This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.mft File: 0nHqBrGnVsv0auBGSEu9Pk_OTKU.mft (raw, json) Hash identifier: f5JF6ZV9obWUGAV8BBdLYUqBpyOkuru0Jn0STWvcpog= Subject key identifier: 73:7D:F9:9C:38:58:A1:EE:48:36:EC:72:CF:63:4B:FE:68:60:F9:EA Authority key identifier: D2:71:EA:06:B1:A7:56:CB:F4:6A:E0:46:48:4B:BD:3E:4F:CE:4C:A5 Certificate issuer: /CN=d271ea06b1a756cbf46ae046484bbd3e4fce4ca5 Certificate serial: 019B48EFDF11C30DA16715E6B0145CDD2C7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0nHqBrGnVsv0auBGSEu9Pk_OTKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.mft Manifest number: 1792 Signing time: Tue 23 Dec 2025 02:00:38 +0000 Manifest this update: Tue 23 Dec 2025 02:00:38 +0000 Manifest next update: Wed 24 Dec 2025 02:00:38 +0000 Files and hashes: 1: 0nHqBrGnVsv0auBGSEu9Pk_OTKU.crl (hash: M/DdMnA0zHCtbccK6bqEHyOxoiS/TQMqKTi2+Li0ijw=) 2: HsfAzbYNmjHgKTyTKE1e6DTdYBY.roa (hash: ThTbeLEhcdYcKNF2Qx27UbTWjSeMoDCUTIRvHXWnfiI=) 3: MamPa9eWXXv16Pq_PQPhm2jANdQ.roa (hash: /Xj0uh4hP5hzI09A/uvBTgwPodoBTxb8R7Jv7s78qJA=) 4: b2D7vVU4AWvUD_Ad1lqkP8q1DJY.roa (hash: nc5y91A1zU+LW1Tb8aDxs1rxMTCVcHcXyy5NeNxfhCQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.mft rsync://rpki.ripe.net/repository/DEFAULT/0nHqBrGnVsv0auBGSEu9Pk_OTKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 02:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:ef:df:11:c3:0d:a1:67:15:e6:b0:14:5c:dd:2c:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d271ea06b1a756cbf46ae046484bbd3e4fce4ca5 Validity Not Before: Dec 23 02:00:38 2025 GMT Not After : Dec 24 02:00:38 2025 GMT Subject: CN=737df99c3858a1ee4836ec72cf634bfe6860f9ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:16:f2:70:e2:0c:88:4f:da:93:e5:f7:b2:41: df:13:f7:08:6d:59:b5:63:96:07:15:e7:51:22:6a: 18:af:45:a4:7d:ca:7b:28:07:84:86:db:3c:17:6e: a3:23:a9:4e:79:9d:1d:d4:84:bb:b1:ba:4d:7d:1e: df:c3:75:92:9d:28:c5:0f:22:0a:e6:60:58:b2:b4: 46:91:6c:aa:fa:0b:3c:de:1f:c4:5f:84:a5:4e:9b: 6b:f2:4d:bf:e0:2e:d9:6c:01:53:5c:74:d7:de:16: e6:c3:57:6e:66:e8:df:53:4b:c9:9d:9b:d2:f8:89: 90:36:b1:8f:1f:87:fe:02:8c:10:b1:3e:1c:13:c5: 07:0a:18:bf:c1:16:92:a5:e9:d8:4c:de:fa:bc:81: ab:41:fd:48:f9:46:d4:96:20:af:f2:1e:9d:3c:14: 07:3e:1a:4b:00:70:50:b8:b6:91:1e:a8:86:bb:cf: f4:76:0f:b1:0b:7b:b3:fe:8d:c4:e8:e9:07:9f:f7: 27:2b:6f:1e:42:93:2d:ca:5a:0b:4d:be:52:17:8e: 29:01:3f:2d:f8:cb:75:7c:b1:d6:36:63:6c:f9:74: 64:00:6d:bb:8f:15:0b:48:1b:17:b2:89:79:31:80: 96:08:69:bc:1b:8a:90:31:0f:40:72:a0:ab:28:1e: 6b:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:7D:F9:9C:38:58:A1:EE:48:36:EC:72:CF:63:4B:FE:68:60:F9:EA X509v3 Authority Key Identifier: