This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/3a9a0b-d424-4eca-a938-92a877bb19f7/1/0rNq0o5SHtq0tN6jSaJ3ctSyp74.mft File: 0rNq0o5SHtq0tN6jSaJ3ctSyp74.mft (raw, json) Hash identifier: OmVrLciwjsYr3w+xzoBblKEBziDAtsRtjtdCQxEn/20= Subject key identifier: D3:12:77:36:9B:90:C2:9B:6B:F2:F9:3C:74:F9:58:AA:47:DD:E5:DB Authority key identifier: D2:B3:6A:D2:8E:52:1E:DA:B4:B4:DE:A3:49:A2:77:72:D4:B2:A7:BE Certificate issuer: /CN=d2b36ad28e521edab4b4dea349a27772d4b2a7be Certificate serial: 019B446E8CC206C58611FBB631F6BBE7011C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0rNq0o5SHtq0tN6jSaJ3ctSyp74.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/3a9a0b-d424-4eca-a938-92a877bb19f7/1/0rNq0o5SHtq0tN6jSaJ3ctSyp74.mft Manifest number: 14D0 Signing time: Mon 22 Dec 2025 05:00:54 +0000 Manifest this update: Mon 22 Dec 2025 05:00:54 +0000 Manifest next update: Tue 23 Dec 2025 05:00:54 +0000 Files and hashes: 1: 0rNq0o5SHtq0tN6jSaJ3ctSyp74.crl (hash: 14ic2Vcxo+fC9z2fCgGd8Cg3EvsspcUXaawJkfDPYuw=) 2: 5tz1cuLC3Spal7LSIEjI-Qlcl6U.roa (hash: XSoR4/ODhnGd0USG7NRxHx6V9kNwJuT3OUfa19EcNCE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/3a9a0b-d424-4eca-a938-92a877bb19f7/1/0rNq0o5SHtq0tN6jSaJ3ctSyp74.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/3a9a0b-d424-4eca-a938-92a877bb19f7/1/0rNq0o5SHtq0tN6jSaJ3ctSyp74.mft rsync://rpki.ripe.net/repository/DEFAULT/0rNq0o5SHtq0tN6jSaJ3ctSyp74.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 05:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:6e:8c:c2:06:c5:86:11:fb:b6:31:f6:bb:e7:01:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2b36ad28e521edab4b4dea349a27772d4b2a7be Validity Not Before: Dec 22 05:00:54 2025 GMT Not After : Dec 23 05:00:54 2025 GMT Subject: CN=d31277369b90c29b6bf2f93c74f958aa47dde5db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:5b:9f:ce:0b:57:fb:20:1d:ed:b1:bb:0a:38: b2:a5:69:58:71:5b:b9:fb:e3:41:58:e7:a2:d0:f6: 29:c9:d6:79:6d:42:03:28:81:b0:f9:d2:f5:de:d7: 4d:f4:51:d8:bf:12:bf:7e:85:47:f1:a1:d4:18:fa: d9:31:98:ef:5a:89:c0:24:dc:d9:11:8e:d7:c6:43: c5:82:ee:7f:7b:49:d5:5f:df:82:e5:3d:61:fe:5f: 94:db:33:ce:44:e4:fa:db:1e:a1:ce:eb:82:af:7e: d7:ab:6f:98:3b:0f:ec:40:dc:f9:2a:89:0b:80:e7: 88:d5:7e:89:d8:1b:5a:49:dc:65:c8:00:23:98:ae: 4f:2c:f1:43:77:8e:eb:34:35:c1:02:30:4c:17:c7: e7:5a:5d:6c:63:56:8e:f3:41:32:76:86:24:cc:54: 5f:f0:b6:7e:48:38:50:da:1b:a0:25:1a:32:dc:c5: b5:e0:71:f4:32:97:31:1c:57:6e:85:a9:53:30:58: 89:c6:ea:2c:04:33:49:6e:97:86:0e:f1:f8:74:58: 7a:2c:61:d6:e2:42:f5:38:c3:7e:2b:e9:e5:e6:98: 9a:43:6c:eb:95:0c:36:77:d3:06:58:43:d1:ae:8a: ed:cd:e9:db:cb:0c:cf:31:cd:93:3d:df:37:67:c6: 95:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:12:77:36:9B:90:C2:9B:6B:F2:F9:3C:74:F9:58:AA:47:DD:E5:DB X509v3 Authority Key Identifier: keyid:D2:B3:6A:D2:8E:52:1E:DA:B4:B4:DE:A3:49:A2:77:72:D4:B2:A7:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0rNq0o5SHtq0tN6jSaJ3ctSyp74.