This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/99a3ca-7e5c-48d4-b975-9f214d1ba934/1/kN_zHRsERNQgTeFYTQDd-WjQsBI.mft File: kN_zHRsERNQgTeFYTQDd-WjQsBI.mft (raw, json) Hash identifier: DX7cfU1pdUZ2mUQ1RYpeNOhfWApkrzvSbEtdApcVBos= Subject key identifier: 85:25:B7:59:A9:5C:E3:14:7D:FF:2F:D7:89:57:4B:88:8F:15:A2:90 Authority key identifier: 90:DF:F3:1D:1B:04:44:D4:20:4D:E1:58:4D:00:DD:F9:68:D0:B0:12 Certificate issuer: /CN=90dff31d1b0444d4204de1584d00ddf968d0b012 Certificate serial: 019B06D9D9B7669180E05142C0BF6D133BE6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kN_zHRsERNQgTeFYTQDd-WjQsBI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/99a3ca-7e5c-48d4-b975-9f214d1ba934/1/kN_zHRsERNQgTeFYTQDd-WjQsBI.mft Manifest number: 0BE1 Signing time: Wed 10 Dec 2025 06:01:38 +0000 Manifest this update: Wed 10 Dec 2025 06:01:38 +0000 Manifest next update: Thu 11 Dec 2025 06:01:38 +0000 Files and hashes: 1: fhqhrm_dY2gYWI5oCp04pibtM_o.roa (hash: s8FH9ikZ8P5QdYR5uDaZwWuPJb6gYAb8hHHjeN9RXKc=) 2: kN_zHRsERNQgTeFYTQDd-WjQsBI.crl (hash: fjGfBl0HitATtQHfajJbzlnUlf36BfqTyfiQTIBXLG4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/99a3ca-7e5c-48d4-b975-9f214d1ba934/1/kN_zHRsERNQgTeFYTQDd-WjQsBI.crl rsync://rpki.ripe.net/repository/DEFAULT/70/99a3ca-7e5c-48d4-b975-9f214d1ba934/1/kN_zHRsERNQgTeFYTQDd-WjQsBI.mft rsync://rpki.ripe.net/repository/DEFAULT/kN_zHRsERNQgTeFYTQDd-WjQsBI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 06:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:06:d9:d9:b7:66:91:80:e0:51:42:c0:bf:6d:13:3b:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dff31d1b0444d4204de1584d00ddf968d0b012 Validity Not Before: Dec 10 06:01:38 2025 GMT Not After : Dec 11 06:01:38 2025 GMT Subject: CN=8525b759a95ce3147dff2fd789574b888f15a290 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:0b:fa:0e:ea:73:a5:6a:ce:96:83:d1:48:80: 5e:bd:39:4b:42:06:03:6c:98:34:d6:4e:8e:d3:df: 0e:1f:89:4d:44:07:c8:78:4f:e2:73:24:58:5d:2d: bd:ca:38:bd:48:ca:cf:20:59:ef:e6:2c:1b:ae:61: 57:20:8e:99:77:62:ee:62:1c:f0:e5:96:8a:7d:9d: 03:91:74:a4:d4:ab:1a:61:40:d7:e1:5c:93:7b:aa: 1a:38:35:ed:08:72:56:9a:f9:7d:d2:1d:1b:1b:de: 5a:fa:57:3d:aa:f5:00:b4:72:37:18:71:be:f7:01: ec:00:10:74:ba:b6:66:d4:f8:c9:26:e7:34:9a:c0: 16:96:68:54:3b:0c:03:8f:7b:74:c5:64:20:bc:2d: 1c:68:08:e8:ac:3a:42:7b:c2:61:c5:bb:54:81:fc: 54:b2:c5:fa:5e:ec:4b:83:29:46:24:d1:6e:a0:7e: 16:f9:61:4c:4d:7f:f8:c9:c0:10:10:00:bb:7d:06: 53:98:d6:5f:d9:94:0d:bd:5e:3f:23:a4:07:70:f4: 91:37:d9:41:b2:5d:96:44:cb:bd:48:b7:0d:d9:0e: 3c:4d:1a:2d:d2:73:bb:cb:f9:40:33:6d:b4:0d:91: 36:fd:6c:74:8f:c2:d7:2c:ab:ff:bb:05:5c:f8:73: 7a:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:25:B7:59:A9:5C:E3:14:7D:FF:2F:D7:89:57:4B:88:8F:15:A2:90 X509v3 Authority Key Identifier: