This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.mft File: oNxs0zNOAmkDIjc8O1BuQYT67H8.mft (raw, json) Hash identifier: 1LP2cDMV0to/37dOTcGkV2gbg/DMsVn5yNnh5lPb8R4= Subject key identifier: F6:44:2F:A7:F5:D5:E2:D1:89:8A:43:54:6C:03:EE:FF:5E:06:1A:5E Authority key identifier: A0:DC:6C:D3:33:4E:02:69:03:22:37:3C:3B:50:6E:41:84:FA:EC:7F Certificate issuer: /CN=a0dc6cd3334e02690322373c3b506e4184faec7f Certificate serial: 019AF208AFE5C34779D501C1766DF36DC4D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oNxs0zNOAmkDIjc8O1BuQYT67H8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.mft Manifest number: 058E Signing time: Sat 06 Dec 2025 05:00:46 +0000 Manifest this update: Sat 06 Dec 2025 05:00:46 +0000 Manifest next update: Sun 07 Dec 2025 05:00:46 +0000 Files and hashes: 1: L2QPsEXXxjypDuteGOkuNir3lUA.roa (hash: mcJaTh3VxTTNDuoHtoju+OCGdo4jk9ztR2/hlQRPaNY=) 2: oNxs0zNOAmkDIjc8O1BuQYT67H8.crl (hash: VZEWeYxsP0m0vldljkTSpA3xT4OkFuV1w/oHKQQiMDA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.mft rsync://rpki.ripe.net/repository/DEFAULT/oNxs0zNOAmkDIjc8O1BuQYT67H8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:af:e5:c3:47:79:d5:01:c1:76:6d:f3:6d:c4:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0dc6cd3334e02690322373c3b506e4184faec7f Validity Not Before: Dec 6 05:00:46 2025 GMT Not After : Dec 7 05:00:46 2025 GMT Subject: CN=f6442fa7f5d5e2d1898a43546c03eeff5e061a5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:77:1a:37:d8:e0:d1:62:7e:4c:a0:0b:19:87: 2e:45:87:cd:dc:8e:6c:23:1e:0a:a2:e9:3f:9d:11: 5a:51:c9:4a:1f:2e:7a:ce:6e:67:62:db:f1:1f:72: 8e:29:41:af:d2:fc:fa:b3:bc:82:1a:f3:93:dd:99: 7d:7e:71:aa:13:3e:e5:5c:bc:95:94:d1:e7:52:c8: ec:a7:0f:df:44:bd:72:bd:57:3d:9a:c3:b1:d9:5a: e8:cf:f2:b6:96:10:94:60:8a:83:eb:70:b3:1a:67: 87:c8:23:00:5f:ad:65:e5:c4:e0:e1:e9:9a:0a:ee: 86:17:fc:dd:0d:43:ec:fa:f9:0c:16:64:9c:4e:4e: 57:83:b9:02:c3:61:03:ea:0b:0b:62:cf:33:60:b2: db:0d:60:7b:44:9e:30:b5:72:93:ea:c8:2d:ec:e3: 1b:3f:9e:25:9f:9d:ba:1d:b7:c0:3b:77:b7:88:fe: 5e:df:60:db:8d:a7:62:0c:40:d6:ae:e4:de:12:d0: 70:9c:98:64:aa:61:87:cf:e4:25:43:46:a4:13:cf: 34:b9:23:6a:2e:65:40:18:29:48:6b:0b:69:f0:99: 8b:dc:3e:8f:04:c1:5c:9c:8c:1c:02:91:c8:c1:93: 55:66:25:98:46:02:f0:47:40:98:3d:0e:dd:52:2e: 31:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:44:2F:A7:F5:D5:E2:D1:89:8A:43:54:6C:03:EE:FF:5E:06:1A:5E X509v3 Authority Key Identifier: keyid:A0:DC:6C:D3:33:4E:02:69:03:22:37:3C:3B:50:6E:41:84:FA:EC:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNxs0zNOAmkDIjc8O1BuQYT67H8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:de:b2:38:6e:be:b0:ca:6a:80:f3:24:96:78:37:a8:76:6d: