This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft File: 0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft (raw, json) Hash identifier: Bi34NiXgVpCGiTIXKhzNLUHRLsRFfHb+8K6EzgOm5+c= Subject key identifier: A3:FC:28:1A:74:95:0D:DA:4C:34:37:E8:C4:E0:38:93:FF:17:9B:8A Authority key identifier: D1:98:83:41:D3:60:78:65:F5:0F:5B:B0:2A:9A:3F:5C:2D:E5:8A:92 Certificate issuer: /CN=d1988341d3607865f50f5bb02a9a3f5c2de58a92 Certificate serial: 019B0F3761E295B0D049A2A41FE984E9D5AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ZiDQdNgeGX1D1uwKpo_XC3lipI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft Manifest number: 02D3 Signing time: Thu 11 Dec 2025 21:00:46 +0000 Manifest this update: Thu 11 Dec 2025 21:00:46 +0000 Manifest next update: Fri 12 Dec 2025 21:00:46 +0000 Files and hashes: 1: 0ZiDQdNgeGX1D1uwKpo_XC3lipI.crl (hash: G6QyTetaDE9U0IB037iNTV82ILQjbr7zr1Ivby+lLmc=) 2: 7YhU_vK5G08AkR9W5LfWHGVyypQ.roa (hash: RlhL4E2mBOXIjwSddZ4sZnexQ4dNTH+ubROkoPIYvn0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.crl rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft rsync://rpki.ripe.net/repository/DEFAULT/0ZiDQdNgeGX1D1uwKpo_XC3lipI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:37:61:e2:95:b0:d0:49:a2:a4:1f:e9:84:e9:d5:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1988341d3607865f50f5bb02a9a3f5c2de58a92 Validity Not Before: Dec 11 21:00:46 2025 GMT Not After : Dec 12 21:00:46 2025 GMT Subject: CN=a3fc281a74950dda4c3437e8c4e03893ff179b8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:de:ab:68:42:a6:6e:5e:7b:7e:de:ed:fa:77: e5:8e:f6:e3:22:93:f7:6d:f4:6b:18:9d:96:5a:42: b3:c1:91:63:0d:bb:01:93:ef:01:6d:88:d6:8e:e8: ba:e0:75:0f:37:97:34:05:45:7c:6e:a0:1a:e8:16: 47:9c:c7:80:1c:4b:3a:24:88:ae:46:f7:d8:12:1d: bc:a8:2d:35:2b:ea:27:5b:80:89:82:85:c4:37:dc: 11:44:07:7f:99:5e:b4:13:b8:99:bf:0d:8e:c4:0a: 0a:b2:ef:46:b2:51:0e:0d:a5:4e:6d:b8:e2:e0:75: 56:bb:19:31:f7:a5:9a:95:87:bb:ff:f1:d1:fd:b9: d4:34:61:9a:fe:ac:25:fb:e9:43:54:cc:40:2a:d9: dd:f9:d1:70:ad:79:c9:e2:22:00:f7:3b:56:e5:48: ff:bd:70:b0:21:af:02:2d:51:c9:56:ec:33:de:3b: 68:8e:01:3c:0d:be:03:40:35:4f:a4:5b:ad:77:7b: c5:f6:19:dc:d9:e3:ea:3b:dd:da:5e:e0:7c:7c:c1: 51:a4:98:f9:79:9e:80:37:c4:45:43:4d:be:6f:bb: e0:67:0c:7c:a2:42:97:9b:2f:13:ef:5d:3f:a2:99: ba:95:3f:66:e7:1d:09:cc:c8:fa:3b:2b:73:a4:f6: b7:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:FC:28:1A:74:95:0D:DA:4C:34:37:E8:C4:E0:38:93:FF:17:9B:8A X509v3 Authority Key Identifier: keyid:D1:98:83:41:D3:60:78:65:F5:0F:5B:B0:2A:9A:3F:5C:2D:E5:8A:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ZiDQdNgeGX1D1uwKpo_XC3lipI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:03:96:99:cc:a5:42:bd:f8:fc:ec:ae:ec:0e:98:82:16:08: 71:6f:81:86:20:ad:cd:5a:97:3f:45:a7:4f:ba:23:59:94:4c: f2:c3:4f:f0:fb:2b:31:b2:47:6a:4b:9a:62:e6:0c:a1:c7:4f: 21:36:f5:e2:c4:db:a7:f5:7b:df:f9:e5:ad:ef:0c:87:17:e4: 4c:d9:72:b9:59:76:76:18:11:0d:0e:0b:9f:c6:36:b0:ea:e1: 57:6a:2b:a0:d1:cc:5f:e3:5e:e6:93:1d:ab:46:fb:73:6c:f1: 95:9a:8e:c6:5e:7a:18:39:d6:51:2b:52:a9:8c:ff:13:8b:d1: 52:a0:31:8f:4f:cf:3f:b6:66:6d:67:53:9d:10:3d:bb:40:82: 22:15:66:fe:a4:79:23:ff:e9:0f:06:49:0f:e9:0e:b1:31:67: 6a:2b:b5:1e:6d:0e:71:ec:2f:1c:91:fc:7c:f6:a0:b2:b5:ad: 7d:f1:5c:25:ba:17:41:f0:e8:f3:00:d4:fb:1d:55:95:21:4f: a2:82:1d:78:41:cc:44:35:6d:e9:f4:4d:be:92:af:b3:ee:4a: 88:40:06:60:2f:e3:54:03:7f:82:06:42:d8:51:40:98:03:5f: b5:1d:5e:df:b7:e7:4d:e9:8f:10:4f:d2:b4:13:bc:ca:73:0e: 1d:c3:c4:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPN2HilbDQSaKkH+mE6dWtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxOTg4MzQxZDM2MDc4NjVmNTBmNWJiMDJhOWEzZjVjMmRl NThhOTIwHhcNMjUxMjExMjEwMDQ2WhcNMjUxMjEyMjEwMDQ2WjAzMTEwLwYDVQQD EyhhM2ZjMjgxYTc0OTUwZGRhNGMzNDM3ZThjNGUwMzg5M2ZmMTc5YjhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA096raEKmbl57ft7t+nfljvbjIpP3 bfRrGJ2WWkKzwZFjDbsBk+8BbYjWjui64HUPN5c0BUV8bqAa6BZHnMeAHEs6JIiu RvfYEh28qC01K+onW4CJgoXEN9wRRAd/mV60E7iZvw2OxAoKsu9GslEODaVObbji 4HVWuxkx96WalYe7//HR/bnUNGGa/qwl++lDVMxAKtnd+dFwrXnJ4iIA9ztW5Uj/ vXCwIa8CLVHJVuwz3jtojgE8Db4DQDVPpFutd3vF9hnc2ePqO93aXuB8fMFRpJj5 eZ6AN8RFQ02+b7vgZwx8okKXmy8T710/opm6lT9m5x0JzMj6OytzpPa32wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKP8KBp0lQ3aTDQ36MTgOJP/F5uKMB8GA1UdIwQY MBaAFNGYg0HTYHhl9Q9bsCqaP1wt5YqSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFppRFFkTmdlR1gxRDF1d0twb19YQzNsaXBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8yMzI5ZjMtYTI4ZS00OWRlLTk4YTMt OTMyMGExYzczYjFkLzEvMFppRFFkTmdlR1gxRDF1d0twb19YQzNsaXBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS8yMzI5ZjMtYTI4ZS00OWRlLTk4YTMtOTMyMGExYzczYjFk LzEvMFppRFFkTmdlR1gxRDF1d0twb19YQzNsaXBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnAOWmcyl Qr34/Oyu7A6YghYIcW+BhiCtzVqXP0WnT7ojWZRM8sNP8PsrMbJHakuaYuYMocdP ITb14sTbp/V73/nlre8MhxfkTNlyuVl2dhgRDQ4Ln8Y2sOrhV2oroNHMX+Ne5pMd q0b7c2zxlZqOxl56GDnWUStSqYz/E4vRUqAxj0/PP7ZmbWdTnRA9u0CCIhVm/qR5 I//pDwZJD+kOsTFnaiu1Hm0OcewvHJH8fPagsrWtffFcJboXQfDo8wDU+x1VlSFP ooIdeEHMRDVt6fRNvpKvs+5KiEAGYC/jVAN/ggZC2FFAmANftR1e37fnTemPEE/S tBO8ynMOHcPEqQ== -----END CERTIFICATE-----Generated at Fri Dec 12 00:26:03 2025 by rpki-client