This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.mft File: 0Zk_eMrkRZqbniaJrTDwvETMZyQ.mft (raw, json) Hash identifier: u+HFLMZoDEZNTKcF4fO+mDAdNareBVAWhcCuICNTySM= Subject key identifier: C3:C7:24:A1:55:81:45:86:FB:80:FF:EC:30:6F:57:3A:46:C0:47:94 Authority key identifier: D1:99:3F:78:CA:E4:45:9A:9B:9E:26:89:AD:30:F0:BC:44:CC:67:24 Certificate issuer: /CN=d1993f78cae4459a9b9e2689ad30f0bc44cc6724 Certificate serial: 019B0E25BA40EAC674476D2E1741E4BF1BED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Zk_eMrkRZqbniaJrTDwvETMZyQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.mft Manifest number: 04C4 Signing time: Thu 11 Dec 2025 16:01:52 +0000 Manifest this update: Thu 11 Dec 2025 16:01:52 +0000 Manifest next update: Fri 12 Dec 2025 16:01:52 +0000 Files and hashes: 1: 0Zk_eMrkRZqbniaJrTDwvETMZyQ.crl (hash: nEdR6xvuj5k0LZrNY10KwFdz4yol470fZjWWI1o583s=) 2: 5KVSG33DPZC1TKz5q9NlgQSJY8U.roa (hash: GwSKpHIjNmK499qIKezXAfYrejsXUCWzE4VXptKGrTs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.mft rsync://rpki.ripe.net/repository/DEFAULT/0Zk_eMrkRZqbniaJrTDwvETMZyQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 16:01:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:25:ba:40:ea:c6:74:47:6d:2e:17:41:e4:bf:1b:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1993f78cae4459a9b9e2689ad30f0bc44cc6724 Validity Not Before: Dec 11 16:01:52 2025 GMT Not After : Dec 12 16:01:52 2025 GMT Subject: CN=c3c724a155814586fb80ffec306f573a46c04794 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:d0:48:a0:72:80:26:69:a3:fa:30:5d:af:35: d3:72:61:a1:63:d5:a2:16:83:77:85:67:ca:8b:33: 4e:be:a6:de:17:3e:de:77:65:fa:10:ee:3f:69:23: cc:fa:52:cb:fc:d0:c1:bb:fb:21:ef:53:90:fc:a8: 83:81:c9:2d:88:3d:be:d8:8c:72:66:4b:13:35:cf: 7e:e7:67:1e:48:af:06:3b:0f:ac:99:77:83:01:a6: 8f:19:d4:8e:1a:04:e8:14:96:c9:36:ef:8d:57:f2: 8e:1f:f0:93:de:4b:13:d3:f2:be:ba:90:2c:40:5d: b1:22:7b:7a:d9:38:bd:d9:23:68:70:0b:8d:e7:46: 31:53:d9:28:72:9a:34:7f:8f:cc:1d:b6:b9:0e:38: f7:88:64:e7:cb:13:88:f6:59:f0:1a:2d:18:52:46: c0:5d:e5:ce:1f:98:13:cd:ce:ac:3f:a0:db:c2:3a: 43:a0:88:24:d5:de:84:12:93:e7:36:19:79:7d:9f: 4d:77:51:c2:02:25:0e:2c:9f:5f:8a:13:94:00:5e: 36:03:f9:ca:a6:f4:31:56:99:2b:c8:ff:5f:8b:ca: 11:80:8f:ef:93:98:e3:21:e8:53:b9:84:03:24:4d: 52:c5:90:f7:9a:d6:d8:e3:f1:fa:91:1e:1b:31:ac: 16:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:C7:24:A1:55:81:45:86:FB:80:FF:EC:30:6F:57:3A:46:C0:47:94 X509v3 Authority Key Identifier: keyid:D1:99:3F:78:CA:E4:45:9A:9B:9E:26:89:AD:30:F0:BC:44:CC:67:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Zk_eMrkRZqbniaJrTDwvETMZyQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:f9:49:a9:9a:9b:19:54:0d:2e:f2:fe:ee:80:26:6a:eb:6b: c0:7c:c8:32:19:7d:44:90:7b:26:b1:6d:fd:bb:57:ab:db:3b: 3f:56:be:c5:5c:4c:cb:55:2e:91:04:b8:07:47:2f:06:3c:9f: 26:62:b8:3a:29:6e:81:77:94:1b:94:30:50:60:99:45:66:08: a8:c4:11:39:53:75:b2:28:a8:82:84:ab:c9:f5:e2:48:74:6c: d6:ae:d5:86:14:5b:06:aa:43:a5:07:b7:55:a7:45:3e:35:03: 08:8d:36:bd:69:30:16:27:55:7f:42:8d:b5:97:43:74:db:86: 6b:f6:c4:63:01:ad:5b:70:e2:19:4b:f2:df:31:e3:c1:9b:c7: e5:46:c6:d8:45:58:01:77:6c:57:0a:0b:52:47:02:0a:ea:b5: 3b:6e:10:22:2b:cb:b9:85:5b:6f:cf:56:1b:38:5e:60:b1:0e: 12:d2:14:e3:71:3e:89:75:7e:c6:35:1d:6a:e2:a2:19:a4:b3: 68:a6:12:13:5c:2b:fe:c8:a3:53:a5:79:ac:e6:84:9b:e4:55: e8:16:0a:d1:b5:16:46:b3:6f:6d:69:cb:e8:09:90:df:42:62: a9:86:d9:1a:3e:4a:ec:6f:ff:21:6d:12:c1:e7:dc:d4:35:ff: b8:50:d8:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJbpA6sZ0R20uF0HkvxvtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxOTkzZjc4Y2FlNDQ1OWE5YjllMjY4OWFkMzBmMGJjNDRj YzY3MjQwHhcNMjUxMjExMTYwMTUyWhcNMjUxMjEyMTYwMTUyWjAzMTEwLwYDVQQD EyhjM2M3MjRhMTU1ODE0NTg2ZmI4MGZmZWMzMDZmNTczYTQ2YzA0Nzk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7NBIoHKAJmmj+jBdrzXTcmGhY9Wi FoN3hWfKizNOvqbeFz7ed2X6EO4/aSPM+lLL/NDBu/sh71OQ/KiDgcktiD2+2Ixy ZksTNc9+52ceSK8GOw+smXeDAaaPGdSOGgToFJbJNu+NV/KOH/CT3ksT0/K+upAs QF2xInt62Ti92SNocAuN50YxU9kocpo0f4/MHba5Djj3iGTnyxOI9lnwGi0YUkbA XeXOH5gTzc6sP6DbwjpDoIgk1d6EEpPnNhl5fZ9Nd1HCAiUOLJ9fihOUAF42A/nK pvQxVpkryP9fi8oRgI/vk5jjIehTuYQDJE1SxZD3mtbY4/H6kR4bMawWLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMPHJKFVgUWG+4D/7DBvVzpGwEeUMB8GA1UdIwQY MBaAFNGZP3jK5EWam54mia0w8LxEzGckMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFprX2VNcmtSWnFibmlhSnJURHd2RVRNWnlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8yZWJjNzktN2I5NC00YmY4LTkxMzMt NGIwNTc3NGRlMzcxLzEvMFprX2VNcmtSWnFibmlhSnJURHd2RVRNWnlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC8yZWJjNzktN2I5NC00YmY4LTkxMzMtNGIwNTc3NGRlMzcx LzEvMFprX2VNcmtSWnFibmlhSnJURHd2RVRNWnlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATflJqZqb GVQNLvL+7oAmautrwHzIMhl9RJB7JrFt/btXq9s7P1a+xVxMy1UukQS4B0cvBjyf JmK4OilugXeUG5QwUGCZRWYIqMQROVN1siiogoSryfXiSHRs1q7VhhRbBqpDpQe3 VadFPjUDCI02vWkwFidVf0KNtZdDdNuGa/bEYwGtW3DiGUvy3zHjwZvH5UbG2EVY AXdsVwoLUkcCCuq1O24QIivLuYVbb89WGzheYLEOEtIU43E+iXV+xjUdauKiGaSz aKYSE1wr/sijU6V5rOaEm+RV6BYK0bUWRrNvbWnL6AmQ30JiqYbZGj5K7G//IW0S wefc1DX/uFDYeg== -----END CERTIFICATE-----Generated at Fri Dec 12 00:09:33 2025 by rpki-client