This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.mft File: OnsDkT46KF7-Uc2sZfVQTIejRGA.mft (raw, json) Hash identifier: 7zj2c72nQrkt7qvkJjNR86H1Ce4jtFsZhCKExwpcIKU= Subject key identifier: E4:D6:ED:91:F2:66:86:30:7E:37:18:EE:22:96:2C:CD:46:98:D3:EC Authority key identifier: 3A:7B:03:91:3E:3A:28:5E:FE:51:CD:AC:65:F5:50:4C:87:A3:44:60 Certificate issuer: /CN=3a7b03913e3a285efe51cdac65f5504c87a34460 Certificate serial: 019B19BB3E8990F758A3A8BB1F8DCB4AAE5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OnsDkT46KF7-Uc2sZfVQTIejRGA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.mft Manifest number: 147C Signing time: Sat 13 Dec 2025 22:01:00 +0000 Manifest this update: Sat 13 Dec 2025 22:01:00 +0000 Manifest next update: Sun 14 Dec 2025 22:01:00 +0000 Files and hashes: 1: OnsDkT46KF7-Uc2sZfVQTIejRGA.crl (hash: 8a1Sktyco+9AxdUwpUTRWwNpxjOSRFHYrHBxmeG7PzM=) 2: bXuLlzwCurMedfx4RUMXi7r1h0M.roa (hash: sXVX+GwCrEzWh3/PYurD7SBft7awlkJnghtSxD3UtHo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.mft rsync://rpki.ripe.net/repository/DEFAULT/OnsDkT46KF7-Uc2sZfVQTIejRGA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:bb:3e:89:90:f7:58:a3:a8:bb:1f:8d:cb:4a:ae:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a7b03913e3a285efe51cdac65f5504c87a34460 Validity Not Before: Dec 13 22:01:00 2025 GMT Not After : Dec 14 22:01:00 2025 GMT Subject: CN=e4d6ed91f26686307e3718ee22962ccd4698d3ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:7b:4b:12:01:5d:b9:28:e0:9f:2b:f9:b8:82: dc:6f:e3:ad:ab:9a:28:d3:67:e7:1f:f8:77:e2:23: 45:5c:a9:90:8a:c2:f6:9c:5c:e8:3f:03:ba:f0:ae: 01:e1:7f:1a:7b:81:5c:2e:7a:7b:91:58:d3:a3:e8: 6f:5d:32:36:d9:a8:c1:47:44:e8:08:0e:17:e3:69: 19:4e:6c:f1:91:1d:d8:0d:a0:50:52:e7:4b:97:e2: 02:b2:25:6b:b7:71:92:c0:0b:b0:a7:a5:b4:0e:d1: 1f:fa:22:6c:98:5f:85:9c:5f:36:eb:02:9a:7d:b0: b9:ca:ff:91:1b:30:05:11:6e:e6:ca:07:e1:ee:87: 1b:55:4e:e0:91:52:e0:00:a3:92:b1:77:dc:0d:fe: a3:1e:0d:a9:b8:82:77:7c:06:83:4c:96:42:f4:c5: 28:d8:47:72:23:09:0a:0b:dd:64:e9:1b:d9:fa:9f: 5b:1b:13:af:53:bd:4e:ec:42:81:73:57:c3:55:c0: a4:fc:6b:04:a9:18:1b:53:91:49:18:b5:b6:74:9c: c7:ef:1e:fe:71:ef:d4:72:e3:5a:39:2e:d5:d5:11: d6:25:2d:cd:a4:fd:0f:d3:f0:61:d8:91:97:a1:c2: ef:d6:67:ed:0f:ea:ba:01:7e:44:54:49:80:ac:2b: 74:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:D6:ED:91:F2:66:86:30:7E:37:18:EE:22:96:2C:CD:46:98:D3:EC X509v3 Authority Key Identifier: keyid:3A:7B:03:91:3E:3A:28:5E:FE:51:CD:AC:65:F5:50:4C:87:A3:44:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OnsDkT46KF7-Uc2sZfVQTIejRGA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:d9:2e:a5:12:09:7b:4a:bb:53:f7:02:8f:fb:f9:6f:db:12: a2:b5:8d:13:91:3a:47:40:23:da:d6:66:0f:04:6f:f9:66:81: 7d:84:05:ec:ba:32:94:98:0e:7b:0e:fd:be:b9:c1:a6:a0:0b: 7f:fc:33:93:74:d3:17:fa:36:f4:cb:7c:8b:52:b5:cd:28:d4: 05:67:b4:8a:af:d8:ac:50:4f:b2:dc:fe:00:84:34:ae:df:35: 7c:99:ab:d0:fc:82:f5:07:ff:8c:09:2e:bf:a4:37:44:dd:ce: 79:d5:2e:3b:6b:f7:71:97:9c:7c:a5:27:88:06:53:63:fd:a1: f2:f7:e4:d2:83:7b:55:ee:76:b4:05:44:26:f1:d1:ec:ec:2e: c1:0f:79:6f:b6:90:f6:ff:8a:29:90:00:3a:d9:7f:e5:07:b9: 37:33:e0:63:47:4a:2e:32:cf:1e:08:25:21:3e:4f:39:d6:65: 94:a5:a6:6d:0e:bd:95:14:c9:ef:9d:6c:8e:72:0c:49:bc:f7: 8a:4d:2c:93:bc:58:31:4f:9c:d3:aa:fa:36:a7:15:0f:9a:0c: f4:db:54:93:06:28:8a:36:8f:71:cf:4b:36:31:1d:be:8f:20: b1:b7:54:2c:31:f0:b2:bb:e7:a5:39:86:69:f0:97:5f:30:f8: 71:a8:1e:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZuz6JkPdYo6i7H43LSq5fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhN2IwMzkxM2UzYTI4NWVmZTUxY2RhYzY1ZjU1MDRjODdh MzQ0NjAwHhcNMjUxMjEzMjIwMTAwWhcNMjUxMjE0MjIwMTAwWjAzMTEwLwYDVQQD EyhlNGQ2ZWQ5MWYyNjY4NjMwN2UzNzE4ZWUyMjk2MmNjZDQ2OThkM2VjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXtLEgFduSjgnyv5uILcb+Otq5oo 02fnH/h34iNFXKmQisL2nFzoPwO68K4B4X8ae4FcLnp7kVjTo+hvXTI22ajBR0To CA4X42kZTmzxkR3YDaBQUudLl+ICsiVrt3GSwAuwp6W0DtEf+iJsmF+FnF826wKa fbC5yv+RGzAFEW7mygfh7ocbVU7gkVLgAKOSsXfcDf6jHg2puIJ3fAaDTJZC9MUo 2EdyIwkKC91k6RvZ+p9bGxOvU71O7EKBc1fDVcCk/GsEqRgbU5FJGLW2dJzH7x7+ ce/UcuNaOS7V1RHWJS3NpP0P0/Bh2JGXocLv1mftD+q6AX5EVEmArCt0rwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOTW7ZHyZoYwfjcY7iKWLM1GmNPsMB8GA1UdIwQY MBaAFDp7A5E+Oihe/lHNrGX1UEyHo0RgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT25zRGtUNDZLRjctVWMyc1pmVlFUSWVqUkdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC82MWRiNmItMWQ3My00ZWMyLThiZTAt ZjM3Y2JhZjdjZTVhLzEvT25zRGtUNDZLRjctVWMyc1pmVlFUSWVqUkdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC82MWRiNmItMWQ3My00ZWMyLThiZTAtZjM3Y2JhZjdjZTVh LzEvT25zRGtUNDZLRjctVWMyc1pmVlFUSWVqUkdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc9kupRIJ e0q7U/cCj/v5b9sSorWNE5E6R0Aj2tZmDwRv+WaBfYQF7LoylJgOew79vrnBpqAL f/wzk3TTF/o29Mt8i1K1zSjUBWe0iq/YrFBPstz+AIQ0rt81fJmr0PyC9Qf/jAku v6Q3RN3OedUuO2v3cZecfKUniAZTY/2h8vfk0oN7Ve52tAVEJvHR7OwuwQ95b7aQ 9v+KKZAAOtl/5Qe5NzPgY0dKLjLPHgglIT5POdZllKWmbQ69lRTJ751sjnIMSbz3 ik0sk7xYMU+c06r6NqcVD5oM9NtUkwYoijaPcc9LNjEdvo8gsbdULDHwsrvnpTmG afCXXzD4cagekQ== -----END CERTIFICATE-----Generated at Sun Dec 14 03:28:23 2025 by rpki-client