10:FB:E3:FF:BF:3F:59:0B:0A:E7 Authority key identifier: A0:DA:E7:67:8A:39:69:69:E6:34:0C:9D:CB:65:CD:E9:E3:29:55:4A Certificate issuer: /CN=a0dae7678a396969e6340c9dcb65cde9e329554a Certificate serial: 019AFBB13BB6431F077C0C2785729132A456 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oNrnZ4o5aWnmNAydy2XN6eMpVUo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft Manifest number: 0E75 Signing time: Mon 08 Dec 2025 02:01:27 +0000 Manifest this update: Mon 08 Dec 2025 02:01:27 +0000 Manifest next update: Tue 09 Dec 2025 02:01:27 +0000 Files and hashes: 1: ILIvvSN7jhBNrgAFepnE5fxAfIc.roa (hash: qrswcvi6gW3Bxpx7V6TKM6+tVg0zuZnKPktwjp/YCHs=) 2: S4AYf34wbJr686FuAfXvLLFVW90.roa (hash: QoZkIggV0Rak9NY5B7MD5kJpzqBlOZcHQ7nSTP7ujCU=) 3: jzKy-bNbEooaDReNok2j2yv-pdI.roa (hash: GUiFogVUQmG0/pMsKlem+Qrlz+e50kXxDrB2fF+wH/s=) 4: oNrnZ4o5aWnmNAydy2XN6eMpVUo.crl (hash: 3oxLIzi9+N9+jz0WY8dO8rM1IoYM+HdprSRE9WuJMDs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft rsync://rpki.ripe.net/repository/DEFAULT/oNrnZ4o5aWnmNAydy2XN6eMpVUo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fb:b1:3b:b6:43:1f:07:7c:0c:27:85:72:91:32:a4:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0dae7678a396969e6340c9dcb65cde9e329554a Validity Not Before: Dec 8 02:01:27 2025 GMT Not After : Dec 9 02:01:27 2025 GMT Subject: CN=529fae330c1105dd58f210fbe3ffbf3f590b0ae7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:df:de:e1:d4:36:6f:43:25:2f:79:c0:4a:4e: e6:1b:38:a0:59:31:e8:ac:11:f8:6b:c9:2c:1a:de: d4:bb:45:da:04:f7:df:14:d1:4f:37:f4:71:49:55: e1:c7:c9:aa:02:28:26:49:9a:18:e5:fa:4c:67:28: e5:6f:0b:7d:3c:b2:83:74:28:40:3a:ab:28:20:5e: 5f:46:5e:78:39:81:a6:52:eb:76:7e:e9:6d:f4:4a: 81:5e:97:3f:3d:26:3f:ba:6b:56:97:6e:4b:7b:65: 54:a8:5b:43:26:05:a1:81:be:74:82:50:c3:b6:d6: 1c:a1:24:b4:5e:51:80:9a:24:78:84:6a:a6:ce:45: bc:66:88:4e:69:9f:94:31:a1:74:e3:b5:1d:95:cc: 1a:17:e5:d7:51:b5:83:8f:71:35:f4:b1:d2:64:ae: 35:d7:85:8c:0c:7d:aa:63:1a:26:49:a2:24:18:64: 6c:c1:73:3f:0e:6b:6a:39:80:bc:50:92:52:d5:92: 0c:d1:d0:85:94:2a:38:b4:c5:8e:88:dc:e3:e0:36: fc:7f:f0:2b:9a:9f:0c:30:6a:a3:c0:56:11:77:6e: 90:7a:cc:10:44:f1:9f:41:10:3d:13:1b:4b:84:b6: 8e:05:f9:90:76:40:6f:e1:8b:b9:38:f3:cc:b0:6c: 12:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:9F:AE:33:0C:11:05:DD:58:F2:10:FB:E3:FF:BF:3F:59:0B:0A:E7 X509v3 Authority Key Identifier: keyid:A0:DA:E7:67:8A:39:69:69:E6:34:0C:9D:CB:65:CD:E9:E3:29:55:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNrnZ4o5aWnmNAydy2XN6eMpVUo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:db:f4:54:e8:5a:6b:00:88:7d:c9:6f:92:f6:47:d5:1f:10: c1:f7:11:1e:3e:76:f6:e2:76:69:78:1e:06:dc:c1:f2:9d:8e: 7c:42:7b:6f:d4:ba:e7:0f:d5:60:7c:6d:e2:be:6f:cb:74:51: 27:79:c1:9f:1e:b2:11:43:8c:cf:d6:d8:59:28:20:5b:6c:5c: 34:f4:26:a3:0e:40:10:c9:57:87:a4:74:51:b3:f4:88:77:46: 2a:c5:02:92:06:84:a3:06:19:70:12:00:72:85:6e:de:dd:c7: 5e:57:fa:51:d7:43:d7:a2:49:ca:38:13:cc:88:e7:1d:12:a9: 06:ca:77:31:7c:a5:c1:bf:25:97:cd:9f:15:85:ca:e5:96:4c: e4:35:d1:c9:77:b6:08:a0:8a:9b:6a:a9:aa:e0:4c:70:3d:20: ed:64:0c:ca:3c:d4:b9:f6:09:0e:c4:e7:10:11:25:67:11:5b: d3:96:32:19:53:61:17:62:ae:f2:5e:f2:17:bc:ba:60:0d:01: 12:aa:13:be:0b:5a:05:e7:f9:a8:fb:12:e9:67:3a:ed:85:68: d7:3a:b4:13:bd:e6:ea:3b:65:6b:34:24:a7:9b:14:89:2f:81: 7d:aa:bc:d8:c8:6b:5f:85:1d:b0:32:d2:eb:8d:f5:3b:d6:8d: 9b:40:61:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr7sTu2Qx8HfAwnhXKRMqRWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwZGFlNzY3OGEzOTY5NjllNjM0MGM5ZGNiNjVjZGU5ZTMy OTU1NGEwHhcNMjUxMjA4MDIwMTI3WhcNMjUxMjA5MDIwMTI3WjAzMTEwLwYDVQQD Eyg1MjlmYWUzMzBjMTEwNWRkNThmMjEwZmJlM2ZmYmYzZjU5MGIwYWU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA89/e4dQ2b0MlL3nASk7mGzigWTHo rBH4a8ksGt7Uu0XaBPffFNFPN/RxSVXhx8mqAigmSZoY5fpMZyjlbwt9PLKDdChA OqsoIF5fRl54OYGmUut2fult9EqBXpc/PSY/umtWl25Le2VUqFtDJgWhgb50glDD ttYcoSS0XlGAmiR4hGqmzkW8ZohOaZ+UMaF047UdlcwaF+XXUbWDj3E19LHSZK41 14WMDH2qYxomSaIkGGRswXM/DmtqOYC8UJJS1ZIM0dCFlCo4tMWOiNzj4Db8f/Ar mp8MMGqjwFYRd26QeswQRPGfQRA9ExtLhLaOBfmQdkBv4Yu5OPPMsGwScQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFKfrjMMEQXdWPIQ++P/vz9ZCwrnMB8GA1UdIwQY MBaAFKDa52eKOWlp5jQMnctlzenjKVVKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb05yblo0bzVhV25tTkF5ZHkyWE42ZU1wVlVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy80NjM1OGUtNTRmNy00ZjRiLWE3NDct ZjczNWUzZGFmZDUzLzEvb05yblo0bzVhV25tTkF5ZHkyWE42ZU1wVlVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy80NjM1OGUtNTRmNy00ZjRiLWE3NDctZjczNWUzZGFmZDUz LzEvb05yblo0bzVhV25tTkF5ZHkyWE42ZU1wVlVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXNv0VOha awCIfclvkvZH1R8QwfcRHj529uJ2aXgeBtzB8p2OfEJ7b9S65w/VYHxt4r5vy3RR J3nBnx6yEUOMz9bYWSggW2xcNPQmow5AEMlXh6R0UbP0iHdGKsUCkgaEowYZcBIA coVu3t3HXlf6UddD16JJyjgTzIjnHRKpBsp3MXylwb8ll82fFYXK5ZZM5DXRyXe2 CKCKm2qpquBMcD0g7WQMyjzUufYJDsTnEBElZxFb05YyGVNhF2Ku8l7yF7y6YA0B EqoTvgtaBef5qPsS6Wc67YVo1zq0E73m6jtlazQkp5sUiS+Bfaq82MhrX4UdsDLS 6431O9aNm0BhdQ== -----END CERTIFICATE-----Generated at Mon Dec 8 09:21:20 2025 by rpki-client