This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/d4fc4c-4815-4e56-bf73-4a6ace26b972/1/oNki4v4kvSzaeToqrcEzYlAM2bE.mft File: oNki4v4kvSzaeToqrcEzYlAM2bE.mft (raw, json) Hash identifier: 3S3MeYIjDD2cA8Glh8JEKLDafWtSyKR4yui/fjnswsI= Subject key identifier: 74:E5:81:67:62:3D:06:36:91:4F:F0:AE:9F:24:58:1F:E7:37:09:33 Authority key identifier: A0:D9:22:E2:FE:24:BD:2C:DA:79:3A:2A:AD:C1:33:62:50:0C:D9:B1 Certificate issuer: /CN=a0d922e2fe24bd2cda793a2aadc13362500cd9b1 Certificate serial: 019B52612886471C4AD1482F5D998F89FE75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oNki4v4kvSzaeToqrcEzYlAM2bE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/d4fc4c-4815-4e56-bf73-4a6ace26b972/1/oNki4v4kvSzaeToqrcEzYlAM2bE.mft Manifest number: 0D96 Signing time: Wed 24 Dec 2025 22:00:57 +0000 Manifest this update: Wed 24 Dec 2025 22:00:57 +0000 Manifest next update: Thu 25 Dec 2025 22:00:57 +0000 Files and hashes: 1: QU8GopeOlHwkTprCT-S3aTgX93c.roa (hash: wdEn+nBxYgSylw1Zt9va3XXWns8S/pGLaLLxEZ/5irY=) 2: oNki4v4kvSzaeToqrcEzYlAM2bE.crl (hash: 8ZptZSvqiFmrMY8DFPM+0cwBJRXQ5Fy0snve7QXEZAM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/d4fc4c-4815-4e56-bf73-4a6ace26b972/1/oNki4v4kvSzaeToqrcEzYlAM2bE.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/d4fc4c-4815-4e56-bf73-4a6ace26b972/1/oNki4v4kvSzaeToqrcEzYlAM2bE.mft rsync://rpki.ripe.net/repository/DEFAULT/oNki4v4kvSzaeToqrcEzYlAM2bE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:61:28:86:47:1c:4a:d1:48:2f:5d:99:8f:89:fe:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0d922e2fe24bd2cda793a2aadc13362500cd9b1 Validity Not Before: Dec 24 22:00:57 2025 GMT Not After : Dec 25 22:00:57 2025 GMT Subject: CN=74e58167623d0636914ff0ae9f24581fe7370933 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:bb:3e:5b:a7:ff:0e:ed:95:e3:13:92:76:a8: a1:8c:35:c0:51:44:84:7c:d2:6c:d0:02:b2:85:c3: dd:4d:34:a0:df:b4:e9:cf:ca:ca:75:2c:4d:7a:6d: 62:70:21:72:ee:d8:5f:1b:c4:de:0a:2f:31:60:5f: 5d:a1:15:9d:f2:4a:0d:a9:cf:e3:45:55:a5:36:f3: 6c:dd:64:6d:26:71:58:cd:d4:f0:bd:6c:ef:3d:dd: 16:d5:13:f5:a6:c2:17:04:4e:df:35:b3:b2:81:a0: 0f:27:00:05:82:c2:b5:fe:13:80:80:11:34:60:c8: 99:8a:8a:ea:1e:18:b8:42:b1:a5:1c:27:13:fc:96: db:e5:02:9c:f1:44:1c:e5:b0:0b:ca:ee:a9:02:3a: a8:b6:10:5e:9c:3b:5a:ff:b7:51:6f:cd:da:93:e5: 74:de:07:35:ad:2b:ce:fa:4c:b7:df:08:a1:63:2f: 30:9e:a1:e5:55:37:61:e8:0f:8f:ab:56:95:6f:8b: 88:f0:d3:f0:28:9a:18:69:52:a0:f8:f1:e9:28:f6: b7:92:39:e7:bd:99:b7:44:d0:86:4f:54:0b:7c:f6: 8f:f6:4b:20:8c:68:3c:5e:e4:f0:f6:00:97:80:19: 68:98:c4:ba:3b:46:f9:d4:db:5c:07:93:dd:61:97: 7e:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:E5:81:67:62:3D:06:36:91:4F:F0:AE:9F:24:58:1F:E7:37:09:33 X509v3 Authority Key Identifier: keyid:A0:D9:22:E2:FE:24:BD:2C:DA:79:3A:2A:AD:C1:33:62:50:0C:D9:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNki4v4kvSzaeToqrcEzYlAM2bE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/d4fc4c-4815-4e56-bf73-4a6ace26b972/1/oNki4v4kvSzaeToqrcEzYlAM2bE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/d4fc4c-4815-4e56-bf73-4a6ace26b972/1/oNki4v4kvSzaeToqrcEzYlAM2bE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:67:86:bc:c7:2c:31:cc:d9:e7:ab:16:90:09:25:ce:48:d5: b1:d2:1f:f4:90:34:b7:82:a6:7a:c2:ea:86:1c:48:0f:db:27: d8:c6:72:e1:22:02:d7:61:77:4f:42:87:ab:31:0e:ac:3f:0a: 88:1b:c1:e9:f2:a5:d6:7e:0a:1d:6f:da:4b:dd:bc:fe:3c:ea: ea:f3:2a:d2:fb:a0:9e:91:f7:85:1c:1a:f5:cf:c2:01:b0:99: e4:c8:c6:c3:7c:51:45:9d:0c:84:3b:c6:72:33:35:48:61:1c: 2d:f0:de:a0:a0:18:0c:b5:8a:dc:6a:5e:7e:54:c5:26:e5:b8: 17:ee:0e:a5:ed:4d:a4:9e:e9:1f:8a:4e:bf:a5:3a:90:b8:c3: a7:cc:1b:1d:0f:cf:89:0c:f3:55:62:0c:14:aa:06:c7:53:f0: 5f:39:74:62:b5:e3:e3:98:11:af:cd:a7:da:1f:9d:ec:42:62: 3f:1e:f8:44:d1:ec:25:0f:25:b6:1f:01:a0:8f:67:42:35:7c: 7f:da:8c:88:7b:03:28:0b:67:02:d2:c9:01:65:9a:9d:3a:b7: 8c:5d:7f:5b:8b:fb:fc:14:5b:17:a5:5e:c9:b3:cf:3f:c7:c1: f9:e2:46:b1:bf:00:01:a7:c1:6d:ea:98:de:a0:6e:c3:83:10: 5d:50:7c:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSYSiGRxxK0UgvXZmPif51MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwZDkyMmUyZmUyNGJkMmNkYTc5M2EyYWFkYzEzMzYyNTAw Y2Q5YjEwHhcNMjUxMjI0MjIwMDU3WhcNMjUxMjI1MjIwMDU3WjAzMTEwLwYDVQQD Eyg3NGU1ODE2NzYyM2QwNjM2OTE0ZmYwYWU5ZjI0NTgxZmU3MzcwOTMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7s+W6f/Du2V4xOSdqihjDXAUUSE fNJs0AKyhcPdTTSg37Tpz8rKdSxNem1icCFy7thfG8TeCi8xYF9doRWd8koNqc/j RVWlNvNs3WRtJnFYzdTwvWzvPd0W1RP1psIXBE7fNbOygaAPJwAFgsK1/hOAgBE0 YMiZiorqHhi4QrGlHCcT/Jbb5QKc8UQc5bALyu6pAjqothBenDta/7dRb83ak+V0 3gc1rSvO+ky33wihYy8wnqHlVTdh6A+Pq1aVb4uI8NPwKJoYaVKg+PHpKPa3kjnn vZm3RNCGT1QLfPaP9ksgjGg8XuTw9gCXgBlomMS6O0b51NtcB5PdYZd+jQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHTlgWdiPQY2kU/wrp8kWB/nNwkzMB8GA1UdIwQY MBaAFKDZIuL+JL0s2nk6Kq3BM2JQDNmxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb05raTR2NGt2U3phZVRvcXJjRXpZbEFNMmJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9kNGZjNGMtNDgxNS00ZTU2LWJmNzMt NGE2YWNlMjZiOTcyLzEvb05raTR2NGt2U3phZVRvcXJjRXpZbEFNMmJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi9kNGZjNGMtNDgxNS00ZTU2LWJmNzMtNGE2YWNlMjZiOTcy LzEvb05raTR2NGt2U3phZVRvcXJjRXpZbEFNMmJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoGeGvMcs MczZ56sWkAklzkjVsdIf9JA0t4KmesLqhhxID9sn2MZy4SIC12F3T0KHqzEOrD8K iBvB6fKl1n4KHW/aS928/jzq6vMq0vugnpH3hRwa9c/CAbCZ5MjGw3xRRZ0MhDvG cjM1SGEcLfDeoKAYDLWK3GpeflTFJuW4F+4Ope1NpJ7pH4pOv6U6kLjDp8wbHQ/P iQzzVWIMFKoGx1PwXzl0YrXj45gRr82n2h+d7EJiPx74RNHsJQ8lth8BoI9nQjV8 f9qMiHsDKAtnAtLJAWWanTq3jF1/W4v7/BRbF6VeybPPP8fB+eJGsb8AAafBbeqY 3qBuw4MQXVB8hw== -----END CERTIFICATE-----Generated at Thu Dec 25 02:48:46 2025 by rpki-client