This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.mft File: 0nHqBrGnVsv0auBGSEu9Pk_OTKU.mft (raw, json) Hash identifier: QXIBI0Ai6PGVcUW2yLzFIZOlrXTziIKryFIucDZVXfU= Subject key identifier: 40:3D:85:5F:D0:07:4E:25:84:F1:52:7B:9D:49:5F:89:8D:8F:50:57 Authority key identifier: D2:71:EA:06:B1:A7:56:CB:F4:6A:E0:46:48:4B:BD:3E:4F:CE:4C:A5 Certificate issuer: /CN=d271ea06b1a756cbf46ae046484bbd3e4fce4ca5 Certificate serial: 019AF3F76D4D7D5758B4568F2CE7B89C345E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0nHqBrGnVsv0auBGSEu9Pk_OTKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 14:01:10 +0000 Manifest this update: Sat 06 Dec 2025 14:01:10 +0000 Manifest next update: Sun 07 Dec 2025 14:01:10 +0000 Files and hashes: 1: 0nHqBrGnVsv0auBGSEu9Pk_OTKU.crl (hash: 5OxyabI9hWVprzP5XZmZga5TKx+7OjdbMHpyMAzkQ0Q=) 2: HsfAzbYNmjHgKTyTKE1e6DTdYBY.roa (hash: ThTbeLEhcdYcKNF2Qx27UbTWjSeMoDCUTIRvHXWnfiI=) 3: MamPa9eWXXv16Pq_PQPhm2jANdQ.roa (hash: /Xj0uh4hP5hzI09A/uvBTgwPodoBTxb8R7Jv7s78qJA=) 4: b2D7vVU4AWvUD_Ad1lqkP8q1DJY.roa (hash: nc5y91A1zU+LW1Tb8aDxs1rxMTCVcHcXyy5NeNxfhCQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.mft rsync://rpki.ripe.net/repository/DEFAULT/0nHqBrGnVsv0auBGSEu9Pk_OTKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:6d:4d:7d:57:58:b4:56:8f:2c:e7:b8:9c:34:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d271ea06b1a756cbf46ae046484bbd3e4fce4ca5 Validity Not Before: Dec 6 14:01:10 2025 GMT Not After : Dec 7 14:01:10 2025 GMT Subject: CN=403d855fd0074e2584f1527b9d495f898d8f5057 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:20:bd:1d:ce:3e:66:ae:5f:db:29:7d:c0:f5: c9:91:55:b8:ff:8d:65:79:45:3c:60:80:16:4c:ab: fc:d0:e0:4f:fb:14:ce:ec:24:ac:fb:44:8f:90:2b: 10:5f:55:3d:54:e8:ad:46:61:4b:92:a0:49:67:c7: 43:70:4c:7f:ce:32:2e:d2:9d:82:7b:7c:a6:77:2d: 26:53:b1:ac:fb:ce:28:c5:31:b8:de:f2:30:7c:39: 45:a7:72:d6:14:4c:66:92:7f:04:20:99:9e:82:3d: ca:fb:9e:3c:ee:d1:71:8c:f4:78:ce:b6:d1:8d:1a: eb:28:c8:f2:f3:99:bb:ee:69:cf:24:e2:88:18:5c: 2d:ab:82:f0:82:00:62:09:87:f5:b8:fa:67:fc:25: 4c:11:1f:ab:97:7e:f6:b3:5d:d3:4b:b1:c7:b3:3e: 32:c3:63:09:62:26:88:be:e1:b9:6d:e1:f1:f4:c7: 9a:2c:21:11:8e:44:62:34:00:9d:74:a6:2d:23:b9: 44:3c:dd:42:97:5f:2f:29:53:e1:c7:76:72:ce:7c: 25:b8:68:49:f5:d7:a1:ba:05:17:95:7a:a4:09:47: d5:b7:40:2a:92:34:aa:2e:1c:fe:e7:19:ba:d5:bb: 62:ab:d2:7c:d5:5f:c2:dc:dd:fa:16:5f:74:95:4c: b3:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:3D:85:5F:D0:07:4E:25:84:F1:52:7B:9D:49:5F:89:8D:8F:50:57 X509v3 Authority Key Identifier: keyid:D2:71:EA:06:B1:A7:56:CB:F4:6A:E0:46:48:4B:BD:3E:4F:CE:4C:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0nHqBrGnVsv0auBGSEu9Pk_OTKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:86:e1:10:8d:c3:1d:6e:cb:ba:af:e6:45:62:f9:4d:53:67: c0:0c:8f:a5:c8:aa:b0:ee:81:51:3b:7c:71:d1:d4:b4:06:2f: 8c:c2:09:f2:41:51:d5:21:8b:8a:bf:63:05:bf:55:a6:ec:1c: 7f:a1:81:14:10:1e:a1:7f:dd:26:8b:ff:eb:31:16:eb:d7:b6: bb:a0:03:ba:3b:2f:86:c2:97:9a:1e:bd:5c:d0:0a:9b:f4:75: 2c:06:2d:6e:c7:43:5e:41:67:9f:f3:93:a9:3f:67:25:a8:31: 72:5f:23:b1:8d:18:36:1e:75:dc:53:b1:a2:3e:74:d7:09:49: dd:c4:6c:55:fa:0b:76:63:f5:1d:9c:74:c5:2f:f9:0b:4d:78: 30:42:af:cb:b1:ed:83:90:af:e6:90:71:86:54:43:99:4c:05: 8d:b0:93:eb:19:e7:97:34:30:d4:60:15:ab:18:f1:6b:07:ca: 3a:41:66:27:48:1c:2a:09:16:2b:d4:9b:47:09:8e:01:00:9f: 6d:7a:73:18:c1:a5:c8:1e:75:f8:89:23:5c:41:38:97:b4:ff: 30:0a:d5:d7:4c:8c:a3:7a:3d:a3:70:ee:5c:dd:91:9e:96:00: 03:6d:06:a1:e5:6e:05:75:e2:c5:f8:ff:db:f8:ff:41:a6:61: 2d:b7:09:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz921NfVdYtFaPLOe4nDReMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyNzFlYTA2YjFhNzU2Y2JmNDZhZTA0NjQ4NGJiZDNlNGZj ZTRjYTUwHhcNMjUxMjA2MTQwMTEwWhcNMjUxMjA3MTQwMTEwWjAzMTEwLwYDVQQD Eyg0MDNkODU1ZmQwMDc0ZTI1ODRmMTUyN2I5ZDQ5NWY4OThkOGY1MDU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCC9Hc4+Zq5f2yl9wPXJkVW4/41l eUU8YIAWTKv80OBP+xTO7CSs+0SPkCsQX1U9VOitRmFLkqBJZ8dDcEx/zjIu0p2C e3ymdy0mU7Gs+84oxTG43vIwfDlFp3LWFExmkn8EIJmegj3K+5487tFxjPR4zrbR jRrrKMjy85m77mnPJOKIGFwtq4LwggBiCYf1uPpn/CVMER+rl372s13TS7HHsz4y w2MJYiaIvuG5beHx9MeaLCERjkRiNACddKYtI7lEPN1Cl18vKVPhx3ZyznwluGhJ 9dehugUXlXqkCUfVt0AqkjSqLhz+5xm61btiq9J81V/C3N36Fl90lUyzQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEA9hV/QB04lhPFSe51JX4mNj1BXMB8GA1UdIwQY MBaAFNJx6gaxp1bL9GrgRkhLvT5PzkylMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMG5IcUJyR25Wc3YwYXVCR1NFdTlQa19PVEtVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9hY2VjM2QtNzc1ZS00ZDBlLTg0MzMt ZmMzZDVjMjIzMGIyLzEvMG5IcUJyR25Wc3YwYXVCR1NFdTlQa19PVEtVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9hY2VjM2QtNzc1ZS00ZDBlLTg0MzMtZmMzZDVjMjIzMGIy LzEvMG5IcUJyR25Wc3YwYXVCR1NFdTlQa19PVEtVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP4bhEI3D HW7Luq/mRWL5TVNnwAyPpciqsO6BUTt8cdHUtAYvjMIJ8kFR1SGLir9jBb9Vpuwc f6GBFBAeoX/dJov/6zEW69e2u6ADujsvhsKXmh69XNAKm/R1LAYtbsdDXkFnn/OT qT9nJagxcl8jsY0YNh513FOxoj501wlJ3cRsVfoLdmP1HZx0xS/5C014MEKvy7Ht g5Cv5pBxhlRDmUwFjbCT6xnnlzQw1GAVqxjxawfKOkFmJ0gcKgkWK9SbRwmOAQCf bXpzGMGlyB51+IkjXEE4l7T/MArV10yMo3o9o3DuXN2RnpYAA20GoeVuBXXixfj/ 2/j/QaZhLbcJdA== -----END CERTIFICATE-----Generated at Sat Dec 6 22:24:41 2025 by rpki-client