This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.mft File: NOEQtZNi9nPq4ztm7nrqPEAoKU4.mft (raw, json) Hash identifier: 2F2uwUtxjK3yKl9PRjALU4fYzdTTwaY1NNlmyYc5MgQ= Subject key identifier: 8B:22:33:D8:AC:FE:81:6A:59:5B:AF:80:1E:3F:50:18:51:F6:20:62 Authority key identifier: 34:E1:10:B5:93:62:F6:73:EA:E3:3B:66:EE:7A:EA:3C:40:28:29:4E Certificate issuer: /CN=34e110b59362f673eae33b66ee7aea3c4028294e Certificate serial: 019B3D9103AE307CBE5407BAB6584E16053C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NOEQtZNi9nPq4ztm7nrqPEAoKU4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.mft Manifest number: 0F00 Signing time: Sat 20 Dec 2025 21:01:12 +0000 Manifest this update: Sat 20 Dec 2025 21:01:12 +0000 Manifest next update: Sun 21 Dec 2025 21:01:12 +0000 Files and hashes: 1: NOEQtZNi9nPq4ztm7nrqPEAoKU4.crl (hash: JFkrSu+fhylQ+1LV+hUUi+KmaxmNsJUM5ZntI858aHQ=) 2: XtfUxUGkjCJuklebiN54Yxg8R5M.roa (hash: 6ylTl3fnc+Bg9Pz92d7wJrvdCwc0XcQ4KZdtR4bRI4k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.mft rsync://rpki.ripe.net/repository/DEFAULT/NOEQtZNi9nPq4ztm7nrqPEAoKU4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:91:03:ae:30:7c:be:54:07:ba:b6:58:4e:16:05:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34e110b59362f673eae33b66ee7aea3c4028294e Validity Not Before: Dec 20 21:01:12 2025 GMT Not After : Dec 21 21:01:12 2025 GMT Subject: CN=8b2233d8acfe816a595baf801e3f501851f62062 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:4b:1e:69:d9:13:a3:cd:88:1c:e3:9b:71:33: 4a:5c:36:ff:42:43:0e:fd:88:4d:2c:86:be:d8:48: da:41:35:a1:80:59:2b:41:4a:6a:c7:0f:1c:02:9c: 5c:5c:4e:83:c6:0f:7b:d8:b1:3a:aa:90:32:d9:b4: 91:a4:fa:db:e9:a4:78:ef:d8:4a:2b:80:b4:07:80: b7:1e:6b:4a:a9:e3:38:83:50:c4:29:05:ae:7f:1e: 65:fe:b2:52:2d:dc:1f:0e:32:91:b4:ba:c9:f6:50: a9:60:49:5c:f0:6f:eb:bc:ed:d3:23:d2:12:f1:45: 2c:6d:a7:5a:14:ef:76:ba:3d:83:f8:fa:0f:37:c5: f7:c8:02:1b:b4:25:7b:77:45:e7:05:b9:c9:32:84: f2:81:c1:d6:ef:cd:a5:15:54:a5:4b:59:5e:7c:7f: 91:d7:55:9a:27:06:a0:c5:28:2b:eb:77:5a:f6:85: 9c:42:9d:2e:50:60:6f:b9:b8:c6:78:ed:d3:29:89: e5:18:13:04:1a:2b:f3:fa:3f:4e:b6:1b:08:d8:37: 8f:36:10:ab:7b:f9:4c:fe:ae:c7:fb:e5:2f:8a:a9: 34:05:76:3d:6a:56:50:10:02:3c:64:e3:91:8f:f5: 18:ea:2e:b4:62:0d:45:3b:be:56:5a:5e:e3:d1:02: 59:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:22:33:D8:AC:FE:81:6A:59:5B:AF:80:1E:3F:50:18:51:F6:20:62 X509v3 Authority Key Identifier: