This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/8e16cc-821f-4bd5-9fed-ab810d534bdd/1/0nHk7YQlOD9sgcIaSJSkN2NnXvw.mft File: 0nHk7YQlOD9sgcIaSJSkN2NnXvw.mft (raw, json) Hash identifier: ArQ8HfhPurzUawaUoCrSzT8FMdjHchGOJ8e8gLycNjw= Subject key identifier: F2:53:15:7E:8F:8B:B3:29:90:DC:45:5C:16:89:B1:54:D2:28:A3:CD Authority key identifier: D2:71:E4:ED:84:25:38:3F:6C:81:C2:1A:48:94:A4:37:63:67:5E:FC Certificate issuer: /CN=d271e4ed8425383f6c81c21a4894a43763675efc Certificate serial: 019B495DA8F7B3BC37F6230ABECCED55BDEC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0nHk7YQlOD9sgcIaSJSkN2NnXvw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/8e16cc-821f-4bd5-9fed-ab810d534bdd/1/0nHk7YQlOD9sgcIaSJSkN2NnXvw.mft Manifest number: 0296 Signing time: Tue 23 Dec 2025 04:00:33 +0000 Manifest this update: Tue 23 Dec 2025 04:00:33 +0000 Manifest next update: Wed 24 Dec 2025 04:00:33 +0000 Files and hashes: 1: 0nHk7YQlOD9sgcIaSJSkN2NnXvw.crl (hash: xCUBRNK2+dyLKHlQR8Tj2gn7PK1w8iOeNYu2fnr6YsM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/8e16cc-821f-4bd5-9fed-ab810d534bdd/1/0nHk7YQlOD9sgcIaSJSkN2NnXvw.crl rsync://rpki.ripe.net/repository/DEFAULT/65/8e16cc-821f-4bd5-9fed-ab810d534bdd/1/0nHk7YQlOD9sgcIaSJSkN2NnXvw.mft rsync://rpki.ripe.net/repository/DEFAULT/0nHk7YQlOD9sgcIaSJSkN2NnXvw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:5d:a8:f7:b3:bc:37:f6:23:0a:be:cc:ed:55:bd:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d271e4ed8425383f6c81c21a4894a43763675efc Validity Not Before: Dec 23 04:00:33 2025 GMT Not After : Dec 24 04:00:33 2025 GMT Subject: CN=f253157e8f8bb32990dc455c1689b154d228a3cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:71:6c:13:05:70:a3:e4:a5:c9:1c:a1:0e:9b: 46:81:2c:e0:59:01:7f:17:3c:6f:ce:f2:85:a9:24: c0:66:f9:c8:b7:3a:9d:85:67:f5:df:e8:82:88:01: b1:0a:7c:be:00:13:61:12:dc:7f:1b:db:52:ca:81: 7d:69:9f:c2:3d:44:89:3f:5c:cd:39:ab:e6:ee:29: 1e:fe:d3:fe:0d:01:fc:4b:bd:3e:00:ce:7c:4a:2f: d8:69:1a:02:69:2c:98:8f:01:8c:d4:a5:10:44:c3: 0e:51:15:ca:9b:76:70:0d:54:c8:70:3a:e9:f3:f2: c5:d7:fe:cd:20:0c:9d:00:4f:83:53:2a:a7:a9:98: 3d:d3:3c:04:9b:41:da:6c:be:bd:f8:6e:8a:cd:a9: 30:c8:f0:0b:c5:f8:f6:8b:53:51:16:a8:50:69:29: 7d:75:28:cd:d6:57:30:93:7f:4c:ee:56:00:72:de: 4a:fc:5e:46:51:64:74:3a:83:ef:50:83:b2:5f:a7: 72:e6:30:ea:64:3a:1f:f1:dd:75:95:cf:90:58:8a: 8f:9e:f2:d2:e5:6c:a3:23:cf:f1:2d:eb:7b:ca:1d: 1b:aa:b4:69:2c:bf:9e:20:a8:f2:ba:52:e5:a8:67: 19:94:c9:cc:f2:e2:05:12:20:9c:60:4e:a9:2f:54: 22:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:53:15:7E:8F:8B:B3:29:90:DC:45:5C:16:89:B1:54:D2:28:A3:CD X509v3 Authority Key Identifier: keyid:D2:71:E4:ED:84:25:38:3F:6C:81:C2:1A:48:94:A4:37:63:67:5E:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0nHk7YQlOD9sgcIaSJSkN2NnXvw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/8e16cc-821f-4bd5-9fed-ab810d534bdd/1/0nHk7YQlOD9sgcIaSJSkN2NnXvw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/8e16cc-821f-4bd5-9fed-ab810d534bdd/1/0nHk7YQlOD9sgcIaSJSkN2NnXvw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:76:c9:83:e8:d4:26:02:05:b3:f5:4f:82:ac:12:e4:ea:b3: 9c:9b:8c:2f:bd:0c:71:b2:20:6d:28:17:cf:e8:66:67:1f:8a: ac:3f:d3:ff:91:0f:10:17:ce:a4:1d:2c:71:18:82:bb:d6:eb: 41:56:f5:a0:da:e7:52:75:ea:66:29:58:92:72:8c:e8:8e:a3: f5:4f:65:45:04:4a:d7:e7:cf:d1:f0:b7:c4:b0:ff:47:af:60: c5:f3:0b:fb:a0:ad:8a:85:57:d7:74:f1:2f:8c:6a:3b:89:03: 72:aa:39:04:6d:dd:86:f6:37:0c:5c:a2:bd:d4:35:57:f8:b8: fa:e2:b2:b9:a5:02:e7:04:6e:92:3a:d0:0e:ef:bf:26:54:cc: 5c:82:18:0d:3e:f6:69:df:8c:bd:bf:b7:8e:af:17:1b:6b:2a: 0d:14:5e:16:e3:12:e2:5b:c7:bc:93:da:94:b4:90:0a:05:91: 76:29:ba:1f:15:57:b9:e6:88:a6:17:1e:7d:78:6c:ce:59:84: cb:6a:86:f2:79:61:0b:90:3d:53:98:c0:a2:61:a9:b7:0d:c4: 49:3e:37:8d:78:f0:ba:f3:bf:c5:a6:50:a3:65:6f:37:2d:1a: f2:7c:58:03:73:67:31:da:8c:49:9e:d5:86:36:bc:c7:ec:17: 8d:70:ac:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtJXaj3s7w39iMKvsztVb3sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyNzFlNGVkODQyNTM4M2Y2YzgxYzIxYTQ4OTRhNDM3NjM2 NzVlZmMwHhcNMjUxMjIzMDQwMDMzWhcNMjUxMjI0MDQwMDMzWjAzMTEwLwYDVQQD EyhmMjUzMTU3ZThmOGJiMzI5OTBkYzQ1NWMxNjg5YjE1NGQyMjhhM2NkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3FsEwVwo+SlyRyhDptGgSzgWQF/ FzxvzvKFqSTAZvnItzqdhWf13+iCiAGxCny+ABNhEtx/G9tSyoF9aZ/CPUSJP1zN Oavm7ike/tP+DQH8S70+AM58Si/YaRoCaSyYjwGM1KUQRMMOURXKm3ZwDVTIcDrp 8/LF1/7NIAydAE+DUyqnqZg90zwEm0HabL69+G6KzakwyPALxfj2i1NRFqhQaSl9 dSjN1lcwk39M7lYAct5K/F5GUWR0OoPvUIOyX6dy5jDqZDof8d11lc+QWIqPnvLS 5WyjI8/xLet7yh0bqrRpLL+eIKjyulLlqGcZlMnM8uIFEiCcYE6pL1QiLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPJTFX6Pi7MpkNxFXBaJsVTSKKPNMB8GA1UdIwQY MBaAFNJx5O2EJTg/bIHCGkiUpDdjZ178MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMG5IazdZUWxPRDlzZ2NJYVNKU2tOMk5uWHZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS84ZTE2Y2MtODIxZi00YmQ1LTlmZWQt YWI4MTBkNTM0YmRkLzEvMG5IazdZUWxPRDlzZ2NJYVNKU2tOMk5uWHZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS84ZTE2Y2MtODIxZi00YmQ1LTlmZWQtYWI4MTBkNTM0YmRk LzEvMG5IazdZUWxPRDlzZ2NJYVNKU2tOMk5uWHZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcHbJg+jU JgIFs/VPgqwS5OqznJuML70McbIgbSgXz+hmZx+KrD/T/5EPEBfOpB0scRiCu9br QVb1oNrnUnXqZilYknKM6I6j9U9lRQRK1+fP0fC3xLD/R69gxfML+6CtioVX13Tx L4xqO4kDcqo5BG3dhvY3DFyivdQ1V/i4+uKyuaUC5wRukjrQDu+/JlTMXIIYDT72 ad+Mvb+3jq8XG2sqDRReFuMS4lvHvJPalLSQCgWRdim6HxVXueaIphcefXhszlmE y2qG8nlhC5A9U5jAomGptw3EST43jXjwuvO/xaZQo2VvNy0a8nxYA3NnMdqMSZ7V hja8x+wXjXCs/Q== -----END CERTIFICATE-----Generated at Tue Dec 23 07:42:02 2025 by rpki-client