This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft File: 0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft (raw, json) Hash identifier: tFxprfHOOWVuSp3eQ/7OMYsgJhSipEABgBHqCCTv2RU= Subject key identifier: 63:D7:61:E4:C4:E4:B7:52:C3:29:B4:07:3F:A3:60:F0:0F:E6:3D:98 Authority key identifier: D2:83:61:6F:13:62:C2:5D:82:EC:2A:70:C4:B9:75:05:65:B1:19:7F Certificate issuer: /CN=d283616f1362c25d82ec2a70c4b9750565b1197f Certificate serial: 019AF3BFE097C4C6E1DBDDAD6AAF29F02157 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0oNhbxNiwl2C7CpwxLl1BWWxGX8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft Manifest number: 1499 Signing time: Sat 06 Dec 2025 13:00:29 +0000 Manifest this update: Sat 06 Dec 2025 13:00:29 +0000 Manifest next update: Sun 07 Dec 2025 13:00:29 +0000 Files and hashes: 1: 0oNhbxNiwl2C7CpwxLl1BWWxGX8.crl (hash: Fnea4H+/2hkr7o/1m0PXXoWblrBtXVQ4qigzv/NbCxI=) 2: mVZaVH1Pcezupl88BB4A9aDh2ik.roa (hash: x9LGsO42G/kG8E6OK/kSND1fo/r1Rn2Jod3oqumsnE8=) 3: pXbNNPwN94jiY7_-VrGgRRgnbvM.roa (hash: iGkJvRDhgHWubYW0daL/Fj7V8HneaI44eRUKNiVEAEM=) 4: rVK1f_dmH8IkDbuaYgLPIHaLhTw.roa (hash: ZQMoKPh7bf4f+FY2EcEyUK7kit9BSmoiMPRby8M1WLE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.crl rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft rsync://rpki.ripe.net/repository/DEFAULT/0oNhbxNiwl2C7CpwxLl1BWWxGX8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:bf:e0:97:c4:c6:e1:db:dd:ad:6a:af:29:f0:21:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d283616f1362c25d82ec2a70c4b9750565b1197f Validity Not Before: Dec 6 13:00:29 2025 GMT Not After : Dec 7 13:00:29 2025 GMT Subject: CN=63d761e4c4e4b752c329b4073fa360f00fe63d98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:5f:d8:4e:9b:83:f5:64:08:ff:3f:11:d5:03: 6b:20:07:bc:b4:0b:a3:9e:bf:1a:a5:73:15:08:bc: 4e:d3:1e:8f:a9:ce:d6:91:7d:b3:76:4e:8c:ee:14: 32:65:f1:d5:c6:73:1e:c2:01:85:5f:ef:12:81:e4: 17:b7:3a:09:bf:47:dc:29:6b:61:fb:14:e1:0a:de: c2:9b:90:30:ba:d7:fb:89:87:b6:7e:ad:41:15:b7: 69:85:f5:f3:73:34:27:c2:37:30:7c:e5:de:4a:bf: a4:24:bb:e8:c0:87:c7:67:64:cb:06:5e:6c:49:48: a6:e1:b3:17:34:41:c7:0a:aa:92:0b:3d:bf:9a:b1: c6:1e:a8:b4:17:79:ef:95:25:3a:91:95:17:a2:15: 2a:9b:39:45:a1:10:02:1f:0c:51:f0:07:1b:8f:5c: 51:e1:2a:a8:04:88:6a:e6:d6:2e:4e:da:b9:9e:20: 38:23:05:81:e0:c6:fa:d3:dd:88:2c:57:f1:38:57: 67:8b:a3:90:91:7b:8c:9a:af:e2:a2:b1:01:5d:47: a1:11:f7:c2:a7:e3:cb:3d:32:f9:b1:02:2c:12:70: 8e:9d:6f:7b:78:91:cc:d8:b1:8c:4d:e1:79:df:40: 4f:dc:2b:3b:0e:3b:af:29:e3:62:bd:5c:bc:ae:a4: 34:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:D7:61:E4:C4:E4:B7:52:C3:29:B4:07:3F:A3:60:F0:0F:E6:3D:98 X509v3 Authority Key Identifier: keyid:D2:83:61:6F:13:62:C2:5D:82:EC:2A:70:C4:B9:75:05:65:B1:19:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0oNhbxNiwl2C7CpwxLl1BWWxGX8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:58:a3:b7:42:4b:97:84:23:15:33:cc:ff:15:75:6a:c4:5e: 71:d3:1b:99:38:84:51:99:bf:71:4c:23:03:03:70:d7:3a:63: 3f:a7:6f:50:6d:e3:57:5f:69:21:d9:0d:97:b1:87:cb:25:ef: d2:ef:69:f1:d3:d3:a5:31:6f:c9:a5:30:83:37:1f:18:1f:fd: 5d:14:f8:b9:0f:5d:6d:6a:ed:cf:a6:f8:f3:28:a5:b8:5d:b3: fa:af:2c:06:ca:8e:14:88:6c:38:6b:94:2b:88:e1:d7:bc:f0: 40:dd:66:ce:bc:7c:45:cd:fe:d0:d9:6a:a4:61:e7:61:c9:4f: 20:ae:e1:1f:99:4f:9e:28:f7:d2:29:a8:fa:76:c1:5d:c5:6c: 49:79:b5:60:d6:9d:63:a4:ce:db:4e:89:49:59:63:09:a2:7f: d1:8c:b6:b8:25:1a:c7:04:29:dd:7e:d1:ed:45:63:7f:9e:d3: b2:b6:94:1f:8a:02:99:7e:76:40:ff:89:82:83:32:e5:85:a0: 36:89:de:61:76:05:17:22:0e:5e:56:d4:bd:3f:be:f7:80:79: 32:cd:a5:99:d9:2a:b2:b0:e8:ff:3f:b7:09:9a:59:3a:39:a1: a4:da:ab:5a:db:23:29:92:5c:d8:f8:67:9b:5e:09:6f:ff:62: fe:ce:d2:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzv+CXxMbh292taq8p8CFXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyODM2MTZmMTM2MmMyNWQ4MmVjMmE3MGM0Yjk3NTA1NjVi MTE5N2YwHhcNMjUxMjA2MTMwMDI5WhcNMjUxMjA3MTMwMDI5WjAzMTEwLwYDVQQD Eyg2M2Q3NjFlNGM0ZTRiNzUyYzMyOWI0MDczZmEzNjBmMDBmZTYzZDk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1/YTpuD9WQI/z8R1QNrIAe8tAuj nr8apXMVCLxO0x6Pqc7WkX2zdk6M7hQyZfHVxnMewgGFX+8SgeQXtzoJv0fcKWth +xThCt7Cm5Awutf7iYe2fq1BFbdphfXzczQnwjcwfOXeSr+kJLvowIfHZ2TLBl5s SUim4bMXNEHHCqqSCz2/mrHGHqi0F3nvlSU6kZUXohUqmzlFoRACHwxR8Acbj1xR 4SqoBIhq5tYuTtq5niA4IwWB4Mb6092ILFfxOFdni6OQkXuMmq/iorEBXUehEffC p+PLPTL5sQIsEnCOnW97eJHM2LGMTeF530BP3Cs7DjuvKeNivVy8rqQ0EQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGPXYeTE5LdSwym0Bz+jYPAP5j2YMB8GA1UdIwQY MBaAFNKDYW8TYsJdguwqcMS5dQVlsRl/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMG9OaGJ4Tml3bDJDN0Nwd3hMbDFCV1d4R1g4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8yZmJjY2MtNjRiNi00ZjY2LTg5Njkt YTZkMjdjNDMxODE4LzEvMG9OaGJ4Tml3bDJDN0Nwd3hMbDFCV1d4R1g4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My8yZmJjY2MtNjRiNi00ZjY2LTg5NjktYTZkMjdjNDMxODE4 LzEvMG9OaGJ4Tml3bDJDN0Nwd3hMbDFCV1d4R1g4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFFijt0JL l4QjFTPM/xV1asRecdMbmTiEUZm/cUwjAwNw1zpjP6dvUG3jV19pIdkNl7GHyyXv 0u9p8dPTpTFvyaUwgzcfGB/9XRT4uQ9dbWrtz6b48yiluF2z+q8sBsqOFIhsOGuU K4jh17zwQN1mzrx8Rc3+0NlqpGHnYclPIK7hH5lPnij30imo+nbBXcVsSXm1YNad Y6TO206JSVljCaJ/0Yy2uCUaxwQp3X7R7UVjf57TsraUH4oCmX52QP+JgoMy5YWg NoneYXYFFyIOXlbUvT++94B5Ms2lmdkqsrDo/z+3CZpZOjmhpNqrWtsjKZJc2Phn m14Jb/9i/s7SUw== -----END CERTIFICATE-----Generated at Sat Dec 6 19:35:28 2025 by rpki-client