This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.mft File: 0nHqBrGnVsv0auBGSEu9Pk_OTKU.mft (raw, json) Hash identifier: VbyXpU0Hxj1tdzgfn+EUmkzKkHbjF4eUsr4Zre6Wb0c= Subject key identifier: B8:47:C6:03:03:AF:15:F3:C2:6E:48:AB:08:33:E6:3E:79:97:D0:AA Authority key identifier: D2:71:EA:06:B1:A7:56:CB:F4:6A:E0:46:48:4B:BD:3E:4F:CE:4C:A5 Certificate issuer: /CN=d271ea06b1a756cbf46ae046484bbd3e4fce4ca5 Certificate serial: 019B4136C9E60B014C2E4019875EB32137C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0nHqBrGnVsv0auBGSEu9Pk_OTKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.mft Manifest number: 178E Signing time: Sun 21 Dec 2025 14:01:08 +0000 Manifest this update: Sun 21 Dec 2025 14:01:08 +0000 Manifest next update: Mon 22 Dec 2025 14:01:08 +0000 Files and hashes: 1: 0nHqBrGnVsv0auBGSEu9Pk_OTKU.crl (hash: VKmsF/miDHmIWoA8hlHTTno6FSAoPeSL51zEeVT6q6o=) 2: HsfAzbYNmjHgKTyTKE1e6DTdYBY.roa (hash: ThTbeLEhcdYcKNF2Qx27UbTWjSeMoDCUTIRvHXWnfiI=) 3: MamPa9eWXXv16Pq_PQPhm2jANdQ.roa (hash: /Xj0uh4hP5hzI09A/uvBTgwPodoBTxb8R7Jv7s78qJA=) 4: b2D7vVU4AWvUD_Ad1lqkP8q1DJY.roa (hash: nc5y91A1zU+LW1Tb8aDxs1rxMTCVcHcXyy5NeNxfhCQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.mft rsync://rpki.ripe.net/repository/DEFAULT/0nHqBrGnVsv0auBGSEu9Pk_OTKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:36:c9:e6:0b:01:4c:2e:40:19:87:5e:b3:21:37:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d271ea06b1a756cbf46ae046484bbd3e4fce4ca5 Validity Not Before: Dec 21 14:01:08 2025 GMT Not After : Dec 22 14:01:08 2025 GMT Subject: CN=b847c60303af15f3c26e48ab0833e63e7997d0aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:75:89:05:7b:f4:17:26:e8:ed:f1:c7:cb:e2: 8d:d8:47:72:e2:5a:ce:88:16:39:ee:ca:75:8d:93: e3:b3:b9:27:9a:11:39:eb:db:75:76:36:45:c8:68: 50:2f:91:cf:9e:0a:96:8e:ec:61:19:19:e3:6a:44: f2:0b:fb:e1:58:73:19:52:36:86:23:ba:bf:67:81: c9:24:14:d1:3f:9a:73:c1:4e:29:b4:a5:76:07:d4: a6:4e:97:e5:6a:15:74:e0:62:b4:22:80:e6:09:d1: 63:71:c7:0a:fe:7a:1e:70:72:d9:6a:1f:33:54:e6: 69:03:e8:a0:c7:d3:cb:18:41:b9:db:69:e7:73:34: f5:7a:93:dd:12:1a:a2:a9:16:e6:79:c7:17:dc:00: 36:38:48:48:5a:8c:1d:6f:af:9e:66:bb:f7:54:a5: 42:6f:f7:b3:07:ff:f0:09:2a:94:14:27:0c:2e:61: 20:6c:b1:f0:47:6e:fa:fc:02:81:e8:6a:67:26:4f: 0c:79:1b:e1:88:25:d4:d2:5e:2b:f3:08:ed:1b:65: b0:a1:59:ba:cd:40:12:e7:9a:fd:2c:a2:95:9e:28: d8:b0:14:e4:77:cb:10:4b:91:4c:2b:19:ff:c4:f7: b7:b4:56:96:5c:e8:97:6f:70:3e:86:13:e6:bf:8c: d2:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:47:C6:03:03:AF:15:F3:C2:6E:48:AB:08:33:E6:3E:79:97:D0:AA X509v3 Authority Key Identifier: keyid:D2:71:EA:06:B1:A7:56:CB:F4:6A:E0:46:48:4B:BD:3E:4F:CE:4C:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0nHqBrGnVsv0auBGSEu9Pk_OTKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:03:de:2b:9d:8c:68:15:3f:f7:45:7e:c1:5a:4f:62:0b:7b: ef:91:69:92:57:e3:05:28:80:29:53:54:ce:85:af:ae:db:5c: a6:56:2a:35:99:23:ea:42:08:d6:ca:b8:47:ab:13:7c:eb:d4: 30:78:b9:69:d2:84:08:07:f8:43:37:72:13:e3:b2:6b:93:37: f2:20:06:91:f7:17:5a:13:b2:6b:1b:d7:d6:ad:4b:9d:3e:ec: c9:1d:9e:ba:49:c0:1d:dd:6a:03:cc:76:b3:2a:3e:a3:8b:7f: 2b:e4:7b:01:68:99:7e:3f:e2:4d:dc:02:42:80:e2:ce:45:3d: 5d:10:ee:f5:89:a5:a5:0b:49:20:d6:4b:00:e8:49:6f:98:e0: 1b:5a:97:58:23:20:ce:4e:02:6f:1c:e2:f2:74:72:03:7a:c4: 17:4f:d5:b2:ab:01:1a:30:22:ef:94:6d:24:58:e5:c5:d1:1d: 66:95:0a:b7:83:7c:85:77:be:1f:1e:db:ca:aa:de:c7:e7:ed: ce:88:6e:98:c5:4e:c9:b7:aa:3f:a2:25:16:64:17:04:0f:1a: a7:49:2e:80:81:79:bc:63:a2:69:5e:b8:ea:a9:32:6e:a3:d0: 53:36:6f:33:1b:7f:ad:5b:b3:fd:1f:a4:42:2e:fc:9e:d0:8f: bf:ac:55:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBNsnmCwFMLkAZh16zITfGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyNzFlYTA2YjFhNzU2Y2JmNDZhZTA0NjQ4NGJiZDNlNGZj ZTRjYTUwHhcNMjUxMjIxMTQwMTA4WhcNMjUxMjIyMTQwMTA4WjAzMTEwLwYDVQQD EyhiODQ3YzYwMzAzYWYxNWYzYzI2ZTQ4YWIwODMzZTYzZTc5OTdkMGFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXWJBXv0Fybo7fHHy+KN2Edy4lrO iBY57sp1jZPjs7knmhE569t1djZFyGhQL5HPngqWjuxhGRnjakTyC/vhWHMZUjaG I7q/Z4HJJBTRP5pzwU4ptKV2B9SmTpflahV04GK0IoDmCdFjcccK/noecHLZah8z VOZpA+igx9PLGEG522nnczT1epPdEhqiqRbmeccX3AA2OEhIWowdb6+eZrv3VKVC b/ezB//wCSqUFCcMLmEgbLHwR276/AKB6GpnJk8MeRvhiCXU0l4r8wjtG2WwoVm6 zUAS55r9LKKVnijYsBTkd8sQS5FMKxn/xPe3tFaWXOiXb3A+hhPmv4zSdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLhHxgMDrxXzwm5Iqwgz5j55l9CqMB8GA1UdIwQY MBaAFNJx6gaxp1bL9GrgRkhLvT5PzkylMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMG5IcUJyR25Wc3YwYXVCR1NFdTlQa19PVEtVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9hY2VjM2QtNzc1ZS00ZDBlLTg0MzMt ZmMzZDVjMjIzMGIyLzEvMG5IcUJyR25Wc3YwYXVCR1NFdTlQa19PVEtVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9hY2VjM2QtNzc1ZS00ZDBlLTg0MzMtZmMzZDVjMjIzMGIy LzEvMG5IcUJyR25Wc3YwYXVCR1NFdTlQa19PVEtVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnwPeK52M aBU/90V+wVpPYgt775FpklfjBSiAKVNUzoWvrttcplYqNZkj6kII1sq4R6sTfOvU MHi5adKECAf4QzdyE+Oya5M38iAGkfcXWhOyaxvX1q1LnT7syR2euknAHd1qA8x2 syo+o4t/K+R7AWiZfj/iTdwCQoDizkU9XRDu9YmlpQtJINZLAOhJb5jgG1qXWCMg zk4Cbxzi8nRyA3rEF0/VsqsBGjAi75RtJFjlxdEdZpUKt4N8hXe+Hx7byqrex+ft zohumMVOybeqP6IlFmQXBA8ap0kugIF5vGOiaV646qkybqPQUzZvMxt/rVuz/R+k Qi78ntCPv6xVFw== -----END CERTIFICATE-----Generated at Sun Dec 21 18:03:40 2025 by rpki-client