This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.mft File: 0Zk_eMrkRZqbniaJrTDwvETMZyQ.mft (raw, json) Hash identifier: FMl8Dj7Gc60zqzlm05zg6Q0Tu70rcu7SGfKA05JA+pQ= Subject key identifier: 20:03:47:2A:D7:AB:A2:BE:20:BD:BB:B6:D0:BE:07:DC:0D:5F:33:51 Authority key identifier: D1:99:3F:78:CA:E4:45:9A:9B:9E:26:89:AD:30:F0:BC:44:CC:67:24 Certificate issuer: /CN=d1993f78cae4459a9b9e2689ad30f0bc44cc6724 Certificate serial: 019B3A8F82FCB3EC991602E0B453336D8016 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Zk_eMrkRZqbniaJrTDwvETMZyQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.mft Manifest number: 04DB Signing time: Sat 20 Dec 2025 07:00:42 +0000 Manifest this update: Sat 20 Dec 2025 07:00:42 +0000 Manifest next update: Sun 21 Dec 2025 07:00:42 +0000 Files and hashes: 1: 0Zk_eMrkRZqbniaJrTDwvETMZyQ.crl (hash: QDZpC3AHV5Yj/0qCp/fOmaBFpBW4SoDYdbEV87pdVkI=) 2: 5KVSG33DPZC1TKz5q9NlgQSJY8U.roa (hash: GwSKpHIjNmK499qIKezXAfYrejsXUCWzE4VXptKGrTs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.mft rsync://rpki.ripe.net/repository/DEFAULT/0Zk_eMrkRZqbniaJrTDwvETMZyQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:8f:82:fc:b3:ec:99:16:02:e0:b4:53:33:6d:80:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1993f78cae4459a9b9e2689ad30f0bc44cc6724 Validity Not Before: Dec 20 07:00:42 2025 GMT Not After : Dec 21 07:00:42 2025 GMT Subject: CN=2003472ad7aba2be20bdbbb6d0be07dc0d5f3351 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:5b:4a:f2:6b:d5:99:2b:bd:da:38:20:e7:bb: 17:2e:31:8b:af:76:e5:fc:f6:bd:12:da:22:52:ab: bd:9b:2a:f2:86:94:e8:0e:b1:4a:89:90:5f:66:34: c6:97:ee:28:66:8f:78:fd:00:9a:26:ea:b4:f0:d6: 53:c4:d4:53:d6:2c:6d:7c:25:8f:21:69:97:ac:00: 63:96:68:b4:80:e3:fe:6e:8a:19:89:3a:31:41:71: ab:08:c9:de:2e:c6:08:4c:c4:14:78:c6:bd:59:a8: 3d:fb:44:52:d7:78:20:4a:b5:b5:48:80:18:70:4c: a4:39:11:21:27:70:2f:a1:19:41:65:8b:05:5a:74: 2b:5a:b9:6e:cd:a7:ae:b4:ea:c3:28:a7:65:bf:3f: ca:49:58:6d:4b:1c:8e:28:f6:c6:c0:28:50:be:da: 93:45:22:2a:23:67:f5:4a:50:8e:37:84:f3:ac:5c: 77:77:53:d0:6e:f0:cd:6e:a9:d9:53:55:5a:ac:55: 62:b5:e2:93:a0:22:03:9b:ed:d4:ac:74:e6:e3:5d: 28:24:dd:6b:16:9c:1c:51:ef:e1:95:90:0e:0a:53: e2:47:bb:ad:1c:34:f3:99:5e:45:47:db:0a:78:3c: 8a:25:73:e3:6a:35:5c:e8:a2:e0:4a:b4:a0:9e:12: 6f:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:03:47:2A:D7:AB:A2:BE:20:BD:BB:B6:D0:BE:07:DC:0D:5F:33:51 X509v3 Authority Key Identifier: keyid:D1:99:3F:78:CA:E4:45:9A:9B:9E:26:89:AD:30:F0:BC:44:CC:67:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Zk_eMrkRZqbniaJrTDwvETMZyQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:67:e3:3e:19:d4:3a:3b:b8:95:41:e0:6a:f5:1e:9a:8e:2c: 40:9d:b0:86:fb:8e:f3:70:de:1b:e6:a9:c8:0d:59:8a:68:83: 16:c0:a5:3a:f1:e3:7c:95:d5:65:91:4b:51:df:64:aa:f5:66: 73:7a:d9:27:dd:0d:b6:22:f3:07:94:a9:6b:52:60:6b:5b:de: 67:7e:b6:6a:52:ca:62:5c:27:14:30:8a:0b:ea:2e:83:ce:b3: 16:8f:0a:96:f0:b4:b7:6e:b2:4b:e0:a3:8b:99:a9:3f:af:b4: 08:0f:20:d3:3f:ea:d0:d4:57:ba:6f:84:bb:33:bc:77:e8:51: 7c:11:15:8d:57:aa:56:42:3e:42:c0:5c:5d:68:36:71:dc:20: 95:5c:c9:aa:05:03:50:f9:7a:69:55:cc:23:65:ff:77:92:34: 5d:dd:79:ad:03:e4:70:7e:21:15:6f:f0:89:48:b1:73:c8:d0: 1d:67:cf:af:f4:b3:95:56:c4:34:93:50:79:0c:a6:c0:45:9b: aa:91:b4:93:4a:a6:c3:95:8e:8a:2d:b4:ed:fe:99:49:52:8c: 4b:5e:69:a5:26:16:67:aa:9b:14:b7:90:a2:cd:56:ad:e3:fe: 26:93:96:7e:a2:00:5c:5b:30:e8:31:e5:ab:92:03:7c:5f:fa: 2e:19:fc:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6j4L8s+yZFgLgtFMzbYAWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxOTkzZjc4Y2FlNDQ1OWE5YjllMjY4OWFkMzBmMGJjNDRj YzY3MjQwHhcNMjUxMjIwMDcwMDQyWhcNMjUxMjIxMDcwMDQyWjAzMTEwLwYDVQQD EygyMDAzNDcyYWQ3YWJhMmJlMjBiZGJiYjZkMGJlMDdkYzBkNWYzMzUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA21tK8mvVmSu92jgg57sXLjGLr3bl /Pa9EtoiUqu9myryhpToDrFKiZBfZjTGl+4oZo94/QCaJuq08NZTxNRT1ixtfCWP IWmXrABjlmi0gOP+booZiToxQXGrCMneLsYITMQUeMa9Wag9+0RS13ggSrW1SIAY cEykOREhJ3AvoRlBZYsFWnQrWrluzaeutOrDKKdlvz/KSVhtSxyOKPbGwChQvtqT RSIqI2f1SlCON4TzrFx3d1PQbvDNbqnZU1VarFViteKToCIDm+3UrHTm410oJN1r FpwcUe/hlZAOClPiR7utHDTzmV5FR9sKeDyKJXPjajVc6KLgSrSgnhJvHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCADRyrXq6K+IL27ttC+B9wNXzNRMB8GA1UdIwQY MBaAFNGZP3jK5EWam54mia0w8LxEzGckMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFprX2VNcmtSWnFibmlhSnJURHd2RVRNWnlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8yZWJjNzktN2I5NC00YmY4LTkxMzMt NGIwNTc3NGRlMzcxLzEvMFprX2VNcmtSWnFibmlhSnJURHd2RVRNWnlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC8yZWJjNzktN2I5NC00YmY4LTkxMzMtNGIwNTc3NGRlMzcx LzEvMFprX2VNcmtSWnFibmlhSnJURHd2RVRNWnlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg2fjPhnU Oju4lUHgavUemo4sQJ2whvuO83DeG+apyA1ZimiDFsClOvHjfJXVZZFLUd9kqvVm c3rZJ90NtiLzB5Spa1Jga1veZ362alLKYlwnFDCKC+oug86zFo8KlvC0t26yS+Cj i5mpP6+0CA8g0z/q0NRXum+EuzO8d+hRfBEVjVeqVkI+QsBcXWg2cdwglVzJqgUD UPl6aVXMI2X/d5I0Xd15rQPkcH4hFW/wiUixc8jQHWfPr/SzlVbENJNQeQymwEWb qpG0k0qmw5WOii207f6ZSVKMS15ppSYWZ6qbFLeQos1WreP+JpOWfqIAXFsw6DHl q5IDfF/6Lhn8Og== -----END CERTIFICATE-----Generated at Sat Dec 20 09:11:16 2025 by rpki-client