This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/a1d84e-0c5d-4fb5-9dd1-8c8524e160f7/1/Onp2YdSgHs7iQ4TRUux5qhyAe-c.mft File: Onp2YdSgHs7iQ4TRUux5qhyAe-c.mft (raw, json) Hash identifier: lnUlC2XTVV8G2te/RQDmA3PsvdoDwNS7bcy2oNiaoLs= Subject key identifier: F2:93:E5:C2:87:31:3E:A4:C9:4E:FE:0F:99:19:DB:17:65:3A:3B:31 Authority key identifier: 3A:7A:76:61:D4:A0:1E:CE:E2:43:84:D1:52:EC:79:AA:1C:80:7B:E7 Certificate issuer: /CN=3a7a7661d4a01ecee24384d152ec79aa1c807be7 Certificate serial: 019B5A888D09BB45C09D84F03D89BCA54E2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Onp2YdSgHs7iQ4TRUux5qhyAe-c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/a1d84e-0c5d-4fb5-9dd1-8c8524e160f7/1/Onp2YdSgHs7iQ4TRUux5qhyAe-c.mft Manifest number: 1A Signing time: Fri 26 Dec 2025 12:00:57 +0000 Manifest this update: Fri 26 Dec 2025 12:00:57 +0000 Manifest next update: Sat 27 Dec 2025 12:00:57 +0000 Files and hashes: 1: OVKvymFrbX43XOljNNooa7WThWs.asa (hash: 1FTm/6RnYDK0EBULBUTl49w/2xuw2jLBEG4MKGTL100=) 2: Onp2YdSgHs7iQ4TRUux5qhyAe-c.crl (hash: uK2UD5NEy8tFWLG51Jr/CI9v2E0NR9Sh2BysqnMxvlk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/a1d84e-0c5d-4fb5-9dd1-8c8524e160f7/1/Onp2YdSgHs7iQ4TRUux5qhyAe-c.crl rsync://rpki.ripe.net/repository/DEFAULT/84/a1d84e-0c5d-4fb5-9dd1-8c8524e160f7/1/Onp2YdSgHs7iQ4TRUux5qhyAe-c.mft rsync://rpki.ripe.net/repository/DEFAULT/Onp2YdSgHs7iQ4TRUux5qhyAe-c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:8d:09:bb:45:c0:9d:84:f0:3d:89:bc:a5:4e:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a7a7661d4a01ecee24384d152ec79aa1c807be7 Validity Not Before: Dec 26 12:00:57 2025 GMT Not After : Dec 27 12:00:57 2025 GMT Subject: CN=f293e5c287313ea4c94efe0f9919db17653a3b31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:ef:36:84:a7:2b:d9:a7:3f:e8:b3:98:95:a2: 7f:49:79:53:42:04:03:a4:76:d1:0a:53:3c:4e:2d: ce:78:10:47:cb:25:17:6c:58:65:46:3f:db:d1:05: 9d:ce:73:04:56:b3:2d:dd:56:9a:92:ff:dc:94:4f: 4f:78:49:71:93:61:4d:b4:ce:e5:5e:e4:15:fc:30: 10:54:73:75:0a:28:53:69:83:ac:30:2c:79:c7:c1: f8:7b:8c:8e:66:96:d5:c3:4b:ae:af:2e:4c:f7:3f: fa:08:22:64:cf:a7:22:b0:ee:40:7d:d1:b8:61:e7: 87:49:4e:da:9a:d3:97:8b:b1:10:1d:29:dd:52:50: bf:31:f4:6d:e1:e2:bd:3b:3d:88:a8:bf:0c:83:db: 87:59:b6:bc:f4:73:a5:30:bb:35:58:ff:be:90:21: 99:1b:64:e3:11:78:77:6a:28:45:e2:eb:61:fc:3b: cc:c2:bb:88:b9:80:fd:88:da:5d:85:18:9e:d1:84: 9a:dc:6e:2c:89:f2:4e:e4:47:94:f7:8d:e1:f2:02: e6:7b:cd:c8:24:65:f3:4c:54:80:41:8b:83:c3:53: a9:df:5c:d2:e8:a3:e5:ee:f5:3b:7a:a0:e4:82:67: 13:bb:93:67:53:1c:56:a5:86:46:bf:59:1c:2b:b2: b5:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:93:E5:C2:87:31:3E:A4:C9:4E:FE:0F:99:19:DB:17:65:3A:3B:31 X509v3 Authority Key Identifier: