This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/bc1c74-1e0a-4055-80b8-efa7f89bd0b9/1/onIAVE-TpnX8jHhBhWmA44o1Kcs.mft File: onIAVE-TpnX8jHhBhWmA44o1Kcs.mft (raw, json) Hash identifier: YDJ8rhu3CwJ7Wa9mh44vu7p17CIFkjMkL15gBsGs8ds= Subject key identifier: 39:D2:69:EA:0E:D8:42:5F:40:62:EC:26:92:1C:DF:63:AC:4E:5A:2C Authority key identifier: A2:72:00:54:4F:93:A6:75:FC:8C:78:41:85:69:80:E3:8A:35:29:CB Certificate issuer: /CN=a27200544f93a675fc8c7841856980e38a3529cb Certificate serial: 019B12025A9C012B62892C0FBC75B831FA48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/onIAVE-TpnX8jHhBhWmA44o1Kcs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/bc1c74-1e0a-4055-80b8-efa7f89bd0b9/1/onIAVE-TpnX8jHhBhWmA44o1Kcs.mft Manifest number: 120D Signing time: Fri 12 Dec 2025 10:01:42 +0000 Manifest this update: Fri 12 Dec 2025 10:01:42 +0000 Manifest next update: Sat 13 Dec 2025 10:01:42 +0000 Files and hashes: 1: WsJxTcqQMdNcfxDwYxL96RxQkLE.roa (hash: AzUS2a/hUE19ESDc/skGDA/ldB6bGDxX9L5RO7/taEk=) 2: onIAVE-TpnX8jHhBhWmA44o1Kcs.crl (hash: O55WkGlvnKBGHXBGAZiT3t8QCfpHnqXARib+3Tfqt4Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/bc1c74-1e0a-4055-80b8-efa7f89bd0b9/1/onIAVE-TpnX8jHhBhWmA44o1Kcs.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/bc1c74-1e0a-4055-80b8-efa7f89bd0b9/1/onIAVE-TpnX8jHhBhWmA44o1Kcs.mft rsync://rpki.ripe.net/repository/DEFAULT/onIAVE-TpnX8jHhBhWmA44o1Kcs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:02:5a:9c:01:2b:62:89:2c:0f:bc:75:b8:31:fa:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a27200544f93a675fc8c7841856980e38a3529cb Validity Not Before: Dec 12 10:01:42 2025 GMT Not After : Dec 13 10:01:42 2025 GMT Subject: CN=39d269ea0ed8425f4062ec26921cdf63ac4e5a2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f8:8d:3e:0b:3e:6a:25:47:1a:de:b6:73:ee: 04:0c:b3:7c:b7:09:60:67:49:7d:a3:d6:7d:53:28: 84:ac:46:b4:42:cd:9e:21:d5:13:39:16:4b:7f:3c: 3d:a3:bb:d0:b9:7d:6a:7b:8d:3e:81:60:97:33:14: 24:e4:94:9c:13:6c:e3:5a:20:45:d0:97:b0:1d:ce: 88:29:3d:bd:8c:78:18:70:c7:e7:58:b6:36:3e:ac: c7:e7:57:2f:97:cb:e7:16:18:ed:eb:12:93:c7:59: a9:66:98:bd:f1:63:26:7d:4f:a9:a9:e6:84:56:cb: d3:2e:e6:cc:3e:1e:11:c5:14:c3:88:f7:e6:39:15: d8:f9:a0:cc:58:5c:b3:64:34:84:2e:b2:3c:c8:c4: 4b:dc:51:1f:fc:c5:f5:e9:0a:16:89:04:38:c7:66: b8:21:06:2b:36:4d:5c:53:11:e2:3a:d2:bd:e9:30: ec:ec:99:f3:11:a6:0c:75:f5:d5:a3:f8:c9:8a:2d: 5e:43:25:51:0e:c3:23:e5:25:46:37:0b:6d:e7:21: e1:ca:76:5c:42:7f:c6:60:4a:51:d3:62:36:08:e7: 1d:30:67:1c:24:02:9a:a0:4b:59:77:39:27:af:bb: 19:10:76:c5:42:dd:2c:3c:0f:5a:48:01:5c:79:e9: 2f:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:D2:69:EA:0E:D8:42:5F:40:62:EC:26:92:1C:DF:63:AC:4E:5A:2C X509v3 Authority Key Identifier: keyid:A2:72:00:54:4F:93:A6:75:FC:8C:78:41:85:69:80:E3:8A:35:29:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/onIAVE-TpnX8jHhBhWmA44o1Kcs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bc1c74-1e0a-4055-80b8-efa7f89bd0b9/1/onIAVE-TpnX8jHhBhWmA44o1Kcs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bc1c74-1e0a-4055-80b8-efa7f89bd0b9/1/onIAVE-TpnX8jHhBhWmA44o1Kcs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:25:56:41:08:3e:45:56:80:ae:8b:cf:3a:e5:5c:b0:72:01: 94:a5:d4:3d:de:10:83:98:d0:44:a8:1c:9f:1e:b3:88:bf:e4: 88:fc:e4:b1:43:0b:7e:7b:9d:3f:e4:aa:31:0f:8b:a4:2c:72: c3:b5:8b:05:cd:0e:07:04:17:2c:a1:fb:6d:c0:ed:7e:ca:37: 67:97:07:3a:4b:39:ef:bd:46:80:53:a8:1f:ed:98:e6:82:81: d4:fa:5e:4d:92:e1:17:ca:cd:69:16:f0:26:4c:78:97:ef:d6: 3a:a8:79:9e:ae:db:ff:6e:2c:6e:6b:c1:4a:6d:84:2b:4b:19: 5c:10:bc:28:73:b8:70:47:d0:15:53:f6:12:68:a3:25:32:8e: 4e:29:d7:b6:05:a1:d6:d0:40:b7:eb:b9:4b:c8:0b:37:b6:c5: a0:f1:f5:08:04:35:0b:77:fa:52:d4:6b:d2:54:bb:ea:74:b8: 2d:c7:c4:52:c2:71:82:21:62:f8:0c:38:d3:20:4b:73:e8:04: ac:63:96:e6:12:35:61:bf:39:bc:ed:50:3f:75:a0:c9:5b:43: 92:2c:26:6e:a1:97:4f:8b:4e:de:43:e2:b9:f8:60:8d:3b:be: af:b4:50:f0:de:4a:32:fd:07:6d:80:4f:84:37:58:f3:de:b1: 72:40:47:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsSAlqcAStiiSwPvHW4MfpIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyNzIwMDU0NGY5M2E2NzVmYzhjNzg0MTg1Njk4MGUzOGEz NTI5Y2IwHhcNMjUxMjEyMTAwMTQyWhcNMjUxMjEzMTAwMTQyWjAzMTEwLwYDVQQD EygzOWQyNjllYTBlZDg0MjVmNDA2MmVjMjY5MjFjZGY2M2FjNGU1YTJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqviNPgs+aiVHGt62c+4EDLN8twlg Z0l9o9Z9UyiErEa0Qs2eIdUTORZLfzw9o7vQuX1qe40+gWCXMxQk5JScE2zjWiBF 0JewHc6IKT29jHgYcMfnWLY2PqzH51cvl8vnFhjt6xKTx1mpZpi98WMmfU+pqeaE VsvTLubMPh4RxRTDiPfmORXY+aDMWFyzZDSELrI8yMRL3FEf/MX16QoWiQQ4x2a4 IQYrNk1cUxHiOtK96TDs7JnzEaYMdfXVo/jJii1eQyVRDsMj5SVGNwtt5yHhynZc Qn/GYEpR02I2COcdMGccJAKaoEtZdzknr7sZEHbFQt0sPA9aSAFceekvFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDnSaeoO2EJfQGLsJpIc32OsTlosMB8GA1UdIwQY MBaAFKJyAFRPk6Z1/Ix4QYVpgOOKNSnLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb25JQVZFLVRwblg4akhoQmhXbUE0NG8xS2NzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9iYzFjNzQtMWUwYS00MDU1LTgwYjgt ZWZhN2Y4OWJkMGI5LzEvb25JQVZFLVRwblg4akhoQmhXbUE0NG8xS2NzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9iYzFjNzQtMWUwYS00MDU1LTgwYjgtZWZhN2Y4OWJkMGI5 LzEvb25JQVZFLVRwblg4akhoQmhXbUE0NG8xS2NzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfCVWQQg+ RVaArovPOuVcsHIBlKXUPd4Qg5jQRKgcnx6ziL/kiPzksUMLfnudP+SqMQ+LpCxy w7WLBc0OBwQXLKH7bcDtfso3Z5cHOks5771GgFOoH+2Y5oKB1PpeTZLhF8rNaRbw Jkx4l+/WOqh5nq7b/24sbmvBSm2EK0sZXBC8KHO4cEfQFVP2EmijJTKOTinXtgWh 1tBAt+u5S8gLN7bFoPH1CAQ1C3f6UtRr0lS76nS4LcfEUsJxgiFi+Aw40yBLc+gE rGOW5hI1Yb85vO1QP3WgyVtDkiwmbqGXT4tO3kPiufhgjTu+r7RQ8N5KMv0HbYBP hDdY896xckBHlg== -----END CERTIFICATE-----Generated at Fri Dec 12 14:20:59 2025 by rpki-client