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/3a9a0b-d424-4eca-a938-92a877bb19f7/1/0rNq0o5SHtq0tN6jSaJ3ctSyp74.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/3a9a0b-d424-4eca-a938-92a877bb19f7/1/0rNq0o5SHtq0tN6jSaJ3ctSyp74.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:29:cd:a6:4d:5c:91:8c:7e:34:d0:93:a5:7b:9a:5d:5e:66: 88:d6:71:bc:be:1c:e1:df:00:7f:b8:22:97:1b:72:67:80:a2: 80:b8:e5:e8:7f:43:e1:b6:9b:ea:c6:7c:9a:93:aa:a3:47:91: 00:43:67:39:df:72:21:30:c5:52:e1:66:55:6d:dc:fd:0e:fe: fb:a1:7d:25:10:07:f8:4d:6a:b2:cf:22:9e:20:c9:b1:69:7a: c4:37:f6:ce:6f:e2:6d:24:80:da:22:33:25:76:a7:e8:a5:ca: 72:94:47:56:09:8f:49:be:5b:50:5b:81:ce:2e:2d:25:22:83: a5:e3:67:6b:bb:23:f9:aa:f8:42:3e:e2:23:56:18:48:ae:fc: 0c:21:4b:0b:e6:fa:df:cf:98:51:a5:de:92:85:83:4e:0f:f1: 4c:54:86:36:6d:c3:ae:fa:8e:c5:01:07:14:60:73:1c:ea:77: 0d:76:c1:83:a4:e9:59:e5:77:2e:a5:ad:05:59:3c:40:56:2d: 5e:6f:61:44:a0:90:87:66:12:c0:5e:26:b8:64:fd:aa:5f:9b: b3:d2:9e:2f:6b:96:6a:6b:c3:cf:82:50:86:c3:ac:92:f0:66: 86:2c:93:f4:dd:2b:c8:75:55:ec:28:27:a1:b3:9e:0d:42:97: 7c:29:20:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEbozCBsWGEfu2Mfa75wEcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyYjM2YWQyOGU1MjFlZGFiNGI0ZGVhMzQ5YTI3NzcyZDRi MmE3YmUwHhcNMjUxMjIyMDUwMDU0WhcNMjUxMjIzMDUwMDU0WjAzMTEwLwYDVQQD EyhkMzEyNzczNjliOTBjMjliNmJmMmY5M2M3NGY5NThhYTQ3ZGRlNWRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzFufzgtX+yAd7bG7CjiypWlYcVu5 ++NBWOei0PYpydZ5bUIDKIGw+dL13tdN9FHYvxK/foVH8aHUGPrZMZjvWonAJNzZ EY7XxkPFgu5/e0nVX9+C5T1h/l+U2zPOROT62x6hzuuCr37Xq2+YOw/sQNz5KokL gOeI1X6J2BtaSdxlyAAjmK5PLPFDd47rNDXBAjBMF8fnWl1sY1aO80EydoYkzFRf 8LZ+SDhQ2hugJRoy3MW14HH0MpcxHFduhalTMFiJxuosBDNJbpeGDvH4dFh6LGHW 4kL1OMN+K+nl5piaQ2zrlQw2d9MGWEPRrortzenbywzPMc2TPd83Z8aVSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNMSdzabkMKba/L5PHT5WKpH3eXbMB8GA1UdIwQY MBaAFNKzatKOUh7atLTeo0mid3LUsqe+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHJOcTBvNVNIdHEwdE42alNhSjNjdFN5cDc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi8zYTlhMGItZDQyNC00ZWNhLWE5Mzgt OTJhODc3YmIxOWY3LzEvMHJOcTBvNVNIdHEwdE42alNhSjNjdFN5cDc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi8zYTlhMGItZDQyNC00ZWNhLWE5MzgtOTJhODc3YmIxOWY3 LzEvMHJOcTBvNVNIdHEwdE42alNhSjNjdFN5cDc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeynNpk1c kYx+NNCTpXuaXV5miNZxvL4c4d8Af7gilxtyZ4CigLjl6H9D4bab6sZ8mpOqo0eR AENnOd9yITDFUuFmVW3c/Q7++6F9JRAH+E1qss8iniDJsWl6xDf2zm/ibSSA2iIz JXan6KXKcpRHVgmPSb5bUFuBzi4tJSKDpeNna7sj+ar4Qj7iI1YYSK78DCFLC+b6 38+YUaXekoWDTg/xTFSGNm3DrvqOxQEHFGBzHOp3DXbBg6TpWeV3LqWtBVk8QFYt Xm9hRKCQh2YSwF4muGT9ql+bs9KeL2uWamvDz4JQhsOskvBmhiyT9N0ryHVV7Cgn obOeDUKXfCkggA== -----END CERTIFICATE-----Generated at Mon Dec 22 10:36:12 2025 by rpki-client