This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.mft File: OnsDkT46KF7-Uc2sZfVQTIejRGA.mft (raw, json) Hash identifier: 0buOCoc8mo8XXEgLulDyJhfcn26nDvizRHp73FbHIyM= Subject key identifier: 88:1E:01:0D:27:F5:A4:9B:39:33:BF:9E:45:5C:46:C1:08:71:C4:D0 Authority key identifier: 3A:7B:03:91:3E:3A:28:5E:FE:51:CD:AC:65:F5:50:4C:87:A3:44:60 Certificate issuer: /CN=3a7b03913e3a285efe51cdac65f5504c87a34460 Certificate serial: 019B2B1CC87C4954A5114AC6C413AFF3AB97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OnsDkT46KF7-Uc2sZfVQTIejRGA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.mft Manifest number: 1485 Signing time: Wed 17 Dec 2025 07:01:05 +0000 Manifest this update: Wed 17 Dec 2025 07:01:05 +0000 Manifest next update: Thu 18 Dec 2025 07:01:05 +0000 Files and hashes: 1: OnsDkT46KF7-Uc2sZfVQTIejRGA.crl (hash: CLMjh/mDqesJu5THPdR/ayltdVxZbjkJFRn38OvFmcQ=) 2: bXuLlzwCurMedfx4RUMXi7r1h0M.roa (hash: sXVX+GwCrEzWh3/PYurD7SBft7awlkJnghtSxD3UtHo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.mft rsync://rpki.ripe.net/repository/DEFAULT/OnsDkT46KF7-Uc2sZfVQTIejRGA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 07:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:1c:c8:7c:49:54:a5:11:4a:c6:c4:13:af:f3:ab:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a7b03913e3a285efe51cdac65f5504c87a34460 Validity Not Before: Dec 17 07:01:05 2025 GMT Not After : Dec 18 07:01:05 2025 GMT Subject: CN=881e010d27f5a49b3933bf9e455c46c10871c4d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:03:41:4c:e0:3d:39:2b:c5:d3:58:7c:df:6d: 67:54:b8:ae:ee:68:6c:0e:26:d2:61:0d:07:b8:2e: 0e:b2:a2:89:7c:e5:74:b6:e1:52:3d:b3:9c:d8:a0: 3e:56:1c:0e:e0:7c:ae:0b:63:5c:6a:82:cf:c2:8f: ff:24:77:72:ba:41:21:47:21:ae:7a:8f:ad:18:eb: eb:b2:c9:b7:fc:a0:eb:ac:7a:19:a3:c0:b5:53:9d: 38:29:33:92:ac:8d:89:ad:b9:b9:6c:2c:1b:83:48: e9:10:de:34:6c:4b:11:77:0d:08:12:42:26:60:77: 45:bc:8a:eb:c6:ab:25:21:d7:fd:29:ed:68:eb:e1: e7:22:8f:00:25:31:98:02:85:98:4e:95:ac:cb:e9: 45:ea:04:44:38:d9:f3:7c:91:77:75:e1:1f:b9:b1: e8:07:51:26:dd:2c:09:18:d9:c4:b8:71:67:8b:cb: de:38:5d:0f:e9:88:c2:ed:b4:05:e6:a8:2b:64:bb: 6a:1a:87:d5:be:da:62:d8:63:c3:77:b0:64:21:34: 45:45:c5:04:ba:ca:98:77:84:75:31:27:b0:87:57: 83:8f:74:b2:33:7a:f0:9a:86:04:24:e8:46:aa:19: e2:5b:d2:d8:8c:9c:4e:15:d6:4c:30:4c:15:d3:f6: 7b:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:1E:01:0D:27:F5:A4:9B:39:33:BF:9E:45:5C:46:C1:08:71:C4:D0 X509v3 Authority Key Identifier: keyid:3A:7B:03:91:3E:3A:28:5E:FE:51:CD:AC:65:F5:50:4C:87:A3:44:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OnsDkT46KF7-Uc2sZfVQTIejRGA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:03:34:f9:05:96:ae:a7:6a:c6:6d:dc:46:26:5a:cb:83:53: 8f:49:d6:f6:0c:97:1e:22:56:8a:bd:a2:ea:17:b4:7a:ee:0b: 64:01:9e:1e:6b:b2:81:39:15:c2:2c:a4:27:c7:17:4c:39:2d: ee:bd:02:31:91:2d:65:a0:86:43:f0:b7:a2:86:30:14:a5:c0: 1f:cc:0b:f7:f2:1d:ad:d8:36:ca:eb:2e:7a:b1:9e:fe:ba:06: 12:98:b3:e4:3a:b7:92:d7:12:c9:02:40:4d:10:b4:02:38:c3: f2:fd:23:1e:e3:02:f6:0f:54:57:ed:b7:9a:2c:2b:82:c9:7d: 9e:81:33:9f:d9:9f:b5:62:47:27:c3:16:00:55:ba:fd:20:c1: 5a:6c:41:a9:d3:4b:d5:62:8b:51:c8:b6:5b:c7:97:df:2c:5a: 31:fc:37:80:ee:99:dc:51:d3:99:7d:21:57:f1:e6:7a:ad:52: f5:8a:cc:98:4a:44:da:74:82:d6:a3:7d:9c:8c:55:c9:52:20: db:74:ec:a1:8d:59:b6:5c:b7:ce:b4:d0:ce:a6:c8:3b:25:5e: fc:59:3e:aa:5a:66:4d:7d:47:24:1c:da:07:78:7e:f1:76:38: c7:7d:68:52:6d:3a:ef:f9:43:7d:ea:88:c5:fb:4f:e6:b1:51: 72:e9:46:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrHMh8SVSlEUrGxBOv86uXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhN2IwMzkxM2UzYTI4NWVmZTUxY2RhYzY1ZjU1MDRjODdh MzQ0NjAwHhcNMjUxMjE3MDcwMTA1WhcNMjUxMjE4MDcwMTA1WjAzMTEwLwYDVQQD Eyg4ODFlMDEwZDI3ZjVhNDliMzkzM2JmOWU0NTVjNDZjMTA4NzFjNGQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgNBTOA9OSvF01h8321nVLiu7mhs DibSYQ0HuC4OsqKJfOV0tuFSPbOc2KA+VhwO4HyuC2NcaoLPwo//JHdyukEhRyGu eo+tGOvrssm3/KDrrHoZo8C1U504KTOSrI2Jrbm5bCwbg0jpEN40bEsRdw0IEkIm YHdFvIrrxqslIdf9Ke1o6+HnIo8AJTGYAoWYTpWsy+lF6gREONnzfJF3deEfubHo B1Em3SwJGNnEuHFni8veOF0P6YjC7bQF5qgrZLtqGofVvtpi2GPDd7BkITRFRcUE usqYd4R1MSewh1eDj3SyM3rwmoYEJOhGqhniW9LYjJxOFdZMMEwV0/Z75wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIgeAQ0n9aSbOTO/nkVcRsEIccTQMB8GA1UdIwQY MBaAFDp7A5E+Oihe/lHNrGX1UEyHo0RgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT25zRGtUNDZLRjctVWMyc1pmVlFUSWVqUkdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC82MWRiNmItMWQ3My00ZWMyLThiZTAt ZjM3Y2JhZjdjZTVhLzEvT25zRGtUNDZLRjctVWMyc1pmVlFUSWVqUkdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC82MWRiNmItMWQ3My00ZWMyLThiZTAtZjM3Y2JhZjdjZTVh LzEvT25zRGtUNDZLRjctVWMyc1pmVlFUSWVqUkdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYAM0+QWW rqdqxm3cRiZay4NTj0nW9gyXHiJWir2i6he0eu4LZAGeHmuygTkVwiykJ8cXTDkt 7r0CMZEtZaCGQ/C3ooYwFKXAH8wL9/Idrdg2yusuerGe/roGEpiz5Dq3ktcSyQJA TRC0AjjD8v0jHuMC9g9UV+23miwrgsl9noEzn9mftWJHJ8MWAFW6/SDBWmxBqdNL 1WKLUci2W8eX3yxaMfw3gO6Z3FHTmX0hV/Hmeq1S9YrMmEpE2nSC1qN9nIxVyVIg 23TsoY1Ztly3zrTQzqbIOyVe/Fk+qlpmTX1HJBzaB3h+8XY4x31oUm067/lDfeqI xftP5rFRculGyw== -----END CERTIFICATE-----Generated at Wed Dec 17 15:10:10 2025 by rpki-client