This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/d4fc4c-4815-4e56-bf73-4a6ace26b972/1/oNki4v4kvSzaeToqrcEzYlAM2bE.mft File: oNki4v4kvSzaeToqrcEzYlAM2bE.mft (raw, json) Hash identifier: k2VLLU9i67uK3fpMqIKcLlCHqrK+PMoUcSvcDt1Z2mQ= Subject key identifier: 67:BB:F7:61:3E:7F:F4:59:00:2A:84:0A:20:EB:FF:C4:65:15:C4:AA Authority key identifier: A0:D9:22:E2:FE:24:BD:2C:DA:79:3A:2A:AD:C1:33:62:50:0C:D9:B1 Certificate issuer: /CN=a0d922e2fe24bd2cda793a2aadc13362500cd9b1 Certificate serial: 019B4E8461EC6616298269CD2B37EFDA33DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oNki4v4kvSzaeToqrcEzYlAM2bE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/d4fc4c-4815-4e56-bf73-4a6ace26b972/1/oNki4v4kvSzaeToqrcEzYlAM2bE.mft Manifest number: 0D94 Signing time: Wed 24 Dec 2025 04:00:57 +0000 Manifest this update: Wed 24 Dec 2025 04:00:57 +0000 Manifest next update: Thu 25 Dec 2025 04:00:57 +0000 Files and hashes: 1: QU8GopeOlHwkTprCT-S3aTgX93c.roa (hash: wdEn+nBxYgSylw1Zt9va3XXWns8S/pGLaLLxEZ/5irY=) 2: oNki4v4kvSzaeToqrcEzYlAM2bE.crl (hash: E48+1jP2NAUwniiLz6WwYIgvpRBuL7ND+gWeU489pGw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/d4fc4c-4815-4e56-bf73-4a6ace26b972/1/oNki4v4kvSzaeToqrcEzYlAM2bE.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/d4fc4c-4815-4e56-bf73-4a6ace26b972/1/oNki4v4kvSzaeToqrcEzYlAM2bE.mft rsync://rpki.ripe.net/repository/DEFAULT/oNki4v4kvSzaeToqrcEzYlAM2bE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:84:61:ec:66:16:29:82:69:cd:2b:37:ef:da:33:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0d922e2fe24bd2cda793a2aadc13362500cd9b1 Validity Not Before: Dec 24 04:00:57 2025 GMT Not After : Dec 25 04:00:57 2025 GMT Subject: CN=67bbf7613e7ff459002a840a20ebffc46515c4aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:28:95:03:2f:a4:25:fb:af:4f:91:e6:17:ca: 47:5c:ee:4c:4d:c6:a2:9e:1c:e2:bb:29:e7:ba:cb: ce:fd:fc:1a:c0:26:f9:91:f4:2b:92:b7:5f:da:cf: 2f:50:60:b9:24:18:45:b8:5a:6c:4a:8d:2b:cf:a6: 50:f1:e0:16:d7:e1:64:1b:be:70:48:17:ba:97:1a: 15:fb:42:ac:f9:b5:5f:46:06:45:ca:81:2f:44:94: a7:b8:21:22:a7:96:22:2e:3f:92:89:20:27:0e:16: af:95:1c:c2:3c:52:d4:8e:78:dc:b9:b1:50:9b:c7: 51:7d:61:8a:92:b9:56:6c:2e:b7:b0:e7:5e:b5:ed: f3:37:d4:b5:e2:f4:58:b7:91:60:ef:7a:a7:d0:85: 96:92:d3:b4:6a:7f:f9:76:ef:f1:0e:58:cb:29:13: 1b:d9:3e:4c:92:96:b4:23:eb:cb:72:2b:34:49:32: 3a:20:1f:5f:45:34:dc:77:10:f3:1d:aa:a5:07:ba: b5:5f:83:9e:bf:18:84:bb:1b:d0:a7:df:db:c9:43: 94:6f:ab:f7:fe:ac:37:fe:16:89:0b:57:cf:66:f2: b8:90:62:78:b5:5d:07:32:30:b1:4c:21:82:8a:59: 7f:c3:2e:b9:a6:56:64:07:f2:ef:10:0c:84:34:c3: 34:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:BB:F7:61:3E:7F:F4:59:00:2A:84:0A:20:EB:FF:C4:65:15:C4:AA X509v3 Authority Key Identifier: