This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft File: 0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft (raw, json) Hash identifier: 1iUq7UQrDfnLBfVeF8HaDwZEI5DrkibRl1YCp/ZxrqI= Subject key identifier: 1E:DC:45:BB:13:91:D4:96:E7:87:06:FA:3A:C8:5D:BC:35:13:1F:8B Authority key identifier: D2:83:61:6F:13:62:C2:5D:82:EC:2A:70:C4:B9:75:05:65:B1:19:7F Certificate issuer: /CN=d283616f1362c25d82ec2a70c4b9750565b1197f Certificate serial: 019BF38706D601E773349E641ADA8A0AEFAB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0oNhbxNiwl2C7CpwxLl1BWWxGX8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft Manifest number: 151E Signing time: Sun 25 Jan 2026 05:01:11 +0000 Manifest this update: Sun 25 Jan 2026 05:01:11 +0000 Manifest next update: Mon 26 Jan 2026 05:01:11 +0000 Files and hashes: 1: 0oNhbxNiwl2C7CpwxLl1BWWxGX8.crl (hash: ZiZ8Kbt2kJ+mfcgj+uUSjY5f5yBn/4dp5ZpMtLA1nbw=) 2: a6NDP_sdQRIyavB-C2u1iT6I1vI.roa (hash: 45VvDyynPZqMh80rBZVmGivQ3m/ZKBBtliCy4kfcaYA=) 3: bMBeJP4kSoTWFEKBQ7ire7C9GmM.roa (hash: DgOfwTafwxtmSdbTDyercNseVLl1yi6nAKrwiwQ4Ggo=) 4: s-r4X6WFzZl_DjwTvg6rx1Dd8H0.roa (hash: jWgwdzxUJDbOjXM/9fnH2+wJvWnEGw4EF7mGjO4+epM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.crl rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft rsync://rpki.ripe.net/repository/DEFAULT/0oNhbxNiwl2C7CpwxLl1BWWxGX8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:87:06:d6:01:e7:73:34:9e:64:1a:da:8a:0a:ef:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d283616f1362c25d82ec2a70c4b9750565b1197f Validity Not Before: Jan 25 05:01:11 2026 GMT Not After : Jan 26 05:01:11 2026 GMT Subject: CN=1edc45bb1391d496e78706fa3ac85dbc35131f8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:2d:44:3e:41:1e:49:02:f6:54:29:eb:25:5c: 63:26:ce:79:44:1f:18:de:f9:37:b9:47:85:e6:6c: d6:e9:92:78:34:73:2e:7d:67:ea:97:f1:bb:32:4d: a3:92:39:6a:0a:2e:fd:53:b5:6b:3a:db:14:39:61: 9d:d7:7b:e4:f4:2a:4c:ec:5c:1c:0e:26:f3:c5:dc: 9a:4f:93:d0:5a:42:85:8e:21:03:a1:38:e3:ef:68: 5c:30:2b:d6:78:74:5e:ca:66:15:63:f9:68:4a:c7: 10:e1:6e:da:77:96:66:f6:82:fa:ac:45:9f:ae:24: 21:8f:91:b7:91:b2:36:89:b7:92:1d:f1:f4:ba:3d: 79:e1:bd:b0:16:25:31:28:14:47:56:6b:17:91:8f: 91:c6:a3:94:87:1d:39:f5:96:b9:8f:87:3b:38:6b: bf:b2:58:48:cf:93:0a:67:16:97:bc:6d:a1:1d:7f: 50:aa:03:62:7b:02:e0:8f:dd:75:a8:31:65:59:11: ff:0d:36:f9:21:b8:58:f2:18:b3:13:8c:3a:e5:7a: 0c:01:a4:88:8b:77:17:90:6f:f7:49:18:78:cc:c6: e4:73:d9:e1:1d:21:12:7c:f9:5b:80:02:d3:3a:b7: 90:99:12:dd:14:a6:55:0b:fc:f0:bc:50:14:55:2c: 54:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:DC:45:BB:13:91:D4:96:E7:87:06:FA:3A:C8:5D:BC:35:13:1F:8B X509v3 Authority Key Identifier: keyid:D2:83:61:6F:13:62:C2:5D:82:EC:2A:70:C4:B9:75:05:65:B1:19:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0oNhbxNiwl2C7CpwxLl1BWWxGX8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:f8:bc:5c:30:e7:27:15:1b:db:72:73:95:b8:27:14:5c:5b: 48:4e:6d:e7:7c:b8:b5:cf:07:33:99:39:80:73:a4:a2:b7:4f: 46:19:68:01:77:94:7e:94:d4:da:c4:3e:f5:cd:d6:ba:2d:64: e9:56:92:98:2b:3c:5a:60:b8:69:73:bc:0c:26:9f:ef:f1:56: e2:86:7d:0e:14:e0:9b:68:d6:04:f3:c6:dc:c7:bd:f1:cb:a1: 1c:7f:23:45:23:4f:69:df:05:d3:3f:2a:01:fb:18:93:31:39: 79:08:81:8c:e9:62:f0:18:5e:93:90:75:37:27:2d:48:b0:6e: 99:51:ca:56:b2:db:1b:6f:a2:31:87:08:3a:7e:43:ae:fc:56: aa:f0:0b:2e:30:dc:12:f4:33:57:36:0c:05:c2:d3:50:68:db: a0:de:2e:04:25:91:13:77:e3:02:8d:c4:91:13:4d:6c:e8:e5: af:55:27:0c:f6:d6:81:f9:09:af:26:73:09:e3:b2:38:56:85: ea:21:9d:82:3e:07:42:40:8d:03:1b:6f:30:62:9c:88:97:0a: d1:3f:7d:71:e9:f8:51:13:88:00:3a:4f:e6:f1:96:e4:ed:78: 22:60:ed:4d:70:02:c3:c3:da:3c:ce:5d:4e:b3:6a:35:69:a2: 22:58:bc:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzhwbWAedzNJ5kGtqKCu+rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyODM2MTZmMTM2MmMyNWQ4MmVjMmE3MGM0Yjk3NTA1NjVi MTE5N2YwHhcNMjYwMTI1MDUwMTExWhcNMjYwMTI2MDUwMTExWjAzMTEwLwYDVQQD EygxZWRjNDViYjEzOTFkNDk2ZTc4NzA2ZmEzYWM4NWRiYzM1MTMxZjhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvS1EPkEeSQL2VCnrJVxjJs55RB8Y 3vk3uUeF5mzW6ZJ4NHMufWfql/G7Mk2jkjlqCi79U7VrOtsUOWGd13vk9CpM7Fwc DibzxdyaT5PQWkKFjiEDoTjj72hcMCvWeHReymYVY/loSscQ4W7ad5Zm9oL6rEWf riQhj5G3kbI2ibeSHfH0uj154b2wFiUxKBRHVmsXkY+RxqOUhx059Za5j4c7OGu/ slhIz5MKZxaXvG2hHX9QqgNiewLgj911qDFlWRH/DTb5IbhY8hizE4w65XoMAaSI i3cXkG/3SRh4zMbkc9nhHSESfPlbgALTOreQmRLdFKZVC/zwvFAUVSxUxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB7cRbsTkdSW54cG+jrIXbw1Ex+LMB8GA1UdIwQY MBaAFNKDYW8TYsJdguwqcMS5dQVlsRl/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMG9OaGJ4Tml3bDJDN0Nwd3hMbDFCV1d4R1g4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8yZmJjY2MtNjRiNi00ZjY2LTg5Njkt YTZkMjdjNDMxODE4LzEvMG9OaGJ4Tml3bDJDN0Nwd3hMbDFCV1d4R1g4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My8yZmJjY2MtNjRiNi00ZjY2LTg5NjktYTZkMjdjNDMxODE4 LzEvMG9OaGJ4Tml3bDJDN0Nwd3hMbDFCV1d4R1g4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATfi8XDDn JxUb23JzlbgnFFxbSE5t53y4tc8HM5k5gHOkordPRhloAXeUfpTU2sQ+9c3Wui1k 6VaSmCs8WmC4aXO8DCaf7/FW4oZ9DhTgm2jWBPPG3Me98cuhHH8jRSNPad8F0z8q AfsYkzE5eQiBjOli8Bhek5B1NyctSLBumVHKVrLbG2+iMYcIOn5DrvxWqvALLjDc EvQzVzYMBcLTUGjboN4uBCWRE3fjAo3EkRNNbOjlr1UnDPbWgfkJryZzCeOyOFaF 6iGdgj4HQkCNAxtvMGKciJcK0T99cen4UROIADpP5vGW5O14ImDtTXACw8PaPM5d TrNqNWmiIli8cQ== -----END CERTIFICATE-----Generated at Sun Jan 25 11:22:36 2026 by rpki-client