This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/a3b11e-5909-49fe-bb75-790bc91a59e6/1/oNPtV5U0igTn7NFy12QvqWIJcoc.mft File: oNPtV5U0igTn7NFy12QvqWIJcoc.mft (raw, json) Hash identifier: nYvB5mjaBSeGZDjJxyhVgalTWsssGRzzzxH+GWo15ho= Subject key identifier: BD:2E:14:C4:E8:F4:BD:06:73:CB:D3:F8:BC:12:0D:39:81:E5:C9:3D Authority key identifier: A0:D3:ED:57:95:34:8A:04:E7:EC:D1:72:D7:64:2F:A9:62:09:72:87 Certificate issuer: /CN=a0d3ed5795348a04e7ecd172d7642fa962097287 Certificate serial: 019B1A972744984838F49509365889A14B82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oNPtV5U0igTn7NFy12QvqWIJcoc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/a3b11e-5909-49fe-bb75-790bc91a59e6/1/oNPtV5U0igTn7NFy12QvqWIJcoc.mft Manifest number: 045D Signing time: Sun 14 Dec 2025 02:01:12 +0000 Manifest this update: Sun 14 Dec 2025 02:01:12 +0000 Manifest next update: Mon 15 Dec 2025 02:01:12 +0000 Files and hashes: 1: _Z612WlN8ZfOi7lH-p4HrmdXgXQ.roa (hash: QscoaDsHFH3nysubWrv1ADSV365kESJ9Bam6CnFtw2M=) 2: oNPtV5U0igTn7NFy12QvqWIJcoc.crl (hash: riazoGyLJLFu+Vq+DKZrJ/IVXSp3LhNCDpPiFZii8Vg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/a3b11e-5909-49fe-bb75-790bc91a59e6/1/oNPtV5U0igTn7NFy12QvqWIJcoc.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/a3b11e-5909-49fe-bb75-790bc91a59e6/1/oNPtV5U0igTn7NFy12QvqWIJcoc.mft rsync://rpki.ripe.net/repository/DEFAULT/oNPtV5U0igTn7NFy12QvqWIJcoc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:97:27:44:98:48:38:f4:95:09:36:58:89:a1:4b:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0d3ed5795348a04e7ecd172d7642fa962097287 Validity Not Before: Dec 14 02:01:12 2025 GMT Not After : Dec 15 02:01:12 2025 GMT Subject: CN=bd2e14c4e8f4bd0673cbd3f8bc120d3981e5c93d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:36:62:50:a1:71:7e:9c:4d:74:8a:ae:50:cd: 12:95:b1:20:2e:14:61:0d:15:cd:81:4e:1c:2a:5c: 3f:78:e7:00:e5:f9:e4:fa:ad:d3:10:87:4d:c6:4e: 3a:ad:49:45:a7:7c:3e:77:7d:e6:3b:7d:24:c8:53: 9b:28:5f:f7:51:7e:8d:66:35:89:53:5e:ab:f3:60: 36:aa:66:a6:b1:36:e2:e2:95:5f:89:78:bd:c2:42: bd:75:cb:d8:17:69:87:9e:30:ce:f7:22:bd:44:ae: d7:21:38:de:8d:e1:e5:4a:e2:d2:3b:a5:4e:da:41: 83:d6:99:e9:6f:b3:89:f4:79:07:00:bd:b4:1e:ff: 97:5b:df:20:f3:ca:1b:a2:01:fd:c0:be:6d:87:33: be:57:34:7e:5f:40:94:75:14:10:ef:54:04:d5:ef: 05:cf:67:d4:b9:aa:47:aa:6f:78:c4:27:4b:b6:30: e3:77:83:23:57:fd:28:95:9a:ee:c9:ca:68:84:e8: 23:ce:f4:b8:28:14:48:9c:3e:5a:63:d4:9a:8a:c0: ed:7c:7e:2a:d8:ec:a8:32:01:68:b2:c0:7e:ed:67: b5:31:40:a8:62:9c:31:91:b9:cf:1a:3d:06:49:61: 3f:0d:b8:7f:8b:1f:c8:32:64:d8:28:f1:19:ce:02: a7:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:2E:14:C4:E8:F4:BD:06:73:CB:D3:F8:BC:12:0D:39:81:E5:C9:3D X509v3 Authority Key Identifier: keyid:A0:D3:ED:57:95:34:8A:04:E7:EC:D1:72:D7:64:2F:A9:62:09:72:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNPtV5U0igTn7NFy12QvqWIJcoc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a3b11e-5909-49fe-bb75-790bc91a59e6/1/oNPtV5U0igTn7NFy12QvqWIJcoc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a3b11e-5909-49fe-bb75-790bc91a59e6/1/oNPtV5U0igTn7NFy12QvqWIJcoc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:1a:b6:22:9a:92:16:b5:36:e1:7b:c8:f0:27:9b:c5:15:d1: ab:36:31:37:0c:10:bd:75:96:d5:a5:fc:49:6e:f1:79:d5:ff: ce:b8:61:bd:7e:32:de:38:8a:0a:c8:59:23:86:32:69:94:56: ca:2a:b8:52:95:43:05:9d:ef:b4:53:c1:c5:38:c4:23:6c:ec: 64:27:0c:de:c4:ea:f8:2c:d4:55:b2:9a:8a:55:a7:bf:de:04: 4b:57:d3:4d:39:bb:5d:e9:d3:f0:4a:41:76:81:2f:96:f2:72: 64:a3:db:8d:ac:97:27:8a:f3:ad:db:c4:88:5b:ea:ba:34:d9: 24:16:92:29:bb:d6:8f:10:ea:31:a7:4b:7e:5b:ef:d6:78:d3: b9:94:3a:df:75:ab:62:b4:30:f2:5e:bd:25:ca:64:71:f8:a5: 6d:ce:27:07:ba:08:ed:3b:fe:5e:3d:45:0c:c7:2e:f1:38:8e: 44:12:0e:e8:01:a7:b8:67:a6:82:a0:83:9d:6c:4c:d7:02:c7: 8f:eb:0a:00:ff:5e:4d:f1:80:a2:15:ac:df:77:fb:0a:4f:0b: b8:03:0d:a5:d9:c6:7e:85:56:1f:6e:22:b3:54:e1:4b:6e:fc: 48:f5:90:8a:1a:d7:c4:d1:18:ed:90:ff:55:9f:05:47:c9:b3: 4e:8b:0a:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsalydEmEg49JUJNliJoUuCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwZDNlZDU3OTUzNDhhMDRlN2VjZDE3MmQ3NjQyZmE5NjIw OTcyODcwHhcNMjUxMjE0MDIwMTEyWhcNMjUxMjE1MDIwMTEyWjAzMTEwLwYDVQQD EyhiZDJlMTRjNGU4ZjRiZDA2NzNjYmQzZjhiYzEyMGQzOTgxZTVjOTNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTZiUKFxfpxNdIquUM0SlbEgLhRh DRXNgU4cKlw/eOcA5fnk+q3TEIdNxk46rUlFp3w+d33mO30kyFObKF/3UX6NZjWJ U16r82A2qmamsTbi4pVfiXi9wkK9dcvYF2mHnjDO9yK9RK7XITjejeHlSuLSO6VO 2kGD1pnpb7OJ9HkHAL20Hv+XW98g88obogH9wL5thzO+VzR+X0CUdRQQ71QE1e8F z2fUuapHqm94xCdLtjDjd4MjV/0olZruycpohOgjzvS4KBRInD5aY9SaisDtfH4q 2OyoMgFossB+7We1MUCoYpwxkbnPGj0GSWE/Dbh/ix/IMmTYKPEZzgKn5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL0uFMTo9L0Gc8vT+LwSDTmB5ck9MB8GA1UdIwQY MBaAFKDT7VeVNIoE5+zRctdkL6liCXKHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb05QdFY1VTBpZ1RuN05GeTEyUXZxV0lKY29jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9hM2IxMWUtNTkwOS00OWZlLWJiNzUt NzkwYmM5MWE1OWU2LzEvb05QdFY1VTBpZ1RuN05GeTEyUXZxV0lKY29jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9hM2IxMWUtNTkwOS00OWZlLWJiNzUtNzkwYmM5MWE1OWU2 LzEvb05QdFY1VTBpZ1RuN05GeTEyUXZxV0lKY29jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHhq2IpqS FrU24XvI8CebxRXRqzYxNwwQvXWW1aX8SW7xedX/zrhhvX4y3jiKCshZI4YyaZRW yiq4UpVDBZ3vtFPBxTjEI2zsZCcM3sTq+CzUVbKailWnv94ES1fTTTm7XenT8EpB doEvlvJyZKPbjayXJ4rzrdvEiFvqujTZJBaSKbvWjxDqMadLflvv1njTuZQ633Wr YrQw8l69Jcpkcfilbc4nB7oI7Tv+Xj1FDMcu8TiORBIO6AGnuGemgqCDnWxM1wLH j+sKAP9eTfGAohWs33f7Ck8LuAMNpdnGfoVWH24is1ThS278SPWQihrXxNEY7ZD/ VZ8FR8mzTosKpg== -----END CERTIFICATE-----Generated at Sun Dec 14 07:48:27 2025 by rpki-client