keyid:34:E1:10:B5:93:62:F6:73:EA:E3:3B:66:EE:7A:EA:3C:40:28:29:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NOEQtZNi9nPq4ztm7nrqPEAoKU4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:2c:28:d6:02:90:02:64:38:69:90:58:f5:17:33:d9:59:71: 21:64:a8:93:3a:8f:78:80:ea:82:ea:f9:27:be:26:3d:9b:8a: ec:e4:b9:86:ee:4d:fd:07:5e:11:8e:aa:b6:db:7f:ed:48:e5: 30:22:4a:08:09:9a:35:23:44:dc:1a:4e:99:7d:a0:2f:5b:9d: 28:fa:14:ca:66:60:cb:11:f3:a1:30:7e:3c:92:48:f5:79:27: 7c:02:45:41:2f:fe:da:66:af:a4:0a:28:3c:05:3e:f6:57:be: 8b:81:28:3d:cc:90:2e:b6:35:fe:92:f9:79:45:18:11:90:e3: 38:76:8f:4c:1d:42:be:84:c7:c3:11:01:52:a4:5b:52:b0:14: f9:b3:0f:c2:19:07:bd:c5:d0:b6:9f:f5:57:a4:42:87:88:95: 07:ef:a3:c1:db:5b:c0:91:24:c6:70:ef:d4:dd:db:43:09:25: 42:4d:38:31:76:08:89:37:ef:82:3c:27:b1:93:4b:17:a0:42: 33:3f:a2:bd:cd:57:64:db:ad:2f:91:42:36:fd:9a:05:a3:7a: 77:5e:ec:a4:32:e8:08:d4:ac:4b:6e:59:03:9a:31:94:10:7c: 3b:a4:23:00:7d:d7:ad:10:de:74:39:61:10:6a:7c:78:4a:6e: a3:f5:09:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kQOuMHy+VAe6tlhOFgU8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0ZTExMGI1OTM2MmY2NzNlYWUzM2I2NmVlN2FlYTNjNDAy ODI5NGUwHhcNMjUxMjIwMjEwMTEyWhcNMjUxMjIxMjEwMTEyWjAzMTEwLwYDVQQD Eyg4YjIyMzNkOGFjZmU4MTZhNTk1YmFmODAxZTNmNTAxODUxZjYyMDYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikseadkTo82IHOObcTNKXDb/QkMO /YhNLIa+2EjaQTWhgFkrQUpqxw8cApxcXE6Dxg972LE6qpAy2bSRpPrb6aR479hK K4C0B4C3HmtKqeM4g1DEKQWufx5l/rJSLdwfDjKRtLrJ9lCpYElc8G/rvO3TI9IS 8UUsbadaFO92uj2D+PoPN8X3yAIbtCV7d0XnBbnJMoTygcHW782lFVSlS1lefH+R 11WaJwagxSgr63da9oWcQp0uUGBvubjGeO3TKYnlGBMEGivz+j9OthsI2DePNhCr e/lM/q7H++Uviqk0BXY9alZQEAI8ZOORj/UY6i60Yg1FO75WWl7j0QJZJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIsiM9is/oFqWVuvgB4/UBhR9iBiMB8GA1UdIwQY MBaAFDThELWTYvZz6uM7Zu566jxAKClOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTk9FUXRaTmk5blBxNHp0bTducnFQRUFvS1U0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8wYmY4ZmItMTYwNC00Y2QxLTlkYTYt MWJiMjdjNWQzOTdlLzEvTk9FUXRaTmk5blBxNHp0bTducnFQRUFvS1U0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy8wYmY4ZmItMTYwNC00Y2QxLTlkYTYtMWJiMjdjNWQzOTdl LzEvTk9FUXRaTmk5blBxNHp0bTducnFQRUFvS1U0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEywo1gKQ AmQ4aZBY9Rcz2VlxIWSokzqPeIDqgur5J74mPZuK7OS5hu5N/QdeEY6qttt/7Ujl MCJKCAmaNSNE3BpOmX2gL1udKPoUymZgyxHzoTB+PJJI9XknfAJFQS/+2mavpAoo PAU+9le+i4EoPcyQLrY1/pL5eUUYEZDjOHaPTB1CvoTHwxEBUqRbUrAU+bMPwhkH vcXQtp/1V6RCh4iVB++jwdtbwJEkxnDv1N3bQwklQk04MXYIiTfvgjwnsZNLF6BC Mz+ivc1XZNutL5FCNv2aBaN6d17spDLoCNSsS25ZA5oxlBB8O6QjAH3XrRDedDlh EGp8eEpuo/UJDA== -----END CERTIFICATE-----Generated at Sun Dec 21 00:52:33 2025 by rpki-client