This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/465556-70d1-4152-a65a-6c63e152242d/1/0NbmVQW09OT08x2QuLIaOnz7Dr8.mft File: 0NbmVQW09OT08x2QuLIaOnz7Dr8.mft (raw, json) Hash identifier: BLnZdGGpJGcD7GGzT2se2HOzP9R0Ou13le8w3tfgE/M= Subject key identifier: 7C:D6:58:FB:31:4C:BA:3A:AC:DD:26:F7:43:D7:B9:81:99:ED:51:8F Authority key identifier: D0:D6:E6:55:05:B4:F4:E4:F4:F3:1D:90:B8:B2:1A:3A:7C:FB:0E:BF Certificate issuer: /CN=d0d6e65505b4f4e4f4f31d90b8b21a3a7cfb0ebf Certificate serial: 019B53AAE0AD13C3376CF059AFECEBFE5887 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0NbmVQW09OT08x2QuLIaOnz7Dr8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/465556-70d1-4152-a65a-6c63e152242d/1/0NbmVQW09OT08x2QuLIaOnz7Dr8.mft Manifest number: 0D08 Signing time: Thu 25 Dec 2025 04:01:06 +0000 Manifest this update: Thu 25 Dec 2025 04:01:06 +0000 Manifest next update: Fri 26 Dec 2025 04:01:06 +0000 Files and hashes: 1: 0NbmVQW09OT08x2QuLIaOnz7Dr8.crl (hash: YDRexFxAB0ykzzalmycyEC1S+bz4loGaR0af4V9tdNs=) 2: RLT9vWKmEAqKt6hEtNsyMWI1h0c.roa (hash: xBu31AarPg6SaGrJFYKlAHmm3Mw8LW1iAP2FYDxCvXE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/465556-70d1-4152-a65a-6c63e152242d/1/0NbmVQW09OT08x2QuLIaOnz7Dr8.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/465556-70d1-4152-a65a-6c63e152242d/1/0NbmVQW09OT08x2QuLIaOnz7Dr8.mft rsync://rpki.ripe.net/repository/DEFAULT/0NbmVQW09OT08x2QuLIaOnz7Dr8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 01:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:aa:e0:ad:13:c3:37:6c:f0:59:af:ec:eb:fe:58:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0d6e65505b4f4e4f4f31d90b8b21a3a7cfb0ebf Validity Not Before: Dec 25 04:01:06 2025 GMT Not After : Dec 26 04:01:06 2025 GMT Subject: CN=7cd658fb314cba3aacdd26f743d7b98199ed518f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c7:46:b8:41:e4:ad:c4:5c:89:a8:97:f0:47: ec:7e:f4:2a:a1:91:92:e8:4d:88:c0:11:43:a8:1e: 6b:21:91:b9:be:fb:5a:be:e1:6b:c5:82:8e:1f:7e: 2e:c4:a7:fd:6c:c4:f5:32:cb:11:08:82:af:d8:6d: 0d:0a:bb:55:73:02:d0:fc:32:f4:32:a2:1a:ee:34: 0b:54:c6:e5:28:90:86:bd:a3:97:5d:ab:5a:40:e2: 38:48:3a:f7:2c:da:3f:1c:94:fb:81:b8:3b:85:eb: 21:6d:d8:a1:d1:47:0c:7e:aa:5f:c1:c1:a7:c3:36: 05:7e:51:96:7b:6b:3b:47:17:ec:f4:9b:e4:2e:aa: b7:f7:c6:5c:69:8c:53:ba:5c:2a:34:03:82:82:48: 04:fb:5d:e7:ac:67:90:08:56:30:36:a8:da:64:51: d4:c6:e8:21:8b:c0:71:20:31:27:e5:25:51:8c:e5: 4b:08:d6:f2:3d:25:cc:19:c8:fd:2c:50:14:39:12: 40:e3:47:51:ca:b2:b1:55:6c:06:f1:3e:b3:c6:10: a0:fd:bf:66:df:3d:2a:00:11:47:3c:69:15:57:d5: ea:f3:83:20:8e:49:75:f1:ca:20:ba:67:39:57:5f: 7c:f1:90:3e:52:57:70:4c:0d:c3:14:ca:02:a4:7c: 8a:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:D6:58:FB:31:4C:BA:3A:AC:DD:26:F7:43:D7:B9:81:99:ED:51:8F X509v3 Authority Key Identifier: keyid:D0:D6:E6:55:05:B4:F4:E4:F4:F3:1D:90:B8:B2:1A:3A:7C:FB:0E:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0NbmVQW09OT08x2QuLIaOnz7Dr8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/465556-70d1-4152-a65a-6c63e152242d/1/0NbmVQW09OT08x2QuLIaOnz7Dr8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/465556-70d1-4152-a65a-6c63e152242d/1/0NbmVQW09OT08x2QuLIaOnz7Dr8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:f9:f5:6a:55:1b:8a:1e:4a:5b:a8:89:f9:10:11:cb:ff:ab: 79:74:25:cb:2a:b1:c7:45:80:68:29:ec:92:72:1c:0f:27:23: 5f:f8:82:3a:e9:4e:18:ea:0a:df:3c:08:a6:7c:65:c2:c7:0a: 99:d8:cd:66:b9:48:8d:9a:46:52:88:aa:f6:0d:d8:7b:06:19: 08:a4:7f:9c:0e:33:5b:5f:b4:80:38:e5:cc:95:69:c9:7c:0f: 2b:45:b2:fb:5e:7d:20:8a:23:c2:fc:13:52:34:cb:46:23:96: 5a:fb:4b:3e:c4:f7:09:7b:60:ff:16:d3:8a:02:62:53:86:e1: c1:5b:46:2c:ad:b2:e4:88:a0:5c:f2:89:e7:b0:32:7d:6e:45: cc:fa:0f:aa:76:d8:4b:e8:bd:77:91:2e:67:7f:5e:d8:ec:c7: 7d:9d:48:a2:c9:a1:a0:60:d4:c2:fc:40:d3:52:e1:94:f6:50: ba:bd:8b:5e:67:84:fd:20:24:43:0d:e5:03:01:00:1f:2e:9f: c7:be:61:64:3b:57:dc:be:27:90:8d:1d:96:6a:06:ea:9c:69: 04:b2:fc:ea:e1:5c:27:5d:a2:38:21:e3:67:11:1f:ad:46:2d: 3a:25:2f:c5:bf:d4:98:ba:8e:c5:31:ba:03:31:b2:3c:5c:4e: fd:22:50:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTquCtE8M3bPBZr+zr/liHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwZDZlNjU1MDViNGY0ZTRmNGYzMWQ5MGI4YjIxYTNhN2Nm YjBlYmYwHhcNMjUxMjI1MDQwMTA2WhcNMjUxMjI2MDQwMTA2WjAzMTEwLwYDVQQD Eyg3Y2Q2NThmYjMxNGNiYTNhYWNkZDI2Zjc0M2Q3Yjk4MTk5ZWQ1MThmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMdGuEHkrcRciaiX8EfsfvQqoZGS 6E2IwBFDqB5rIZG5vvtavuFrxYKOH34uxKf9bMT1MssRCIKv2G0NCrtVcwLQ/DL0 MqIa7jQLVMblKJCGvaOXXataQOI4SDr3LNo/HJT7gbg7heshbdih0UcMfqpfwcGn wzYFflGWe2s7Rxfs9JvkLqq398ZcaYxTulwqNAOCgkgE+13nrGeQCFYwNqjaZFHU xughi8BxIDEn5SVRjOVLCNbyPSXMGcj9LFAUORJA40dRyrKxVWwG8T6zxhCg/b9m 3z0qABFHPGkVV9Xq84Mgjkl18cogumc5V1988ZA+UldwTA3DFMoCpHyKsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHzWWPsxTLo6rN0m90PXuYGZ7VGPMB8GA1UdIwQY MBaAFNDW5lUFtPTk9PMdkLiyGjp8+w6/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvME5ibVZRVzA5T1QwOHgyUXVMSWFPbno3RHI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC80NjU1NTYtNzBkMS00MTUyLWE2NWEt NmM2M2UxNTIyNDJkLzEvME5ibVZRVzA5T1QwOHgyUXVMSWFPbno3RHI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC80NjU1NTYtNzBkMS00MTUyLWE2NWEtNmM2M2UxNTIyNDJk LzEvME5ibVZRVzA5T1QwOHgyUXVMSWFPbno3RHI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUvn1alUb ih5KW6iJ+RARy/+reXQlyyqxx0WAaCnsknIcDycjX/iCOulOGOoK3zwIpnxlwscK mdjNZrlIjZpGUoiq9g3YewYZCKR/nA4zW1+0gDjlzJVpyXwPK0Wy+159IIojwvwT UjTLRiOWWvtLPsT3CXtg/xbTigJiU4bhwVtGLK2y5IigXPKJ57AyfW5FzPoPqnbY S+i9d5EuZ39e2OzHfZ1IosmhoGDUwvxA01LhlPZQur2LXmeE/SAkQw3lAwEAHy6f x75hZDtX3L4nkI0dlmoG6pxpBLL86uFcJ12iOCHjZxEfrUYtOiUvxb/UmLqOxTG6 AzGyPFxO/SJQeA== -----END CERTIFICATE-----Generated at Thu Dec 25 08:38:45 2025 by rpki-client