This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.mft File: Onb8XJAQtBEZymjca5lQul_3Mn4.mft (raw, json) Hash identifier: HT1rChI5gIHMZ1r1miNyq8xyZJppiFyE5RwTtSLi6Cw= Subject key identifier: 3F:39:35:E4:4B:4A:6D:04:16:A7:B6:65:71:86:36:E5:C8:13:BA:08 Authority key identifier: 3A:76:FC:5C:90:10:B4:11:19:CA:68:DC:6B:99:50:BA:5F:F7:32:7E Certificate issuer: /CN=3a76fc5c9010b41119ca68dc6b9950ba5ff7327e Certificate serial: 019AF31C8AB884CE31A87D128623BF850117 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Onb8XJAQtBEZymjca5lQul_3Mn4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.mft Manifest number: 113E Signing time: Sat 06 Dec 2025 10:02:05 +0000 Manifest this update: Sat 06 Dec 2025 10:02:05 +0000 Manifest next update: Sun 07 Dec 2025 10:02:05 +0000 Files and hashes: 1: Onb8XJAQtBEZymjca5lQul_3Mn4.crl (hash: wkJWiaQbwGM2rqsuMAPOuEsz+YQyK/nSfCYpztBwHE0=) 2: aLeS6kJNMMsXR_fWm4nfBJc0RbY.roa (hash: 2eZg5Esd5JZxUzRdKZEfMd9ilMWbL+Zmx8dFdFF5esA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.mft rsync://rpki.ripe.net/repository/DEFAULT/Onb8XJAQtBEZymjca5lQul_3Mn4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:8a:b8:84:ce:31:a8:7d:12:86:23:bf:85:01:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a76fc5c9010b41119ca68dc6b9950ba5ff7327e Validity Not Before: Dec 6 10:02:05 2025 GMT Not After : Dec 7 10:02:05 2025 GMT Subject: CN=3f3935e44b4a6d0416a7b665718636e5c813ba08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:90:04:ef:18:53:99:ed:02:7a:7e:cb:f5:38: de:db:65:df:62:bd:91:3e:f9:c3:04:d1:40:55:83: 17:39:b9:b0:db:fe:b5:61:56:04:c7:7b:ad:d2:6f: ab:ad:1e:61:5f:91:ed:6d:88:55:7a:aa:a7:48:bc: 8d:50:f5:b1:73:4c:ee:e3:23:92:7c:8a:9e:d7:8c: 6a:7c:91:1d:3e:5e:da:ea:98:68:20:60:7d:ad:97: 92:fc:a2:65:7a:54:71:6b:97:c1:a0:c2:30:e8:4f: b2:d8:bc:6d:fb:4c:85:21:68:1a:fd:8b:2b:5b:8e: 74:bd:81:ed:12:06:a1:f6:22:1a:0a:29:74:29:8d: 7d:13:6c:95:90:b1:57:6d:51:c4:33:c6:33:f4:b3: 7c:be:ca:f4:1f:11:3f:5f:26:e3:c2:88:2c:8d:4f: 46:f6:be:6d:40:a6:53:7f:68:06:0a:27:b7:eb:c3: d7:02:0a:4e:bc:c8:06:39:f9:94:c8:b2:60:f0:15: f1:60:17:d2:8c:21:b6:1b:b7:f1:87:2b:76:a0:3e: 1d:db:45:8b:f7:ae:49:5b:5a:1a:e7:6a:72:10:9a: be:9a:25:5b:8c:93:26:a1:4a:81:15:ab:fb:c1:76: 15:7b:1e:46:12:ce:6e:aa:57:36:3a:47:2b:fe:f8: 24:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:39:35:E4:4B:4A:6D:04:16:A7:B6:65:71:86:36:E5:C8:13:BA:08 X509v3 Authority Key Identifier: keyid:3A:76:FC:5C:90:10:B4:11:19:CA:68:DC:6B:99:50:BA:5F:F7:32:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Onb8XJAQtBEZymjca5lQul_3Mn4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:8c:79:5d:6c:11:6e:98:0c:9d:fc:9c:46:4e:48:e9:07:f4: 50:1c:4d:91:3d:e9:82:58:fc:d5:c6:5c:5e:20:fe:9b:a9:e1: 40:b5:b2:01:e2:73:aa:d0:6f:68:79:de:0f:6b:fa:aa:82:d4: 34:a8:49:ed:e6:2e:f9:9f:98:71:72:18:0a:ab:92:f4:ce:45: 9e:e1:6d:98:e3:df:bc:8c:29:81:39:07:cd:c2:81:71:49:21: 49:aa:5c:45:be:73:6c:03:b4:76:68:1e:bb:93:d1:ce:8b:a8: 3d:69:bc:89:b8:ed:0e:fb:ad:70:c1:d0:49:f3:8d:e3:49:c6: 5b:39:1a:5c:97:36:78:f2:e1:24:5a:c8:c0:0f:f0:9f:66:95: 74:7a:87:b4:73:9c:54:50:7d:55:7b:d2:61:93:a2:d1:ea:d2: ec:30:21:01:dd:ea:2a:f4:b8:0e:bf:a8:2d:46:89:d8:68:dc: e4:5b:6e:98:c2:ef:74:da:c3:22:24:93:ee:4a:df:20:a7:9e: 4e:4d:2e:d7:e5:b6:e3:65:6b:30:41:51:01:2e:fe:26:f9:28: d4:97:40:5e:fb:ae:63:c4:47:7e:6b:91:6b:2b:6a:9e:fd:5f: 3f:33:27:6f:76:91:46:0c:89:44:de:80:23:08:cc:b0:20:c4: 19:98:f5:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHIq4hM4xqH0ShiO/hQEXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhNzZmYzVjOTAxMGI0MTExOWNhNjhkYzZiOTk1MGJhNWZm NzMyN2UwHhcNMjUxMjA2MTAwMjA1WhcNMjUxMjA3MTAwMjA1WjAzMTEwLwYDVQQD EygzZjM5MzVlNDRiNGE2ZDA0MTZhN2I2NjU3MTg2MzZlNWM4MTNiYTA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpAE7xhTme0Cen7L9Tje22XfYr2R PvnDBNFAVYMXObmw2/61YVYEx3ut0m+rrR5hX5HtbYhVeqqnSLyNUPWxc0zu4yOS fIqe14xqfJEdPl7a6phoIGB9rZeS/KJlelRxa5fBoMIw6E+y2Lxt+0yFIWga/Ysr W450vYHtEgah9iIaCil0KY19E2yVkLFXbVHEM8Yz9LN8vsr0HxE/XybjwogsjU9G 9r5tQKZTf2gGCie368PXAgpOvMgGOfmUyLJg8BXxYBfSjCG2G7fxhyt2oD4d20WL 965JW1oa52pyEJq+miVbjJMmoUqBFav7wXYVex5GEs5uqlc2Okcr/vgkfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD85NeRLSm0EFqe2ZXGGNuXIE7oIMB8GA1UdIwQY MBaAFDp2/FyQELQRGcpo3GuZULpf9zJ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT25iOFhKQVF0QkVaeW1qY2E1bFF1bF8zTW40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9hMjc4N2UtYzRiYi00ZGZkLTgzY2Qt YmRmYTdjNGY4YjBhLzEvT25iOFhKQVF0QkVaeW1qY2E1bFF1bF8zTW40Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9hMjc4N2UtYzRiYi00ZGZkLTgzY2QtYmRmYTdjNGY4YjBh LzEvT25iOFhKQVF0QkVaeW1qY2E1bFF1bF8zTW40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ4x5XWwR bpgMnfycRk5I6Qf0UBxNkT3pglj81cZcXiD+m6nhQLWyAeJzqtBvaHneD2v6qoLU NKhJ7eYu+Z+YcXIYCquS9M5FnuFtmOPfvIwpgTkHzcKBcUkhSapcRb5zbAO0dmge u5PRzouoPWm8ibjtDvutcMHQSfON40nGWzkaXJc2ePLhJFrIwA/wn2aVdHqHtHOc VFB9VXvSYZOi0erS7DAhAd3qKvS4Dr+oLUaJ2Gjc5FtumMLvdNrDIiST7krfIKee Tk0u1+W242VrMEFRAS7+Jvko1JdAXvuuY8RHfmuRaytqnv1fPzMnb3aRRgyJRN6A IwjMsCDEGZj17Q== -----END CERTIFICATE-----Generated at Sat Dec 6 15:37:15 2025 by rpki-client