This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/8e7aad-3515-4e1d-8462-8f76bf76cf46/1/0ZEVEKCZeeVOehSRjAuCi4I3-HY.mft File: 0ZEVEKCZeeVOehSRjAuCi4I3-HY.mft (raw, json) Hash identifier: q03gbgZ6/orH4/o+ny8AH0elGuhO4tcxWwdz/8YWK6I= Subject key identifier: 01:B2:6B:F3:65:EB:C7:C8:1A:6B:B6:DF:49:B0:82:69:EB:6A:1C:53 Authority key identifier: D1:91:15:10:A0:99:79:E5:4E:7A:14:91:8C:0B:82:8B:82:37:F8:76 Certificate issuer: /CN=d1911510a09979e54e7a14918c0b828b8237f876 Certificate serial: 019B439344F1FD1760A59584DF9F7757C327 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ZEVEKCZeeVOehSRjAuCi4I3-HY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/8e7aad-3515-4e1d-8462-8f76bf76cf46/1/0ZEVEKCZeeVOehSRjAuCi4I3-HY.mft Manifest number: 0D87 Signing time: Mon 22 Dec 2025 01:01:23 +0000 Manifest this update: Mon 22 Dec 2025 01:01:23 +0000 Manifest next update: Tue 23 Dec 2025 01:01:23 +0000 Files and hashes: 1: 0ZEVEKCZeeVOehSRjAuCi4I3-HY.crl (hash: 8pvkXRSXyLbbaC263MlKHwFwqBPunee6VEx+wXGHaGc=) 2: 1-DlikylqXiNLfsxUp7xWNcqG9Zo.roa (hash: VbRr/OReqs5w+OHxhY9YXuluPoozwY2bo9ixoFMaSnA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/8e7aad-3515-4e1d-8462-8f76bf76cf46/1/0ZEVEKCZeeVOehSRjAuCi4I3-HY.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/8e7aad-3515-4e1d-8462-8f76bf76cf46/1/0ZEVEKCZeeVOehSRjAuCi4I3-HY.mft rsync://rpki.ripe.net/repository/DEFAULT/0ZEVEKCZeeVOehSRjAuCi4I3-HY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:93:44:f1:fd:17:60:a5:95:84:df:9f:77:57:c3:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1911510a09979e54e7a14918c0b828b8237f876 Validity Not Before: Dec 22 01:01:23 2025 GMT Not After : Dec 23 01:01:23 2025 GMT Subject: CN=01b26bf365ebc7c81a6bb6df49b08269eb6a1c53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:37:09:b4:f5:8b:84:0e:90:53:cb:ca:f1:94: 97:ae:09:c0:f5:cf:7e:29:8f:f0:09:c2:49:0c:28: 50:43:74:cf:8a:30:93:d5:e4:b6:a0:da:9a:87:35: 7b:1e:6f:ad:ba:56:41:3f:5a:af:4d:1c:02:1d:9c: dd:7f:94:c9:d0:fe:9b:68:59:91:dc:0f:d6:9d:39: 13:aa:54:b0:69:5c:a1:a3:71:62:1a:0a:51:71:73: 90:7d:20:58:2a:f3:32:00:06:d3:d0:f5:b1:14:57: 52:90:a8:f5:57:1c:24:81:85:dd:bc:51:05:c8:86: 7e:39:ac:ea:79:bf:9e:68:65:94:53:7c:a9:a8:59: a5:d6:54:6c:5d:6e:a3:20:d7:ec:a0:02:f1:e6:b1: 61:7f:69:12:40:f9:2a:b9:ee:8f:19:7e:ba:39:7c: 1b:79:4f:31:1d:21:92:c9:c3:ac:7f:dd:d3:c6:16: f8:06:be:a5:b9:55:6f:1f:46:d7:2c:f5:b0:e2:a0: 10:d8:23:28:21:53:b7:15:42:02:74:6b:c5:7e:70: 41:17:51:5e:89:20:f8:b5:e7:ac:a1:c4:00:e5:83: de:0c:6f:f6:d3:3f:e5:1b:85:06:fc:2e:16:5d:97: a0:63:f1:33:99:ee:bc:3e:29:1e:5d:9d:ab:7b:2f: 48:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:B2:6B:F3:65:EB:C7:C8:1A:6B:B6:DF:49:B0:82:69:EB:6A:1C:53 X509v3 Authority Key Identifier: keyid:D1:91:15:10:A0:99:79:E5:4E:7A:14:91:8C:0B:82:8B:82:37:F8:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ZEVEKCZeeVOehSRjAuCi4I3-HY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/8e7aad-3515-4e1d-8462-8f76bf76cf46/1/0ZEVEKCZeeVOehSRjAuCi4I3-HY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/8e7aad-3515-4e1d-8462-8f76bf76cf46/1/0ZEVEKCZeeVOehSRjAuCi4I3-HY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:92:74:55:89:dc:f5:95:5c:f5:dd:8c:d8:96:5b:b6:b2:72: f6:a0:ac:29:28:47:58:d8:80:4f:98:33:9f:75:75:85:1d:88: 72:78:c7:b3:4e:79:39:00:f8:d1:7d:5e:5e:31:6b:c7:b4:14: 81:87:fe:de:0c:d4:87:42:0a:78:49:5f:1a:84:60:1e:4d:84: f4:35:67:6a:e5:65:50:d7:d2:af:f2:ef:e7:0d:a2:e8:22:df: a6:92:c2:d3:99:b2:02:0e:c0:24:dd:75:df:fb:18:db:83:f3: d4:fd:f9:d8:b2:c1:0b:1e:cd:e3:1e:23:25:99:0d:d9:1c:d1: 02:be:91:d7:92:b9:b6:b1:3e:f1:b7:d9:03:da:5d:1b:65:30: 3c:d3:14:0b:c3:ec:87:a8:d7:64:95:b1:f8:91:83:71:a2:b2: 12:6c:85:5c:eb:2f:b6:3c:9a:0a:6d:0e:d8:a3:af:be:e9:a3: 3f:e2:49:56:97:81:11:f5:63:c9:36:de:8e:d3:54:f5:f9:3e: 00:a0:2a:dd:3a:87:66:a2:17:0c:26:3c:d9:d6:c5:5b:f9:21: 88:49:89:18:45:fa:44:30:e8:90:29:e3:22:76:a7:04:71:93: d1:c0:e1:ee:ec:da:ad:c4:e9:b8:a9:47:b4:e7:6a:c2:e7:a8: 2f:70:fb:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDk0Tx/RdgpZWE3593V8MnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxOTExNTEwYTA5OTc5ZTU0ZTdhMTQ5MThjMGI4MjhiODIz N2Y4NzYwHhcNMjUxMjIyMDEwMTIzWhcNMjUxMjIzMDEwMTIzWjAzMTEwLwYDVQQD EygwMWIyNmJmMzY1ZWJjN2M4MWE2YmI2ZGY0OWIwODI2OWViNmExYzUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDcJtPWLhA6QU8vK8ZSXrgnA9c9+ KY/wCcJJDChQQ3TPijCT1eS2oNqahzV7Hm+tulZBP1qvTRwCHZzdf5TJ0P6baFmR 3A/WnTkTqlSwaVyho3FiGgpRcXOQfSBYKvMyAAbT0PWxFFdSkKj1VxwkgYXdvFEF yIZ+Oazqeb+eaGWUU3ypqFml1lRsXW6jINfsoALx5rFhf2kSQPkque6PGX66OXwb eU8xHSGSycOsf93Txhb4Br6luVVvH0bXLPWw4qAQ2CMoIVO3FUICdGvFfnBBF1Fe iSD4teesocQA5YPeDG/20z/lG4UG/C4WXZegY/Ezme68PikeXZ2rey9IfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAGya/Nl68fIGmu230mwgmnrahxTMB8GA1UdIwQY MBaAFNGRFRCgmXnlTnoUkYwLgouCN/h2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFpFVkVLQ1plZVZPZWhTUmpBdUNpNEkzLUhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS84ZTdhYWQtMzUxNS00ZTFkLTg0NjIt OGY3NmJmNzZjZjQ2LzEvMFpFVkVLQ1plZVZPZWhTUmpBdUNpNEkzLUhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS84ZTdhYWQtMzUxNS00ZTFkLTg0NjItOGY3NmJmNzZjZjQ2 LzEvMFpFVkVLQ1plZVZPZWhTUmpBdUNpNEkzLUhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcpJ0VYnc 9ZVc9d2M2JZbtrJy9qCsKShHWNiAT5gzn3V1hR2IcnjHs055OQD40X1eXjFrx7QU gYf+3gzUh0IKeElfGoRgHk2E9DVnauVlUNfSr/Lv5w2i6CLfppLC05myAg7AJN11 3/sY24Pz1P352LLBCx7N4x4jJZkN2RzRAr6R15K5trE+8bfZA9pdG2UwPNMUC8Ps h6jXZJWx+JGDcaKyEmyFXOsvtjyaCm0O2KOvvumjP+JJVpeBEfVjyTbejtNU9fk+ AKAq3TqHZqIXDCY82dbFW/khiEmJGEX6RDDokCnjInanBHGT0cDh7uzarcTpuKlH tOdqwueoL3D7XQ== -----END CERTIFICATE-----Generated at Mon Dec 22 08:33:14 2025 by rpki-client