keyid:3A:7A:76:61:D4:A0:1E:CE:E2:43:84:D1:52:EC:79:AA:1C:80:7B:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Onp2YdSgHs7iQ4TRUux5qhyAe-c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a1d84e-0c5d-4fb5-9dd1-8c8524e160f7/1/Onp2YdSgHs7iQ4TRUux5qhyAe-c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a1d84e-0c5d-4fb5-9dd1-8c8524e160f7/1/Onp2YdSgHs7iQ4TRUux5qhyAe-c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:35:9e:03:98:39:21:fd:a4:ec:b8:2e:15:5e:90:e2:0f:8a: 13:ea:3a:2a:a5:88:e0:8c:38:88:fa:65:70:61:7d:18:a9:ab: 27:4f:4b:c7:d3:91:83:2e:00:fe:94:f5:ae:17:5d:6f:de:ab: d9:86:d7:e0:5b:9b:8b:64:66:53:ae:c1:b4:48:3b:32:c6:1e: d0:3a:e6:6e:09:0a:26:48:76:9b:19:d0:1e:2a:20:53:4f:fd: 40:95:51:56:e1:c9:51:80:2f:b3:88:4b:ea:62:65:de:69:95: 3a:90:8b:2b:3e:2f:f0:cb:30:77:4a:14:de:ea:11:6a:99:42: 2f:61:68:af:b4:79:fc:05:b7:92:e8:97:d9:1a:6b:67:f1:78: 61:9a:88:23:a6:cc:25:2f:a1:4e:be:e5:bf:cf:18:27:30:f5: b7:e3:06:01:95:af:4b:0a:16:bb:95:47:72:4a:0b:61:0b:96: 63:fa:29:41:b4:59:34:6b:0b:ff:95:2a:af:b7:41:48:75:3e: 63:23:bd:fe:b3:44:19:7f:e6:38:d4:0e:84:9b:78:3c:17:49: f3:62:bf:85:ab:d0:27:78:4f:48:97:07:95:0c:a4:d6:c0:9a: 6f:04:15:43:76:8b:6d:32:2c:8a:87:e7:02:e8:50:cf:f7:85: c6:77:d3:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiI0Ju0XAnYTwPYm8pU4vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhN2E3NjYxZDRhMDFlY2VlMjQzODRkMTUyZWM3OWFhMWM4 MDdiZTcwHhcNMjUxMjI2MTIwMDU3WhcNMjUxMjI3MTIwMDU3WjAzMTEwLwYDVQQD EyhmMjkzZTVjMjg3MzEzZWE0Yzk0ZWZlMGY5OTE5ZGIxNzY1M2EzYjMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiu82hKcr2ac/6LOYlaJ/SXlTQgQD pHbRClM8Ti3OeBBHyyUXbFhlRj/b0QWdznMEVrMt3Vaakv/clE9PeElxk2FNtM7l XuQV/DAQVHN1CihTaYOsMCx5x8H4e4yOZpbVw0uury5M9z/6CCJkz6cisO5AfdG4 YeeHSU7amtOXi7EQHSndUlC/MfRt4eK9Oz2IqL8Mg9uHWba89HOlMLs1WP++kCGZ G2TjEXh3aihF4uth/DvMwruIuYD9iNpdhRie0YSa3G4sifJO5EeU943h8gLme83I JGXzTFSAQYuDw1Op31zS6KPl7vU7eqDkgmcTu5NnUxxWpYZGv1kcK7K1lQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPKT5cKHMT6kyU7+D5kZ2xdlOjsxMB8GA1UdIwQY MBaAFDp6dmHUoB7O4kOE0VLseaocgHvnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT25wMllkU2dIczdpUTRUUlV1eDVxaHlBZS1jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9hMWQ4NGUtMGM1ZC00ZmI1LTlkZDEt OGM4NTI0ZTE2MGY3LzEvT25wMllkU2dIczdpUTRUUlV1eDVxaHlBZS1jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC9hMWQ4NGUtMGM1ZC00ZmI1LTlkZDEtOGM4NTI0ZTE2MGY3 LzEvT25wMllkU2dIczdpUTRUUlV1eDVxaHlBZS1jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASjWeA5g5 If2k7LguFV6Q4g+KE+o6KqWI4Iw4iPplcGF9GKmrJ09Lx9ORgy4A/pT1rhddb96r 2YbX4Fubi2RmU67BtEg7MsYe0DrmbgkKJkh2mxnQHiogU0/9QJVRVuHJUYAvs4hL 6mJl3mmVOpCLKz4v8Mswd0oU3uoRaplCL2For7R5/AW3kuiX2RprZ/F4YZqII6bM JS+hTr7lv88YJzD1t+MGAZWvSwoWu5VHckoLYQuWY/opQbRZNGsL/5Uqr7dBSHU+ YyO9/rNEGX/mONQOhJt4PBdJ82K/havQJ3hPSJcHlQyk1sCabwQVQ3aLbTIsiofn AuhQz/eFxnfT6Q== -----END CERTIFICATE-----Generated at Fri Dec 26 15:43:14 2025 by rpki-client