This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.mft File: 0nHqBrGnVsv0auBGSEu9Pk_OTKU.mft (raw, json) Hash identifier: oobVofy1PaSHuUIxy+/L4BKxyZBGlWUazUyxbYwUdtM= Subject key identifier: AD:72:BB:04:E8:37:DF:45:12:14:8A:47:3A:19:A8:32:14:45:92:9B Authority key identifier: D2:71:EA:06:B1:A7:56:CB:F4:6A:E0:46:48:4B:BD:3E:4F:CE:4C:A5 Certificate issuer: /CN=d271ea06b1a756cbf46ae046484bbd3e4fce4ca5 Certificate serial: 019B397D6D7A2A0B659AABAB2DEBA80D8233 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0nHqBrGnVsv0auBGSEu9Pk_OTKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.mft Manifest number: 178A Signing time: Sat 20 Dec 2025 02:01:19 +0000 Manifest this update: Sat 20 Dec 2025 02:01:19 +0000 Manifest next update: Sun 21 Dec 2025 02:01:19 +0000 Files and hashes: 1: 0nHqBrGnVsv0auBGSEu9Pk_OTKU.crl (hash: Q/6tUopBl4V0nv3MG6yQOdvoG1xnqaJ+zuQk2xSoth0=) 2: HsfAzbYNmjHgKTyTKE1e6DTdYBY.roa (hash: ThTbeLEhcdYcKNF2Qx27UbTWjSeMoDCUTIRvHXWnfiI=) 3: MamPa9eWXXv16Pq_PQPhm2jANdQ.roa (hash: /Xj0uh4hP5hzI09A/uvBTgwPodoBTxb8R7Jv7s78qJA=) 4: b2D7vVU4AWvUD_Ad1lqkP8q1DJY.roa (hash: nc5y91A1zU+LW1Tb8aDxs1rxMTCVcHcXyy5NeNxfhCQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.mft rsync://rpki.ripe.net/repository/DEFAULT/0nHqBrGnVsv0auBGSEu9Pk_OTKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:7d:6d:7a:2a:0b:65:9a:ab:ab:2d:eb:a8:0d:82:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d271ea06b1a756cbf46ae046484bbd3e4fce4ca5 Validity Not Before: Dec 20 02:01:19 2025 GMT Not After : Dec 21 02:01:19 2025 GMT Subject: CN=ad72bb04e837df4512148a473a19a8321445929b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:94:4b:f5:cb:a5:ce:f2:2e:7e:61:78:79:9d: 47:f8:b4:d1:e7:4a:fc:34:37:00:14:e5:43:f2:f6: 4b:43:d0:fc:4e:06:79:2a:84:35:17:1e:d4:73:60: e3:6e:97:20:50:14:59:6d:11:b4:0c:89:b8:57:63: 77:19:97:89:78:4b:ca:cb:00:3f:7a:8c:a5:b3:5d: 58:4e:5d:86:d7:95:e9:3c:63:04:46:22:74:38:c5: 15:a8:62:88:5e:80:2c:6e:6c:76:7d:1a:8b:6b:43: bc:7a:3d:19:8d:96:6a:0a:dd:9a:29:06:ab:61:06: d1:c7:5c:4a:09:1a:ba:ca:75:28:f0:92:5d:0f:73: 62:a1:4f:1b:67:4a:21:e9:b4:0e:4f:20:9e:b1:c5: 9c:1d:8b:a0:45:cc:73:f9:bb:f1:af:2a:90:ff:e6: f7:b9:55:2b:a5:a4:55:25:ac:c4:23:fe:92:33:07: 52:8e:2a:2e:5a:10:da:97:57:df:b3:10:e8:d2:d6: b8:58:79:f3:43:92:02:5c:b3:5e:21:d8:85:a3:1b: 41:32:b2:82:79:ab:80:9c:1e:1f:df:b1:a4:05:d7: 4e:af:e7:c2:8a:ba:c9:d2:6b:5e:7b:75:f9:49:2c: 9d:6d:aa:5b:74:4a:fa:31:1a:0e:a2:6e:8e:9b:24: 6d:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:72:BB:04:E8:37:DF:45:12:14:8A:47:3A:19:A8:32:14:45:92:9B X509v3 Authority Key Identifier: keyid:D2:71:EA:06:B1:A7:56:CB:F4:6A:E0:46:48:4B:BD:3E:4F:CE:4C:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0nHqBrGnVsv0auBGSEu9Pk_OTKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:ac:58:db:df:50:09:64:73:51:75:49:3c:bd:bb:b5:80:c0: 57:9f:69:c8:58:63:f6:37:08:9e:2a:cb:c8:dc:55:1b:4c:f9: d5:24:6b:d8:76:7b:bb:33:30:42:9b:45:f6:86:85:37:24:93: bc:5d:4c:d4:fa:97:d4:66:68:f6:89:98:25:07:04:c2:e7:7b: 82:8a:97:96:4b:ac:c3:32:87:8f:7c:6c:c5:0d:c8:e4:00:b4: de:96:de:4d:5f:96:72:11:01:69:2a:0d:ee:a6:fe:3d:09:9c: 47:80:9a:83:c5:5e:aa:52:0c:95:45:f3:2d:50:04:dd:ff:0c: 60:80:d4:4b:0c:d8:34:35:ea:49:bb:7d:41:51:af:0e:c2:e6: d3:1b:08:21:8c:aa:3a:39:83:d5:a8:f4:4e:d7:e6:97:d5:0b: cf:4c:6a:49:4e:86:47:7a:8c:4b:ee:73:9e:c6:74:33:6e:37: 4c:e8:18:b4:cc:56:fe:97:fd:97:35:14:9a:9d:b5:c1:2c:b2: 55:95:9e:25:d8:88:81:b8:bf:e3:fb:a0:a3:40:06:42:11:c8: ac:65:52:ac:b4:87:93:9f:d5:4c:8a:af:7f:2b:a7:5d:30:42: ae:f1:79:e0:75:1e:b4:3b:3e:75:02:f9:a0:2a:b0:ed:7c:86: 87:12:a5:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5fW16KgtlmqurLeuoDYIzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyNzFlYTA2YjFhNzU2Y2JmNDZhZTA0NjQ4NGJiZDNlNGZj ZTRjYTUwHhcNMjUxMjIwMDIwMTE5WhcNMjUxMjIxMDIwMTE5WjAzMTEwLwYDVQQD EyhhZDcyYmIwNGU4MzdkZjQ1MTIxNDhhNDczYTE5YTgzMjE0NDU5MjliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5RL9culzvIufmF4eZ1H+LTR50r8 NDcAFOVD8vZLQ9D8TgZ5KoQ1Fx7Uc2DjbpcgUBRZbRG0DIm4V2N3GZeJeEvKywA/ eoyls11YTl2G15XpPGMERiJ0OMUVqGKIXoAsbmx2fRqLa0O8ej0ZjZZqCt2aKQar YQbRx1xKCRq6ynUo8JJdD3NioU8bZ0oh6bQOTyCescWcHYugRcxz+bvxryqQ/+b3 uVUrpaRVJazEI/6SMwdSjiouWhDal1ffsxDo0ta4WHnzQ5ICXLNeIdiFoxtBMrKC eauAnB4f37GkBddOr+fCirrJ0mtee3X5SSydbapbdEr6MRoOom6OmyRtbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK1yuwToN99FEhSKRzoZqDIURZKbMB8GA1UdIwQY MBaAFNJx6gaxp1bL9GrgRkhLvT5PzkylMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMG5IcUJyR25Wc3YwYXVCR1NFdTlQa19PVEtVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9hY2VjM2QtNzc1ZS00ZDBlLTg0MzMt ZmMzZDVjMjIzMGIyLzEvMG5IcUJyR25Wc3YwYXVCR1NFdTlQa19PVEtVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9hY2VjM2QtNzc1ZS00ZDBlLTg0MzMtZmMzZDVjMjIzMGIy LzEvMG5IcUJyR25Wc3YwYXVCR1NFdTlQa19PVEtVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaaxY299Q CWRzUXVJPL27tYDAV59pyFhj9jcInirLyNxVG0z51SRr2HZ7uzMwQptF9oaFNyST vF1M1PqX1GZo9omYJQcEwud7goqXlkuswzKHj3xsxQ3I5AC03pbeTV+WchEBaSoN 7qb+PQmcR4Cag8VeqlIMlUXzLVAE3f8MYIDUSwzYNDXqSbt9QVGvDsLm0xsIIYyq OjmD1aj0Ttfml9ULz0xqSU6GR3qMS+5znsZ0M243TOgYtMxW/pf9lzUUmp21wSyy VZWeJdiIgbi/4/ugo0AGQhHIrGVSrLSHk5/VTIqvfyunXTBCrvF54HUetDs+dQL5 oCqw7XyGhxKl2A== -----END CERTIFICATE-----Generated at Sat Dec 20 04:28:38 2025 by rpki-client