This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/0c9b35-3952-4e2f-b4ce-721bebd8a1d5/1/FNCEOyRfwnNc8kdQTE8b2FX_zvw.mft File: FNCEOyRfwnNc8kdQTE8b2FX_zvw.mft (raw, json) Hash identifier: lQ7JO2WNtsxxP65ayq87zNaXSSDqXkyrrn3jUfmPEeM= Subject key identifier: 2B:2F:B9:E1:1F:83:39:AC:05:9C:79:78:DB:F1:75:A0:98:BB:CF:5D Authority key identifier: 14:D0:84:3B:24:5F:C2:73:5C:F2:47:50:4C:4F:1B:D8:55:FF:CE:FC Certificate issuer: /CN=14d0843b245fc2735cf247504c4f1bd855ffcefc Certificate serial: 019B405AD1E4C7072E180B327BF135C63E48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNCEOyRfwnNc8kdQTE8b2FX_zvw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/0c9b35-3952-4e2f-b4ce-721bebd8a1d5/1/FNCEOyRfwnNc8kdQTE8b2FX_zvw.mft Manifest number: 0E0E Signing time: Sun 21 Dec 2025 10:00:52 +0000 Manifest this update: Sun 21 Dec 2025 10:00:52 +0000 Manifest next update: Mon 22 Dec 2025 10:00:52 +0000 Files and hashes: 1: FNCEOyRfwnNc8kdQTE8b2FX_zvw.crl (hash: 6qi9rZxcPh4il7u4jxc5oKzckHOZdphUmRUrm91pifU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/0c9b35-3952-4e2f-b4ce-721bebd8a1d5/1/FNCEOyRfwnNc8kdQTE8b2FX_zvw.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/0c9b35-3952-4e2f-b4ce-721bebd8a1d5/1/FNCEOyRfwnNc8kdQTE8b2FX_zvw.mft rsync://rpki.ripe.net/repository/DEFAULT/FNCEOyRfwnNc8kdQTE8b2FX_zvw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5a:d1:e4:c7:07:2e:18:0b:32:7b:f1:35:c6:3e:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14d0843b245fc2735cf247504c4f1bd855ffcefc Validity Not Before: Dec 21 10:00:52 2025 GMT Not After : Dec 22 10:00:52 2025 GMT Subject: CN=2b2fb9e11f8339ac059c7978dbf175a098bbcf5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:75:52:63:a8:46:5c:37:d1:ad:e7:75:31:e0: c6:c5:0f:6f:e4:e9:f8:69:75:70:a6:ed:71:e4:75: 57:fd:a3:56:17:8a:98:73:6a:94:22:d2:40:6f:d8: f5:e3:49:5e:b7:e4:65:3f:78:f1:1e:80:78:53:af: 37:3c:e8:7a:59:ae:11:6e:ad:0b:72:05:db:86:1a: e5:01:5d:ee:d6:5d:55:d3:a6:6e:09:bb:5b:38:c3: 18:a9:dd:85:7f:74:4a:66:70:cf:ce:7e:73:8b:df: f6:d0:de:b4:3b:77:1b:26:c2:91:a5:28:59:0c:ca: 09:81:09:cb:85:d5:b7:2f:6f:6d:28:0b:ea:f5:e9: 5e:4c:f8:5a:b3:6c:e8:bc:ec:b5:1c:22:1b:d5:d5: 9b:31:dc:70:41:3a:2e:bf:e8:57:05:f7:2b:76:3a: c8:f1:35:4f:98:6f:11:f6:dd:57:2d:4a:b0:8a:89: c4:da:dc:46:92:44:6b:45:45:53:93:1d:1f:b1:90: 69:d8:fd:a6:4b:56:89:d4:1f:67:c4:87:bd:5d:cd: f1:37:30:20:41:5e:e0:09:6a:7e:fb:3e:aa:a2:bd: dd:e2:44:55:b6:f6:68:b9:dd:ac:58:7d:54:f2:62: 5a:e1:28:2e:56:30:44:07:98:ef:57:02:d3:84:f4: d6:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:2F:B9:E1:1F:83:39:AC:05:9C:79:78:DB:F1:75:A0:98:BB:CF:5D X509v3 Authority Key Identifier: keyid:14:D0:84:3B:24:5F:C2:73:5C:F2:47:50:4C:4F:1B:D8:55:FF:CE:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNCEOyRfwnNc8kdQTE8b2FX_zvw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/0c9b35-3952-4e2f-b4ce-721bebd8a1d5/1/FNCEOyRfwnNc8kdQTE8b2FX_zvw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/0c9b35-3952-4e2f-b4ce-721bebd8a1d5/1/FNCEOyRfwnNc8kdQTE8b2FX_zvw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:3f:a9:a8:d9:c4:0d:77:82:dd:5f:c4:e9:60:57:d7:08:76: 56:7c:a9:e8:7e:c7:8d:f9:d3:66:f2:33:87:c4:98:84:b8:e2: db:f7:6f:39:6b:af:f3:c9:f4:c1:ac:26:5c:3b:17:16:17:cf: 50:9c:d6:13:00:12:b6:69:ad:2a:0e:ab:b7:1e:c0:12:fd:dd: 65:ad:eb:e0:d2:3a:5a:91:f6:70:94:3e:96:aa:12:70:fd:95: c5:50:d3:b5:08:71:0a:db:7b:7f:76:ff:08:6f:c2:98:d2:fb: 46:7d:4c:09:7f:b6:f6:50:ca:14:08:b9:55:98:32:fd:25:1f: eb:f6:ec:c4:ff:07:07:32:e6:d7:7f:1d:a8:0b:c5:ef:f7:b0: 10:a9:ff:54:87:be:7b:80:66:75:92:fe:5e:46:b9:7d:be:0e: d8:4d:9a:4d:d1:39:3c:d9:e4:a8:d5:a8:12:de:f1:0d:c2:8c: ec:67:1f:45:d0:d4:b9:1a:08:be:65:df:fc:e0:58:97:1f:e4: 44:55:95:83:25:c8:7a:9f:a6:4c:df:46:14:e6:f8:ec:ed:d3: cc:8d:8b:97:26:52:3a:38:ff:88:34:ab:09:b0:68:75:8f:f1: 5f:65:e4:a8:8b:be:c0:2e:11:5d:8f:b0:c4:23:19:a8:07:5f: 3f:16:e9:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAWtHkxwcuGAsye/E1xj5IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0ZDA4NDNiMjQ1ZmMyNzM1Y2YyNDc1MDRjNGYxYmQ4NTVm ZmNlZmMwHhcNMjUxMjIxMTAwMDUyWhcNMjUxMjIyMTAwMDUyWjAzMTEwLwYDVQQD EygyYjJmYjllMTFmODMzOWFjMDU5Yzc5NzhkYmYxNzVhMDk4YmJjZjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3VSY6hGXDfRred1MeDGxQ9v5On4 aXVwpu1x5HVX/aNWF4qYc2qUItJAb9j140let+RlP3jxHoB4U683POh6Wa4Rbq0L cgXbhhrlAV3u1l1V06ZuCbtbOMMYqd2Ff3RKZnDPzn5zi9/20N60O3cbJsKRpShZ DMoJgQnLhdW3L29tKAvq9eleTPhas2zovOy1HCIb1dWbMdxwQTouv+hXBfcrdjrI 8TVPmG8R9t1XLUqwionE2txGkkRrRUVTkx0fsZBp2P2mS1aJ1B9nxIe9Xc3xNzAg QV7gCWp++z6qor3d4kRVtvZoud2sWH1U8mJa4SguVjBEB5jvVwLThPTW2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCsvueEfgzmsBZx5eNvxdaCYu89dMB8GA1UdIwQY MBaAFBTQhDskX8JzXPJHUExPG9hV/878MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRk5DRU95UmZ3bk5jOGtkUVRFOGIyRlhfenZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8wYzliMzUtMzk1Mi00ZTJmLWI0Y2Ut NzIxYmViZDhhMWQ1LzEvRk5DRU95UmZ3bk5jOGtkUVRFOGIyRlhfenZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS8wYzliMzUtMzk1Mi00ZTJmLWI0Y2UtNzIxYmViZDhhMWQ1 LzEvRk5DRU95UmZ3bk5jOGtkUVRFOGIyRlhfenZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVz+pqNnE DXeC3V/E6WBX1wh2Vnyp6H7HjfnTZvIzh8SYhLji2/dvOWuv88n0wawmXDsXFhfP UJzWEwAStmmtKg6rtx7AEv3dZa3r4NI6WpH2cJQ+lqoScP2VxVDTtQhxCtt7f3b/ CG/CmNL7Rn1MCX+29lDKFAi5VZgy/SUf6/bsxP8HBzLm138dqAvF7/ewEKn/VIe+ e4BmdZL+Xka5fb4O2E2aTdE5PNnkqNWoEt7xDcKM7GcfRdDUuRoIvmXf/OBYlx/k RFWVgyXIep+mTN9GFOb47O3TzI2LlyZSOjj/iDSrCbBodY/xX2XkqIu+wC4RXY+w xCMZqAdfPxbpog== -----END CERTIFICATE-----Generated at Sun Dec 21 18:03:09 2025 by rpki-client