This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/53c3e2-d335-4a82-a790-0d6bcd0148bf/1/0nbEGiF2JU8jbSPTkf1WCQYZZw0.mft File: 0nbEGiF2JU8jbSPTkf1WCQYZZw0.mft (raw, json) Hash identifier: CPgyIqDCAn+aRL2x8ChyDi43Xb2a8jPPcTSYNR8oF+w= Subject key identifier: 6B:C7:9C:7F:3D:86:BB:76:50:B0:25:A2:20:AD:CF:2F:FF:8C:71:5F Authority key identifier: D2:76:C4:1A:21:76:25:4F:23:6D:23:D3:91:FD:56:09:06:19:67:0D Certificate issuer: /CN=d276c41a2176254f236d23d391fd56090619670d Certificate serial: 019B0F378B291710ABEB0E37ACF3AF9EB478 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0nbEGiF2JU8jbSPTkf1WCQYZZw0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/53c3e2-d335-4a82-a790-0d6bcd0148bf/1/0nbEGiF2JU8jbSPTkf1WCQYZZw0.mft Manifest number: 026E Signing time: Thu 11 Dec 2025 21:00:56 +0000 Manifest this update: Thu 11 Dec 2025 21:00:56 +0000 Manifest next update: Fri 12 Dec 2025 21:00:56 +0000 Files and hashes: 1: 0nbEGiF2JU8jbSPTkf1WCQYZZw0.crl (hash: KUFVgFS5JGkXzkFv1ULV/e1KGYR45aaTlN72fPpJj1A=) 2: zLfUqXqKYrDSmOI3zuAuH7VW9AQ.roa (hash: ooYWSL91Gfinkq+JOzjVpKfIwzWfTooJXNIHzh0/MJc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/53c3e2-d335-4a82-a790-0d6bcd0148bf/1/0nbEGiF2JU8jbSPTkf1WCQYZZw0.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/53c3e2-d335-4a82-a790-0d6bcd0148bf/1/0nbEGiF2JU8jbSPTkf1WCQYZZw0.mft rsync://rpki.ripe.net/repository/DEFAULT/0nbEGiF2JU8jbSPTkf1WCQYZZw0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 21:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:37:8b:29:17:10:ab:eb:0e:37:ac:f3:af:9e:b4:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d276c41a2176254f236d23d391fd56090619670d Validity Not Before: Dec 11 21:00:56 2025 GMT Not After : Dec 12 21:00:56 2025 GMT Subject: CN=6bc79c7f3d86bb7650b025a220adcf2fff8c715f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:54:ba:b3:f7:f2:f1:82:62:b4:49:c7:6c:39: af:a0:b8:ea:10:0c:7f:27:14:81:ef:99:bb:73:4e: 2c:d9:4f:4d:30:97:c0:05:99:85:0d:86:70:f5:44: 5c:e4:64:97:dc:61:56:6d:20:4c:5b:93:76:b0:81: 8e:65:5d:b0:d8:23:a4:2f:b8:f0:15:ac:de:86:35: 45:a9:8f:ef:1f:08:06:3c:e3:72:a6:59:1a:c0:b4: ed:66:d2:f2:7a:cc:a0:58:57:86:e9:85:9f:24:9c: a6:87:6c:f2:f2:76:4a:d6:48:bf:3e:26:42:03:0a: 0e:b0:6e:b6:29:b5:3d:e3:41:30:0c:8f:b3:68:2e: 5a:e2:ae:28:ba:9e:17:9f:6e:c1:c9:e1:b6:49:f1: 48:02:37:b9:5d:79:0e:f9:03:db:eb:78:23:41:df: 5d:31:84:c9:2e:3f:20:ab:b2:db:14:9c:d9:8a:0e: 32:9c:22:b9:9d:c9:a1:d3:cc:b1:61:07:64:4c:16: 3f:b7:e3:28:54:87:77:a9:9d:89:fe:15:3f:73:77: 51:09:71:82:9d:a8:4e:37:b5:6d:f6:8a:97:35:4d: 5d:40:00:be:ca:3d:2c:7d:8a:51:e1:bd:1f:9a:3a: 2a:bf:45:67:34:72:e6:76:7e:31:cc:8c:88:3b:52: 75:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:C7:9C:7F:3D:86:BB:76:50:B0:25:A2:20:AD:CF:2F:FF:8C:71:5F X509v3 Authority Key Identifier: keyid:D2:76:C4:1A:21:76:25:4F:23:6D:23:D3:91:FD:56:09:06:19:67:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0nbEGiF2JU8jbSPTkf1WCQYZZw0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/53c3e2-d335-4a82-a790-0d6bcd0148bf/1/0nbEGiF2JU8jbSPTkf1WCQYZZw0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/53c3e2-d335-4a82-a790-0d6bcd0148bf/1/0nbEGiF2JU8jbSPTkf1WCQYZZw0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:89:96:c3:c7:72:e6:b9:16:ed:99:9c:64:c1:c5:aa:f2:3f: 2f:63:d8:76:80:88:6b:63:4d:39:e1:de:de:40:77:5b:7c:e0: 79:d9:70:de:ba:30:2d:b4:9d:29:c2:8b:57:ae:73:fa:de:12: 17:76:fa:69:72:ca:ea:80:c6:83:ba:ac:c4:27:f7:c0:2c:61: 5c:83:96:36:ab:42:3c:e6:73:37:49:ff:09:13:fa:80:40:fc: 6c:1e:3f:95:e5:8d:b3:d6:4d:6f:3a:02:7a:2c:ba:5c:64:4e: a5:50:a9:80:3f:e7:3d:71:c4:cb:df:b2:79:79:6a:4c:3f:54: fa:cb:c8:e0:11:c5:54:e5:ca:fe:80:32:6b:c0:8c:f5:f5:14: 7e:cf:8b:42:9d:cc:0b:70:a8:61:78:ca:87:25:07:9d:80:7d: d1:37:1c:2d:c6:04:5a:34:b3:ba:3f:27:f7:6b:d3:87:ab:9d: a3:df:09:7c:7a:5a:48:78:f6:a3:ce:47:ce:62:4a:8a:0c:4a: 6f:0b:43:ca:29:4d:08:7f:3a:a1:93:05:5b:52:d9:b9:86:ce: 82:39:6d:9a:ba:98:c8:da:51:80:0f:6e:35:41:a3:a2:e5:c9: fd:23:07:9a:12:9d:20:09:ab:75:4f:d8:16:b0:31:90:f8:58: 31:87:db:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPN4spFxCr6w43rPOvnrR4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyNzZjNDFhMjE3NjI1NGYyMzZkMjNkMzkxZmQ1NjA5MDYx OTY3MGQwHhcNMjUxMjExMjEwMDU2WhcNMjUxMjEyMjEwMDU2WjAzMTEwLwYDVQQD Eyg2YmM3OWM3ZjNkODZiYjc2NTBiMDI1YTIyMGFkY2YyZmZmOGM3MTVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslS6s/fy8YJitEnHbDmvoLjqEAx/ JxSB75m7c04s2U9NMJfABZmFDYZw9URc5GSX3GFWbSBMW5N2sIGOZV2w2COkL7jw FazehjVFqY/vHwgGPONyplkawLTtZtLyesygWFeG6YWfJJymh2zy8nZK1ki/PiZC AwoOsG62KbU940EwDI+zaC5a4q4oup4Xn27ByeG2SfFIAje5XXkO+QPb63gjQd9d MYTJLj8gq7LbFJzZig4ynCK5ncmh08yxYQdkTBY/t+MoVId3qZ2J/hU/c3dRCXGC nahON7Vt9oqXNU1dQAC+yj0sfYpR4b0fmjoqv0VnNHLmdn4xzIyIO1J1SQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGvHnH89hrt2ULAloiCtzy//jHFfMB8GA1UdIwQY MBaAFNJ2xBohdiVPI20j05H9VgkGGWcNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMG5iRUdpRjJKVThqYlNQVGtmMVdDUVlaWncwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS81M2MzZTItZDMzNS00YTgyLWE3OTAt MGQ2YmNkMDE0OGJmLzEvMG5iRUdpRjJKVThqYlNQVGtmMVdDUVlaWncwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS81M2MzZTItZDMzNS00YTgyLWE3OTAtMGQ2YmNkMDE0OGJm LzEvMG5iRUdpRjJKVThqYlNQVGtmMVdDUVlaWncwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARomWw8dy 5rkW7ZmcZMHFqvI/L2PYdoCIa2NNOeHe3kB3W3zgedlw3rowLbSdKcKLV65z+t4S F3b6aXLK6oDGg7qsxCf3wCxhXIOWNqtCPOZzN0n/CRP6gED8bB4/leWNs9ZNbzoC eiy6XGROpVCpgD/nPXHEy9+yeXlqTD9U+svI4BHFVOXK/oAya8CM9fUUfs+LQp3M C3CoYXjKhyUHnYB90TccLcYEWjSzuj8n92vTh6udo98JfHpaSHj2o85HzmJKigxK bwtDyilNCH86oZMFW1LZuYbOgjltmrqYyNpRgA9uNUGjouXJ/SMHmhKdIAmrdU/Y FrAxkPhYMYfbew== -----END CERTIFICATE-----Generated at Fri Dec 12 05:32:57 2025 by rpki-client