This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.mft File: Onb8XJAQtBEZymjca5lQul_3Mn4.mft (raw, json) Hash identifier: Wm2BJ7V5ggND1jQ28Cvoh4eu+L6mdKe6z5ZLmOjYfx8= Subject key identifier: 75:D0:49:49:58:11:92:88:94:71:F3:E6:7F:85:71:EF:62:BB:3D:BB Authority key identifier: 3A:76:FC:5C:90:10:B4:11:19:CA:68:DC:6B:99:50:BA:5F:F7:32:7E Certificate issuer: /CN=3a76fc5c9010b41119ca68dc6b9950ba5ff7327e Certificate serial: 019B4FCEDEF54818A0D63F6B8FBF01E93E84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Onb8XJAQtBEZymjca5lQul_3Mn4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.mft Manifest number: 116E Signing time: Wed 24 Dec 2025 10:01:56 +0000 Manifest this update: Wed 24 Dec 2025 10:01:56 +0000 Manifest next update: Thu 25 Dec 2025 10:01:56 +0000 Files and hashes: 1: Onb8XJAQtBEZymjca5lQul_3Mn4.crl (hash: 7xg6eOB3G2FbtCOrzzfjWfl582nkZ+3u9AypI1Obkw4=) 2: aLeS6kJNMMsXR_fWm4nfBJc0RbY.roa (hash: 2eZg5Esd5JZxUzRdKZEfMd9ilMWbL+Zmx8dFdFF5esA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.mft rsync://rpki.ripe.net/repository/DEFAULT/Onb8XJAQtBEZymjca5lQul_3Mn4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:ce:de:f5:48:18:a0:d6:3f:6b:8f:bf:01:e9:3e:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a76fc5c9010b41119ca68dc6b9950ba5ff7327e Validity Not Before: Dec 24 10:01:56 2025 GMT Not After : Dec 25 10:01:56 2025 GMT Subject: CN=75d04949581192889471f3e67f8571ef62bb3dbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:45:ad:89:81:fa:8e:06:42:31:c4:58:29:85: 42:2c:44:41:31:5b:27:81:0a:55:05:8d:c9:98:0a: 59:ec:67:fe:8d:57:03:a4:29:fe:20:88:07:fb:d7: db:90:35:74:7d:37:82:e7:46:e0:84:87:65:49:c5: 08:88:5b:58:eb:35:36:05:6f:68:1b:db:06:1e:87: 23:ac:65:79:bd:64:66:88:58:76:a1:89:c4:52:d1: 5e:25:9d:39:25:7d:93:bb:a3:bb:bb:d1:7d:a5:90: 89:12:c9:0e:0f:a2:5f:e2:78:5d:de:7b:59:7e:f6: fa:78:4e:7d:ea:d2:38:2d:0f:76:63:79:15:1c:bf: a8:18:97:8f:44:83:92:ae:82:af:32:35:c1:29:bb: 11:59:29:63:73:08:63:14:40:ea:f3:d1:a9:1b:0f: a3:08:e3:dc:9c:59:49:a4:a3:aa:37:51:54:16:f9: 82:5b:68:16:5e:b6:58:ef:1c:26:e3:af:eb:05:ca: be:66:08:eb:97:a9:f0:ac:fa:99:8c:f4:80:d7:3e: 2b:8a:00:d4:0b:64:fa:8e:76:7e:cf:6a:56:e5:6d: 24:c6:30:68:fc:1e:00:92:19:9f:1a:e5:45:d8:50: e5:e9:2d:52:cc:9f:03:4d:98:e1:e9:f0:f5:c6:ff: 96:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:D0:49:49:58:11:92:88:94:71:F3:E6:7F:85:71:EF:62:BB:3D:BB X509v3 Authority Key Identifier: keyid:3A:76:FC:5C:90:10:B4:11:19:CA:68:DC:6B:99:50:BA:5F:F7:32:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Onb8XJAQtBEZymjca5lQul_3Mn4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:82:4d:c8:0e:35:71:ed:44:9d:36:ca:73:17:e7:d5:29:3a: c6:cc:9d:4d:c9:ec:61:a8:78:47:0c:89:f5:20:30:ee:ad:c9: 90:3b:36:25:83:e4:86:bc:55:e9:73:86:38:44:92:ea:b6:34: e5:a1:73:d3:91:66:70:cf:af:7e:bc:f4:e3:fe:d5:3a:b7:92: d7:6c:8e:1e:ec:f3:2b:19:e5:f7:7b:24:87:a2:44:10:4f:7a: 7f:0a:f4:33:66:65:9b:4d:31:7d:27:77:46:fa:76:66:51:f0: 79:7f:33:ef:b5:66:a6:2e:da:bb:11:34:8f:b1:9b:84:93:f9: c8:99:49:1a:4b:e6:65:c6:65:45:42:15:9c:e8:c2:0c:c9:99: 06:d8:2b:3a:e3:a6:cf:15:23:bf:f5:da:6c:72:4c:8e:c0:58: f9:b5:5d:f4:54:c1:f9:b0:ee:7c:e9:34:a5:f8:24:10:b3:1b: 8b:27:4e:53:dc:6e:d8:37:3c:06:dc:09:8f:ac:53:f2:92:0c: a9:a1:63:74:d3:8a:83:77:87:00:fd:2e:e2:0f:fc:32:8f:ee: 99:75:13:2f:9e:c4:3c:48:d6:d6:4b:f2:21:11:20:2f:49:04: 10:5b:8e:5a:87:c8:10:4b:41:b3:ec:dd:b3:2f:b0:5b:5a:0e: 00:97:10:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPzt71SBig1j9rj78B6T6EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhNzZmYzVjOTAxMGI0MTExOWNhNjhkYzZiOTk1MGJhNWZm NzMyN2UwHhcNMjUxMjI0MTAwMTU2WhcNMjUxMjI1MTAwMTU2WjAzMTEwLwYDVQQD Eyg3NWQwNDk0OTU4MTE5Mjg4OTQ3MWYzZTY3Zjg1NzFlZjYyYmIzZGJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0WtiYH6jgZCMcRYKYVCLERBMVsn gQpVBY3JmApZ7Gf+jVcDpCn+IIgH+9fbkDV0fTeC50bghIdlScUIiFtY6zU2BW9o G9sGHocjrGV5vWRmiFh2oYnEUtFeJZ05JX2Tu6O7u9F9pZCJEskOD6Jf4nhd3ntZ fvb6eE596tI4LQ92Y3kVHL+oGJePRIOSroKvMjXBKbsRWSljcwhjFEDq89GpGw+j COPcnFlJpKOqN1FUFvmCW2gWXrZY7xwm46/rBcq+Zgjrl6nwrPqZjPSA1z4rigDU C2T6jnZ+z2pW5W0kxjBo/B4AkhmfGuVF2FDl6S1SzJ8DTZjh6fD1xv+WhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHXQSUlYEZKIlHHz5n+Fce9iuz27MB8GA1UdIwQY MBaAFDp2/FyQELQRGcpo3GuZULpf9zJ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT25iOFhKQVF0QkVaeW1qY2E1bFF1bF8zTW40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9hMjc4N2UtYzRiYi00ZGZkLTgzY2Qt YmRmYTdjNGY4YjBhLzEvT25iOFhKQVF0QkVaeW1qY2E1bFF1bF8zTW40Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9hMjc4N2UtYzRiYi00ZGZkLTgzY2QtYmRmYTdjNGY4YjBh LzEvT25iOFhKQVF0QkVaeW1qY2E1bFF1bF8zTW40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEIJNyA41 ce1EnTbKcxfn1Sk6xsydTcnsYah4RwyJ9SAw7q3JkDs2JYPkhrxV6XOGOESS6rY0 5aFz05FmcM+vfrz04/7VOreS12yOHuzzKxnl93skh6JEEE96fwr0M2Zlm00xfSd3 Rvp2ZlHweX8z77Vmpi7auxE0j7GbhJP5yJlJGkvmZcZlRUIVnOjCDMmZBtgrOuOm zxUjv/XabHJMjsBY+bVd9FTB+bDufOk0pfgkELMbiydOU9xu2Dc8BtwJj6xT8pIM qaFjdNOKg3eHAP0u4g/8Mo/umXUTL57EPEjW1kvyIREgL0kEEFuOWofIEEtBs+zd sy+wW1oOAJcQbQ== -----END CERTIFICATE-----Generated at Wed Dec 24 13:35:59 2025 by rpki-client