This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/1onLcYkcbZS9nm8U8W5-N8LHKL8.mft File: 1onLcYkcbZS9nm8U8W5-N8LHKL8.mft (raw, json) Hash identifier: E+61S4EsbDTBSYIlPoAXvr5eIM7TLvgs9eSmeUDpOTo= Subject key identifier: 40:10:EF:5E:26:BA:D3:CF:19:5F:CA:52:8F:67:29:FB:DB:74:EF:B8 Authority key identifier: D6:89:CB:71:89:1C:6D:94:BD:9E:6F:14:F1:6E:7E:37:C2:C7:28:BF Certificate issuer: /CN=d689cb71891c6d94bd9e6f14f16e7e37c2c728bf Certificate serial: 019AF3527017A5619F44D435694BE0278DD6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1onLcYkcbZS9nm8U8W5-N8LHKL8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/1onLcYkcbZS9nm8U8W5-N8LHKL8.mft Manifest number: 0517 Signing time: Sat 06 Dec 2025 11:00:57 +0000 Manifest this update: Sat 06 Dec 2025 11:00:57 +0000 Manifest next update: Sun 07 Dec 2025 11:00:57 +0000 Files and hashes: 1: 1onLcYkcbZS9nm8U8W5-N8LHKL8.crl (hash: VHVD/ii8iSXOzIhFKn6rEXNOPLYjvMcERAcZa9E2Ph4=) 2: kSER2798uaT4ZEQ3_Ywav1IgXDo.roa (hash: o89fQ/v3jr3XzrvC5mfE9JQZHOaC2hUzybiixeh55JI=) 3: yZlOT6r0_6wmgpAAvcSq6qfpXoA.roa (hash: CFuI4jvHDVJgJ7TNYXPE3aUuvYsSM/+AObIDbJtCPww=) 4: zl7tT8dRR7O1ZujdC0-GhGjBJAU.roa (hash: dZhp70Fm8wBLybFYAH8VTvH36PqVNE1zgwuzpEitFwQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/1onLcYkcbZS9nm8U8W5-N8LHKL8.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/1onLcYkcbZS9nm8U8W5-N8LHKL8.mft rsync://rpki.ripe.net/repository/DEFAULT/1onLcYkcbZS9nm8U8W5-N8LHKL8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:70:17:a5:61:9f:44:d4:35:69:4b:e0:27:8d:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d689cb71891c6d94bd9e6f14f16e7e37c2c728bf Validity Not Before: Dec 6 11:00:57 2025 GMT Not After : Dec 7 11:00:57 2025 GMT Subject: CN=4010ef5e26bad3cf195fca528f6729fbdb74efb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:60:11:36:77:ed:c2:6e:73:f2:a0:25:6c:37: 61:e3:b0:b9:78:01:90:c3:14:e3:4d:2d:34:41:04: b7:cf:22:de:aa:5e:06:e7:43:97:3d:e7:d8:bf:a2: 59:45:ea:33:49:a5:9f:40:e7:ea:07:8b:70:1a:79: a9:51:7b:94:9d:ba:e4:17:5a:48:ed:ed:3f:1f:3d: fe:06:9e:dd:0c:70:12:0b:64:6c:5a:e4:e2:ca:93: bf:9a:7e:b8:b4:c8:c7:8a:21:27:71:be:c8:3c:8f: 14:ea:83:fb:bc:60:31:77:cf:09:09:ef:9f:d6:75: e3:19:bb:d3:0f:81:32:56:d1:f2:8c:f4:fe:dd:0b: e0:d8:1b:85:82:6f:2e:5c:f2:44:63:96:cd:ed:97: ae:9d:a3:b6:41:6b:a2:90:6b:09:c8:d4:98:d2:bd: 64:15:18:74:88:30:7d:97:8e:8d:be:45:81:95:29: 88:80:38:2e:b1:88:c4:e9:5d:3e:b7:77:8e:e9:8f: 77:16:64:34:f9:2a:c6:15:88:a9:bc:01:19:6a:a8: 2c:d8:ec:e9:10:02:1d:7b:86:2f:ee:95:97:b6:e2: 5a:d1:f7:69:a2:7e:00:c0:35:7c:9e:93:7d:94:1d: 60:67:33:3e:d3:e1:0e:91:28:3e:33:27:e0:4d:f9: c9:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:10:EF:5E:26:BA:D3:CF:19:5F:CA:52:8F:67:29:FB:DB:74:EF:B8 X509v3 Authority Key Identifier: