This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.mft File: oNvV0fht2d1mYGoU0x1kyw6qyDs.mft (raw, json) Hash identifier: cdo8a/4hKyIPpoomh35SrADLAYGLbQpfina786NDLQw= Subject key identifier: A7:56:7B:36:D4:70:C2:A5:B3:B5:D8:EF:0A:80:7E:FF:98:85:3D:C4 Authority key identifier: A0:DB:D5:D1:F8:6D:D9:DD:66:60:6A:14:D3:1D:64:CB:0E:AA:C8:3B Certificate issuer: /CN=a0dbd5d1f86dd9dd66606a14d31d64cb0eaac83b Certificate serial: 019B262D6F8AD0355848D4FCC80655314FDA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oNvV0fht2d1mYGoU0x1kyw6qyDs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.mft Manifest number: 1225 Signing time: Tue 16 Dec 2025 08:01:10 +0000 Manifest this update: Tue 16 Dec 2025 08:01:10 +0000 Manifest next update: Wed 17 Dec 2025 08:01:10 +0000 Files and hashes: 1: FMG36HBqRtUqt7COIUG1QrrrsQw.roa (hash: +rIibyVY3fY3kT8o9SPGAfNUmFMRWDiLA0uoH2crZuE=) 2: Lvq4EYAEnD7iSP_yLHhiYfgSFsI.roa (hash: OuBem9w/c6wr2MmfA4/euItVJTNd4ynaKBvDB6V5Dg0=) 3: oNvV0fht2d1mYGoU0x1kyw6qyDs.crl (hash: Hh/GrLIRuuI/LPsmic8xUObrzdl37fCQYwqXHif3n6w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.mft rsync://rpki.ripe.net/repository/DEFAULT/oNvV0fht2d1mYGoU0x1kyw6qyDs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 08:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:2d:6f:8a:d0:35:58:48:d4:fc:c8:06:55:31:4f:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0dbd5d1f86dd9dd66606a14d31d64cb0eaac83b Validity Not Before: Dec 16 08:01:10 2025 GMT Not After : Dec 17 08:01:10 2025 GMT Subject: CN=a7567b36d470c2a5b3b5d8ef0a807eff98853dc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:79:b1:a9:cc:b7:d3:58:c1:80:c6:b2:77:16: ee:41:52:e0:41:fd:39:df:a2:db:ff:8e:10:81:92: 1a:bc:4e:49:43:3b:fe:cc:22:73:38:7d:0e:42:f5: 48:cc:b0:04:85:02:1c:15:b7:b6:bf:79:9b:17:47: de:a0:e4:e0:b2:10:95:91:ca:43:81:66:83:28:01: 72:61:fd:2a:2b:12:ef:de:84:f9:0b:4f:92:61:f2: 34:10:13:dd:ad:e3:bc:6d:df:5e:cb:6c:e6:c5:c4: 56:b9:9c:2f:ae:32:ca:9a:1c:53:0c:f7:ac:cd:c8: 4d:45:55:51:d6:5a:e3:5f:d6:0e:2b:7a:fa:39:2b: 11:c5:dd:f3:53:10:0e:cf:d3:53:7a:46:fe:0a:69: 60:67:9e:82:50:17:4b:aa:66:a7:c4:50:29:a8:8b: a5:b8:e7:fd:14:4d:92:32:89:ca:e2:f1:7b:d9:25: ee:9b:3b:96:e6:27:d0:36:ae:e3:7f:8f:f4:5f:43: 1f:a3:07:4e:3c:3b:ff:c2:85:90:09:db:0c:3e:a9: 78:9b:8b:bf:ed:e1:68:53:24:25:4b:b0:2a:c4:d3: 53:20:c3:24:ac:49:68:27:3e:bb:90:ab:af:e5:0c: 75:01:97:c7:79:7a:8e:56:62:d9:50:a6:7a:7f:ce: 06:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:56:7B:36:D4:70:C2:A5:B3:B5:D8:EF:0A:80:7E:FF:98:85:3D:C4 X509v3 Authority Key Identifier: keyid:A0:DB:D5:D1:F8:6D:D9:DD:66:60:6A:14:D3:1D:64:CB:0E:AA:C8:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNvV0fht2d1mYGoU0x1kyw6qyDs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:b6:e1:b2:4e:98:58:16:4e:58:4e:53:ae:5c:04:ae:f5:84: 8c:bb:43:bf:92:4c:c0:f9:3f:64:bd:e5:4c:71:25:b0:5b:18: fb:79:f0:47:aa:4c:62:74:23:be:92:5a:70:a3:aa:8f:c5:b0: 7e:7a:59:bc:4f:38:75:a8:67:41:a2:70:a8:2b:8c:4c:01:53: 4a:d5:3b:4d:56:69:38:d2:5d:39:ec:7e:91:3a:8d:8c:bb:5b: ff:fd:fa:1d:66:62:0b:02:78:0c:59:d5:9a:da:0b:3c:c3:bc: 96:b6:31:60:fa:fc:a0:42:53:a2:bd:da:d4:23:8e:4d:c5:fc: ce:d8:f2:66:56:80:a4:be:16:ab:6d:45:f8:47:be:82:af:5b: 11:e1:bd:61:05:57:ff:b6:17:b1:19:92:e1:8a:84:4e:aa:17: 6d:16:ef:00:90:61:f2:1b:79:31:8d:31:c5:95:02:6a:9a:a8: 21:7a:2b:5d:f7:e3:ad:5e:ac:d9:fc:1f:3e:a0:4d:16:1b:98: c3:55:57:c1:8f:eb:ed:3a:d2:b1:a6:e5:43:7c:19:9d:02:6b: 55:1f:84:d3:bd:76:53:8c:31:21:b7:a6:82:d1:5b:b9:69:4f: ab:f1:99:cf:e0:9b:5d:9f:55:a6:dc:0f:ec:79:c2:c0:22:ee: 04:49:45:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsmLW+K0DVYSNT8yAZVMU/aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwZGJkNWQxZjg2ZGQ5ZGQ2NjYwNmExNGQzMWQ2NGNiMGVh YWM4M2IwHhcNMjUxMjE2MDgwMTEwWhcNMjUxMjE3MDgwMTEwWjAzMTEwLwYDVQQD EyhhNzU2N2IzNmQ0NzBjMmE1YjNiNWQ4ZWYwYTgwN2VmZjk4ODUzZGM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXmxqcy301jBgMaydxbuQVLgQf05 36Lb/44QgZIavE5JQzv+zCJzOH0OQvVIzLAEhQIcFbe2v3mbF0feoOTgshCVkcpD gWaDKAFyYf0qKxLv3oT5C0+SYfI0EBPdreO8bd9ey2zmxcRWuZwvrjLKmhxTDPes zchNRVVR1lrjX9YOK3r6OSsRxd3zUxAOz9NTekb+CmlgZ56CUBdLqmanxFApqIul uOf9FE2SMonK4vF72SXumzuW5ifQNq7jf4/0X0MfowdOPDv/woWQCdsMPql4m4u/ 7eFoUyQlS7AqxNNTIMMkrEloJz67kKuv5Qx1AZfHeXqOVmLZUKZ6f84GIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKdWezbUcMKls7XY7wqAfv+YhT3EMB8GA1UdIwQY MBaAFKDb1dH4bdndZmBqFNMdZMsOqsg7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb052VjBmaHQyZDFtWUdvVTB4MWt5dzZxeURzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8xZDRjZmMtOGU1Yy00NTdjLTk2MjAt MTM1YzkxZWMxOTllLzEvb052VjBmaHQyZDFtWUdvVTB4MWt5dzZxeURzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy8xZDRjZmMtOGU1Yy00NTdjLTk2MjAtMTM1YzkxZWMxOTll LzEvb052VjBmaHQyZDFtWUdvVTB4MWt5dzZxeURzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhLbhsk6Y WBZOWE5TrlwErvWEjLtDv5JMwPk/ZL3lTHElsFsY+3nwR6pMYnQjvpJacKOqj8Ww fnpZvE84dahnQaJwqCuMTAFTStU7TVZpONJdOex+kTqNjLtb//36HWZiCwJ4DFnV mtoLPMO8lrYxYPr8oEJTor3a1COOTcX8ztjyZlaApL4Wq21F+Ee+gq9bEeG9YQVX /7YXsRmS4YqETqoXbRbvAJBh8ht5MY0xxZUCapqoIXorXffjrV6s2fwfPqBNFhuY w1VXwY/r7TrSsablQ3wZnQJrVR+E0712U4wxIbemgtFbuWlPq/GZz+CbXZ9VptwP 7HnCwCLuBElFxQ== -----END CERTIFICATE-----Generated at Tue Dec 16 17:58:23 2025 by rpki-client