This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/53c3e2-d335-4a82-a790-0d6bcd0148bf/1/0nbEGiF2JU8jbSPTkf1WCQYZZw0.mft File: 0nbEGiF2JU8jbSPTkf1WCQYZZw0.mft (raw, json) Hash identifier: MQ3vRPJOM5Zl5M8sKQufVhDc43i60h8XlkJ80VJ+8zE= Subject key identifier: 8B:46:A9:D6:25:E5:04:B0:61:7A:97:DE:30:2A:8F:52:01:E6:64:14 Authority key identifier: D2:76:C4:1A:21:76:25:4F:23:6D:23:D3:91:FD:56:09:06:19:67:0D Certificate issuer: /CN=d276c41a2176254f236d23d391fd56090619670d Certificate serial: 019B54BD5CDB5509B5FBD62C0B5B0EBED2B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0nbEGiF2JU8jbSPTkf1WCQYZZw0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/53c3e2-d335-4a82-a790-0d6bcd0148bf/1/0nbEGiF2JU8jbSPTkf1WCQYZZw0.mft Manifest number: 0292 Signing time: Thu 25 Dec 2025 09:00:54 +0000 Manifest this update: Thu 25 Dec 2025 09:00:54 +0000 Manifest next update: Fri 26 Dec 2025 09:00:54 +0000 Files and hashes: 1: 0nbEGiF2JU8jbSPTkf1WCQYZZw0.crl (hash: 4yr2qtC5tdRiABRRxvcq/dtnTMfQL5FHALhe1Om1Bfs=) 2: zLfUqXqKYrDSmOI3zuAuH7VW9AQ.roa (hash: ooYWSL91Gfinkq+JOzjVpKfIwzWfTooJXNIHzh0/MJc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/53c3e2-d335-4a82-a790-0d6bcd0148bf/1/0nbEGiF2JU8jbSPTkf1WCQYZZw0.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/53c3e2-d335-4a82-a790-0d6bcd0148bf/1/0nbEGiF2JU8jbSPTkf1WCQYZZw0.mft rsync://rpki.ripe.net/repository/DEFAULT/0nbEGiF2JU8jbSPTkf1WCQYZZw0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:bd:5c:db:55:09:b5:fb:d6:2c:0b:5b:0e:be:d2:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d276c41a2176254f236d23d391fd56090619670d Validity Not Before: Dec 25 09:00:54 2025 GMT Not After : Dec 26 09:00:54 2025 GMT Subject: CN=8b46a9d625e504b0617a97de302a8f5201e66414 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:99:65:c0:e2:b8:c0:12:98:e1:12:4a:c3:86: 53:f3:38:44:01:c7:5f:41:22:cf:8f:b0:f6:7b:f7: d1:60:26:17:c4:ad:a5:cb:2c:08:0e:b8:c3:3a:70: ac:ab:28:00:e8:cf:2e:26:5d:c1:bc:6e:d1:82:d6: 72:84:d0:cc:bb:88:e5:fc:c8:66:47:f2:c9:5c:2f: 24:6c:02:37:5e:4d:ba:3b:ee:ba:5e:6d:00:af:49: e6:15:b6:77:4d:5e:92:a6:df:95:ad:c3:2f:e1:0e: 14:6f:c0:70:13:49:01:4d:66:09:ae:41:ae:16:b0: dd:66:a0:42:0a:15:3f:e2:60:d9:c2:8f:72:07:55: c3:3e:ce:c1:2c:98:87:9b:c5:94:1a:8b:81:6d:27: 82:57:f9:cc:3d:51:37:71:a2:e3:86:76:fb:21:7d: a2:c5:2f:45:6f:9c:1b:ef:8f:2b:40:64:0b:92:bd: a8:2f:00:00:2d:2a:33:89:10:9f:e3:d8:02:db:80: c4:68:a7:7d:2e:13:12:84:a0:fc:3c:5a:6c:05:77: 83:f6:41:92:39:d8:45:16:d3:57:0d:35:92:20:01: 61:93:39:f9:ff:49:ea:d8:8c:fb:0d:25:5f:6c:0c: df:09:45:ae:54:dc:a4:55:87:e4:2e:d6:7f:9f:c3: d5:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:46:A9:D6:25:E5:04:B0:61:7A:97:DE:30:2A:8F:52:01:E6:64:14 X509v3 Authority Key Identifier: keyid:D2:76:C4:1A:21:76:25:4F:23:6D:23:D3:91:FD:56:09:06:19:67:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0nbEGiF2JU8jbSPTkf1WCQYZZw0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/53c3e2-d335-4a82-a790-0d6bcd0148bf/1/0nbEGiF2JU8jbSPTkf1WCQYZZw0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/53c3e2-d335-4a82-a790-0d6bcd0148bf/1/0nbEGiF2JU8jbSPTkf1WCQYZZw0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:6a:64:7e:8d:65:0f:dd:d2:9a:68:9e:7b:c9:25:75:a3:1d: 38:f4:18:b5:01:c9:9e:32:9c:9b:c2:c8:49:c6:de:bb:5f:44: a0:79:01:40:7c:57:da:1a:de:24:43:4a:bc:28:a5:7e:05:4e: 7d:2a:d3:2d:1e:fa:b0:19:2b:06:37:2f:75:6d:02:11:2d:fb: 6d:fd:92:0d:0d:99:fa:a9:f7:e1:b0:9a:7f:e0:83:93:b3:98: 39:53:e2:0f:69:e7:10:c2:9b:ed:7d:1d:57:db:92:8d:f3:3c: 66:a6:ce:68:c0:49:8c:a8:bf:e1:19:91:9e:66:15:78:8a:71: 35:41:2d:da:d0:ef:8b:0c:f4:a3:64:af:7c:52:60:64:d0:37: c4:a1:5f:55:6f:82:a0:52:28:30:a7:5d:5f:fe:ca:ce:04:90: 76:2c:5f:08:19:7f:2d:bd:4c:c9:69:e1:6e:3c:21:32:e1:f1: 84:36:80:d6:83:97:87:10:9b:2f:52:49:f1:2d:60:fb:7c:08: 31:80:f4:46:1a:7a:b3:eb:74:63:89:0f:d3:1c:31:a9:a9:2c: f8:a0:b1:6f:f1:21:ca:18:4d:66:09:24:dc:fa:31:8c:85:09: ef:a6:d0:e9:95:f4:0b:d1:96:c9:41:dd:a8:f2:27:1e:f1:1a: 84:cd:63:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtUvVzbVQm1+9YsC1sOvtKxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyNzZjNDFhMjE3NjI1NGYyMzZkMjNkMzkxZmQ1NjA5MDYx OTY3MGQwHhcNMjUxMjI1MDkwMDU0WhcNMjUxMjI2MDkwMDU0WjAzMTEwLwYDVQQD Eyg4YjQ2YTlkNjI1ZTUwNGIwNjE3YTk3ZGUzMDJhOGY1MjAxZTY2NDE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZllwOK4wBKY4RJKw4ZT8zhEAcdf QSLPj7D2e/fRYCYXxK2lyywIDrjDOnCsqygA6M8uJl3BvG7RgtZyhNDMu4jl/Mhm R/LJXC8kbAI3Xk26O+66Xm0Ar0nmFbZ3TV6Spt+VrcMv4Q4Ub8BwE0kBTWYJrkGu FrDdZqBCChU/4mDZwo9yB1XDPs7BLJiHm8WUGouBbSeCV/nMPVE3caLjhnb7IX2i xS9Fb5wb748rQGQLkr2oLwAALSoziRCf49gC24DEaKd9LhMShKD8PFpsBXeD9kGS OdhFFtNXDTWSIAFhkzn5/0nq2Iz7DSVfbAzfCUWuVNykVYfkLtZ/n8PVnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFItGqdYl5QSwYXqX3jAqj1IB5mQUMB8GA1UdIwQY MBaAFNJ2xBohdiVPI20j05H9VgkGGWcNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMG5iRUdpRjJKVThqYlNQVGtmMVdDUVlaWncwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS81M2MzZTItZDMzNS00YTgyLWE3OTAt MGQ2YmNkMDE0OGJmLzEvMG5iRUdpRjJKVThqYlNQVGtmMVdDUVlaWncwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS81M2MzZTItZDMzNS00YTgyLWE3OTAtMGQ2YmNkMDE0OGJm LzEvMG5iRUdpRjJKVThqYlNQVGtmMVdDUVlaWncwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw2pkfo1l D93Smmiee8kldaMdOPQYtQHJnjKcm8LIScbeu19EoHkBQHxX2hreJENKvCilfgVO fSrTLR76sBkrBjcvdW0CES37bf2SDQ2Z+qn34bCaf+CDk7OYOVPiD2nnEMKb7X0d V9uSjfM8ZqbOaMBJjKi/4RmRnmYVeIpxNUEt2tDviwz0o2SvfFJgZNA3xKFfVW+C oFIoMKddX/7KzgSQdixfCBl/Lb1MyWnhbjwhMuHxhDaA1oOXhxCbL1JJ8S1g+3wI MYD0Rhp6s+t0Y4kP0xwxqaks+KCxb/EhyhhNZgkk3PoxjIUJ76bQ6ZX0C9GWyUHd qPInHvEahM1jAg== -----END CERTIFICATE-----Generated at Thu Dec 25 16:00:27 2025 by rpki-client