This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.mft File: oNvV0fht2d1mYGoU0x1kyw6qyDs.mft (raw, json) Hash identifier: 9xFAwWmqn+tSARL4/IgPV5C9xcZitYVmeIFG1EWaRXE= Subject key identifier: 91:7A:F5:FE:50:BF:4A:8C:89:4C:82:B5:46:69:C9:C9:98:82:43:8B Authority key identifier: A0:DB:D5:D1:F8:6D:D9:DD:66:60:6A:14:D3:1D:64:CB:0E:AA:C8:3B Certificate issuer: /CN=a0dbd5d1f86dd9dd66606a14d31d64cb0eaac83b Certificate serial: 019B281BC70AD7DC7D3A02203847A55F5229 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oNvV0fht2d1mYGoU0x1kyw6qyDs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.mft Manifest number: 1226 Signing time: Tue 16 Dec 2025 17:01:07 +0000 Manifest this update: Tue 16 Dec 2025 17:01:07 +0000 Manifest next update: Wed 17 Dec 2025 17:01:07 +0000 Files and hashes: 1: FMG36HBqRtUqt7COIUG1QrrrsQw.roa (hash: +rIibyVY3fY3kT8o9SPGAfNUmFMRWDiLA0uoH2crZuE=) 2: Lvq4EYAEnD7iSP_yLHhiYfgSFsI.roa (hash: OuBem9w/c6wr2MmfA4/euItVJTNd4ynaKBvDB6V5Dg0=) 3: oNvV0fht2d1mYGoU0x1kyw6qyDs.crl (hash: z9Mjke0/O1JsvRrsrzflxDIDQEDS/ve9DB6jTihvOoA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.mft rsync://rpki.ripe.net/repository/DEFAULT/oNvV0fht2d1mYGoU0x1kyw6qyDs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:1b:c7:0a:d7:dc:7d:3a:02:20:38:47:a5:5f:52:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0dbd5d1f86dd9dd66606a14d31d64cb0eaac83b Validity Not Before: Dec 16 17:01:07 2025 GMT Not After : Dec 17 17:01:07 2025 GMT Subject: CN=917af5fe50bf4a8c894c82b54669c9c99882438b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:2b:1b:0c:8a:f0:cf:34:1c:4c:18:18:e3:ed: 77:ca:f0:48:6d:e5:95:12:11:7c:56:3c:84:d8:b6: 7f:31:56:26:b4:27:7c:73:81:a6:bd:c9:23:08:54: 55:fe:8b:c3:9a:20:bd:e1:6e:f5:9b:c6:c6:59:8b: fc:db:25:54:0a:ba:8a:6f:09:c3:a2:49:2c:c5:e1: 52:ef:a5:a5:44:58:03:9f:90:9f:71:0c:83:bc:35: 3a:63:10:fb:1c:09:7f:48:85:de:19:5e:d6:c3:b0: bc:c5:10:12:b7:73:85:3a:7c:2e:74:5c:f2:73:43: d8:4c:02:0a:77:62:94:2d:93:45:c6:35:2e:42:cf: 17:9b:23:d2:7c:b5:76:f9:5c:07:4b:ba:0d:ba:ee: ac:cc:03:1d:b9:87:7b:51:0c:c5:3d:5b:d9:6c:63: 1b:b0:59:72:04:e7:31:df:a7:c6:16:83:b4:4f:92: 14:8a:0f:80:88:9d:b3:65:d1:9c:02:37:36:c5:a2: f7:a7:02:b6:4b:ab:4f:da:0d:6b:5d:a7:ef:d4:cd: 4b:7b:21:70:09:95:43:ed:23:3d:f1:f3:bc:04:53: 15:43:5d:6c:76:ff:d8:64:6e:cf:22:f7:b5:a2:79: 4d:9d:7f:f4:fa:73:a7:ee:a0:9a:2f:16:45:ae:ca: 33:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:7A:F5:FE:50:BF:4A:8C:89:4C:82:B5:46:69:C9:C9:98:82:43:8B X509v3 Authority Key Identifier: keyid:A0:DB:D5:D1:F8:6D:D9:DD:66:60:6A:14:D3:1D:64:CB:0E:AA:C8:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNvV0fht2d1mYGoU0x1kyw6qyDs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:e0:8e:a9:5f:1d:23:d3:d1:99:cf:93:18:8a:c9:ec:62:eb: ae:08:8e:43:aa:33:35:05:15:6c:28:f3:e8:39:dd:65:f6:b4: 4b:ef:1f:d3:52:a7:a4:fe:68:2d:13:b0:82:8d:0e:d4:cd:58: 76:aa:c7:74:15:04:a0:53:ef:2f:b3:3b:ae:96:c0:a7:28:2d: e4:b9:20:be:ef:c5:88:43:b6:04:56:c1:0b:bc:36:36:c3:a8: 81:47:16:ad:40:94:78:3e:95:3c:75:88:fb:04:b5:c0:23:7b: 0c:5e:8e:8e:44:b2:c8:ed:57:1f:db:b2:67:8d:9e:c9:b5:30: 96:ca:20:48:d8:4f:64:ab:a0:27:55:bb:c2:91:4b:08:31:0b: a0:87:a5:1c:be:18:87:95:dc:73:6f:97:1b:a1:44:c6:ad:73: 7e:11:fa:7d:36:8f:d0:4f:a0:1e:b8:f5:e8:6d:fc:fd:a3:ad: 64:d7:8c:02:95:99:75:87:2f:6e:d3:2f:ab:96:e9:0e:f8:af: 4f:a7:73:44:f1:67:d3:c8:93:d0:83:e7:70:5d:24:42:8f:04: f9:bd:0b:bc:ef:a8:a9:6f:c1:38:70:37:32:8d:73:81:95:26: e9:44:8e:d1:74:de:1d:80:15:1c:88:ec:1d:70:2d:37:ca:41: ba:d0:2c:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsoG8cK19x9OgIgOEelX1IpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwZGJkNWQxZjg2ZGQ5ZGQ2NjYwNmExNGQzMWQ2NGNiMGVh YWM4M2IwHhcNMjUxMjE2MTcwMTA3WhcNMjUxMjE3MTcwMTA3WjAzMTEwLwYDVQQD Eyg5MTdhZjVmZTUwYmY0YThjODk0YzgyYjU0NjY5YzljOTk4ODI0MzhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7CsbDIrwzzQcTBgY4+13yvBIbeWV EhF8VjyE2LZ/MVYmtCd8c4GmvckjCFRV/ovDmiC94W71m8bGWYv82yVUCrqKbwnD okksxeFS76WlRFgDn5CfcQyDvDU6YxD7HAl/SIXeGV7Ww7C8xRASt3OFOnwudFzy c0PYTAIKd2KULZNFxjUuQs8XmyPSfLV2+VwHS7oNuu6szAMduYd7UQzFPVvZbGMb sFlyBOcx36fGFoO0T5IUig+AiJ2zZdGcAjc2xaL3pwK2S6tP2g1rXafv1M1LeyFw CZVD7SM98fO8BFMVQ11sdv/YZG7PIve1onlNnX/0+nOn7qCaLxZFrsozNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJF69f5Qv0qMiUyCtUZpycmYgkOLMB8GA1UdIwQY MBaAFKDb1dH4bdndZmBqFNMdZMsOqsg7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb052VjBmaHQyZDFtWUdvVTB4MWt5dzZxeURzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8xZDRjZmMtOGU1Yy00NTdjLTk2MjAt MTM1YzkxZWMxOTllLzEvb052VjBmaHQyZDFtWUdvVTB4MWt5dzZxeURzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy8xZDRjZmMtOGU1Yy00NTdjLTk2MjAtMTM1YzkxZWMxOTll LzEvb052VjBmaHQyZDFtWUdvVTB4MWt5dzZxeURzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcuCOqV8d I9PRmc+TGIrJ7GLrrgiOQ6ozNQUVbCjz6DndZfa0S+8f01KnpP5oLROwgo0O1M1Y dqrHdBUEoFPvL7M7rpbApygt5Lkgvu/FiEO2BFbBC7w2NsOogUcWrUCUeD6VPHWI +wS1wCN7DF6OjkSyyO1XH9uyZ42eybUwlsogSNhPZKugJ1W7wpFLCDELoIelHL4Y h5Xcc2+XG6FExq1zfhH6fTaP0E+gHrj16G38/aOtZNeMApWZdYcvbtMvq5bpDviv T6dzRPFn08iT0IPncF0kQo8E+b0LvO+oqW/BOHA3Mo1zgZUm6USO0XTeHYAVHIjs HXAtN8pButAsbA== -----END CERTIFICATE-----Generated at Tue Dec 16 19:13:17 2025 by rpki-client