This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.mft File: oN9_W2YYvaI8g77RG0QgQfH7RW0.mft (raw, json) Hash identifier: 4z52lj3RJenlwwLB53PZHqKWWnpZ2N1fzrxhiiL5Jx0= Subject key identifier: 3D:CF:E3:D4:60:B8:21:C6:8D:88:A4:C0:44:8C:1A:2C:CD:AA:FB:D8 Authority key identifier: A0:DF:7F:5B:66:18:BD:A2:3C:83:BE:D1:1B:44:20:41:F1:FB:45:6D Certificate issuer: /CN=a0df7f5b6618bda23c83bed11b442041f1fb456d Certificate serial: 019B50735446B576BDE080D77A42259CE785 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oN9_W2YYvaI8g77RG0QgQfH7RW0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.mft Manifest number: 1054 Signing time: Wed 24 Dec 2025 13:01:34 +0000 Manifest this update: Wed 24 Dec 2025 13:01:34 +0000 Manifest next update: Thu 25 Dec 2025 13:01:34 +0000 Files and hashes: 1: M6-0ilcboil8V3qdXWtXp8FSrwU.roa (hash: WRf8o79b0NMGHVx92f3msPfTUcZhCgsvW5xiza5z8ZI=) 2: alnV74vFSam3rQx6Dmd1DNDuigc.roa (hash: MKKETCkbJ8gLUuVxMB/kJlGwLoMwUcWOoOci82/CtNA=) 3: dMb0PjxW_FKRnnqCOxhUGiKYQfU.roa (hash: SEn9C8PYQsCWBmkbIckjpQRAnohpBTNoR7109sqhxa8=) 4: l5fucFsRI8YqdsxQQ1gM3icDFgY.roa (hash: F8cwyE/KovnNrO6uesrwG6iPrTntm+Jn5JO1juTZFLQ=) 5: oN9_W2YYvaI8g77RG0QgQfH7RW0.crl (hash: 0PEj9jD0g4hfrRvjdGTfby9/JTeFBBfEXGC0Ds1oEHw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.mft rsync://rpki.ripe.net/repository/DEFAULT/oN9_W2YYvaI8g77RG0QgQfH7RW0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 13:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:73:54:46:b5:76:bd:e0:80:d7:7a:42:25:9c:e7:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0df7f5b6618bda23c83bed11b442041f1fb456d Validity Not Before: Dec 24 13:01:34 2025 GMT Not After : Dec 25 13:01:34 2025 GMT Subject: CN=3dcfe3d460b821c68d88a4c0448c1a2ccdaafbd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:da:52:1f:b0:61:28:0f:c2:f9:fe:46:33:64: db:fb:a5:89:cf:1a:57:9c:33:47:e9:35:91:73:8b: cf:62:a9:53:f6:13:09:de:e4:d1:a8:c9:e9:c8:fe: ca:cd:6c:67:76:56:7e:bd:d0:51:d9:38:ca:21:27: fb:b9:43:5e:f9:fe:61:c2:c9:90:0e:68:1d:d2:40: ce:f0:65:c9:db:1d:f9:b0:dd:f3:cc:44:b8:1b:20: 30:2a:d5:f5:12:14:4a:ab:b5:e7:b5:61:f8:10:8e: ee:a9:9e:38:f8:6d:88:7c:c9:97:7e:bb:f4:23:cd: 7b:56:be:cd:3d:99:6b:e1:eb:bd:2e:40:9b:cc:e8: fb:e8:bc:79:57:20:12:5e:57:e1:54:20:82:1f:aa: 18:f9:c4:36:cf:f9:e6:6e:aa:08:b7:70:67:c0:50: eb:eb:10:53:48:51:a7:4a:8d:17:67:25:47:e4:03: a6:45:26:33:ac:79:a3:89:2f:34:1c:80:4e:5e:8b: 43:15:ce:00:33:3e:fe:36:62:52:11:8c:a5:76:42: c6:ed:9f:fb:36:b6:d6:ab:59:a7:43:7d:34:16:76: 25:ad:45:d4:8d:ef:ed:26:23:9f:6a:88:42:5f:bf: 3a:1c:97:d1:39:fe:56:4d:6c:dc:f7:ea:16:16:74: cb:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:CF:E3:D4:60:B8:21:C6:8D:88:A4:C0:44:8C:1A:2C:CD:AA:FB:D8 