This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.mft File: 0nHqBrGnVsv0auBGSEu9Pk_OTKU.mft (raw, json) Hash identifier: X1esk/QuIWvqhiCRXjy7I118rMFVoT6xNUtlnSIRi48= Subject key identifier: 12:12:0D:51:77:76:05:B9:3E:5B:B1:BF:22:0A:5A:C0:10:58:6D:8A Authority key identifier: D2:71:EA:06:B1:A7:56:CB:F4:6A:E0:46:48:4B:BD:3E:4F:CE:4C:A5 Certificate issuer: /CN=d271ea06b1a756cbf46ae046484bbd3e4fce4ca5 Certificate serial: 019AF5E5F24BD9FB1AA3CB6B02C03FEA060A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0nHqBrGnVsv0auBGSEu9Pk_OTKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.mft Manifest number: 1767 Signing time: Sat 06 Dec 2025 23:01:18 +0000 Manifest this update: Sat 06 Dec 2025 23:01:18 +0000 Manifest next update: Sun 07 Dec 2025 23:01:18 +0000 Files and hashes: 1: 0nHqBrGnVsv0auBGSEu9Pk_OTKU.crl (hash: jmkT7bCjI4ZfuE50qU+m+TZcx0kI8ISOFT6FJfchSsg=) 2: HsfAzbYNmjHgKTyTKE1e6DTdYBY.roa (hash: ThTbeLEhcdYcKNF2Qx27UbTWjSeMoDCUTIRvHXWnfiI=) 3: MamPa9eWXXv16Pq_PQPhm2jANdQ.roa (hash: /Xj0uh4hP5hzI09A/uvBTgwPodoBTxb8R7Jv7s78qJA=) 4: b2D7vVU4AWvUD_Ad1lqkP8q1DJY.roa (hash: nc5y91A1zU+LW1Tb8aDxs1rxMTCVcHcXyy5NeNxfhCQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.mft rsync://rpki.ripe.net/repository/DEFAULT/0nHqBrGnVsv0auBGSEu9Pk_OTKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e5:f2:4b:d9:fb:1a:a3:cb:6b:02:c0:3f:ea:06:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d271ea06b1a756cbf46ae046484bbd3e4fce4ca5 Validity Not Before: Dec 6 23:01:18 2025 GMT Not After : Dec 7 23:01:18 2025 GMT Subject: CN=12120d51777605b93e5bb1bf220a5ac010586d8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:09:c6:1a:4a:7f:41:f2:e3:d6:6b:1f:4e:5c: c3:33:37:71:41:d5:86:44:26:85:2e:a1:5d:52:da: 8a:5e:b4:d0:5a:48:6f:97:c2:e9:3d:d9:c4:19:01: a9:b9:26:9d:3c:fa:a1:3d:bc:ff:96:5c:7a:64:ef: 65:bf:1e:59:05:e9:fd:99:1a:d8:48:55:17:f0:50: 4b:e8:35:76:b9:32:0b:81:0f:ce:d0:2b:81:77:bf: 67:c7:38:55:39:1a:c9:af:ce:cf:b9:5e:86:88:91: a3:8a:94:32:62:b2:48:34:79:b5:f9:36:72:8b:ff: 97:aa:df:99:15:e0:cf:b8:fc:00:51:06:f5:bc:ad: 3d:29:fb:0b:c9:6d:4c:84:c8:4b:d1:35:29:72:c3: b3:e5:80:a5:66:ba:8d:a3:e7:25:d9:aa:f8:94:c4: 3f:1e:05:ad:d2:cc:ff:59:a6:48:b4:2c:e6:7c:ba: b6:39:56:72:9a:0e:8f:08:75:64:69:95:47:4e:80: 82:41:6d:df:03:18:22:db:bf:23:d8:5d:88:3b:62: 18:e5:0e:07:56:92:53:72:8e:af:0c:7a:fc:b2:61: 56:1e:cb:b0:9d:2c:a0:19:2d:a1:5c:5b:45:8d:f1: ea:5d:28:9d:43:10:2e:7e:03:99:03:87:61:91:58: bb:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:12:0D:51:77:76:05:B9:3E:5B:B1:BF:22:0A:5A:C0:10:58:6D:8A X509v3 Authority Key Identifier: keyid:D2:71:EA:06:B1:A7:56:CB:F4:6A:E0:46:48:4B:BD:3E:4F:CE:4C:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0nHqBrGnVsv0auBGSEu9Pk_OTKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:06:8d:55:50:5b:b3:99:e1:28:e1:db:25:0e:4b:b7:f7:24: 6b:13:6a:42:18:e5:76:0a:a0:86:67:7d:5f:06:f9:ce:c1:e3: 14:68:e1:a2:b0:63:5f:89:9b:50:d3:64:66:dc:1f:01:ed:a0: 8e:94:6d:a8:b2:cc:ab:7d:7a:c8:bd:c2:59:cd:c3:39:2e:15: 53:31:17:c8:02:a3:0a:a0:20:b9:f9:a7:ed:87:79:ff:53:f7: b7:bd:64:f8:8b:3e:52:fe:aa:d8:1d:c3:9f:36:d5:9b:ca:b5: 50:8c:29:19:f9:54:fd:a8:5b:97:06:af:0d:dd:28:31:b3:32: 49:07:3f:78:95:b0:6a:e3:93:4b:7d:89:77:2d:af:9a:5f:5c: 73:80:9d:bd:19:a5:c9:5c:c0:f5:76:eb:ef:d8:5f:0a:5d:f9: 3d:10:bc:a8:dc:b5:ed:d9:b0:41:52:2b:d9:e8:91:e8:3d:58: b4:3b:31:ac:f3:d9:c8:d1:57:11:d5:08:9b:67:f4:eb:42:17: 8a:8a:4c:ee:69:ba:5a:5c:0a:d5:06:b2:45:51:01:0d:da:37: 51:6d:00:8c:53:e8:f8:25:36:4a:48:4c:96:c1:21:87:35:8f: 90:22:17:9c:fb:5c:15:b2:db:2a:30:65:a7:5a:90:03:33:a2: 73:40:97:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15fJL2fsao8trAsA/6gYKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyNzFlYTA2YjFhNzU2Y2JmNDZhZTA0NjQ4NGJiZDNlNGZj ZTRjYTUwHhcNMjUxMjA2MjMwMTE4WhcNMjUxMjA3MjMwMTE4WjAzMTEwLwYDVQQD EygxMjEyMGQ1MTc3NzYwNWI5M2U1YmIxYmYyMjBhNWFjMDEwNTg2ZDhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgnGGkp/QfLj1msfTlzDMzdxQdWG RCaFLqFdUtqKXrTQWkhvl8LpPdnEGQGpuSadPPqhPbz/llx6ZO9lvx5ZBen9mRrY SFUX8FBL6DV2uTILgQ/O0CuBd79nxzhVORrJr87PuV6GiJGjipQyYrJINHm1+TZy i/+Xqt+ZFeDPuPwAUQb1vK09KfsLyW1MhMhL0TUpcsOz5YClZrqNo+cl2ar4lMQ/ HgWt0sz/WaZItCzmfLq2OVZymg6PCHVkaZVHToCCQW3fAxgi278j2F2IO2IY5Q4H VpJTco6vDHr8smFWHsuwnSygGS2hXFtFjfHqXSidQxAufgOZA4dhkVi7rwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBISDVF3dgW5PluxvyIKWsAQWG2KMB8GA1UdIwQY MBaAFNJx6gaxp1bL9GrgRkhLvT5PzkylMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMG5IcUJyR25Wc3YwYXVCR1NFdTlQa19PVEtVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9hY2VjM2QtNzc1ZS00ZDBlLTg0MzMt ZmMzZDVjMjIzMGIyLzEvMG5IcUJyR25Wc3YwYXVCR1NFdTlQa19PVEtVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9hY2VjM2QtNzc1ZS00ZDBlLTg0MzMtZmMzZDVjMjIzMGIy LzEvMG5IcUJyR25Wc3YwYXVCR1NFdTlQa19PVEtVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASQaNVVBb s5nhKOHbJQ5Lt/ckaxNqQhjldgqghmd9Xwb5zsHjFGjhorBjX4mbUNNkZtwfAe2g jpRtqLLMq316yL3CWc3DOS4VUzEXyAKjCqAgufmn7Yd5/1P3t71k+Is+Uv6q2B3D nzbVm8q1UIwpGflU/ahblwavDd0oMbMySQc/eJWwauOTS32Jdy2vml9cc4CdvRml yVzA9Xbr79hfCl35PRC8qNy17dmwQVIr2eiR6D1YtDsxrPPZyNFXEdUIm2f060IX iopM7mm6WlwK1QayRVEBDdo3UW0AjFPo+CU2SkhMlsEhhzWPkCIXnPtcFbLbKjBl p1qQAzOic0CXPw== -----END CERTIFICATE-----Generated at Sun Dec 7 02:36:43 2025 by rpki-client