This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.mft File: 0ZMX0nI53HsNVBM74aplydwB9DQ.mft (raw, json) Hash identifier: SC/smvTZy/+x8xuCzX8ZpVH/Sr/oXibd8C7i1t4FkWk= Subject key identifier: AD:3B:8D:E7:A5:10:60:AE:06:BA:CA:F6:62:58:83:B1:35:BE:C2:3A Authority key identifier: D1:93:17:D2:72:39:DC:7B:0D:54:13:3B:E1:AA:65:C9:DC:01:F4:34 Certificate issuer: /CN=d19317d27239dc7b0d54133be1aa65c9dc01f434 Certificate serial: 019B43CA07C278FC180D9E92D3A3006F90C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ZMX0nI53HsNVBM74aplydwB9DQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.mft Manifest number: 12CE Signing time: Mon 22 Dec 2025 02:01:12 +0000 Manifest this update: Mon 22 Dec 2025 02:01:12 +0000 Manifest next update: Tue 23 Dec 2025 02:01:12 +0000 Files and hashes: 1: 0ZMX0nI53HsNVBM74aplydwB9DQ.crl (hash: B6VdOccuuiHNAWRrf4kjAnkMmiXBzM4yDEiMST5bQkE=) 2: dP48VWalcUAAFfcn9eWWeMKf0-w.roa (hash: 1XMmQlTq3rn/vph5sokkv8eSVZlOdVkw7fiia74kGx4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.mft rsync://rpki.ripe.net/repository/DEFAULT/0ZMX0nI53HsNVBM74aplydwB9DQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:ca:07:c2:78:fc:18:0d:9e:92:d3:a3:00:6f:90:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d19317d27239dc7b0d54133be1aa65c9dc01f434 Validity Not Before: Dec 22 02:01:12 2025 GMT Not After : Dec 23 02:01:12 2025 GMT Subject: CN=ad3b8de7a51060ae06bacaf6625883b135bec23a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d5:55:59:6c:f1:10:16:96:8c:aa:f5:1a:7d: 93:b3:9a:0c:b3:5b:f9:6d:34:c5:20:63:f0:b3:df: f2:f9:dc:7d:1b:c8:0a:d2:be:1c:b0:78:3d:e9:56: e2:2c:56:5c:2c:48:b8:12:19:3a:2c:bb:7e:0b:54: 2d:d9:c4:b3:52:a2:50:ae:1c:d2:5a:93:d5:f8:2c: 5f:01:44:4d:4e:ea:61:b8:d8:74:18:7c:2e:e0:76: ab:40:7f:33:2b:8e:44:a4:2f:0b:04:5a:cf:32:c2: ea:0d:0c:49:3a:4c:0d:be:24:47:46:45:57:32:09: 7a:f3:c9:78:84:52:67:04:3f:24:98:68:73:9b:6b: 55:ae:4b:02:ac:09:7f:9e:8f:59:b6:2e:99:b6:09: 43:51:49:68:18:c9:d8:66:42:a4:1b:ef:7f:da:c5: 68:12:f1:65:3d:bb:dd:82:e8:2e:b3:c7:93:2d:ff: 71:fd:39:86:e9:22:ae:30:28:ef:08:c2:51:5c:a1: db:6c:18:42:8b:6b:c1:82:19:dd:c8:a0:61:32:34: ea:aa:80:f0:1b:21:43:c6:dd:33:ca:db:19:b3:b0: 90:d8:9f:ed:b2:23:6f:ea:25:dc:2e:12:2a:fe:e5: f8:20:0f:10:0c:33:f3:9d:f6:9b:85:12:ae:f6:1e: ba:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:3B:8D:E7:A5:10:60:AE:06:BA:CA:F6:62:58:83:B1:35:BE:C2:3A X509v3 Authority Key Identifier: keyid:D1:93:17:D2:72:39:DC:7B:0D:54:13:3B:E1:AA:65:C9:DC:01:F4:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ZMX0nI53HsNVBM74aplydwB9DQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:5c:c1:a8:c0:93:a2:78:5b:f2:1c:c7:f1:17:4e:c9:d6:32: 69:da:31:d3:db:c0:a6:be:74:18:20:cd:5b:12:96:3b:87:56: ce:36:37:6f:d2:40:3e:37:53:1e:06:9d:e5:a2:0b:50:38:18: 2b:c6:cd:df:15:2e:7c:32:ad:2a:0d:0b:da:bf:c9:f4:6e:3a: 90:27:dd:b0:e7:ba:c4:a1:d7:33:ac:7a:dd:98:be:74:ed:12: b8:a3:81:03:51:7e:e7:37:ee:0e:d2:f6:37:81:c4:bb:4f:7c: 0b:a4:cf:f6:8a:44:50:8a:38:f8:cb:68:e0:8e:a9:11:c4:61: 29:34:39:3b:d9:41:8b:ef:94:86:91:44:a1:d4:19:b6:ef:37: 01:1e:d9:81:2e:b3:6b:7d:15:f9:ca:f4:35:a7:43:69:2b:a0: e9:8e:70:40:c7:36:61:68:f7:57:c4:9f:d1:7b:cc:73:bb:99: 2f:ed:06:30:11:a9:9c:50:64:15:51:4a:0b:41:e6:41:a8:3b: d5:c8:40:b0:61:02:6d:52:f0:2a:30:83:eb:1f:8a:6f:19:53: 5f:0e:4f:96:39:63:8a:ec:59:f8:ea:2f:7b:14:af:ad:b8:70: 26:4f:22:5c:ba:23:ce:55:7b:de:66:b5:e4:f4:00:fe:96:2b: 80:4d:3c:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDygfCePwYDZ6S06MAb5DAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxOTMxN2QyNzIzOWRjN2IwZDU0MTMzYmUxYWE2NWM5ZGMw MWY0MzQwHhcNMjUxMjIyMDIwMTEyWhcNMjUxMjIzMDIwMTEyWjAzMTEwLwYDVQQD EyhhZDNiOGRlN2E1MTA2MGFlMDZiYWNhZjY2MjU4ODNiMTM1YmVjMjNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdVVWWzxEBaWjKr1Gn2Ts5oMs1v5 bTTFIGPws9/y+dx9G8gK0r4csHg96VbiLFZcLEi4Ehk6LLt+C1Qt2cSzUqJQrhzS WpPV+CxfAURNTuphuNh0GHwu4HarQH8zK45EpC8LBFrPMsLqDQxJOkwNviRHRkVX Mgl688l4hFJnBD8kmGhzm2tVrksCrAl/no9Zti6ZtglDUUloGMnYZkKkG+9/2sVo EvFlPbvdgugus8eTLf9x/TmG6SKuMCjvCMJRXKHbbBhCi2vBghndyKBhMjTqqoDw GyFDxt0zytsZs7CQ2J/tsiNv6iXcLhIq/uX4IA8QDDPznfabhRKu9h66YwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK07jeelEGCuBrrK9mJYg7E1vsI6MB8GA1UdIwQY MBaAFNGTF9JyOdx7DVQTO+GqZcncAfQ0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFpNWDBuSTUzSHNOVkJNNzRhcGx5ZHdCOURRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9lNzFlMmUtOTU0Mi00ODljLTliZmYt ZTZkOTU4OGNlN2U3LzEvMFpNWDBuSTUzSHNOVkJNNzRhcGx5ZHdCOURRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9lNzFlMmUtOTU0Mi00ODljLTliZmYtZTZkOTU4OGNlN2U3 LzEvMFpNWDBuSTUzSHNOVkJNNzRhcGx5ZHdCOURRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdlzBqMCT onhb8hzH8RdOydYyadox09vApr50GCDNWxKWO4dWzjY3b9JAPjdTHgad5aILUDgY K8bN3xUufDKtKg0L2r/J9G46kCfdsOe6xKHXM6x63Zi+dO0SuKOBA1F+5zfuDtL2 N4HEu098C6TP9opEUIo4+Mto4I6pEcRhKTQ5O9lBi++UhpFEodQZtu83AR7ZgS6z a30V+cr0NadDaSug6Y5wQMc2YWj3V8Sf0XvMc7uZL+0GMBGpnFBkFVFKC0HmQag7 1chAsGECbVLwKjCD6x+KbxlTXw5PljljiuxZ+OovexSvrbhwJk8iXLojzlV73ma1 5PQA/pYrgE08NA== -----END CERTIFICATE-----Generated at Mon Dec 22 05:32:38 2025 by rpki-client