This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/53c3e2-d335-4a82-a790-0d6bcd0148bf/1/0nbEGiF2JU8jbSPTkf1WCQYZZw0.mft File: 0nbEGiF2JU8jbSPTkf1WCQYZZw0.mft (raw, json) Hash identifier: o0UU7kRs0AOv3UnyrpWy3edPP3Vc1HudsI5wWYVPCoA= Subject key identifier: 39:CB:B6:F2:C4:93:69:A9:86:C6:D9:A4:89:4C:A2:24:0D:84:E6:B4 Authority key identifier: D2:76:C4:1A:21:76:25:4F:23:6D:23:D3:91:FD:56:09:06:19:67:0D Certificate issuer: /CN=d276c41a2176254f236d23d391fd56090619670d Certificate serial: 019B435C1F9EC9BB2AD4D8AB803C8CB51F2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0nbEGiF2JU8jbSPTkf1WCQYZZw0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/53c3e2-d335-4a82-a790-0d6bcd0148bf/1/0nbEGiF2JU8jbSPTkf1WCQYZZw0.mft Manifest number: 0289 Signing time: Mon 22 Dec 2025 00:01:09 +0000 Manifest this update: Mon 22 Dec 2025 00:01:09 +0000 Manifest next update: Tue 23 Dec 2025 00:01:09 +0000 Files and hashes: 1: 0nbEGiF2JU8jbSPTkf1WCQYZZw0.crl (hash: z7KdTR5MIfxMOVcyZDNhNC2DDIwk05cPxDhXNu3VnJw=) 2: zLfUqXqKYrDSmOI3zuAuH7VW9AQ.roa (hash: ooYWSL91Gfinkq+JOzjVpKfIwzWfTooJXNIHzh0/MJc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/53c3e2-d335-4a82-a790-0d6bcd0148bf/1/0nbEGiF2JU8jbSPTkf1WCQYZZw0.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/53c3e2-d335-4a82-a790-0d6bcd0148bf/1/0nbEGiF2JU8jbSPTkf1WCQYZZw0.mft rsync://rpki.ripe.net/repository/DEFAULT/0nbEGiF2JU8jbSPTkf1WCQYZZw0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:5c:1f:9e:c9:bb:2a:d4:d8:ab:80:3c:8c:b5:1f:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d276c41a2176254f236d23d391fd56090619670d Validity Not Before: Dec 22 00:01:09 2025 GMT Not After : Dec 23 00:01:09 2025 GMT Subject: CN=39cbb6f2c49369a986c6d9a4894ca2240d84e6b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:3f:4a:60:dd:49:f5:78:e4:c6:87:23:50:e6: 1a:f8:0f:33:13:b5:b7:8f:a9:e4:5e:da:0d:06:ed: 1a:a8:cd:f2:88:e4:84:53:fa:10:ce:d1:6f:47:98: eb:f7:f5:81:c7:fe:71:3e:0c:3b:32:7d:b8:87:77: 4b:51:8c:ea:98:48:a7:49:20:88:8e:4a:d3:61:45: 19:75:06:a1:f3:00:34:33:78:f7:25:30:be:1e:65: 91:68:c6:28:31:87:37:eb:49:06:b7:fd:d9:fd:1f: 56:d0:17:63:1b:3c:a2:d6:a1:64:9e:d7:73:b3:42: 40:0d:52:c4:ec:24:ea:cc:91:45:de:2a:27:b5:96: 58:73:30:33:22:98:4c:6b:81:0b:d3:40:4a:13:a6: 3b:6b:30:c9:c3:fe:4a:d6:76:c7:a3:01:26:65:33: fe:7a:25:fa:00:88:eb:ff:d3:a7:c4:80:8c:d1:b1: 6a:e3:d7:2c:a7:44:ef:5a:69:38:c2:cb:2b:bf:53: 29:34:c1:15:23:31:66:c4:47:c7:c6:c2:79:89:4b: e6:cd:eb:a5:e6:ac:12:ca:de:bd:4a:d2:f4:23:71: fa:1c:ba:5f:4e:4e:ab:08:0c:39:cd:14:60:3a:29: a9:cf:2e:58:f9:8f:eb:ea:5d:34:34:c0:d9:e2:53: 9d:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:CB:B6:F2:C4:93:69:A9:86:C6:D9:A4:89:4C:A2:24:0D:84:E6:B4 X509v3 Authority Key Identifier: keyid:D2:76:C4:1A:21:76:25:4F:23:6D:23:D3:91:FD:56:09:06:19:67:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0nbEGiF2JU8jbSPTkf1WCQYZZw0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/53c3e2-d335-4a82-a790-0d6bcd0148bf/1/0nbEGiF2JU8jbSPTkf1WCQYZZw0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/53c3e2-d335-4a82-a790-0d6bcd0148bf/1/0nbEGiF2JU8jbSPTkf1WCQYZZw0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d1:4e:33:6d:a0:2f:49:1c:27:d3:f1:f5:c9:67:fe:e8:fc:9e: 5c:fa:b8:9b:1a:b4:26:f2:85:e4:d2:8b:eb:f6:09:5a:c3:95: 44:53:4b:31:76:ed:65:d2:10:fb:83:c2:37:65:a7:16:d5:66: f2:64:f5:2b:58:ce:59:06:91:35:9d:a8:5b:c5:6f:1d:b6:bb: 4b:52:9d:15:91:e9:15:f9:93:78:73:c9:a5:ca:da:27:9e:21: 1d:3b:46:b0:42:96:7c:66:9f:35:1a:40:88:5f:70:96:ef:c8: 50:21:2e:7d:f6:85:d0:24:00:dd:ea:b8:57:8b:c8:93:fa:ee: 3d:c5:b9:d2:d0:a4:7d:e0:d7:27:12:b7:53:78:5e:03:a2:b8: f1:f2:fc:53:71:7b:bd:c6:7b:72:c0:04:74:4d:fe:56:db:ed: 91:15:59:0e:b7:83:b3:d8:12:b4:0e:a9:4f:1a:12:da:20:2c: b7:38:12:c5:5b:c8:e8:81:7d:06:66:72:ba:cf:21:3a:43:e1: 9f:f7:c5:e0:66:3a:9f:85:22:9f:99:42:3f:0f:89:d8:b6:74: 1e:3e:6e:c9:77:f4:4a:90:94:57:0e:10:86:9d:fd:0b:9c:ea: c3:07:ef:8b:03:48:a6:6e:94:44:cb:ff:dc:ed:b2:9c:4f:d7: c9:5c:34:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDXB+eybsq1NirgDyMtR8tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyNzZjNDFhMjE3NjI1NGYyMzZkMjNkMzkxZmQ1NjA5MDYx OTY3MGQwHhcNMjUxMjIyMDAwMTA5WhcNMjUxMjIzMDAwMTA5WjAzMTEwLwYDVQQD EygzOWNiYjZmMmM0OTM2OWE5ODZjNmQ5YTQ4OTRjYTIyNDBkODRlNmI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsT9KYN1J9XjkxocjUOYa+A8zE7W3 j6nkXtoNBu0aqM3yiOSEU/oQztFvR5jr9/WBx/5xPgw7Mn24h3dLUYzqmEinSSCI jkrTYUUZdQah8wA0M3j3JTC+HmWRaMYoMYc360kGt/3Z/R9W0BdjGzyi1qFkntdz s0JADVLE7CTqzJFF3iontZZYczAzIphMa4EL00BKE6Y7azDJw/5K1nbHowEmZTP+ eiX6AIjr/9OnxICM0bFq49csp0TvWmk4wssrv1MpNMEVIzFmxEfHxsJ5iUvmzeul 5qwSyt69StL0I3H6HLpfTk6rCAw5zRRgOimpzy5Y+Y/r6l00NMDZ4lOdCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDnLtvLEk2mphsbZpIlMoiQNhOa0MB8GA1UdIwQY MBaAFNJ2xBohdiVPI20j05H9VgkGGWcNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMG5iRUdpRjJKVThqYlNQVGtmMVdDUVlaWncwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS81M2MzZTItZDMzNS00YTgyLWE3OTAt MGQ2YmNkMDE0OGJmLzEvMG5iRUdpRjJKVThqYlNQVGtmMVdDUVlaWncwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS81M2MzZTItZDMzNS00YTgyLWE3OTAtMGQ2YmNkMDE0OGJm LzEvMG5iRUdpRjJKVThqYlNQVGtmMVdDUVlaWncwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0U4zbaAv SRwn0/H1yWf+6PyeXPq4mxq0JvKF5NKL6/YJWsOVRFNLMXbtZdIQ+4PCN2WnFtVm 8mT1K1jOWQaRNZ2oW8VvHba7S1KdFZHpFfmTeHPJpcraJ54hHTtGsEKWfGafNRpA iF9wlu/IUCEuffaF0CQA3eq4V4vIk/ruPcW50tCkfeDXJxK3U3heA6K48fL8U3F7 vcZ7csAEdE3+VtvtkRVZDreDs9gStA6pTxoS2iAstzgSxVvI6IF9BmZyus8hOkPh n/fF4GY6n4Uin5lCPw+J2LZ0Hj5uyXf0SpCUVw4Qhp39C5zqwwfviwNIpm6URMv/ 3O2ynE/XyVw0JA== -----END CERTIFICATE-----Generated at Mon Dec 22 01:26:47 2025 by rpki-client