This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft File: oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft (raw, json) Hash identifier: Ovj6Qa+QyMc3dQ0WD+NaTJVI0mfcI/Rcyo9ipVGSHQ0= Subject key identifier: FC:1F:DE:B0:C8:68:03:51:32:6B:E8:73:8B:8A:08:B2:19:E4:87:B6 Authority key identifier: A0:DA:E7:67:8A:39:69:69:E6:34:0C:9D:CB:65:CD:E9:E3:29:55:4A Certificate issuer: /CN=a0dae7678a396969e6340c9dcb65cde9e329554a Certificate serial: 019B35A03312938CF58BE41C7FF9C7481241 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oNrnZ4o5aWnmNAydy2XN6eMpVUo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft Manifest number: 0E93 Signing time: Fri 19 Dec 2025 08:00:49 +0000 Manifest this update: Fri 19 Dec 2025 08:00:49 +0000 Manifest next update: Sat 20 Dec 2025 08:00:49 +0000 Files and hashes: 1: ILIvvSN7jhBNrgAFepnE5fxAfIc.roa (hash: qrswcvi6gW3Bxpx7V6TKM6+tVg0zuZnKPktwjp/YCHs=) 2: S4AYf34wbJr686FuAfXvLLFVW90.roa (hash: QoZkIggV0Rak9NY5B7MD5kJpzqBlOZcHQ7nSTP7ujCU=) 3: jzKy-bNbEooaDReNok2j2yv-pdI.roa (hash: GUiFogVUQmG0/pMsKlem+Qrlz+e50kXxDrB2fF+wH/s=) 4: oNrnZ4o5aWnmNAydy2XN6eMpVUo.crl (hash: ccfLMxnB5dyt3QbRtTlD51QxphXdBM3/As3SACXlzWM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft rsync://rpki.ripe.net/repository/DEFAULT/oNrnZ4o5aWnmNAydy2XN6eMpVUo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:a0:33:12:93:8c:f5:8b:e4:1c:7f:f9:c7:48:12:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0dae7678a396969e6340c9dcb65cde9e329554a Validity Not Before: Dec 19 08:00:49 2025 GMT Not After : Dec 20 08:00:49 2025 GMT Subject: CN=fc1fdeb0c8680351326be8738b8a08b219e487b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:2a:d3:d5:96:b8:f7:81:3c:a0:77:c5:a4:f1: 0d:db:b2:c8:f0:ca:35:87:35:98:5e:7a:ed:77:86: 10:1b:f8:74:03:c5:17:15:a3:94:d3:c4:4a:f0:ee: e0:4b:a7:ae:60:3d:3c:0b:a9:3f:a7:49:48:18:10: b5:b7:61:1c:de:69:3c:d6:24:8b:5f:20:c6:cc:ed: 49:58:a7:ac:06:b2:fc:ff:85:14:98:f9:5d:38:cc: 75:f8:77:66:c3:87:f2:ac:3e:ab:28:d2:37:c9:bb: 68:9b:0f:61:e4:a4:ca:f7:5a:84:2b:3a:a8:b2:8c: ec:8e:df:92:57:76:b0:86:8f:65:fb:45:af:ef:90: 15:16:19:4e:3d:29:8b:a7:43:ea:37:c0:fd:8d:10: a8:97:dc:70:4a:a4:c3:cf:ab:d3:36:b6:82:8f:ee: 4d:0c:1e:ca:47:6d:02:5f:25:01:27:51:42:bf:26: 18:54:c4:05:7d:86:0d:c0:80:b0:f6:4f:18:f1:cd: 85:27:5b:4e:02:30:c2:ae:d7:3d:1e:db:fd:c2:f3: 67:97:d8:b6:1d:18:9c:9b:6f:87:00:cf:e0:9e:e9: 2e:ad:7b:f1:e5:a2:8f:16:2d:0e:6a:ed:70:d8:5b: 46:d4:39:3d:44:7c:c9:e2:3b:9d:cf:85:ef:64:2f: 23:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:1F:DE:B0:C8:68:03:51:32:6B:E8:73:8B:8A:08:B2:19:E4:87:B6 X509v3 Authority Key Identifier: