This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/6520c4-77ce-4638-b2ac-dc9fccd5fe01/1/_fGs8n0eRLz5EnH7Z1AVXENV_zk.mft File: _fGs8n0eRLz5EnH7Z1AVXENV_zk.mft (raw, json) Hash identifier: fjoLqvSTjL8WK4zcDHE4TDmvjpXsgSLhXfgKRMl6b2k= Subject key identifier: 18:3F:2B:03:57:F2:94:80:A7:F1:BC:D9:63:73:19:CE:DE:1E:58:82 Authority key identifier: FD:F1:AC:F2:7D:1E:44:BC:F9:12:71:FB:67:50:15:5C:43:55:FF:39 Certificate issuer: /CN=fdf1acf27d1e44bcf91271fb6750155c4355ff39 Certificate serial: 019B71B4F162F088F59FFB39E491AF6B63DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_fGs8n0eRLz5EnH7Z1AVXENV_zk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/6520c4-77ce-4638-b2ac-dc9fccd5fe01/1/_fGs8n0eRLz5EnH7Z1AVXENV_zk.mft Manifest number: 0BB1 Signing time: Wed 31 Dec 2025 00:00:42 +0000 Manifest this update: Wed 31 Dec 2025 00:00:42 +0000 Manifest next update: Thu 01 Jan 2026 00:00:42 +0000 Files and hashes: 1: _fGs8n0eRLz5EnH7Z1AVXENV_zk.crl (hash: 5l2OewQY2AXZ1nMdKh1MMJFXChYSDyS9EpswhxDOm/k=) 2: pSzdGy5wvZ2oOOhRlwxrxQanyEI.roa (hash: gpyggWv1B6MR9MZIaLvGDCcYLmPKVbPbekI0j6+XsgA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/6520c4-77ce-4638-b2ac-dc9fccd5fe01/1/_fGs8n0eRLz5EnH7Z1AVXENV_zk.crl rsync://rpki.ripe.net/repository/DEFAULT/28/6520c4-77ce-4638-b2ac-dc9fccd5fe01/1/_fGs8n0eRLz5EnH7Z1AVXENV_zk.mft rsync://rpki.ripe.net/repository/DEFAULT/_fGs8n0eRLz5EnH7Z1AVXENV_zk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:71:b4:f1:62:f0:88:f5:9f:fb:39:e4:91:af:6b:63:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdf1acf27d1e44bcf91271fb6750155c4355ff39 Validity Not Before: Dec 31 00:00:42 2025 GMT Not After : Jan 1 00:00:42 2026 GMT Subject: CN=183f2b0357f29480a7f1bcd9637319cede1e5882 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d9:9c:72:e6:ba:34:fa:8b:db:9c:d3:87:66: 1f:bd:f3:7f:e3:17:ee:43:75:54:6d:25:9b:8e:4f: 97:87:39:f0:7b:69:2a:e1:e7:44:4c:22:86:1f:7b: 98:20:06:42:ac:7a:ca:92:d1:fd:e3:f2:7d:b2:1b: 30:62:36:2b:4e:2b:db:6f:94:14:4c:b6:46:8c:89: 50:e9:cb:c0:45:8a:d8:ee:77:f4:89:8e:f6:be:fe: ae:f0:3b:40:1b:cf:a8:4c:ec:94:bd:7b:80:ec:fd: 29:3f:c9:08:f4:ca:b3:7e:18:dd:2d:92:21:bf:c1: 6d:b9:99:8d:7e:91:4c:bf:25:ab:b3:9a:3e:2c:b3: f1:b2:f5:aa:23:43:76:9a:a4:c6:09:40:06:d0:3a: e3:5e:a1:e0:d9:9f:27:b0:85:27:3b:c9:a3:28:89: 0c:26:d9:5d:84:61:3c:23:81:95:08:2d:a0:5b:c2: ab:5e:24:41:88:c2:34:06:48:c2:0f:2f:fc:93:c4: e9:8e:c7:74:24:c9:9d:ea:52:e2:d7:01:0a:5c:0d: e7:77:f1:62:c7:7c:aa:2b:5e:75:df:92:98:77:5c: 78:a2:b9:62:41:b2:a7:65:ef:6f:b8:31:57:ae:d2: c8:07:59:9f:19:90:d1:d6:e1:84:c1:62:2f:14:2f: 95:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:3F:2B:03:57:F2:94:80:A7:F1:BC:D9:63:73:19:CE:DE:1E:58:82 X509v3 Authority Key Identifier: keyid:FD:F1:AC:F2:7D:1E:44:BC:F9:12:71:FB:67:50:15:5C:43:55:FF:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_fGs8n0eRLz5EnH7Z1AVXENV_zk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6520c4-77ce-4638-b2ac-dc9fccd5fe01/1/_fGs8n0eRLz5EnH7Z1AVXENV_zk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6520c4-77ce-4638-b2ac-dc9fccd5fe01/1/_fGs8n0eRLz5EnH7Z1AVXENV_zk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:82:17:7a:c3:1e:45:b9:77:50:06:43:60:e5:ab:84:34:1e: ec:30:98:ae:62:78:80:be:fa:7f:e3:9e:bd:fa:cb:0b:dd:c7: 2f:6e:59:37:7c:f4:e3:aa:bf:49:44:cd:eb:a7:01:84:a0:24: 68:be:fd:38:2d:d9:64:b9:3c:3f:98:eb:1c:ef:10:8e:7d:d7: e7:93:6c:53:6e:ad:5a:53:77:30:36:e3:b1:b3:75:0c:51:cb: 68:e9:0c:ba:99:cf:4a:1e:7a:dc:9f:67:6f:7c:f5:09:79:62: ef:54:a2:19:80:4f:03:d1:3c:fe:1c:3d:74:bf:5c:00:0e:44: ad:16:70:35:c1:1a:e2:60:ae:a8:3b:d7:1a:46:b1:b2:ae:c4: a1:9d:7d:5d:e5:9f:85:12:ba:c4:76:fd:4e:2f:c9:9b:ce:40: 05:8f:6d:a6:91:7b:23:3d:9b:75:2c:e9:53:b2:54:71:f4:43: ea:5c:d6:a8:83:82:db:14:d6:92:b0:f0:b9:5c:75:3b:7d:8c: 5c:f2:4c:00:11:05:36:c0:c5:60:e1:d7:ba:c5:a5:7c:05:7c: 53:ca:10:67:2f:05:da:c1:e9:7f:67:c4:43:c2:72:84:80:d5: 44:ed:48:6c:b7:b8:4f:2d:49:ab:f3:96:7c:94:bc:99:87:51: 04:49:a8:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtxtPFi8Ij1n/s55JGva2PcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkZjFhY2YyN2QxZTQ0YmNmOTEyNzFmYjY3NTAxNTVjNDM1 NWZmMzkwHhcNMjUxMjMxMDAwMDQyWhcNMjYwMTAxMDAwMDQyWjAzMTEwLwYDVQQD EygxODNmMmIwMzU3ZjI5NDgwYTdmMWJjZDk2MzczMTljZWRlMWU1ODgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNmccua6NPqL25zTh2YfvfN/4xfu Q3VUbSWbjk+Xhznwe2kq4edETCKGH3uYIAZCrHrKktH94/J9shswYjYrTivbb5QU TLZGjIlQ6cvARYrY7nf0iY72vv6u8DtAG8+oTOyUvXuA7P0pP8kI9MqzfhjdLZIh v8FtuZmNfpFMvyWrs5o+LLPxsvWqI0N2mqTGCUAG0DrjXqHg2Z8nsIUnO8mjKIkM JtldhGE8I4GVCC2gW8KrXiRBiMI0BkjCDy/8k8Tpjsd0JMmd6lLi1wEKXA3nd/Fi x3yqK15135KYd1x4orliQbKnZe9vuDFXrtLIB1mfGZDR1uGEwWIvFC+VJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBg/KwNX8pSAp/G82WNzGc7eHliCMB8GA1UdIwQY MBaAFP3xrPJ9HkS8+RJx+2dQFVxDVf85MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2ZHczhuMGVSTHo1RW5IN1oxQVZYRU5WX3prLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC82NTIwYzQtNzdjZS00NjM4LWIyYWMt ZGM5ZmNjZDVmZTAxLzEvX2ZHczhuMGVSTHo1RW5IN1oxQVZYRU5WX3prLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC82NTIwYzQtNzdjZS00NjM4LWIyYWMtZGM5ZmNjZDVmZTAx LzEvX2ZHczhuMGVSTHo1RW5IN1oxQVZYRU5WX3prLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq4IXesMe Rbl3UAZDYOWrhDQe7DCYrmJ4gL76f+OevfrLC93HL25ZN3z046q/SUTN66cBhKAk aL79OC3ZZLk8P5jrHO8Qjn3X55NsU26tWlN3MDbjsbN1DFHLaOkMupnPSh563J9n b3z1CXli71SiGYBPA9E8/hw9dL9cAA5ErRZwNcEa4mCuqDvXGkaxsq7EoZ19XeWf hRK6xHb9Ti/Jm85ABY9tppF7Iz2bdSzpU7JUcfRD6lzWqIOC2xTWkrDwuVx1O32M XPJMABEFNsDFYOHXusWlfAV8U8oQZy8F2sHpf2fEQ8JyhIDVRO1IbLe4Ty1Jq/OW fJS8mYdRBEmo1A== -----END CERTIFICATE-----Generated at Wed Dec 31 09:21:18 2025 by rpki-client