X509v3 Authority Key Identifier: keyid:A0:DF:7F:5B:66:18:BD:A2:3C:83:BE:D1:1B:44:20:41:F1:FB:45:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oN9_W2YYvaI8g77RG0QgQfH7RW0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:99:9c:ba:50:8e:48:da:a2:f8:fb:63:15:ef:45:ba:75:2d: 85:5e:1e:3b:f5:ef:70:21:2b:a4:d9:ad:0a:cf:8f:1a:ec:0f: 42:14:1d:1f:f2:01:23:8a:24:bf:cb:67:f3:86:96:26:52:5d: c8:fa:94:6f:7a:e2:3f:f7:58:ad:7d:f0:59:3e:7d:43:78:6d: d1:87:2b:5e:20:f5:03:9f:cf:57:aa:9b:ce:d4:cb:87:41:f3: 57:b0:c0:1f:ed:ed:a1:fe:74:79:da:a3:5a:a6:08:4e:5d:6b: 8b:0d:11:29:4f:be:5a:ee:13:86:95:2a:e5:1f:db:2f:47:fb: a5:a3:30:ae:df:3a:3a:1d:9a:6d:0d:14:71:f1:88:54:ff:82: 95:f8:c5:9c:24:a2:26:3a:d6:f0:52:31:a4:81:07:a7:6c:43: 6a:60:93:e5:3a:90:82:d2:7b:9e:85:b1:b2:17:1c:88:4f:57: e3:5f:62:61:df:a0:1c:95:d8:59:c5:bd:0a:49:e6:21:c9:c2: ad:e1:6e:fe:28:ef:79:d1:e7:67:06:93:03:24:2a:dd:41:f3: 8a:0d:b3:0a:05:86:b9:11:fb:26:19:18:be:5e:6c:42:99:2e: 1b:6e:f7:16:7f:00:7b:61:46:f8:f3:d7:d0:b1:54:94:6e:9c: d9:48:eb:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQc1RGtXa94IDXekIlnOeFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwZGY3ZjViNjYxOGJkYTIzYzgzYmVkMTFiNDQyMDQxZjFm YjQ1NmQwHhcNMjUxMjI0MTMwMTM0WhcNMjUxMjI1MTMwMTM0WjAzMTEwLwYDVQQD EygzZGNmZTNkNDYwYjgyMWM2OGQ4OGE0YzA0NDhjMWEyY2NkYWFmYmQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtpSH7BhKA/C+f5GM2Tb+6WJzxpX nDNH6TWRc4vPYqlT9hMJ3uTRqMnpyP7KzWxndlZ+vdBR2TjKISf7uUNe+f5hwsmQ Dmgd0kDO8GXJ2x35sN3zzES4GyAwKtX1EhRKq7XntWH4EI7uqZ44+G2IfMmXfrv0 I817Vr7NPZlr4eu9LkCbzOj76Lx5VyASXlfhVCCCH6oY+cQ2z/nmbqoIt3BnwFDr 6xBTSFGnSo0XZyVH5AOmRSYzrHmjiS80HIBOXotDFc4AMz7+NmJSEYyldkLG7Z/7 NrbWq1mnQ300FnYlrUXUje/tJiOfaohCX786HJfROf5WTWzc9+oWFnTLLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD3P49RguCHGjYikwESMGizNqvvYMB8GA1UdIwQY MBaAFKDff1tmGL2iPIO+0RtEIEHx+0VtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb045X1cyWVl2YUk4Zzc3UkcwUWdRZkg3UlcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9hNTcyOGItYTM2ZC00ZmJhLTkzYWEt NWY0YmM5MDBjMDNkLzEvb045X1cyWVl2YUk4Zzc3UkcwUWdRZkg3UlcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi9hNTcyOGItYTM2ZC00ZmJhLTkzYWEtNWY0YmM5MDBjMDNk LzEvb045X1cyWVl2YUk4Zzc3UkcwUWdRZkg3UlcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAJmculCO SNqi+PtjFe9FunUthV4eO/XvcCErpNmtCs+PGuwPQhQdH/IBI4okv8tn84aWJlJd yPqUb3riP/dYrX3wWT59Q3ht0YcrXiD1A5/PV6qbztTLh0HzV7DAH+3tof50edqj WqYITl1riw0RKU++Wu4ThpUq5R/bL0f7paMwrt86Oh2abQ0UcfGIVP+ClfjFnCSi JjrW8FIxpIEHp2xDamCT5TqQgtJ7noWxshcciE9X419iYd+gHJXYWcW9CknmIcnC reFu/ijvedHnZwaTAyQq3UHzig2zCgWGuRH7JhkYvl5sQpkuG273Fn8Ae2FG+PPX 0LFUlG6c2UjrYg== -----END CERTIFICATE-----Generated at Wed Dec 24 21:47:23 2025 by rpki-client