This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft File: 0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft (raw, json) Hash identifier: mm9zInQvETZbv5/ArR5dZ/JXN+nGsFQVUWXGEtvJV18= Subject key identifier: 53:2F:1E:D3:89:D5:03:75:96:2E:D1:33:14:DD:20:4E:4A:ED:E2:57 Authority key identifier: D2:83:61:6F:13:62:C2:5D:82:EC:2A:70:C4:B9:75:05:65:B1:19:7F Certificate issuer: /CN=d283616f1362c25d82ec2a70c4b9750565b1197f Certificate serial: 019AAC4BEEDC1086909C3905481EDF3D115A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0oNhbxNiwl2C7CpwxLl1BWWxGX8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft Manifest number: 1474 Signing time: Sat 22 Nov 2025 16:00:48 +0000 Manifest this update: Sat 22 Nov 2025 16:00:48 +0000 Manifest next update: Sun 23 Nov 2025 16:00:48 +0000 Files and hashes: 1: 0oNhbxNiwl2C7CpwxLl1BWWxGX8.crl (hash: 4XgAeiK+lVAHwvyjjn1iJRaGmsrMA/Mh6orgHq+S7kc=) 2: mVZaVH1Pcezupl88BB4A9aDh2ik.roa (hash: x9LGsO42G/kG8E6OK/kSND1fo/r1Rn2Jod3oqumsnE8=) 3: pXbNNPwN94jiY7_-VrGgRRgnbvM.roa (hash: iGkJvRDhgHWubYW0daL/Fj7V8HneaI44eRUKNiVEAEM=) 4: rVK1f_dmH8IkDbuaYgLPIHaLhTw.roa (hash: ZQMoKPh7bf4f+FY2EcEyUK7kit9BSmoiMPRby8M1WLE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.crl rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft rsync://rpki.ripe.net/repository/DEFAULT/0oNhbxNiwl2C7CpwxLl1BWWxGX8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ac:4b:ee:dc:10:86:90:9c:39:05:48:1e:df:3d:11:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d283616f1362c25d82ec2a70c4b9750565b1197f Validity Not Before: Nov 22 16:00:48 2025 GMT Not After : Nov 23 16:00:48 2025 GMT Subject: CN=532f1ed389d50375962ed13314dd204e4aede257 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e3:0b:67:56:55:de:68:7a:ff:86:de:52:2d: 2a:7f:c6:9a:23:19:00:1e:c4:aa:aa:78:34:94:47: a7:d5:d6:26:9a:cc:b4:72:5f:2b:d1:b1:b2:86:fd: e1:bb:a7:37:9f:42:ff:12:78:15:6c:f5:4e:02:b6: 80:70:62:f3:a9:03:7b:2a:11:f9:84:55:fb:35:c8: 3a:fe:a7:34:7c:7a:f2:47:dd:3a:84:4e:31:55:7d: 1b:75:81:8c:fa:39:27:6b:2f:77:7d:53:37:ec:03: 15:5c:17:c7:5f:32:64:6b:e9:af:b4:d0:a0:c1:c6: 10:e6:23:de:91:1c:69:b4:fb:1d:4c:18:ce:df:f8: 48:c2:70:3f:1a:ed:15:67:6b:d6:7f:d1:14:ce:94: 73:ae:83:fc:a9:bf:2d:15:48:56:af:e0:16:71:6e: 1f:d9:05:65:15:67:3d:99:25:93:37:85:22:e6:f4: 4d:f4:93:2c:6c:90:21:34:a7:99:fd:dd:a4:eb:e0: 49:e1:1b:f9:2d:3c:d7:a8:ad:a0:16:f3:3c:33:28: e7:1d:e0:78:32:83:83:96:57:7f:a3:43:e0:5a:07: 8a:90:59:a1:e2:0a:99:4b:94:96:72:55:31:77:65: 68:d2:c5:63:48:b8:88:b2:6b:1f:ea:d6:86:86:57: b4:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:2F:1E:D3:89:D5:03:75:96:2E:D1:33:14:DD:20:4E:4A:ED:E2:57 X509v3 Authority Key Identifier: