This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft File: 0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft (raw, json) Hash identifier: hHYjy+amFXjKSUPWdEG5euVdt5GX1MwFVPGT01HcFb4= Subject key identifier: 48:91:DC:4E:31:48:7E:B9:8D:75:CD:C2:1B:10:73:CF:DB:BE:05:7A Authority key identifier: D2:83:61:6F:13:62:C2:5D:82:EC:2A:70:C4:B9:75:05:65:B1:19:7F Certificate issuer: /CN=d283616f1362c25d82ec2a70c4b9750565b1197f Certificate serial: 019B394656C7542A7AE2C5BB7918EB3029B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0oNhbxNiwl2C7CpwxLl1BWWxGX8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft Manifest number: 14BD Signing time: Sat 20 Dec 2025 01:01:09 +0000 Manifest this update: Sat 20 Dec 2025 01:01:09 +0000 Manifest next update: Sun 21 Dec 2025 01:01:09 +0000 Files and hashes: 1: 0oNhbxNiwl2C7CpwxLl1BWWxGX8.crl (hash: sY+skayhvJrdHua0ZR8Lba+071D8C/41k29tsSX3fFU=) 2: mVZaVH1Pcezupl88BB4A9aDh2ik.roa (hash: x9LGsO42G/kG8E6OK/kSND1fo/r1Rn2Jod3oqumsnE8=) 3: pXbNNPwN94jiY7_-VrGgRRgnbvM.roa (hash: iGkJvRDhgHWubYW0daL/Fj7V8HneaI44eRUKNiVEAEM=) 4: rVK1f_dmH8IkDbuaYgLPIHaLhTw.roa (hash: ZQMoKPh7bf4f+FY2EcEyUK7kit9BSmoiMPRby8M1WLE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.crl rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft rsync://rpki.ripe.net/repository/DEFAULT/0oNhbxNiwl2C7CpwxLl1BWWxGX8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:46:56:c7:54:2a:7a:e2:c5:bb:79:18:eb:30:29:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d283616f1362c25d82ec2a70c4b9750565b1197f Validity Not Before: Dec 20 01:01:09 2025 GMT Not After : Dec 21 01:01:09 2025 GMT Subject: CN=4891dc4e31487eb98d75cdc21b1073cfdbbe057a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f7:7b:d8:c9:63:a6:51:11:c6:67:d5:f9:f5: bd:55:f8:e2:ac:6d:cf:f1:7c:2e:d8:73:0a:8c:27: 3e:fe:2f:20:fe:13:fd:c9:66:bc:4b:f8:77:94:0b: 9f:24:9e:d4:87:f5:09:ab:f4:8a:75:41:fe:4a:1b: ae:1e:87:a4:8d:49:33:de:66:57:2c:35:1f:00:bf: e5:26:28:11:17:b3:67:17:15:09:2b:f7:9e:de:1a: e1:80:cb:76:1c:ac:77:2c:7a:6a:0a:69:d3:9f:de: 7f:c5:46:c9:59:09:fa:be:f0:a1:d2:52:cd:08:35: 15:8d:ed:f4:d7:0f:4c:47:02:9c:33:a4:e5:46:dd: c9:57:3f:3f:8e:a1:7d:86:72:90:b7:13:d2:7d:2c: 31:97:42:ce:95:0a:60:fa:8b:17:2f:ec:25:06:4e: 36:d4:d1:fc:63:6e:78:a4:9e:fb:ba:c4:22:8b:fa: b0:6f:67:3a:d2:71:dd:a8:4e:d8:c4:97:b4:08:e0: ed:0d:4a:da:b6:3e:fa:f5:41:51:aa:5f:e5:a2:90: 18:e3:ba:eb:c2:76:10:c6:e0:3d:32:f4:76:19:7e: 54:54:97:5f:ac:f5:cb:64:f8:56:4e:23:74:26:9d: 1b:a5:42:1a:f7:52:2a:60:fe:04:ca:81:05:1d:dd: 64:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:91:DC:4E:31:48:7E:B9:8D:75:CD:C2:1B:10:73:CF:DB:BE:05:7A X509v3 Authority Key Identifier: keyid:D2:83:61:6F:13:62:C2:5D:82:EC:2A:70:C4:B9:75:05:65:B1:19:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0oNhbxNiwl2C7CpwxLl1BWWxGX8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:fe:70:5d:a2:5e:f5:ce:5b:cb:45:b2:19:20:ca:1f:a9:33: e2:69:7d:c6:68:21:0e:c2:a7:8a:4f:96:ef:5d:58:c9:9a:87: 21:4f:ca:33:87:87:1d:c7:36:4b:cb:1b:48:21:18:7f:6e:4f: c1:e9:00:97:58:10:95:8e:6d:db:05:a8:0b:77:b5:a7:28:aa: 8b:b3:62:30:b1:82:43:cc:13:80:7d:90:a7:50:a9:87:91:e3: eb:da:48:04:64:a3:0d:03:76:e9:42:ca:fb:8a:e3:7b:e3:dd: a1:7f:14:ef:f6:51:a3:22:95:03:6c:ed:97:5b:9d:3b:38:d9: c3:f0:2c:45:33:95:0a:ea:d4:ed:cc:69:d7:9f:c1:07:b1:b2: 11:35:e5:91:e0:ca:fb:76:4f:d0:d3:3b:60:51:d4:88:aa:12: bd:bc:dc:13:49:f9:22:3e:9b:e3:e2:c9:62:54:77:5a:85:d1: 32:0e:70:50:83:62:c0:c2:ee:71:5e:83:c3:3c:8c:06:de:b1: 3e:33:f9:11:71:5a:3c:c5:9e:5b:15:97:54:7e:8f:7c:73:80: e8:64:a1:38:51:9e:b7:30:1d:da:03:e4:bf:32:9d:1c:da:0b: 9e:f7:2b:5b:56:90:c5:fb:ef:02:4c:e6:a9:5c:6c:6c:25:86: b8:76:64:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5RlbHVCp64sW7eRjrMCm0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyODM2MTZmMTM2MmMyNWQ4MmVjMmE3MGM0Yjk3NTA1NjVi MTE5N2YwHhcNMjUxMjIwMDEwMTA5WhcNMjUxMjIxMDEwMTA5WjAzMTEwLwYDVQQD Eyg0ODkxZGM0ZTMxNDg3ZWI5OGQ3NWNkYzIxYjEwNzNjZmRiYmUwNTdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfd72MljplERxmfV+fW9VfjirG3P 8Xwu2HMKjCc+/i8g/hP9yWa8S/h3lAufJJ7Uh/UJq/SKdUH+ShuuHoekjUkz3mZX LDUfAL/lJigRF7NnFxUJK/ee3hrhgMt2HKx3LHpqCmnTn95/xUbJWQn6vvCh0lLN CDUVje301w9MRwKcM6TlRt3JVz8/jqF9hnKQtxPSfSwxl0LOlQpg+osXL+wlBk42 1NH8Y254pJ77usQii/qwb2c60nHdqE7YxJe0CODtDUratj769UFRql/lopAY47rr wnYQxuA9MvR2GX5UVJdfrPXLZPhWTiN0Jp0bpUIa91IqYP4EyoEFHd1kvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEiR3E4xSH65jXXNwhsQc8/bvgV6MB8GA1UdIwQY MBaAFNKDYW8TYsJdguwqcMS5dQVlsRl/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMG9OaGJ4Tml3bDJDN0Nwd3hMbDFCV1d4R1g4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8yZmJjY2MtNjRiNi00ZjY2LTg5Njkt YTZkMjdjNDMxODE4LzEvMG9OaGJ4Tml3bDJDN0Nwd3hMbDFCV1d4R1g4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My8yZmJjY2MtNjRiNi00ZjY2LTg5NjktYTZkMjdjNDMxODE4 LzEvMG9OaGJ4Tml3bDJDN0Nwd3hMbDFCV1d4R1g4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO/5wXaJe 9c5by0WyGSDKH6kz4ml9xmghDsKnik+W711YyZqHIU/KM4eHHcc2S8sbSCEYf25P wekAl1gQlY5t2wWoC3e1pyiqi7NiMLGCQ8wTgH2Qp1Cph5Hj69pIBGSjDQN26ULK +4rje+PdoX8U7/ZRoyKVA2ztl1udOzjZw/AsRTOVCurU7cxp15/BB7GyETXlkeDK +3ZP0NM7YFHUiKoSvbzcE0n5Ij6b4+LJYlR3WoXRMg5wUINiwMLucV6DwzyMBt6x PjP5EXFaPMWeWxWXVH6PfHOA6GShOFGetzAd2gPkvzKdHNoLnvcrW1aQxfvvAkzm qVxsbCWGuHZk+g== -----END CERTIFICATE-----Generated at Sat Dec 20 09:33:04 2025 by rpki-client