This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/d4fc4c-4815-4e56-bf73-4a6ace26b972/1/oNki4v4kvSzaeToqrcEzYlAM2bE.mft File: oNki4v4kvSzaeToqrcEzYlAM2bE.mft (raw, json) Hash identifier: hIr8hrAXBAT5/gJggHlm5tg4TNQvxj9zLxp12b5JgL4= Subject key identifier: CC:84:52:48:64:C1:B4:F7:D6:E6:32:D2:48:3D:01:21:27:2C:34:8C Authority key identifier: A0:D9:22:E2:FE:24:BD:2C:DA:79:3A:2A:AD:C1:33:62:50:0C:D9:B1 Certificate issuer: /CN=a0d922e2fe24bd2cda793a2aadc13362500cd9b1 Certificate serial: 019B61D43B82157800E496317EB5E9952C53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oNki4v4kvSzaeToqrcEzYlAM2bE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/d4fc4c-4815-4e56-bf73-4a6ace26b972/1/oNki4v4kvSzaeToqrcEzYlAM2bE.mft Manifest number: 0D9E Signing time: Sat 27 Dec 2025 22:00:57 +0000 Manifest this update: Sat 27 Dec 2025 22:00:57 +0000 Manifest next update: Sun 28 Dec 2025 22:00:57 +0000 Files and hashes: 1: QU8GopeOlHwkTprCT-S3aTgX93c.roa (hash: wdEn+nBxYgSylw1Zt9va3XXWns8S/pGLaLLxEZ/5irY=) 2: oNki4v4kvSzaeToqrcEzYlAM2bE.crl (hash: 1fdPxJWdWiDlushgI63AxdiAONbUJWgyQOqlDx/h84s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/d4fc4c-4815-4e56-bf73-4a6ace26b972/1/oNki4v4kvSzaeToqrcEzYlAM2bE.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/d4fc4c-4815-4e56-bf73-4a6ace26b972/1/oNki4v4kvSzaeToqrcEzYlAM2bE.mft rsync://rpki.ripe.net/repository/DEFAULT/oNki4v4kvSzaeToqrcEzYlAM2bE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 22:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:61:d4:3b:82:15:78:00:e4:96:31:7e:b5:e9:95:2c:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0d922e2fe24bd2cda793a2aadc13362500cd9b1 Validity Not Before: Dec 27 22:00:57 2025 GMT Not After : Dec 28 22:00:57 2025 GMT Subject: CN=cc84524864c1b4f7d6e632d2483d0121272c348c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:7a:94:eb:bc:58:fe:e5:21:2e:f5:05:54:40: ff:32:29:6d:26:d7:62:75:f4:71:4f:91:94:8f:b7: 75:72:b3:9c:58:34:02:9f:1e:46:61:b4:9c:16:7a: c5:9f:47:52:a0:fb:ac:16:25:ef:d7:4d:58:8a:3a: 3c:a2:00:a9:fc:76:11:6f:8d:d5:b8:7d:c8:f5:01: 97:fd:ac:49:d5:4d:1c:bb:0e:e3:1e:df:42:e4:00: ed:ce:df:29:9e:be:90:2f:9d:4f:7e:5f:3a:d2:9d: a3:42:b4:9d:1c:a5:31:f0:b1:33:d2:23:d7:43:e1: 1e:f6:e6:77:02:d4:f2:73:46:4a:d6:22:25:4e:5f: 7c:93:06:f5:93:a8:d3:6b:b1:84:a4:d2:00:a2:2d: d0:fe:4e:e9:a4:7a:93:be:96:6b:19:43:b7:2a:ab: 61:04:6c:9c:3d:41:92:ef:c5:83:db:ff:38:18:d6: 71:4a:08:10:44:4c:61:73:3f:68:59:72:e7:64:81: 16:7c:55:2d:ec:f4:cc:02:5b:46:08:c3:ad:c6:38: 23:1d:e7:a8:80:65:4f:5e:72:0a:2e:3d:68:a1:b2: 71:c3:cc:72:de:53:19:c8:96:f7:c5:60:ef:0f:f1: 25:13:31:19:59:48:5a:59:e9:3d:3b:e4:0f:2c:e5: 55:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:84:52:48:64:C1:B4:F7:D6:E6:32:D2:48:3D:01:21:27:2C:34:8C X509v3 Authority Key Identifier: keyid:A0:D9:22:E2:FE:24:BD:2C:DA:79:3A:2A:AD:C1:33:62:50:0C:D9:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNki4v4kvSzaeToqrcEzYlAM2bE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/d4fc4c-4815-4e56-bf73-4a6ace26b972/1/oNki4v4kvSzaeToqrcEzYlAM2bE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/d4fc4c-4815-4e56-bf73-4a6ace26b972/1/oNki4v4kvSzaeToqrcEzYlAM2bE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:dd:fa:ae:cc:b9:09:47:b9:fc:75:ea:25:97:a0:66:ed:0e: d6:dc:84:d0:3f:53:6b:85:46:04:50:d7:3b:e4:b5:fe:14:63: c0:e0:11:e8:70:81:f6:b1:c6:21:8b:3f:2f:43:53:96:c4:e8: 5f:dc:82:17:40:cf:e7:b0:9e:77:ae:08:ba:03:3e:18:eb:4e: 9b:1a:c5:95:b6:cb:cb:04:e5:90:31:c7:f4:66:39:ce:ea:1f: 86:99:a8:82:41:0f:a6:24:05:4f:1c:f9:58:33:43:86:f3:8d: 9b:7a:53:7f:13:29:90:aa:bb:d9:9e:56:76:ff:25:1f:1a:bb: 37:9a:40:53:15:2a:dc:d9:00:30:24:39:14:da:95:64:9b:51: a6:d3:7d:ec:7c:1e:ff:a0:a0:71:ce:4c:2e:5d:49:56:e9:1d: 31:a9:0a:01:2a:49:5a:62:ec:3a:46:22:94:db:16:3f:6c:3e: c6:07:df:a5:32:93:e2:f4:e0:22:79:d1:09:5b:6d:fc:1a:50: 51:cb:0a:52:f2:05:a6:a1:8e:16:15:24:fa:65:2c:ed:a5:7c: 39:03:47:af:c6:7a:e1:34:55:66:28:6e:71:86:4e:6d:c6:73: 3e:e7:c1:0f:83:b0:8d:62:c5:8d:9f:a0:94:7a:28:cd:40:43: fd:34:59:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZth1DuCFXgA5JYxfrXplSxTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwZDkyMmUyZmUyNGJkMmNkYTc5M2EyYWFkYzEzMzYyNTAw Y2Q5YjEwHhcNMjUxMjI3MjIwMDU3WhcNMjUxMjI4MjIwMDU3WjAzMTEwLwYDVQQD EyhjYzg0NTI0ODY0YzFiNGY3ZDZlNjMyZDI0ODNkMDEyMTI3MmMzNDhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4XqU67xY/uUhLvUFVED/MiltJtdi dfRxT5GUj7d1crOcWDQCnx5GYbScFnrFn0dSoPusFiXv101Yijo8ogCp/HYRb43V uH3I9QGX/axJ1U0cuw7jHt9C5ADtzt8pnr6QL51Pfl860p2jQrSdHKUx8LEz0iPX Q+Ee9uZ3AtTyc0ZK1iIlTl98kwb1k6jTa7GEpNIAoi3Q/k7ppHqTvpZrGUO3Kqth BGycPUGS78WD2/84GNZxSggQRExhcz9oWXLnZIEWfFUt7PTMAltGCMOtxjgjHeeo gGVPXnIKLj1oobJxw8xy3lMZyJb3xWDvD/ElEzEZWUhaWek9O+QPLOVVWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMyEUkhkwbT31uYy0kg9ASEnLDSMMB8GA1UdIwQY MBaAFKDZIuL+JL0s2nk6Kq3BM2JQDNmxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb05raTR2NGt2U3phZVRvcXJjRXpZbEFNMmJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9kNGZjNGMtNDgxNS00ZTU2LWJmNzMt NGE2YWNlMjZiOTcyLzEvb05raTR2NGt2U3phZVRvcXJjRXpZbEFNMmJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi9kNGZjNGMtNDgxNS00ZTU2LWJmNzMtNGE2YWNlMjZiOTcy LzEvb05raTR2NGt2U3phZVRvcXJjRXpZbEFNMmJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe936rsy5 CUe5/HXqJZegZu0O1tyE0D9Ta4VGBFDXO+S1/hRjwOAR6HCB9rHGIYs/L0NTlsTo X9yCF0DP57Ced64IugM+GOtOmxrFlbbLywTlkDHH9GY5zuofhpmogkEPpiQFTxz5 WDNDhvONm3pTfxMpkKq72Z5Wdv8lHxq7N5pAUxUq3NkAMCQ5FNqVZJtRptN97Hwe /6Cgcc5MLl1JVukdMakKASpJWmLsOkYilNsWP2w+xgffpTKT4vTgInnRCVtt/BpQ UcsKUvIFpqGOFhUk+mUs7aV8OQNHr8Z64TRVZihucYZObcZzPufBD4OwjWLFjZ+g lHoozUBD/TRZpA== -----END CERTIFICATE-----Generated at Sun Dec 28 06:37:53 2025 by rpki-client