keyid:D2:71:EA:06:B1:A7:56:CB:F4:6A:E0:46:48:4B:BD:3E:4F:CE:4C:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0nHqBrGnVsv0auBGSEu9Pk_OTKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:a0:24:ed:41:ad:5b:d4:ce:1c:11:aa:a6:2c:3d:74:b7:40: 66:ff:2e:04:f3:f6:f8:e2:6c:c4:b3:8d:ae:93:bb:22:a6:1b: 14:b4:ee:df:0b:63:a0:70:43:38:31:ec:d7:a8:e2:b4:f8:67: d2:e2:60:47:c9:4e:e0:57:5b:ea:07:cf:9b:da:6d:75:1f:14: 91:56:91:67:70:42:0f:33:82:ef:15:c7:ec:3c:21:52:ef:d6: a8:4b:33:6e:ca:16:43:f2:35:2d:45:75:74:66:83:28:d9:47: 72:87:60:02:95:d2:05:d6:b8:77:fc:75:eb:d8:89:5f:9a:f0: 64:84:4a:38:f6:98:7d:30:6f:71:0f:71:ab:46:fc:57:12:55: b8:3c:05:52:af:73:e4:fc:d7:3c:24:4e:98:eb:fc:46:d2:c6: 0f:07:a2:e8:c3:ce:c7:74:38:95:f9:b9:66:d5:62:9c:23:f2: 2e:f5:22:0c:96:3b:0b:cd:26:9c:2d:a2:d9:92:29:d8:68:f3: 23:f5:17:12:f9:3c:8a:ab:38:b0:a7:c7:8a:2b:63:d4:fe:d7: 12:e0:35:83:1e:3a:c1:30:56:5d:72:7c:c7:53:45:d7:cf:af: 25:e4:ca:56:98:3f:14:b9:15:d6:91:88:e4:d1:f3:7b:6b:e2: 46:fe:9c:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtI798Rww2hZxXmsBRc3Sx/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyNzFlYTA2YjFhNzU2Y2JmNDZhZTA0NjQ4NGJiZDNlNGZj ZTRjYTUwHhcNMjUxMjIzMDIwMDM4WhcNMjUxMjI0MDIwMDM4WjAzMTEwLwYDVQQD Eyg3MzdkZjk5YzM4NThhMWVlNDgzNmVjNzJjZjYzNGJmZTY4NjBmOWVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBbycOIMiE/ak+X3skHfE/cIbVm1 Y5YHFedRImoYr0Wkfcp7KAeEhts8F26jI6lOeZ0d1IS7sbpNfR7fw3WSnSjFDyIK 5mBYsrRGkWyq+gs83h/EX4SlTptr8k2/4C7ZbAFTXHTX3hbmw1duZujfU0vJnZvS +ImQNrGPH4f+AowQsT4cE8UHChi/wRaSpenYTN76vIGrQf1I+UbUliCv8h6dPBQH PhpLAHBQuLaRHqiGu8/0dg+xC3uz/o3E6OkHn/cnK28eQpMtyloLTb5SF44pAT8t +Mt1fLHWNmNs+XRkAG27jxULSBsXsol5MYCWCGm8G4qQMQ9AcqCrKB5rNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHN9+Zw4WKHuSDbscs9jS/5oYPnqMB8GA1UdIwQY MBaAFNJx6gaxp1bL9GrgRkhLvT5PzkylMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMG5IcUJyR25Wc3YwYXVCR1NFdTlQa19PVEtVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9hY2VjM2QtNzc1ZS00ZDBlLTg0MzMt ZmMzZDVjMjIzMGIyLzEvMG5IcUJyR25Wc3YwYXVCR1NFdTlQa19PVEtVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9hY2VjM2QtNzc1ZS00ZDBlLTg0MzMtZmMzZDVjMjIzMGIy LzEvMG5IcUJyR25Wc3YwYXVCR1NFdTlQa19PVEtVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoKAk7UGt W9TOHBGqpiw9dLdAZv8uBPP2+OJsxLONrpO7IqYbFLTu3wtjoHBDODHs16jitPhn 0uJgR8lO4Fdb6gfPm9ptdR8UkVaRZ3BCDzOC7xXH7DwhUu/WqEszbsoWQ/I1LUV1 dGaDKNlHcodgApXSBda4d/x169iJX5rwZIRKOPaYfTBvcQ9xq0b8VxJVuDwFUq9z 5PzXPCROmOv8RtLGDwei6MPOx3Q4lfm5ZtVinCPyLvUiDJY7C80mnC2i2ZIp2Gjz I/UXEvk8iqs4sKfHiitj1P7XEuA1gx46wTBWXXJ8x1NF18+vJeTKVpg/FLkV1pGI 5NHze2viRv6c1g== -----END CERTIFICATE-----Generated at Tue Dec 23 10:54:12 2025 by rpki-client