This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.mft File: oNxs0zNOAmkDIjc8O1BuQYT67H8.mft (raw, json) Hash identifier: vj9RgN2PmKiUrs0MHvvH87NoUgYsa4IVREhJvauFKIg= Subject key identifier: 14:EE:61:29:55:EB:2D:1B:23:CC:0D:F8:E4:5F:1F:21:3F:63:80:2B Authority key identifier: A0:DC:6C:D3:33:4E:02:69:03:22:37:3C:3B:50:6E:41:84:FA:EC:7F Certificate issuer: /CN=a0dc6cd3334e02690322373c3b506e4184faec7f Certificate serial: 019B2BF85C75E318E38C32976BCD7D268E93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oNxs0zNOAmkDIjc8O1BuQYT67H8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.mft Manifest number: 05AC Signing time: Wed 17 Dec 2025 11:00:55 +0000 Manifest this update: Wed 17 Dec 2025 11:00:55 +0000 Manifest next update: Thu 18 Dec 2025 11:00:55 +0000 Files and hashes: 1: L2QPsEXXxjypDuteGOkuNir3lUA.roa (hash: mcJaTh3VxTTNDuoHtoju+OCGdo4jk9ztR2/hlQRPaNY=) 2: oNxs0zNOAmkDIjc8O1BuQYT67H8.crl (hash: mik9AiimR4pFTDxscBFYpizcZuO+aMVojqhg6NzdJAc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.mft rsync://rpki.ripe.net/repository/DEFAULT/oNxs0zNOAmkDIjc8O1BuQYT67H8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:f8:5c:75:e3:18:e3:8c:32:97:6b:cd:7d:26:8e:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0dc6cd3334e02690322373c3b506e4184faec7f Validity Not Before: Dec 17 11:00:55 2025 GMT Not After : Dec 18 11:00:55 2025 GMT Subject: CN=14ee612955eb2d1b23cc0df8e45f1f213f63802b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:d4:97:01:60:df:49:e2:32:4f:6a:51:58:38: 1d:c3:93:20:21:dd:d7:c5:50:16:55:40:0f:fe:8e: 5a:99:fb:83:4e:2b:78:44:e9:ce:b9:4a:3e:b1:41: ab:bd:0f:14:2e:72:2b:b5:ba:23:47:71:9d:06:1b: fd:0f:69:3a:ed:e0:34:0c:34:5f:12:19:49:35:63: 62:50:35:c4:ae:34:47:b9:9b:ee:57:5c:88:31:1c: b5:c0:b9:8a:a4:b8:bd:91:ed:ca:54:32:60:20:c3: 6c:f8:4b:d9:b6:d3:4e:55:d3:4a:0d:79:e0:3a:37: 2f:ca:67:2c:f1:ac:89:57:97:de:26:24:87:ea:23: 70:86:98:fd:2c:35:ca:dd:ce:14:da:df:94:9f:f5: 46:3f:16:23:4c:39:40:e8:69:18:7b:28:a2:64:bb: fa:d8:6d:2f:23:06:c7:fe:88:0e:62:37:1c:a1:11: 5f:c3:e9:8d:d3:38:4f:32:84:09:e3:43:25:ae:3f: 0f:6b:6b:de:96:f7:5b:f5:16:3b:e5:ea:2e:11:68: 6d:63:7f:a3:94:00:56:b1:97:da:b5:73:f5:2e:e5: 7f:d0:35:c2:db:3d:b4:84:13:61:82:9c:ed:40:94: ff:be:b7:9a:34:8c:64:4f:d8:fc:49:34:ac:5c:9d: d2:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:EE:61:29:55:EB:2D:1B:23:CC:0D:F8:E4:5F:1F:21:3F:63:80:2B X509v3 Authority Key Identifier: keyid:A0:DC:6C:D3:33:4E:02:69:03:22:37:3C:3B:50:6E:41:84:FA:EC:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNxs0zNOAmkDIjc8O1BuQYT67H8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:ff:b7:f5:6d:5b:46:cb:b6:86:d0:6d:1b:98:ff:84:bd:40: 3f:e2:42:dd:be:84:c5:db:67:d5:22:d4:51:95:5f:09:6c:0e: 98:00:2c:65:e6:19:f9:d3:3a:0c:97:0e:ad:6a:22:86:b8:80: f0:bf:66:a9:30:2d:06:82:7e:96:d1:6b:81:37:3e:99:78:a1: e0:31:30:74:77:e7:7a:6e:7f:90:84:7a:fd:bc:80:d2:95:3c: 0d:9b:6a:31:90:35:61:33:f8:3d:6e:ae:34:13:02:ed:79:7d: 3b:c4:e6:57:cb:1e:1f:4b:87:fa:2f:a5:3e:9f:ac:ed:5d:6c: 15:f6:c2:7f:bb:f9:f2:0a:49:78:d0:f7:95:f8:2e:c1:65:55: 7e:67:00:2d:d9:74:88:a6:e6:fe:84:0b:93:5c:d6:94:73:2c: 1f:4e:fe:0f:4e:25:66:50:ea:43:49:90:a0:a8:27:d2:28:d8: 6a:29:31:1c:d4:6a:4b:d5:da:95:55:d2:02:76:d8:9a:ba:5e: 8f:53:ce:5b:f0:d2:5c:4c:0a:45:1c:b2:a4:c6:96:00:c4:c8: 9d:24:a5:ec:c3:c2:13:47:06:2a:d8:ec:ec:3a:ca:cd:db:a0: 6c:74:25:86:05:41:85:5d:89:71:c8:01:f2:7c:64:aa:4f:d8: 84:1a:34:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsr+Fx14xjjjDKXa819Jo6TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwZGM2Y2QzMzM0ZTAyNjkwMzIyMzczYzNiNTA2ZTQxODRm YWVjN2YwHhcNMjUxMjE3MTEwMDU1WhcNMjUxMjE4MTEwMDU1WjAzMTEwLwYDVQQD EygxNGVlNjEyOTU1ZWIyZDFiMjNjYzBkZjhlNDVmMWYyMTNmNjM4MDJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9dSXAWDfSeIyT2pRWDgdw5MgId3X xVAWVUAP/o5amfuDTit4ROnOuUo+sUGrvQ8ULnIrtbojR3GdBhv9D2k67eA0DDRf EhlJNWNiUDXErjRHuZvuV1yIMRy1wLmKpLi9ke3KVDJgIMNs+EvZttNOVdNKDXng Ojcvymcs8ayJV5feJiSH6iNwhpj9LDXK3c4U2t+Un/VGPxYjTDlA6GkYeyiiZLv6 2G0vIwbH/ogOYjccoRFfw+mN0zhPMoQJ40Mlrj8Pa2velvdb9RY75eouEWhtY3+j lABWsZfatXP1LuV/0DXC2z20hBNhgpztQJT/vreaNIxkT9j8STSsXJ3SiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBTuYSlV6y0bI8wN+ORfHyE/Y4ArMB8GA1UdIwQY MBaAFKDcbNMzTgJpAyI3PDtQbkGE+ux/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb054czB6Tk9BbWtESWpjOE8xQnVRWVQ2N0g4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9jMDFmOTAtZDBmYS00OTc2LWIxYzAt ZDFmZjc1YTdhMzVjLzEvb054czB6Tk9BbWtESWpjOE8xQnVRWVQ2N0g4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS9jMDFmOTAtZDBmYS00OTc2LWIxYzAtZDFmZjc1YTdhMzVj LzEvb054czB6Tk9BbWtESWpjOE8xQnVRWVQ2N0g4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACf+39W1b Rsu2htBtG5j/hL1AP+JC3b6Exdtn1SLUUZVfCWwOmAAsZeYZ+dM6DJcOrWoihriA 8L9mqTAtBoJ+ltFrgTc+mXih4DEwdHfnem5/kIR6/byA0pU8DZtqMZA1YTP4PW6u NBMC7Xl9O8TmV8seH0uH+i+lPp+s7V1sFfbCf7v58gpJeND3lfguwWVVfmcALdl0 iKbm/oQLk1zWlHMsH07+D04lZlDqQ0mQoKgn0ijYaikxHNRqS9XalVXSAnbYmrpe j1POW/DSXEwKRRyypMaWAMTInSSl7MPCE0cGKtjs7DrKzdugbHQlhgVBhV2JccgB 8nxkqk/YhBo0Vw== -----END CERTIFICATE-----Generated at Wed Dec 17 19:06:18 2025 by rpki-client