This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.mft File: oNvV0fht2d1mYGoU0x1kyw6qyDs.mft (raw, json) Hash identifier: DYg3w/s0t/jBCRthFRMgjIor0bL9/AkcAQoAxZb1Vec= Subject key identifier: 03:E7:CD:3E:56:C4:2A:60:29:FE:B8:B7:3A:38:85:59:C3:00:38:80 Authority key identifier: A0:DB:D5:D1:F8:6D:D9:DD:66:60:6A:14:D3:1D:64:CB:0E:AA:C8:3B Certificate issuer: /CN=a0dbd5d1f86dd9dd66606a14d31d64cb0eaac83b Certificate serial: 019B801619453A0CEC88EA4E76D6E835D965 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oNvV0fht2d1mYGoU0x1kyw6qyDs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.mft Manifest number: 1254 Signing time: Fri 02 Jan 2026 19:01:30 +0000 Manifest this update: Fri 02 Jan 2026 19:01:30 +0000 Manifest next update: Sat 03 Jan 2026 19:01:30 +0000 Files and hashes: 1: JwJbBnAQRnm7Yr9wnBpWo0sg6l8.roa (hash: j/L9is0WBI5ilRI5gTL02OZdlEqkkNv6fyzs7XSwNkE=) 2: PehZxy4eJXOqEW1bQGdH49g9TKk.roa (hash: XVIm5rSukWk090sAzA2TmOJgfDZPjtVxQtvoQb7iTLE=) 3: oNvV0fht2d1mYGoU0x1kyw6qyDs.crl (hash: eAOx1kApLaUV6w6y5UGryJNJKOwE3WbMol2aIuDydJ8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.mft rsync://rpki.ripe.net/repository/DEFAULT/oNvV0fht2d1mYGoU0x1kyw6qyDs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 19:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:80:16:19:45:3a:0c:ec:88:ea:4e:76:d6:e8:35:d9:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0dbd5d1f86dd9dd66606a14d31d64cb0eaac83b Validity Not Before: Jan 2 19:01:30 2026 GMT Not After : Jan 3 19:01:30 2026 GMT Subject: CN=03e7cd3e56c42a6029feb8b73a388559c3003880 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:6f:8d:a1:c2:02:a2:a6:be:bc:9a:b4:1b:ec: 54:fd:bb:cf:c1:24:a7:5e:9b:5d:42:29:34:e7:e9: 6a:25:2d:8c:74:f2:f9:6d:fd:db:c2:4e:3f:60:13: 3f:9b:16:e5:30:e6:8b:aa:f4:33:8f:01:c2:5d:50: 4b:dd:9a:13:4e:67:05:51:da:50:f6:30:76:87:71: f7:14:98:1c:3d:8c:85:7c:db:5c:bb:f1:57:5c:c3: c1:dc:12:2f:db:d1:6c:32:9b:57:8c:84:d8:70:b4: 6c:79:0b:d1:cb:96:9b:4b:43:a2:48:3b:07:42:5b: 95:5e:0e:68:c9:ac:b7:dc:34:7b:2a:fc:0f:d7:70: 7a:e1:11:0d:b8:e4:2b:b9:d9:27:6d:a6:bf:07:59: dd:d0:a7:fe:ba:09:9b:8b:38:c5:2f:3b:80:72:3d: 31:df:5f:ef:29:65:d5:3d:b6:f2:a2:68:5e:fb:02: 81:98:07:2e:48:39:08:86:36:81:00:9b:57:06:95: 24:e4:97:bf:96:3c:51:34:5a:e7:fa:95:a8:06:78: 0e:e3:c4:b6:ec:11:4a:98:14:01:4e:e5:d5:e9:f3: 88:a6:0a:16:ce:fb:45:69:2a:5f:9c:95:8a:10:b4: 59:36:ea:f3:bb:b1:a2:78:7e:50:b6:ae:9e:c5:fd: 9b:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:E7:CD:3E:56:C4:2A:60:29:FE:B8:B7:3A:38:85:59:C3:00:38:80 X509v3 Authority Key Identifier: keyid:A0:DB:D5:D1:F8:6D:D9:DD:66:60:6A:14:D3:1D:64:CB:0E:AA:C8:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNvV0fht2d1mYGoU0x1kyw6qyDs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:87:d4:cf:c6:77:95:15:4d:c4:5a:42:82:96:c9:dd:f3:94: 0a:10:cb:23:71:20:80:88:89:fe:65:55:af:a9:f8:d1:4a:cc: a7:d5:25:6d:a2:b3:ee:5e:51:26:59:ab:3d:57:38:0b:16:e5: 92:ea:17:28:25:64:c7:f6:37:ea:3b:67:3e:46:d0:d3:26:f0: f7:93:47:2a:e4:35:f0:f7:2a:4f:d0:58:8d:89:06:27:59:5a: 1f:3f:68:51:ec:fa:18:a9:1f:03:57:1a:42:d7:0c:12:45:05: 39:8c:2a:02:b6:f7:27:37:55:fe:49:43:6f:83:b2:5a:76:cc: 7f:bc:b2:2b:eb:2f:2a:e6:c5:8b:59:84:ca:a7:5e:d3:95:4d: 72:37:13:fd:ac:94:e8:6f:ff:5e:20:80:a1:96:aa:e7:6e:52: c0:bc:5f:a5:8b:97:7a:73:25:b5:ad:86:9c:74:48:ee:d5:38: 72:af:1d:d1:5a:64:13:62:85:1a:05:75:81:13:ec:58:ef:6e: d3:83:cd:67:e1:5f:f5:25:94:08:9d:03:88:c8:4b:98:ae:e6: 0d:54:f1:fe:4c:12:bd:97:f7:70:7d:2a:02:17:f7:26:18:a7: 4b:27:a6:33:7f:a0:3d:c1:81:6c:e4:29:61:db:eb:b6:9e:dc: 14:21:83:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuAFhlFOgzsiOpOdtboNdllMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwZGJkNWQxZjg2ZGQ5ZGQ2NjYwNmExNGQzMWQ2NGNiMGVh YWM4M2IwHhcNMjYwMTAyMTkwMTMwWhcNMjYwMTAzMTkwMTMwWjAzMTEwLwYDVQQD EygwM2U3Y2QzZTU2YzQyYTYwMjlmZWI4YjczYTM4ODU1OWMzMDAzODgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlW+NocICoqa+vJq0G+xU/bvPwSSn XptdQik05+lqJS2MdPL5bf3bwk4/YBM/mxblMOaLqvQzjwHCXVBL3ZoTTmcFUdpQ 9jB2h3H3FJgcPYyFfNtcu/FXXMPB3BIv29FsMptXjITYcLRseQvRy5abS0OiSDsH QluVXg5oyay33DR7KvwP13B64RENuOQrudknbaa/B1nd0Kf+ugmbizjFLzuAcj0x 31/vKWXVPbbyomhe+wKBmAcuSDkIhjaBAJtXBpUk5Je/ljxRNFrn+pWoBngO48S2 7BFKmBQBTuXV6fOIpgoWzvtFaSpfnJWKELRZNurzu7GieH5Qtq6exf2bvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAPnzT5WxCpgKf64tzo4hVnDADiAMB8GA1UdIwQY MBaAFKDb1dH4bdndZmBqFNMdZMsOqsg7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb052VjBmaHQyZDFtWUdvVTB4MWt5dzZxeURzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8xZDRjZmMtOGU1Yy00NTdjLTk2MjAt MTM1YzkxZWMxOTllLzEvb052VjBmaHQyZDFtWUdvVTB4MWt5dzZxeURzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy8xZDRjZmMtOGU1Yy00NTdjLTk2MjAtMTM1YzkxZWMxOTll LzEvb052VjBmaHQyZDFtWUdvVTB4MWt5dzZxeURzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV4fUz8Z3 lRVNxFpCgpbJ3fOUChDLI3EggIiJ/mVVr6n40UrMp9UlbaKz7l5RJlmrPVc4Cxbl kuoXKCVkx/Y36jtnPkbQ0ybw95NHKuQ18PcqT9BYjYkGJ1laHz9oUez6GKkfA1ca QtcMEkUFOYwqArb3JzdV/klDb4OyWnbMf7yyK+svKubFi1mEyqde05VNcjcT/ayU 6G//XiCAoZaq525SwLxfpYuXenMlta2GnHRI7tU4cq8d0VpkE2KFGgV1gRPsWO9u 04PNZ+Ff9SWUCJ0DiMhLmK7mDVTx/kwSvZf3cH0qAhf3JhinSyemM3+gPcGBbOQp Ydvrtp7cFCGDzw== -----END CERTIFICATE-----Generated at Fri Jan 2 23:51:55 2026 by rpki-client