keyid:A0:DA:E7:67:8A:39:69:69:E6:34:0C:9D:CB:65:CD:E9:E3:29:55:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNrnZ4o5aWnmNAydy2XN6eMpVUo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:bd:4b:df:7b:46:73:78:25:ba:0e:b0:f8:e1:01:45:ab:77: 75:40:77:d5:76:b3:2e:41:24:0d:1b:b9:a5:4e:19:94:5d:db: 3e:05:13:2b:a2:ba:9e:c1:1c:03:cc:3f:3f:7f:75:e4:f6:f8: d5:22:9d:02:e6:3a:a4:0f:db:cc:d8:9e:ff:22:06:8c:91:44: ef:45:48:3c:c6:f9:55:49:01:dd:23:f5:5c:3f:b0:fe:83:a4: d5:6a:75:5d:1a:ae:19:35:d0:c3:24:8c:54:8b:11:2a:52:8b: 0c:c4:70:fe:7d:e2:72:2b:e4:5d:1f:dc:41:82:d4:4d:6f:af: a4:62:4e:7a:0f:e5:4e:2b:47:13:64:17:b1:b4:8c:f1:92:5a: dd:15:e5:ca:89:60:2a:c5:e2:f1:80:fe:68:22:40:ce:67:a6: fe:28:28:38:ac:03:8c:2c:93:25:72:b8:62:0c:96:d5:3f:0c: e2:20:25:16:42:d5:aa:76:e1:ff:0a:99:5a:53:19:20:4e:7b: 25:b6:cb:4b:6a:ce:32:ce:de:ea:38:7c:14:03:08:c5:40:4b: 6d:bd:11:8d:01:a6:4d:1b:cd:2d:4b:a2:01:78:04:ab:86:17: a1:15:b8:02:34:13:f5:66:bc:92:83:9a:01:1e:d2:fd:78:5e: d6:92:df:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1oDMSk4z1i+Qcf/nHSBJBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwZGFlNzY3OGEzOTY5NjllNjM0MGM5ZGNiNjVjZGU5ZTMy OTU1NGEwHhcNMjUxMjE5MDgwMDQ5WhcNMjUxMjIwMDgwMDQ5WjAzMTEwLwYDVQQD EyhmYzFmZGViMGM4NjgwMzUxMzI2YmU4NzM4YjhhMDhiMjE5ZTQ4N2I2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgSrT1Za494E8oHfFpPEN27LI8Mo1 hzWYXnrtd4YQG/h0A8UXFaOU08RK8O7gS6euYD08C6k/p0lIGBC1t2Ec3mk81iSL XyDGzO1JWKesBrL8/4UUmPldOMx1+Hdmw4fyrD6rKNI3ybtomw9h5KTK91qEKzqo sozsjt+SV3awho9l+0Wv75AVFhlOPSmLp0PqN8D9jRCol9xwSqTDz6vTNraCj+5N DB7KR20CXyUBJ1FCvyYYVMQFfYYNwICw9k8Y8c2FJ1tOAjDCrtc9Htv9wvNnl9i2 HRicm2+HAM/gnukurXvx5aKPFi0Oau1w2FtG1Dk9RHzJ4judz4XvZC8jZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPwf3rDIaANRMmvoc4uKCLIZ5Ie2MB8GA1UdIwQY MBaAFKDa52eKOWlp5jQMnctlzenjKVVKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb05yblo0bzVhV25tTkF5ZHkyWE42ZU1wVlVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy80NjM1OGUtNTRmNy00ZjRiLWE3NDct ZjczNWUzZGFmZDUzLzEvb05yblo0bzVhV25tTkF5ZHkyWE42ZU1wVlVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy80NjM1OGUtNTRmNy00ZjRiLWE3NDctZjczNWUzZGFmZDUz LzEvb05yblo0bzVhV25tTkF5ZHkyWE42ZU1wVlVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARb1L33tG c3glug6w+OEBRat3dUB31XazLkEkDRu5pU4ZlF3bPgUTK6K6nsEcA8w/P3915Pb4 1SKdAuY6pA/bzNie/yIGjJFE70VIPMb5VUkB3SP1XD+w/oOk1Wp1XRquGTXQwySM VIsRKlKLDMRw/n3icivkXR/cQYLUTW+vpGJOeg/lTitHE2QXsbSM8ZJa3RXlyolg KsXi8YD+aCJAzmem/igoOKwDjCyTJXK4YgyW1T8M4iAlFkLVqnbh/wqZWlMZIE57 JbbLS2rOMs7e6jh8FAMIxUBLbb0RjQGmTRvNLUuiAXgEq4YXoRW4AjQT9Wa8koOa AR7S/Xhe1pLf4A== -----END CERTIFICATE-----Generated at Fri Dec 19 14:35:25 2025 by rpki-client