This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft File: 0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft (raw, json) Hash identifier: ZVB3TO9Iw1e4yz1+G1U6SfcXpNXPEjNVFRok21Slm6U= Subject key identifier: 2E:3F:44:0C:80:1C:E2:84:07:D2:07:22:45:59:12:8C:40:4D:5F:6E Authority key identifier: D1:98:83:41:D3:60:78:65:F5:0F:5B:B0:2A:9A:3F:5C:2D:E5:8A:92 Certificate issuer: /CN=d1988341d3607865f50f5bb02a9a3f5c2de58a92 Certificate serial: 019B33E8B93A8195CB3EE086A9AD101A093A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ZiDQdNgeGX1D1uwKpo_XC3lipI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft Manifest number: 02E6 Signing time: Fri 19 Dec 2025 00:00:48 +0000 Manifest this update: Fri 19 Dec 2025 00:00:48 +0000 Manifest next update: Sat 20 Dec 2025 00:00:48 +0000 Files and hashes: 1: 0ZiDQdNgeGX1D1uwKpo_XC3lipI.crl (hash: gq6J8T6S+3bRozfmygnggiD10Lfua0zwYP24FIRZU1E=) 2: 7YhU_vK5G08AkR9W5LfWHGVyypQ.roa (hash: RlhL4E2mBOXIjwSddZ4sZnexQ4dNTH+ubROkoPIYvn0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.crl rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft rsync://rpki.ripe.net/repository/DEFAULT/0ZiDQdNgeGX1D1uwKpo_XC3lipI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 00:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:e8:b9:3a:81:95:cb:3e:e0:86:a9:ad:10:1a:09:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1988341d3607865f50f5bb02a9a3f5c2de58a92 Validity Not Before: Dec 19 00:00:48 2025 GMT Not After : Dec 20 00:00:48 2025 GMT Subject: CN=2e3f440c801ce28407d207224559128c404d5f6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:73:05:08:1c:96:a9:d3:79:60:0c:a9:8d:1b: 60:cc:20:23:31:55:b7:7f:b4:05:32:18:ba:54:a2: 21:d5:60:52:3a:d4:91:50:f4:ff:c9:f4:b4:c2:53: a3:3b:2f:ad:67:72:42:c6:72:a5:ed:a7:24:f4:1a: 28:b3:82:50:b0:4c:d6:1c:23:d3:09:43:10:55:28: 0f:44:a0:36:18:02:02:be:9e:c0:42:69:d1:5f:aa: 42:fa:aa:97:3a:d4:5b:07:aa:f7:b4:bf:08:bb:d6: fd:db:f8:21:9d:41:47:81:82:eb:dd:87:e6:76:2c: ec:0b:15:eb:4c:96:5f:4a:4d:11:ad:7a:06:d9:6c: 1d:dc:c0:57:13:64:d7:35:17:39:3f:e6:b0:78:78: 2d:b6:ca:7e:7f:52:f8:4b:df:f5:b8:3d:89:9e:05: 00:7a:46:a4:5c:33:c2:1c:65:56:d2:3d:ac:4f:48: f5:86:0d:84:40:58:63:3d:8a:06:7a:b7:99:b4:10: da:d9:f5:0f:95:b7:41:3a:e0:fc:8b:00:ed:43:b3: 9e:c5:00:c5:1c:f3:00:f0:97:7b:bd:2e:9e:be:e3: 78:b0:bf:42:91:26:a0:15:7b:09:22:08:cb:eb:0a: 61:80:81:b4:cf:2b:31:15:81:f4:d9:d7:73:89:dd: 4b:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:3F:44:0C:80:1C:E2:84:07:D2:07:22:45:59:12:8C:40:4D:5F:6E X509v3 Authority Key Identifier: keyid:D1:98:83:41:D3:60:78:65:F5:0F:5B:B0:2A:9A:3F:5C:2D:E5:8A:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ZiDQdNgeGX1D1uwKpo_XC3lipI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:87:af:e3:13:bd:d5:e3:5f:b3:f3:5a:49:17:06:0f:24:f2: 42:22:b8:b1:e3:96:4f:82:24:d9:d0:39:38:47:80:09:cb:bc: 10:33:d0:b0:e9:4f:d3:d5:1d:db:c9:1b:e9:81:b8:39:f3:67: c4:f1:c6:59:c1:d7:44:71:ba:9a:ed:60:de:b8:06:fd:48:ed: 1d:c7:f8:d0:31:ef:52:cd:95:58:55:1a:f6:9d:8a:e4:1e:43: 4a:25:71:a1:f5:eb:0c:31:4d:0f:7d:d7:cf:16:76:ec:35:f0: 8e:42:32:a9:ab:61:e7:e3:0a:56:d6:b9:12:ea:94:96:9d:d8: ce:d3:69:f7:bb:ea:c7:5f:e5:35:18:86:20:ab:29:43:2c:50: ef:d0:82:ff:9c:71:80:63:9d:18:e1:b2:62:a9:33:92:70:94: 38:9f:64:df:79:6e:2a:7c:41:2c:77:ab:25:b2:64:e5:2b:29: 50:f5:fe:d4:a1:e8:c3:1a:93:34:fd:a0:2b:ad:88:c6:bc:ca: 4a:dd:3b:6a:ae:3e:2f:d6:eb:ec:ac:12:fd:22:ab:ec:12:38: 81:5e:1e:d5:3c:81:de:46:ce:b1:0a:31:cd:91:2d:d0:2f:c3: 82:17:3a:76:8a:21:39:15:32:d1:2d:0b:5b:e8:88:be:23:95: 56:c6:5c:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsz6Lk6gZXLPuCGqa0QGgk6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxOTg4MzQxZDM2MDc4NjVmNTBmNWJiMDJhOWEzZjVjMmRl NThhOTIwHhcNMjUxMjE5MDAwMDQ4WhcNMjUxMjIwMDAwMDQ4WjAzMTEwLwYDVQQD EygyZTNmNDQwYzgwMWNlMjg0MDdkMjA3MjI0NTU5MTI4YzQwNGQ1ZjZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0HMFCByWqdN5YAypjRtgzCAjMVW3 f7QFMhi6VKIh1WBSOtSRUPT/yfS0wlOjOy+tZ3JCxnKl7ack9Boos4JQsEzWHCPT CUMQVSgPRKA2GAICvp7AQmnRX6pC+qqXOtRbB6r3tL8Iu9b92/ghnUFHgYLr3Yfm dizsCxXrTJZfSk0RrXoG2Wwd3MBXE2TXNRc5P+aweHgttsp+f1L4S9/1uD2JngUA ekakXDPCHGVW0j2sT0j1hg2EQFhjPYoGereZtBDa2fUPlbdBOuD8iwDtQ7OexQDF HPMA8Jd7vS6evuN4sL9CkSagFXsJIgjL6wphgIG0zysxFYH02ddzid1L+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC4/RAyAHOKEB9IHIkVZEoxATV9uMB8GA1UdIwQY MBaAFNGYg0HTYHhl9Q9bsCqaP1wt5YqSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFppRFFkTmdlR1gxRDF1d0twb19YQzNsaXBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8yMzI5ZjMtYTI4ZS00OWRlLTk4YTMt OTMyMGExYzczYjFkLzEvMFppRFFkTmdlR1gxRDF1d0twb19YQzNsaXBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS8yMzI5ZjMtYTI4ZS00OWRlLTk4YTMtOTMyMGExYzczYjFk LzEvMFppRFFkTmdlR1gxRDF1d0twb19YQzNsaXBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg4ev4xO9 1eNfs/NaSRcGDyTyQiK4seOWT4Ik2dA5OEeACcu8EDPQsOlP09Ud28kb6YG4OfNn xPHGWcHXRHG6mu1g3rgG/UjtHcf40DHvUs2VWFUa9p2K5B5DSiVxofXrDDFND33X zxZ27DXwjkIyqath5+MKVta5EuqUlp3YztNp97vqx1/lNRiGIKspQyxQ79CC/5xx gGOdGOGyYqkzknCUOJ9k33luKnxBLHerJbJk5SspUPX+1KHowxqTNP2gK62IxrzK St07aq4+L9br7KwS/SKr7BI4gV4e1TyB3kbOsQoxzZEt0C/Dghc6doohORUy0S0L W+iIviOVVsZcKg== -----END CERTIFICATE-----Generated at Fri Dec 19 09:32:35 2025 by rpki-client