This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/0vONSutNAojbuFTR6uC9itP4Qfo.mft File: 0vONSutNAojbuFTR6uC9itP4Qfo.mft (raw, json) Hash identifier: vPMKxBYN0V9+3gMu1LLHZD5pw7uYmDNI33EYwftAs+Q= Subject key identifier: 95:1B:E1:85:B0:38:E4:9A:E7:A5:1E:77:3E:F4:DE:B1:7E:F2:6A:6D Authority key identifier: D2:F3:8D:4A:EB:4D:02:88:DB:B8:54:D1:EA:E0:BD:8A:D3:F8:41:FA Certificate issuer: /CN=d2f38d4aeb4d0288dbb854d1eae0bd8ad3f841fa Certificate serial: 019B4324BAB2B1B03309E81690B3E0C0C50A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0vONSutNAojbuFTR6uC9itP4Qfo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/0vONSutNAojbuFTR6uC9itP4Qfo.mft Manifest number: 178B Signing time: Sun 21 Dec 2025 23:00:39 +0000 Manifest this update: Sun 21 Dec 2025 23:00:39 +0000 Manifest next update: Mon 22 Dec 2025 23:00:39 +0000 Files and hashes: 1: 0vONSutNAojbuFTR6uC9itP4Qfo.crl (hash: 0YXij01mw4BKfpyflqQB+UkjAyuTxZpEUNIn0HMjY/Q=) 2: ERnL-2TcZrO4tJF-sDDaVNlMYnY.roa (hash: +H0qLZUs9MIqoA3GO45JQCdAhU27Z3D/QbaTtfRGmIA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/0vONSutNAojbuFTR6uC9itP4Qfo.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/0vONSutNAojbuFTR6uC9itP4Qfo.mft rsync://rpki.ripe.net/repository/DEFAULT/0vONSutNAojbuFTR6uC9itP4Qfo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:24:ba:b2:b1:b0:33:09:e8:16:90:b3:e0:c0:c5:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2f38d4aeb4d0288dbb854d1eae0bd8ad3f841fa Validity Not Before: Dec 21 23:00:39 2025 GMT Not After : Dec 22 23:00:39 2025 GMT Subject: CN=951be185b038e49ae7a51e773ef4deb17ef26a6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:79:f8:31:76:1c:d7:47:b7:42:2b:15:33:f8: 7d:4a:ce:37:b8:16:65:70:a8:1c:f9:0d:20:7f:a8: 60:75:95:43:4d:4b:df:73:3f:1b:f7:db:c1:01:17: ba:bc:24:33:9e:32:be:50:f1:64:3c:d0:b1:28:ab: 09:8f:9a:11:e0:ec:55:76:16:0b:b3:0b:57:97:7d: 91:0e:e6:64:1a:4c:18:16:17:ee:ee:cc:da:bb:95: ba:be:77:08:53:d9:53:ed:d3:0a:31:69:b5:f4:db: 8b:58:2a:c8:16:46:3b:e4:08:98:0b:69:7f:e1:f0: 8d:6f:99:59:24:c5:08:e5:84:64:15:1a:46:65:9a: 78:76:c2:73:b9:ab:37:ce:ae:f8:b7:4c:57:fe:fd: 1e:58:0b:84:c4:2e:19:75:6e:9c:8b:9c:12:3d:20: 81:8a:5b:05:36:ff:33:32:5a:0e:14:0c:76:04:28: 74:ba:ab:1e:ff:e4:1a:ef:a5:bc:5a:f8:86:3b:1a: a6:08:8e:21:73:94:ca:fe:11:4f:1e:d8:67:e6:ac: d4:96:67:a0:ea:6c:1b:de:9c:39:c4:66:b7:8f:6c: 0b:7f:fb:ef:50:d1:82:16:f1:14:77:d8:ad:e3:93: cf:88:d7:a3:62:b3:21:2d:2f:e9:c4:34:38:9a:21: c9:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:1B:E1:85:B0:38:E4:9A:E7:A5:1E:77:3E:F4:DE:B1:7E:F2:6A:6D X509v3 Authority Key Identifier: keyid:D2:F3:8D:4A:EB:4D:02:88:DB:B8:54:D1:EA:E0:BD:8A:D3:F8:41:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vONSutNAojbuFTR6uC9itP4Qfo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/0vONSutNAojbuFTR6uC9itP4Qfo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/0vONSutNAojbuFTR6uC9itP4Qfo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:85:f7:4f:b1:c8:09:02:67:42:f6:e1:da:74:19:b3:35:f8: 74:ed:bd:93:65:bc:52:a7:f0:0d:41:de:02:f7:96:bd:b9:50: 0c:20:6a:7d:f8:c4:37:f8:7d:91:82:b5:b5:29:bc:c4:d4:5a: 2d:1a:e4:4c:c0:a8:2f:17:ae:09:2d:c0:8c:f9:0d:24:ff:86: ef:39:7a:47:52:48:ab:77:86:66:38:42:09:52:7e:70:2d:ad: 67:d4:b8:7c:86:b5:dc:5f:ab:3b:76:b2:ec:11:80:1e:13:3b: 7f:a1:b0:e6:c4:30:e7:42:3c:15:49:59:2c:0a:42:13:ed:54: 13:f3:76:e0:16:fe:b1:1d:09:fc:f6:45:fe:fb:dd:0a:30:57: 9d:0b:a0:23:46:7f:ff:64:2b:06:a6:f8:a3:78:39:57:76:cf: 86:c1:29:6b:97:ef:23:96:08:07:58:e6:b7:d5:df:28:83:86: eb:27:d8:77:e0:0c:b4:86:21:17:86:a8:78:33:cd:1a:6f:48: da:de:f9:2c:99:5b:17:05:b8:21:14:3c:0b:f7:2a:e6:4a:c5: 74:c0:82:68:b2:32:bd:b6:a5:2f:f7:c6:3f:7c:51:a0:c6:c3: 2a:df:ba:d9:55:e1:58:a2:16:06:67:eb:27:bb:cf:d0:e4:b7: 78:ca:55:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDJLqysbAzCegWkLPgwMUKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyZjM4ZDRhZWI0ZDAyODhkYmI4NTRkMWVhZTBiZDhhZDNm ODQxZmEwHhcNMjUxMjIxMjMwMDM5WhcNMjUxMjIyMjMwMDM5WjAzMTEwLwYDVQQD Eyg5NTFiZTE4NWIwMzhlNDlhZTdhNTFlNzczZWY0ZGViMTdlZjI2YTZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXn4MXYc10e3QisVM/h9Ss43uBZl cKgc+Q0gf6hgdZVDTUvfcz8b99vBARe6vCQznjK+UPFkPNCxKKsJj5oR4OxVdhYL swtXl32RDuZkGkwYFhfu7szau5W6vncIU9lT7dMKMWm19NuLWCrIFkY75AiYC2l/ 4fCNb5lZJMUI5YRkFRpGZZp4dsJzuas3zq74t0xX/v0eWAuExC4ZdW6ci5wSPSCB ilsFNv8zMloOFAx2BCh0uqse/+Qa76W8WviGOxqmCI4hc5TK/hFPHthn5qzUlmeg 6mwb3pw5xGa3j2wLf/vvUNGCFvEUd9it45PPiNejYrMhLS/pxDQ4miHJUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJUb4YWwOOSa56Uedz703rF+8mptMB8GA1UdIwQY MBaAFNLzjUrrTQKI27hU0ergvYrT+EH6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHZPTlN1dE5Bb2pidUZUUjZ1QzlpdFA0UWZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS80OGVmMjctNTg1OC00MjRiLWFkZDEt MGY2NDU1ZjA1Mjc2LzEvMHZPTlN1dE5Bb2pidUZUUjZ1QzlpdFA0UWZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS80OGVmMjctNTg1OC00MjRiLWFkZDEtMGY2NDU1ZjA1Mjc2 LzEvMHZPTlN1dE5Bb2pidUZUUjZ1QzlpdFA0UWZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcIX3T7HI CQJnQvbh2nQZszX4dO29k2W8UqfwDUHeAveWvblQDCBqffjEN/h9kYK1tSm8xNRa LRrkTMCoLxeuCS3AjPkNJP+G7zl6R1JIq3eGZjhCCVJ+cC2tZ9S4fIa13F+rO3ay 7BGAHhM7f6Gw5sQw50I8FUlZLApCE+1UE/N24Bb+sR0J/PZF/vvdCjBXnQugI0Z/ /2QrBqb4o3g5V3bPhsEpa5fvI5YIB1jmt9XfKIOG6yfYd+AMtIYhF4aoeDPNGm9I 2t75LJlbFwW4IRQ8C/cq5krFdMCCaLIyvbalL/fGP3xRoMbDKt+62VXhWKIWBmfr J7vP0OS3eMpVQQ== -----END CERTIFICATE-----Generated at Mon Dec 22 00:49:24 2025 by rpki-client