keyid:D2:83:61:6F:13:62:C2:5D:82:EC:2A:70:C4:B9:75:05:65:B1:19:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0oNhbxNiwl2C7CpwxLl1BWWxGX8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:45:bc:d6:25:c1:13:a6:83:e6:65:98:2a:b7:86:f5:a0:ba: 17:4b:a3:92:85:4a:a5:1b:83:1c:a6:ec:0a:c8:46:f0:92:38: 10:79:3a:22:5a:2b:13:1b:e5:67:9a:28:6e:98:7c:ee:3a:4d: ec:70:ac:56:e2:78:55:ee:7f:e8:bd:c8:c7:cc:34:70:62:e1: 55:e2:b3:4b:18:bc:b8:3b:49:53:90:75:69:36:4c:f4:c8:9e: 58:4a:cb:7c:7b:aa:46:15:35:31:96:65:e8:b7:61:91:c9:82: 18:8c:24:36:7c:e2:97:d6:bc:ee:cb:04:11:43:5f:f1:7f:f1: 6c:7d:36:11:92:16:43:d2:89:d2:3c:87:21:d5:d4:fa:29:9e: 51:61:90:2f:b6:bd:41:4a:1a:c7:60:68:0a:22:d5:f1:f8:42: 8a:49:12:e0:a9:d9:f5:cd:90:dc:95:43:65:2e:2f:67:4a:41: 03:02:22:ec:6b:bb:c8:04:d9:b4:d8:7c:61:b2:ca:07:21:1e: 55:02:d2:18:79:ac:6e:95:96:36:ac:f8:64:65:49:68:ce:09: 02:cf:9e:ca:97:53:34:6f:ec:b5:e9:31:0d:12:40:9a:31:26: cb:70:60:44:73:c9:ef:f7:7c:a0:b4:5b:87:fb:77:28:1f:4d: e9:64:42:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqsS+7cEIaQnDkFSB7fPRFaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyODM2MTZmMTM2MmMyNWQ4MmVjMmE3MGM0Yjk3NTA1NjVi MTE5N2YwHhcNMjUxMTIyMTYwMDQ4WhcNMjUxMTIzMTYwMDQ4WjAzMTEwLwYDVQQD Eyg1MzJmMWVkMzg5ZDUwMzc1OTYyZWQxMzMxNGRkMjA0ZTRhZWRlMjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAveMLZ1ZV3mh6/4beUi0qf8aaIxkA HsSqqng0lEen1dYmmsy0cl8r0bGyhv3hu6c3n0L/EngVbPVOAraAcGLzqQN7KhH5 hFX7Ncg6/qc0fHryR906hE4xVX0bdYGM+jknay93fVM37AMVXBfHXzJka+mvtNCg wcYQ5iPekRxptPsdTBjO3/hIwnA/Gu0VZ2vWf9EUzpRzroP8qb8tFUhWr+AWcW4f 2QVlFWc9mSWTN4Ui5vRN9JMsbJAhNKeZ/d2k6+BJ4Rv5LTzXqK2gFvM8MyjnHeB4 MoODlld/o0PgWgeKkFmh4gqZS5SWclUxd2Vo0sVjSLiIsmsf6taGhle0bwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFMvHtOJ1QN1li7RMxTdIE5K7eJXMB8GA1UdIwQY MBaAFNKDYW8TYsJdguwqcMS5dQVlsRl/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMG9OaGJ4Tml3bDJDN0Nwd3hMbDFCV1d4R1g4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8yZmJjY2MtNjRiNi00ZjY2LTg5Njkt YTZkMjdjNDMxODE4LzEvMG9OaGJ4Tml3bDJDN0Nwd3hMbDFCV1d4R1g4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My8yZmJjY2MtNjRiNi00ZjY2LTg5NjktYTZkMjdjNDMxODE4 LzEvMG9OaGJ4Tml3bDJDN0Nwd3hMbDFCV1d4R1g4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbkW81iXB E6aD5mWYKreG9aC6F0ujkoVKpRuDHKbsCshG8JI4EHk6IlorExvlZ5oobph87jpN 7HCsVuJ4Ve5/6L3Ix8w0cGLhVeKzSxi8uDtJU5B1aTZM9MieWErLfHuqRhU1MZZl 6LdhkcmCGIwkNnzil9a87ssEEUNf8X/xbH02EZIWQ9KJ0jyHIdXU+imeUWGQL7a9 QUoax2BoCiLV8fhCikkS4KnZ9c2Q3JVDZS4vZ0pBAwIi7Gu7yATZtNh8YbLKByEe VQLSGHmsbpWWNqz4ZGVJaM4JAs+eypdTNG/stekxDRJAmjEmy3BgRHPJ7/d8oLRb h/t3KB9N6WRCSA== -----END CERTIFICATE-----Generated at Sat Nov 22 21:42:53 2025 by rpki-client