This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/a3b11e-5909-49fe-bb75-790bc91a59e6/1/oNPtV5U0igTn7NFy12QvqWIJcoc.mft File: oNPtV5U0igTn7NFy12QvqWIJcoc.mft (raw, json) Hash identifier: V5tYFcPlhu0foajdGdTLpvHF8BfdQokF9b2/wGSRrjc= Subject key identifier: A0:D4:60:4B:12:91:AB:7F:1E:1F:B0:21:D4:14:8C:24:42:36:77:4A Authority key identifier: A0:D3:ED:57:95:34:8A:04:E7:EC:D1:72:D7:64:2F:A9:62:09:72:87 Certificate issuer: /CN=a0d3ed5795348a04e7ecd172d7642fa962097287 Certificate serial: 019B2FD4BDD3CCDE0AA0581BAD2AD84A91CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oNPtV5U0igTn7NFy12QvqWIJcoc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/a3b11e-5909-49fe-bb75-790bc91a59e6/1/oNPtV5U0igTn7NFy12QvqWIJcoc.mft Manifest number: 0468 Signing time: Thu 18 Dec 2025 05:00:29 +0000 Manifest this update: Thu 18 Dec 2025 05:00:29 +0000 Manifest next update: Fri 19 Dec 2025 05:00:29 +0000 Files and hashes: 1: _Z612WlN8ZfOi7lH-p4HrmdXgXQ.roa (hash: QscoaDsHFH3nysubWrv1ADSV365kESJ9Bam6CnFtw2M=) 2: oNPtV5U0igTn7NFy12QvqWIJcoc.crl (hash: BrDhQ5oTegcyj3DqcXQSFETj4ADNlzS3k+QCK1REe94=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/a3b11e-5909-49fe-bb75-790bc91a59e6/1/oNPtV5U0igTn7NFy12QvqWIJcoc.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/a3b11e-5909-49fe-bb75-790bc91a59e6/1/oNPtV5U0igTn7NFy12QvqWIJcoc.mft rsync://rpki.ripe.net/repository/DEFAULT/oNPtV5U0igTn7NFy12QvqWIJcoc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:d4:bd:d3:cc:de:0a:a0:58:1b:ad:2a:d8:4a:91:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0d3ed5795348a04e7ecd172d7642fa962097287 Validity Not Before: Dec 18 05:00:29 2025 GMT Not After : Dec 19 05:00:29 2025 GMT Subject: CN=a0d4604b1291ab7f1e1fb021d4148c244236774a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:42:fa:a9:67:83:7e:f8:77:27:bd:03:17:9f: 31:bf:f1:1f:79:71:0a:fb:75:34:f3:30:73:ca:97: 5e:9a:37:c2:2e:a8:36:1e:76:c8:cb:d5:9b:6f:3f: b5:b8:ce:fb:65:a1:fa:c1:23:2b:15:72:b3:36:8a: 44:3e:bd:1d:f2:60:af:c3:a0:9d:da:67:69:78:8a: f3:d8:30:f8:42:70:d7:d7:77:32:8a:34:f6:93:79: 36:65:fa:e0:c7:f9:78:67:12:cf:8a:47:ce:ec:aa: 73:6b:f4:7b:8b:65:b5:61:2f:9b:c8:85:5c:d1:ae: 46:de:48:be:8c:01:83:2d:74:01:b9:39:d8:5a:4b: 85:e6:a3:ca:34:4e:ea:3e:45:c1:f3:47:73:48:39: 46:05:f5:46:fd:4e:aa:7a:e4:13:fd:99:09:49:e7: d5:e5:2f:6f:11:a2:9f:c4:17:30:b0:ac:21:11:f5: 69:1e:07:e2:4e:d0:d9:60:50:8a:9b:9c:52:ae:5a: dc:4a:9e:07:70:53:cd:b3:9f:22:30:35:9f:89:72: fe:43:6e:51:d9:56:2f:fb:a7:49:22:d2:9a:8a:aa: 8b:50:69:b9:97:29:2e:ba:88:6a:9e:57:a3:d9:5a: a8:f1:a3:b2:76:9e:21:4f:fe:74:6a:94:d0:32:6f: 83:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:D4:60:4B:12:91:AB:7F:1E:1F:B0:21:D4:14:8C:24:42:36:77:4A X509v3 Authority Key Identifier: keyid:A0:D3:ED:57:95:34:8A:04:E7:EC:D1:72:D7:64:2F:A9:62:09:72:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNPtV5U0igTn7NFy12QvqWIJcoc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a3b11e-5909-49fe-bb75-790bc91a59e6/1/oNPtV5U0igTn7NFy12QvqWIJcoc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a3b11e-5909-49fe-bb75-790bc91a59e6/1/oNPtV5U0igTn7NFy12QvqWIJcoc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:74:a8:ef:0b:80:95:59:e0:87:f8:4e:2e:33:a2:45:62:55: 98:b5:70:2e:13:0d:98:87:81:f8:6e:79:e3:ad:d8:84:e1:7b: 04:d0:81:b8:70:e2:8e:b9:c0:d7:49:2b:82:43:5e:58:5c:49: 45:d6:81:27:2d:80:5b:24:da:39:f9:f3:00:14:81:19:dd:95: ec:73:1f:81:1e:22:bd:1a:71:1e:f1:87:e4:23:ee:10:57:0a: b3:dc:1f:5f:8b:90:2b:52:31:49:d5:13:c9:c5:42:e1:15:9f: 88:d3:ca:8b:0e:3c:3f:c4:8b:e3:8c:8f:d6:5c:97:0e:12:b7: ba:05:d2:c8:f5:5f:48:92:6e:e4:39:1f:f6:c1:62:9f:da:f5: f1:88:c6:9b:9c:70:a1:68:41:b1:cb:c5:62:29:f0:09:9b:e9: a5:46:2d:11:47:78:0d:09:52:52:f2:81:2e:17:f8:ab:71:40: 4e:04:65:d2:3b:db:7e:c3:c3:72:54:46:a9:9b:48:7f:8a:38: 44:ec:4f:61:79:a0:f8:69:f2:33:c3:ed:d0:08:df:b7:8c:84: 81:f5:d9:c0:f2:4d:a0:b2:11:8a:c2:c7:62:c1:4e:47:2a:bd: 10:39:f7:bb:f4:8c:1c:d6:56:6b:c5:c8:f0:02:4c:cd:87:f8: 06:2a:b5:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsv1L3TzN4KoFgbrSrYSpHNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwZDNlZDU3OTUzNDhhMDRlN2VjZDE3MmQ3NjQyZmE5NjIw OTcyODcwHhcNMjUxMjE4MDUwMDI5WhcNMjUxMjE5MDUwMDI5WjAzMTEwLwYDVQQD EyhhMGQ0NjA0YjEyOTFhYjdmMWUxZmIwMjFkNDE0OGMyNDQyMzY3NzRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzEL6qWeDfvh3J70DF58xv/EfeXEK +3U08zBzypdemjfCLqg2HnbIy9Wbbz+1uM77ZaH6wSMrFXKzNopEPr0d8mCvw6Cd 2mdpeIrz2DD4QnDX13cyijT2k3k2Zfrgx/l4ZxLPikfO7Kpza/R7i2W1YS+byIVc 0a5G3ki+jAGDLXQBuTnYWkuF5qPKNE7qPkXB80dzSDlGBfVG/U6qeuQT/ZkJSefV 5S9vEaKfxBcwsKwhEfVpHgfiTtDZYFCKm5xSrlrcSp4HcFPNs58iMDWfiXL+Q25R 2VYv+6dJItKaiqqLUGm5lykuuohqnlej2Vqo8aOydp4hT/50apTQMm+DQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKDUYEsSkat/Hh+wIdQUjCRCNndKMB8GA1UdIwQY MBaAFKDT7VeVNIoE5+zRctdkL6liCXKHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb05QdFY1VTBpZ1RuN05GeTEyUXZxV0lKY29jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9hM2IxMWUtNTkwOS00OWZlLWJiNzUt NzkwYmM5MWE1OWU2LzEvb05QdFY1VTBpZ1RuN05GeTEyUXZxV0lKY29jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9hM2IxMWUtNTkwOS00OWZlLWJiNzUtNzkwYmM5MWE1OWU2 LzEvb05QdFY1VTBpZ1RuN05GeTEyUXZxV0lKY29jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcXSo7wuA lVngh/hOLjOiRWJVmLVwLhMNmIeB+G55463YhOF7BNCBuHDijrnA10krgkNeWFxJ RdaBJy2AWyTaOfnzABSBGd2V7HMfgR4ivRpxHvGH5CPuEFcKs9wfX4uQK1IxSdUT ycVC4RWfiNPKiw48P8SL44yP1lyXDhK3ugXSyPVfSJJu5Dkf9sFin9r18YjGm5xw oWhBscvFYinwCZvppUYtEUd4DQlSUvKBLhf4q3FATgRl0jvbfsPDclRGqZtIf4o4 ROxPYXmg+GnyM8Pt0Ajft4yEgfXZwPJNoLIRisLHYsFORyq9EDn3u/SMHNZWa8XI 8AJMzYf4Biq16Q== -----END CERTIFICATE-----Generated at Thu Dec 18 12:44:11 2025 by rpki-client