keyid:D6:89:CB:71:89:1C:6D:94:BD:9E:6F:14:F1:6E:7E:37:C2:C7:28:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1onLcYkcbZS9nm8U8W5-N8LHKL8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/1onLcYkcbZS9nm8U8W5-N8LHKL8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/1onLcYkcbZS9nm8U8W5-N8LHKL8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:1c:0c:a2:92:eb:7f:2b:ab:1c:7f:5a:6b:4a:a5:51:4f:12: aa:c5:78:00:03:0e:05:c0:6c:c8:0f:6a:87:3d:dc:82:d2:cd: 74:a7:b6:c1:43:f4:56:4c:cc:ac:44:c2:54:0f:7f:11:09:81: 51:6a:4f:73:e6:fe:cc:43:9b:6e:80:ec:6b:fe:68:30:0b:53: c5:be:9b:34:83:b2:c1:9c:5f:96:3b:c8:52:31:d3:ea:0f:b5: 9d:2a:47:b2:9a:3e:ab:ac:63:38:c7:a5:a3:2f:91:bd:2d:7e: a7:91:ad:87:b1:35:3c:18:0a:ff:97:38:41:88:45:5e:4a:8c: 1d:55:44:77:a8:52:fc:d3:42:7b:42:58:54:4e:03:0e:97:c0: 89:2f:43:e4:ca:d4:41:ad:ed:cd:1b:5e:d0:a7:1a:7f:58:c2: 2b:e3:8f:92:8d:cc:d6:3d:00:a4:84:60:ae:5f:4e:aa:55:85: 41:d8:58:e3:14:96:c7:ee:97:1d:a1:d9:9e:bc:1c:3b:56:01: 27:e0:10:e2:55:c4:c3:b7:30:c0:9c:06:41:f8:60:dd:f2:29: ca:92:43:5f:1b:4a:52:bd:f2:9d:5c:4c:76:fa:16:ed:16:7f: 8a:d4:5d:3d:40:e0:28:58:27:21:c2:05:6e:e2:b7:35:8c:f5: be:81:97:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUnAXpWGfRNQ1aUvgJ43WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2ODljYjcxODkxYzZkOTRiZDllNmYxNGYxNmU3ZTM3YzJj NzI4YmYwHhcNMjUxMjA2MTEwMDU3WhcNMjUxMjA3MTEwMDU3WjAzMTEwLwYDVQQD Eyg0MDEwZWY1ZTI2YmFkM2NmMTk1ZmNhNTI4ZjY3MjlmYmRiNzRlZmI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGARNnftwm5z8qAlbDdh47C5eAGQ wxTjTS00QQS3zyLeql4G50OXPefYv6JZReozSaWfQOfqB4twGnmpUXuUnbrkF1pI 7e0/Hz3+Bp7dDHASC2RsWuTiypO/mn64tMjHiiEncb7IPI8U6oP7vGAxd88JCe+f 1nXjGbvTD4EyVtHyjPT+3Qvg2BuFgm8uXPJEY5bN7ZeunaO2QWuikGsJyNSY0r1k FRh0iDB9l46NvkWBlSmIgDgusYjE6V0+t3eO6Y93FmQ0+SrGFYipvAEZaqgs2Ozp EAIde4Yv7pWXtuJa0fdpon4AwDV8npN9lB1gZzM+0+EOkSg+MyfgTfnJRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEAQ714mutPPGV/KUo9nKfvbdO+4MB8GA1UdIwQY MBaAFNaJy3GJHG2UvZ5vFPFufjfCxyi/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMW9uTGNZa2NiWlM5bm04VThXNS1OOExIS0w4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8wZGYyOGQtOTI0ZC00YjRlLTk0Yjgt ODI0ZmZjNjk0MmY0LzEvMW9uTGNZa2NiWlM5bm04VThXNS1OOExIS0w4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy8wZGYyOGQtOTI0ZC00YjRlLTk0YjgtODI0ZmZjNjk0MmY0 LzEvMW9uTGNZa2NiWlM5bm04VThXNS1OOExIS0w4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADhwMopLr fyurHH9aa0qlUU8SqsV4AAMOBcBsyA9qhz3cgtLNdKe2wUP0VkzMrETCVA9/EQmB UWpPc+b+zEObboDsa/5oMAtTxb6bNIOywZxfljvIUjHT6g+1nSpHspo+q6xjOMel oy+RvS1+p5Gth7E1PBgK/5c4QYhFXkqMHVVEd6hS/NNCe0JYVE4DDpfAiS9D5MrU Qa3tzRte0Kcaf1jCK+OPko3M1j0ApIRgrl9OqlWFQdhY4xSWx+6XHaHZnrwcO1YB J+AQ4lXEw7cwwJwGQfhg3fIpypJDXxtKUr3ynVxMdvoW7RZ/itRdPUDgKFgnIcIF buK3NYz1voGX2A== -----END CERTIFICATE-----Generated at Sat Dec 6 15:46:03 2025 by rpki-client