keyid:A0:D9:22:E2:FE:24:BD:2C:DA:79:3A:2A:AD:C1:33:62:50:0C:D9:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNki4v4kvSzaeToqrcEzYlAM2bE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/d4fc4c-4815-4e56-bf73-4a6ace26b972/1/oNki4v4kvSzaeToqrcEzYlAM2bE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/d4fc4c-4815-4e56-bf73-4a6ace26b972/1/oNki4v4kvSzaeToqrcEzYlAM2bE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:cd:d9:77:c4:5b:24:3d:85:df:ad:16:37:0a:c3:9a:cf:4c: e5:ed:37:46:05:9c:72:49:15:04:2a:08:1a:06:89:c9:df:58: 1c:1c:8f:a0:a1:ad:7d:67:d7:95:b8:73:fd:ec:18:0f:a4:65: ee:39:4c:72:1c:e3:f1:f2:b6:a8:ce:55:07:cc:4c:ad:c2:16: f2:7f:88:e2:3f:f9:4e:9b:3e:a2:85:d8:71:db:54:58:2e:c8: 63:90:c7:45:c4:30:4a:37:41:27:f8:c2:97:21:52:57:22:07: e5:ba:54:40:7d:af:93:a3:c0:c3:a5:2d:92:04:6e:22:f7:3d: 5c:d5:cb:25:72:a6:87:a5:6d:ae:03:31:35:79:34:34:f7:c4: 1a:e7:ad:00:ca:43:b2:a9:a3:df:7f:73:10:fe:69:f5:dd:5d: 4e:9e:3a:6d:20:99:b8:24:d1:93:22:40:5e:22:91:83:f1:be: bf:fa:f0:fa:0e:7b:ef:c4:b2:d2:72:3d:48:94:83:9e:47:6f: be:7b:8e:18:88:72:1b:12:12:82:81:c9:5e:34:82:8c:a3:f4: 11:e7:3b:12:e7:ea:2f:98:46:7d:ee:bf:94:40:24:1c:a9:4c: 1d:3a:3a:c8:45:68:47:ba:53:d4:72:d7:17:47:db:32:05:8c: 62:42:f3:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOhGHsZhYpgmnNKzfv2jPaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwZDkyMmUyZmUyNGJkMmNkYTc5M2EyYWFkYzEzMzYyNTAw Y2Q5YjEwHhcNMjUxMjI0MDQwMDU3WhcNMjUxMjI1MDQwMDU3WjAzMTEwLwYDVQQD Eyg2N2JiZjc2MTNlN2ZmNDU5MDAyYTg0MGEyMGViZmZjNDY1MTVjNGFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSiVAy+kJfuvT5HmF8pHXO5MTcai nhziuynnusvO/fwawCb5kfQrkrdf2s8vUGC5JBhFuFpsSo0rz6ZQ8eAW1+FkG75w SBe6lxoV+0Ks+bVfRgZFyoEvRJSnuCEip5YiLj+SiSAnDhavlRzCPFLUjnjcubFQ m8dRfWGKkrlWbC63sOdete3zN9S14vRYt5Fg73qn0IWWktO0an/5du/xDljLKRMb 2T5Mkpa0I+vLcis0STI6IB9fRTTcdxDzHaqlB7q1X4OevxiEuxvQp9/byUOUb6v3 /qw3/haJC1fPZvK4kGJ4tV0HMjCxTCGCill/wy65plZkB/LvEAyENMM0oQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGe792E+f/RZACqECiDr/8RlFcSqMB8GA1UdIwQY MBaAFKDZIuL+JL0s2nk6Kq3BM2JQDNmxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb05raTR2NGt2U3phZVRvcXJjRXpZbEFNMmJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9kNGZjNGMtNDgxNS00ZTU2LWJmNzMt NGE2YWNlMjZiOTcyLzEvb05raTR2NGt2U3phZVRvcXJjRXpZbEFNMmJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi9kNGZjNGMtNDgxNS00ZTU2LWJmNzMtNGE2YWNlMjZiOTcy LzEvb05raTR2NGt2U3phZVRvcXJjRXpZbEFNMmJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAs3Zd8Rb JD2F360WNwrDms9M5e03RgWcckkVBCoIGgaJyd9YHByPoKGtfWfXlbhz/ewYD6Rl 7jlMchzj8fK2qM5VB8xMrcIW8n+I4j/5Tps+ooXYcdtUWC7IY5DHRcQwSjdBJ/jC lyFSVyIH5bpUQH2vk6PAw6UtkgRuIvc9XNXLJXKmh6VtrgMxNXk0NPfEGuetAMpD sqmj339zEP5p9d1dTp46bSCZuCTRkyJAXiKRg/G+v/rw+g5778Sy0nI9SJSDnkdv vnuOGIhyGxISgoHJXjSCjKP0Eec7EufqL5hGfe6/lEAkHKlMHTo6yEVoR7pT1HLX F0fbMgWMYkLzzw== -----END CERTIFICATE-----Generated at Wed Dec 24 09:22:51 2025 by rpki-client