d1:bd:70:f5:99:c2:23:5f:4e:8f:e0:4d:3d:04:14:9f:b6:a0: 4e:e3:5b:0d:25:63:2f:5f:36:12:92:0d:94:3e:87:83:a1:91: 61:f9:48:74:03:95:61:7d:3a:79:e9:21:19:36:be:e3:24:6b: b3:a2:fb:05:03:a9:9c:f9:da:aa:1c:f1:f7:f2:df:de:ad:fe: 9b:30:5a:db:2e:f2:04:93:5a:c1:0a:21:ea:7a:0b:61:e7:4c: 84:57:7a:39:77:59:92:dd:86:4b:de:a5:02:40:4b:99:c0:50: 8f:c0:a0:25:4c:22:36:dd:d8:c3:7e:a3:2c:20:22:94:25:77: b7:21:49:1f:95:f2:eb:65:f8:14:5d:c2:76:0f:a7:5e:5f:a2: a2:15:59:ee:83:87:0f:52:c6:c2:ca:2e:57:28:d5:47:d5:98: a0:48:69:65:dd:24:e6:47:03:69:f8:41:76:89:2c:42:09:16: a3:9b:0b:43:b3:96:1c:26:ed:bb:36:75:9e:cd:2a:65:b6:36: be:d3:77:29:07:3e:1f:20:59:30:f4:74:0e:44:3f:27:70:04: 83:ec:da:cc:de:4a:ab:3b:d9:35:40:4b:91:55:54:71:db:65: aa:a4:4f:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCK/lw0d51QHBdm3zbcTWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwZGM2Y2QzMzM0ZTAyNjkwMzIyMzczYzNiNTA2ZTQxODRm YWVjN2YwHhcNMjUxMjA2MDUwMDQ2WhcNMjUxMjA3MDUwMDQ2WjAzMTEwLwYDVQQD EyhmNjQ0MmZhN2Y1ZDVlMmQxODk4YTQzNTQ2YzAzZWVmZjVlMDYxYTVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA43caN9jg0WJ+TKALGYcuRYfN3I5s Ix4Kouk/nRFaUclKHy56zm5nYtvxH3KOKUGv0vz6s7yCGvOT3Zl9fnGqEz7lXLyV lNHnUsjspw/fRL1yvVc9msOx2Vroz/K2lhCUYIqD63CzGmeHyCMAX61l5cTg4ema Cu6GF/zdDUPs+vkMFmScTk5Xg7kCw2ED6gsLYs8zYLLbDWB7RJ4wtXKT6sgt7OMb P54ln526HbfAO3e3iP5e32DbjadiDEDWruTeEtBwnJhkqmGHz+QlQ0akE880uSNq LmVAGClIawtp8JmL3D6PBMFcnIwcApHIwZNVZiWYRgLwR0CYPQ7dUi4x/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPZEL6f11eLRiYpDVGwD7v9eBhpeMB8GA1UdIwQY MBaAFKDcbNMzTgJpAyI3PDtQbkGE+ux/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb054czB6Tk9BbWtESWpjOE8xQnVRWVQ2N0g4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9jMDFmOTAtZDBmYS00OTc2LWIxYzAt ZDFmZjc1YTdhMzVjLzEvb054czB6Tk9BbWtESWpjOE8xQnVRWVQ2N0g4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS9jMDFmOTAtZDBmYS00OTc2LWIxYzAtZDFmZjc1YTdhMzVj LzEvb054czB6Tk9BbWtESWpjOE8xQnVRWVQ2N0g4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARN6yOG6+ sMpqgPMklng3qHZt0b1w9ZnCI19Oj+BNPQQUn7agTuNbDSVjL182EpINlD6Hg6GR YflIdAOVYX06eekhGTa+4yRrs6L7BQOpnPnaqhzx9/Lf3q3+mzBa2y7yBJNawQoh 6noLYedMhFd6OXdZkt2GS96lAkBLmcBQj8CgJUwiNt3Yw36jLCAilCV3tyFJH5Xy 62X4FF3Cdg+nXl+iohVZ7oOHD1LGwsouVyjVR9WYoEhpZd0k5kcDafhBdoksQgkW o5sLQ7OWHCbtuzZ1ns0qZbY2vtN3KQc+HyBZMPR0DkQ/J3AEg+zazN5KqzvZNUBL kVVUcdtlqqRPdA== -----END CERTIFICATE-----Generated at Sat Dec 6 06:59:08 2025 by rpki-client