This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/f9a00a-84ee-47a0-9ea1-f179db5f04b6/1/ZKDbECcDCCx8pVSrtbInYAGNVj8.mft File: ZKDbECcDCCx8pVSrtbInYAGNVj8.mft (raw, json) Hash identifier: UD3Y5WOtEbeHUlCu9Jc/CX+3P7GBuKaN5JqddYyQPs0= Subject key identifier: 3E:E0:1E:2F:C5:C8:27:B9:6F:73:07:AE:97:6D:37:D1:64:8C:75:11 Authority key identifier: 64:A0:DB:10:27:03:08:2C:7C:A5:54:AB:B5:B2:27:60:01:8D:56:3F Certificate issuer: /CN=64a0db102703082c7ca554abb5b22760018d563f Certificate serial: 019B465CF2119D69BF6FEE388AD8B1ADB550 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZKDbECcDCCx8pVSrtbInYAGNVj8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/f9a00a-84ee-47a0-9ea1-f179db5f04b6/1/ZKDbECcDCCx8pVSrtbInYAGNVj8.mft Manifest number: 178E Signing time: Mon 22 Dec 2025 14:00:54 +0000 Manifest this update: Mon 22 Dec 2025 14:00:54 +0000 Manifest next update: Tue 23 Dec 2025 14:00:54 +0000 Files and hashes: 1: ZKDbECcDCCx8pVSrtbInYAGNVj8.crl (hash: I6xfLvBofOf+oYC0KSV7JVUM5FQY0oi7ysl0ZZRiMgs=) 2: tClIzpB8AXYvJfeCisA8HxpOd74.roa (hash: sXbqNinLjTETFbK42QOaktsLVCyYHDlotZvPtCRaxBU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/f9a00a-84ee-47a0-9ea1-f179db5f04b6/1/ZKDbECcDCCx8pVSrtbInYAGNVj8.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/f9a00a-84ee-47a0-9ea1-f179db5f04b6/1/ZKDbECcDCCx8pVSrtbInYAGNVj8.mft rsync://rpki.ripe.net/repository/DEFAULT/ZKDbECcDCCx8pVSrtbInYAGNVj8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 10:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:5c:f2:11:9d:69:bf:6f:ee:38:8a:d8:b1:ad:b5:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64a0db102703082c7ca554abb5b22760018d563f Validity Not Before: Dec 22 14:00:54 2025 GMT Not After : Dec 23 14:00:54 2025 GMT Subject: CN=3ee01e2fc5c827b96f7307ae976d37d1648c7511 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:2b:68:d4:6a:b2:db:27:bd:69:cf:36:81:2d: 3d:d1:7b:48:96:90:3e:fa:09:96:09:3c:a2:83:f1: dc:81:85:d5:05:c5:c7:9b:78:84:0f:56:73:3d:12: b9:34:3f:2c:42:8c:05:20:32:fd:96:bd:80:8b:fc: 8d:a9:37:6c:92:35:08:7e:2d:a8:2b:61:7e:71:ac: cc:e4:6e:de:a6:26:d9:27:ca:e5:3d:da:34:f1:c2: 4c:1a:60:a3:12:31:46:91:d6:8d:a8:1e:e0:12:f3: bc:fa:bf:b2:80:20:b5:24:21:17:b4:da:4e:a0:ac: d2:74:a0:1e:b9:ef:07:c0:e1:5e:57:71:a7:27:2a: d4:82:86:42:83:52:0e:8d:26:98:f2:34:7a:90:2c: 61:7c:8a:bd:e6:17:b3:15:d5:e3:cc:53:99:ad:55: a6:f6:69:c6:82:5e:88:20:3d:18:00:09:d4:57:f3: 55:02:c5:1a:d7:12:6c:69:e8:e1:ea:0e:c8:db:7a: c7:36:ab:d1:aa:ab:3c:3c:46:b3:d5:6f:7b:6c:61: 36:37:9b:a4:5e:fa:93:8f:98:fa:e9:ab:16:2e:20: db:d7:8f:fc:39:30:5d:61:ba:60:22:15:42:ae:b0: d3:0f:67:c4:87:11:76:7a:5f:ae:ca:3c:c9:e5:a0: ca:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:E0:1E:2F:C5:C8:27:B9:6F:73:07:AE:97:6D:37:D1:64:8C:75:11 X509v3 Authority Key Identifier: keyid:64:A0:DB:10:27:03:08:2C:7C:A5:54:AB:B5:B2:27:60:01:8D:56:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZKDbECcDCCx8pVSrtbInYAGNVj8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/f9a00a-84ee-47a0-9ea1-f179db5f04b6/1/ZKDbECcDCCx8pVSrtbInYAGNVj8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/f9a00a-84ee-47a0-9ea1-f179db5f04b6/1/ZKDbECcDCCx8pVSrtbInYAGNVj8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:e2:29:9a:0a:f5:66:74:98:b0:c7:a1:b9:7f:76:c1:20:a5: 3d:ea:9a:fb:09:3c:b0:55:21:cc:03:0a:a3:a6:79:e3:8c:78: c6:17:12:b6:63:e1:1d:5d:6a:4c:ac:26:fe:c4:91:38:c2:03: c6:2a:d4:ae:aa:f6:88:09:c6:7a:09:f6:a5:b2:ee:13:c1:a2: 43:e0:57:7e:01:f8:8e:9b:e1:a6:23:2c:59:ea:a4:db:24:23: 9e:e5:47:19:ad:f2:50:7e:d0:30:cd:be:e8:e5:48:f6:81:bb: 74:e7:95:6f:01:4b:9d:34:03:68:a2:e8:ff:0e:3f:31:93:0b: fb:ef:24:ff:18:af:25:c9:4c:3b:e3:d9:a1:7e:89:67:b0:de: 6b:92:48:7f:26:62:33:84:9d:75:a6:ac:c9:ff:9e:29:15:94: ac:41:7d:bc:9e:21:db:6c:d8:2c:4b:b4:6f:66:b0:3e:c5:44: 5f:e5:bd:3d:db:89:af:6a:a1:4b:65:70:bb:14:8b:c0:74:c2: 47:00:1e:59:fd:8e:80:5c:e0:b6:94:a7:32:2b:e3:27:77:76: b2:c1:89:b3:8a:cb:d7:0c:9d:3a:e7:40:96:77:a7:d5:52:5d: ad:7e:67:68:07:fc:1e:eb:3c:63:4b:f5:56:87:00:06:9d:92: 79:77:32:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGXPIRnWm/b+44itixrbVQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0YTBkYjEwMjcwMzA4MmM3Y2E1NTRhYmI1YjIyNzYwMDE4 ZDU2M2YwHhcNMjUxMjIyMTQwMDU0WhcNMjUxMjIzMTQwMDU0WjAzMTEwLwYDVQQD EygzZWUwMWUyZmM1YzgyN2I5NmY3MzA3YWU5NzZkMzdkMTY0OGM3NTExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSto1Gqy2ye9ac82gS090XtIlpA+ +gmWCTyig/HcgYXVBcXHm3iED1ZzPRK5ND8sQowFIDL9lr2Ai/yNqTdskjUIfi2o K2F+cazM5G7epibZJ8rlPdo08cJMGmCjEjFGkdaNqB7gEvO8+r+ygCC1JCEXtNpO oKzSdKAeue8HwOFeV3GnJyrUgoZCg1IOjSaY8jR6kCxhfIq95hezFdXjzFOZrVWm 9mnGgl6IID0YAAnUV/NVAsUa1xJsaejh6g7I23rHNqvRqqs8PEaz1W97bGE2N5uk XvqTj5j66asWLiDb14/8OTBdYbpgIhVCrrDTD2fEhxF2el+uyjzJ5aDKVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD7gHi/FyCe5b3MHrpdtN9FkjHURMB8GA1UdIwQY MBaAFGSg2xAnAwgsfKVUq7WyJ2ABjVY/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWktEYkVDY0RDQ3g4cFZTcnRiSW5ZQUdOVmo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9mOWEwMGEtODRlZS00N2EwLTllYTEt ZjE3OWRiNWYwNGI2LzEvWktEYkVDY0RDQ3g4cFZTcnRiSW5ZQUdOVmo4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9mOWEwMGEtODRlZS00N2EwLTllYTEtZjE3OWRiNWYwNGI2 LzEvWktEYkVDY0RDQ3g4cFZTcnRiSW5ZQUdOVmo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQOIpmgr1 ZnSYsMehuX92wSClPeqa+wk8sFUhzAMKo6Z544x4xhcStmPhHV1qTKwm/sSROMID xirUrqr2iAnGegn2pbLuE8GiQ+BXfgH4jpvhpiMsWeqk2yQjnuVHGa3yUH7QMM2+ 6OVI9oG7dOeVbwFLnTQDaKLo/w4/MZML++8k/xivJclMO+PZoX6JZ7Dea5JIfyZi M4Sddaasyf+eKRWUrEF9vJ4h22zYLEu0b2awPsVEX+W9PduJr2qhS2VwuxSLwHTC RwAeWf2OgFzgtpSnMivjJ3d2ssGJs4rL1wydOudAlnen1VJdrX5naAf8Hus8Y0v1 VocABp2SeXcy5g== -----END CERTIFICATE-----Generated at Mon Dec 22 15:39:49 2025 by rpki-client