This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.mft File: 0zDcrR41MkVJwcmhlBerak0JreA.mft (raw, json) Hash identifier: 1qfAalRbFeOy/xhO3E6RyguVeYURggn0oF0Np7tBkZ4= Subject key identifier: E0:85:58:74:C4:FA:F9:E4:AA:37:A0:91:CF:B6:BC:F6:32:13:FA:3A Authority key identifier: D3:30:DC:AD:1E:35:32:45:49:C1:C9:A1:94:17:AB:6A:4D:09:AD:E0 Certificate issuer: /CN=d330dcad1e35324549c1c9a19417ab6a4d09ade0 Certificate serial: 019B1F8679EDFE46034DCF4041B0F24C7643 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0zDcrR41MkVJwcmhlBerak0JreA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.mft Manifest number: 0E4E Signing time: Mon 15 Dec 2025 01:01:05 +0000 Manifest this update: Mon 15 Dec 2025 01:01:05 +0000 Manifest next update: Tue 16 Dec 2025 01:01:05 +0000 Files and hashes: 1: 0zDcrR41MkVJwcmhlBerak0JreA.crl (hash: mjWYYgr/jSmzQFZIvYJTKJ9ARkPN2GdxD1RUCsUiE2g=) 2: LPCDu87vvEM5O8HyjWDakdHtl2E.roa (hash: Wurynnxc4HmLUHSiIQ2miFmjlyoy/berebBUDyFaz/I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.mft rsync://rpki.ripe.net/repository/DEFAULT/0zDcrR41MkVJwcmhlBerak0JreA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 01:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1f:86:79:ed:fe:46:03:4d:cf:40:41:b0:f2:4c:76:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d330dcad1e35324549c1c9a19417ab6a4d09ade0 Validity Not Before: Dec 15 01:01:05 2025 GMT Not After : Dec 16 01:01:05 2025 GMT Subject: CN=e0855874c4faf9e4aa37a091cfb6bcf63213fa3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:55:21:18:e6:e8:7b:3e:83:fe:4f:0f:bd:2f: 09:40:87:8c:0e:66:3f:87:d7:ee:06:20:a0:72:64: ea:d3:3f:8d:fc:91:64:26:96:c0:76:bd:f5:fb:7a: a1:c8:14:dc:1d:3a:38:71:f0:86:36:e2:a1:48:9d: 7a:c7:fa:ad:dd:d9:2f:64:2e:7b:ee:7f:a6:a3:b0: c3:ba:fc:af:0f:e5:69:50:23:82:a8:1e:b9:fd:e7: 74:9f:2f:69:b3:b5:2d:0c:95:e3:58:92:76:23:8f: 4a:7d:ea:04:a2:15:0e:74:59:5c:15:d6:ef:74:cf: 24:4a:5e:69:e6:7b:84:ac:4e:9c:05:93:6f:8a:bb: 0e:cc:42:28:35:19:26:c7:c8:d2:d1:ae:fa:ef:4d: 42:14:18:96:41:9d:35:aa:c6:d4:65:cb:32:aa:70: bb:31:eb:9d:38:c8:7f:68:c2:25:27:3a:ec:18:7e: d9:ca:92:5b:2d:40:b7:7e:1e:4d:d0:aa:5f:16:0f: a3:5c:64:31:9f:61:bd:08:7e:11:0e:82:3b:49:27: fc:9b:f5:98:c2:fb:1d:97:58:bb:b5:03:55:a3:3c: f7:81:fd:d0:00:91:91:98:58:ae:05:74:4f:62:35: 99:bb:51:66:ff:c5:0f:d1:c7:97:13:5d:8a:38:4f: 97:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:85:58:74:C4:FA:F9:E4:AA:37:A0:91:CF:B6:BC:F6:32:13:FA:3A X509v3 Authority Key Identifier: keyid:D3:30:DC:AD:1E:35:32:45:49:C1:C9:A1:94:17:AB:6A:4D:09:AD:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zDcrR41MkVJwcmhlBerak0JreA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:22:b3:a3:dd:1d:c9:f9:92:cc:5b:be:28:33:30:9c:1a:f3: 2f:8b:59:41:7b:ae:97:fe:e6:22:dd:be:d3:8a:9c:2d:3e:4f: bc:da:24:b5:6f:3b:d8:04:5b:de:d7:30:e2:54:50:d6:83:07: 0a:20:29:8c:1b:54:9d:10:43:d1:bd:3b:9d:91:74:99:ed:0f: e3:44:02:74:05:11:e4:ce:01:f6:36:10:ee:d3:21:b4:c4:85: 51:a4:f2:26:59:f1:60:25:3b:cd:06:b5:b1:b2:11:fe:9a:31: d9:c0:40:37:5e:7d:2e:69:d7:c6:e0:4e:c1:43:a9:69:2c:b6: 07:f2:7f:1c:ba:f3:a1:d7:76:ca:3f:3d:79:87:6a:da:63:1f: e3:bd:0d:1e:2a:1d:6d:24:5b:6b:15:04:28:83:8c:67:d7:0a: 6d:df:77:06:92:bb:5a:e9:7f:47:bd:ab:3b:5f:59:2b:c0:8a: fb:04:b5:e9:83:be:43:5d:c8:8b:54:45:24:63:e4:db:23:f6: b6:1b:c5:95:03:95:fd:e4:97:91:e3:72:fe:9f:38:fa:06:28: 59:20:ee:4f:c0:a4:1a:87:4c:f9:3d:f6:50:ec:83:bc:6c:b5: 29:ac:ef:38:57:84:3a:3e:c3:ca:4d:c2:80:1f:d9:8c:62:27: 7f:42:4c:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsfhnnt/kYDTc9AQbDyTHZDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzMzBkY2FkMWUzNTMyNDU0OWMxYzlhMTk0MTdhYjZhNGQw OWFkZTAwHhcNMjUxMjE1MDEwMTA1WhcNMjUxMjE2MDEwMTA1WjAzMTEwLwYDVQQD EyhlMDg1NTg3NGM0ZmFmOWU0YWEzN2EwOTFjZmI2YmNmNjMyMTNmYTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1UhGOboez6D/k8PvS8JQIeMDmY/ h9fuBiCgcmTq0z+N/JFkJpbAdr31+3qhyBTcHTo4cfCGNuKhSJ16x/qt3dkvZC57 7n+mo7DDuvyvD+VpUCOCqB65/ed0ny9ps7UtDJXjWJJ2I49KfeoEohUOdFlcFdbv dM8kSl5p5nuErE6cBZNvirsOzEIoNRkmx8jS0a76701CFBiWQZ01qsbUZcsyqnC7 MeudOMh/aMIlJzrsGH7ZypJbLUC3fh5N0KpfFg+jXGQxn2G9CH4RDoI7SSf8m/WY wvsdl1i7tQNVozz3gf3QAJGRmFiuBXRPYjWZu1Fm/8UP0ceXE12KOE+XqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOCFWHTE+vnkqjegkc+2vPYyE/o6MB8GA1UdIwQY MBaAFNMw3K0eNTJFScHJoZQXq2pNCa3gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHpEY3JSNDFNa1ZKd2NtaGxCZXJhazBKcmVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9mODBkZDQtZjE4NC00NWE4LWI1OGQt NjY1MTdhM2FjMTlkLzEvMHpEY3JSNDFNa1ZKd2NtaGxCZXJhazBKcmVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy9mODBkZDQtZjE4NC00NWE4LWI1OGQtNjY1MTdhM2FjMTlk LzEvMHpEY3JSNDFNa1ZKd2NtaGxCZXJhazBKcmVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqyKzo90d yfmSzFu+KDMwnBrzL4tZQXuul/7mIt2+04qcLT5PvNoktW872ARb3tcw4lRQ1oMH CiApjBtUnRBD0b07nZF0me0P40QCdAUR5M4B9jYQ7tMhtMSFUaTyJlnxYCU7zQa1 sbIR/pox2cBAN159LmnXxuBOwUOpaSy2B/J/HLrzodd2yj89eYdq2mMf470NHiod bSRbaxUEKIOMZ9cKbd93BpK7Wul/R72rO19ZK8CK+wS16YO+Q13Ii1RFJGPk2yP2 thvFlQOV/eSXkeNy/p84+gYoWSDuT8CkGodM+T32UOyDvGy1KazvOFeEOj7Dyk3C gB/ZjGInf0JMHg== -----END CERTIFICATE-----Generated at Mon Dec 15 12:09:24 2025 by rpki-client