keyid:90:DF:F3:1D:1B:04:44:D4:20:4D:E1:58:4D:00:DD:F9:68:D0:B0:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kN_zHRsERNQgTeFYTQDd-WjQsBI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/99a3ca-7e5c-48d4-b975-9f214d1ba934/1/kN_zHRsERNQgTeFYTQDd-WjQsBI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/99a3ca-7e5c-48d4-b975-9f214d1ba934/1/kN_zHRsERNQgTeFYTQDd-WjQsBI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:a6:0e:2e:d1:5f:36:28:54:cf:2f:2e:7d:b6:3a:02:9e:c2: 63:bb:d5:d6:b4:cb:44:e3:a7:b1:28:1b:82:04:36:e4:da:ab: a0:7d:50:18:6b:f8:b0:90:39:bc:5f:dc:03:33:1d:6b:75:ef: ff:e9:c7:a2:2e:99:32:93:40:bc:1c:f0:1b:13:e8:ef:eb:35: 06:f4:78:b9:7e:4c:f2:a6:48:71:64:d7:18:80:85:37:65:d3: 9f:5b:09:54:80:49:7a:a2:17:31:51:74:72:ed:a6:cb:09:bd: c8:c2:a8:84:d0:5a:a2:94:a5:d3:b4:32:67:0a:d0:f7:9e:b1: 3b:61:c9:ec:39:e7:d6:21:fe:5f:6b:a0:e4:36:f9:a6:4d:8b: 16:e9:cd:42:38:9d:cc:96:9b:71:78:46:e6:97:8e:fe:c5:f7: fe:e3:13:1f:15:c8:06:bf:37:3e:1e:86:70:8a:0f:5f:50:c8: ef:aa:fe:96:c3:0b:fa:4e:25:2a:5e:5d:01:25:20:25:7d:28: 23:66:2a:76:bd:69:aa:9d:5c:fd:53:b5:dc:70:b1:cb:25:38: 43:1b:79:08:d3:42:fb:e6:88:f0:fe:cf:de:20:07:28:59:8d: e4:8d:24:65:71:27:16:a9:8e:e5:3a:20:b9:6e:aa:bf:5b:c9: 9e:de:08:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsG2dm3ZpGA4FFCwL9tEzvmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwZGZmMzFkMWIwNDQ0ZDQyMDRkZTE1ODRkMDBkZGY5Njhk MGIwMTIwHhcNMjUxMjEwMDYwMTM4WhcNMjUxMjExMDYwMTM4WjAzMTEwLwYDVQQD Eyg4NTI1Yjc1OWE5NWNlMzE0N2RmZjJmZDc4OTU3NGI4ODhmMTVhMjkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQv6DupzpWrOloPRSIBevTlLQgYD bJg01k6O098OH4lNRAfIeE/icyRYXS29yji9SMrPIFnv5iwbrmFXII6Zd2LuYhzw 5ZaKfZ0DkXSk1KsaYUDX4VyTe6oaODXtCHJWmvl90h0bG95a+lc9qvUAtHI3GHG+ 9wHsABB0urZm1PjJJuc0msAWlmhUOwwDj3t0xWQgvC0caAjorDpCe8JhxbtUgfxU ssX6XuxLgylGJNFuoH4W+WFMTX/4ycAQEAC7fQZTmNZf2ZQNvV4/I6QHcPSRN9lB sl2WRMu9SLcN2Q48TRot0nO7y/lAM220DZE2/Wx0j8LXLKv/uwVc+HN6FQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIUlt1mpXOMUff8v14lXS4iPFaKQMB8GA1UdIwQY MBaAFJDf8x0bBETUIE3hWE0A3flo0LASMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva05fekhSc0VSTlFnVGVGWVRRRGQtV2pRc0JJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC85OWEzY2EtN2U1Yy00OGQ0LWI5NzUt OWYyMTRkMWJhOTM0LzEva05fekhSc0VSTlFnVGVGWVRRRGQtV2pRc0JJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC85OWEzY2EtN2U1Yy00OGQ0LWI5NzUtOWYyMTRkMWJhOTM0 LzEva05fekhSc0VSTlFnVGVGWVRRRGQtV2pRc0JJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACKYOLtFf NihUzy8ufbY6Ap7CY7vV1rTLROOnsSgbggQ25NqroH1QGGv4sJA5vF/cAzMda3Xv /+nHoi6ZMpNAvBzwGxPo7+s1BvR4uX5M8qZIcWTXGICFN2XTn1sJVIBJeqIXMVF0 cu2mywm9yMKohNBaopSl07QyZwrQ956xO2HJ7Dnn1iH+X2ug5Db5pk2LFunNQjid zJabcXhG5peO/sX3/uMTHxXIBr83Ph6GcIoPX1DI76r+lsML+k4lKl5dASUgJX0o I2Yqdr1pqp1c/VO13HCxyyU4Qxt5CNNC++aI8P7P3iAHKFmN5I0kZXEnFqmO5Tog uW6qv1vJnt4Iqg== -----END CERTIFICATE-----Generated at Wed Dec 10 11:36:12 2025 by rpki-client