This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/6520c4-77ce-4638-b2ac-dc9fccd5fe01/1/_fGs8n0eRLz5EnH7Z1AVXENV_zk.mft File: _fGs8n0eRLz5EnH7Z1AVXENV_zk.mft (raw, json) Hash identifier: R4VijQsqcdgsg183R0w5CTlZ7/kpyo43TNA4f6a6pgw= Subject key identifier: 9F:F1:04:B0:F8:AF:E6:D4:0E:89:B2:94:3F:CF:1C:76:52:C8:F2:A2 Authority key identifier: FD:F1:AC:F2:7D:1E:44:BC:F9:12:71:FB:67:50:15:5C:43:55:FF:39 Certificate issuer: /CN=fdf1acf27d1e44bcf91271fb6750155c4355ff39 Certificate serial: 019B6241E8DA296E1E579ABA9340763A7861 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_fGs8n0eRLz5EnH7Z1AVXENV_zk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/6520c4-77ce-4638-b2ac-dc9fccd5fe01/1/_fGs8n0eRLz5EnH7Z1AVXENV_zk.mft Manifest number: 0BA9 Signing time: Sun 28 Dec 2025 00:00:45 +0000 Manifest this update: Sun 28 Dec 2025 00:00:45 +0000 Manifest next update: Mon 29 Dec 2025 00:00:45 +0000 Files and hashes: 1: _fGs8n0eRLz5EnH7Z1AVXENV_zk.crl (hash: FPuHfeTJY8n5Y9mtN50bXlz9fBcw9+A0Ew3sthnhh74=) 2: pSzdGy5wvZ2oOOhRlwxrxQanyEI.roa (hash: gpyggWv1B6MR9MZIaLvGDCcYLmPKVbPbekI0j6+XsgA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/6520c4-77ce-4638-b2ac-dc9fccd5fe01/1/_fGs8n0eRLz5EnH7Z1AVXENV_zk.crl rsync://rpki.ripe.net/repository/DEFAULT/28/6520c4-77ce-4638-b2ac-dc9fccd5fe01/1/_fGs8n0eRLz5EnH7Z1AVXENV_zk.mft rsync://rpki.ripe.net/repository/DEFAULT/_fGs8n0eRLz5EnH7Z1AVXENV_zk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:62:41:e8:da:29:6e:1e:57:9a:ba:93:40:76:3a:78:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdf1acf27d1e44bcf91271fb6750155c4355ff39 Validity Not Before: Dec 28 00:00:45 2025 GMT Not After : Dec 29 00:00:45 2025 GMT Subject: CN=9ff104b0f8afe6d40e89b2943fcf1c7652c8f2a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:39:a9:b7:53:ae:9b:d6:a7:db:1c:fd:08:8d: ab:34:8d:29:01:10:a9:b6:61:23:6b:1d:35:e3:59: 5a:03:80:7f:b1:8c:68:c1:64:fa:7c:58:54:8a:f2: 4e:3a:ca:62:0c:3d:b5:69:c3:e6:14:17:8f:56:28: 48:2f:19:a9:9f:ff:32:1f:2a:eb:4f:11:ef:3f:41: f6:be:1a:f0:85:74:11:84:55:fe:34:d3:cb:c0:7c: 34:f9:8f:06:c2:ed:8b:56:ab:43:ff:a7:f6:88:1c: 3c:b0:01:fd:d9:47:15:91:3d:d1:68:d3:a6:a2:cd: 2c:bb:69:b1:ff:9f:a2:cb:a7:30:e4:92:53:e9:57: 9d:99:63:31:8e:d1:7c:33:e1:c9:2c:7d:62:8b:87: c7:15:bf:3a:0f:e0:cd:5d:21:8c:aa:cc:3c:aa:7b: 6d:1e:59:56:cc:cf:86:23:59:6a:4c:e0:41:c6:0b: 52:13:a8:75:5d:95:3e:2e:92:a6:fa:8c:c7:7f:00: 06:3c:69:09:c1:1b:af:3b:86:f3:94:fb:15:2a:fb: 61:62:88:47:58:2b:da:42:64:e0:f6:27:10:f5:b4: d2:66:c0:48:0f:43:ef:f6:f9:83:ed:27:8b:7a:c4: 34:d6:0e:a3:d0:c6:af:90:27:63:a6:8c:fc:f4:e3: 5b:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:F1:04:B0:F8:AF:E6:D4:0E:89:B2:94:3F:CF:1C:76:52:C8:F2:A2 X509v3 Authority Key Identifier: keyid:FD:F1:AC:F2:7D:1E:44:BC:F9:12:71:FB:67:50:15:5C:43:55:FF:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_fGs8n0eRLz5EnH7Z1AVXENV_zk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6520c4-77ce-4638-b2ac-dc9fccd5fe01/1/_fGs8n0eRLz5EnH7Z1AVXENV_zk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6520c4-77ce-4638-b2ac-dc9fccd5fe01/1/_fGs8n0eRLz5EnH7Z1AVXENV_zk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:2a:15:49:2d:13:69:31:dd:ae:e3:b1:d2:a4:3d:e7:4d:68: 20:d6:35:94:1e:36:a9:ca:c7:59:25:5e:70:aa:10:1b:26:c6: 85:91:c6:e6:b7:b4:24:3e:ee:d7:25:7a:5a:9c:62:56:36:52: 52:df:dc:b6:6a:bb:ae:1e:de:8d:a4:66:fc:9d:c9:ee:eb:dd: 11:0a:a0:e5:c2:8c:ed:4e:9d:4b:c8:9c:60:1b:e7:b7:eb:17: d8:c8:d6:fa:70:d6:a2:b0:50:77:d3:2d:21:27:af:97:ff:15: 3b:04:86:40:e5:99:12:d7:95:17:4c:34:dc:d4:70:98:15:4e: 8f:ee:c1:cf:ec:fc:49:6f:f2:c0:ae:75:08:b7:b2:7b:c5:0a: 28:e7:07:96:db:7d:b7:3f:be:e2:17:51:84:17:eb:76:60:54: 77:c5:c8:e7:b2:5b:28:c0:2d:f0:8e:d1:4e:cf:f0:6e:30:ff: 92:3b:3c:50:a9:6b:1d:e1:ff:6d:d1:57:f1:e5:a0:32:66:37: ee:54:fe:f2:67:de:f4:44:a5:a2:a7:13:d6:62:c5:ad:92:3c: 4c:ff:4e:74:2a:46:66:f4:07:4a:6b:65:ee:a6:bb:7e:95:f5: 24:dc:ae:7c:96:ab:db:7b:44:c9:cf:d8:83:e8:75:ea:06:1b: dc:6f:70:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtiQejaKW4eV5q6k0B2OnhhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkZjFhY2YyN2QxZTQ0YmNmOTEyNzFmYjY3NTAxNTVjNDM1 NWZmMzkwHhcNMjUxMjI4MDAwMDQ1WhcNMjUxMjI5MDAwMDQ1WjAzMTEwLwYDVQQD Eyg5ZmYxMDRiMGY4YWZlNmQ0MGU4OWIyOTQzZmNmMWM3NjUyYzhmMmEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjmpt1Oum9an2xz9CI2rNI0pARCp tmEjax0141laA4B/sYxowWT6fFhUivJOOspiDD21acPmFBePVihILxmpn/8yHyrr TxHvP0H2vhrwhXQRhFX+NNPLwHw0+Y8Gwu2LVqtD/6f2iBw8sAH92UcVkT3RaNOm os0su2mx/5+iy6cw5JJT6VedmWMxjtF8M+HJLH1ii4fHFb86D+DNXSGMqsw8qntt HllWzM+GI1lqTOBBxgtSE6h1XZU+LpKm+ozHfwAGPGkJwRuvO4bzlPsVKvthYohH WCvaQmTg9icQ9bTSZsBID0Pv9vmD7SeLesQ01g6j0MavkCdjpoz89ONbMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ/xBLD4r+bUDomylD/PHHZSyPKiMB8GA1UdIwQY MBaAFP3xrPJ9HkS8+RJx+2dQFVxDVf85MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2ZHczhuMGVSTHo1RW5IN1oxQVZYRU5WX3prLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC82NTIwYzQtNzdjZS00NjM4LWIyYWMt ZGM5ZmNjZDVmZTAxLzEvX2ZHczhuMGVSTHo1RW5IN1oxQVZYRU5WX3prLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC82NTIwYzQtNzdjZS00NjM4LWIyYWMtZGM5ZmNjZDVmZTAx LzEvX2ZHczhuMGVSTHo1RW5IN1oxQVZYRU5WX3prLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfioVSS0T aTHdruOx0qQ9501oINY1lB42qcrHWSVecKoQGybGhZHG5re0JD7u1yV6WpxiVjZS Ut/ctmq7rh7ejaRm/J3J7uvdEQqg5cKM7U6dS8icYBvnt+sX2MjW+nDWorBQd9Mt ISevl/8VOwSGQOWZEteVF0w03NRwmBVOj+7Bz+z8SW/ywK51CLeye8UKKOcHltt9 tz++4hdRhBfrdmBUd8XI57JbKMAt8I7RTs/wbjD/kjs8UKlrHeH/bdFX8eWgMmY3 7lT+8mfe9ESloqcT1mLFrZI8TP9OdCpGZvQHSmtl7qa7fpX1JNyufJar23tEyc/Y g+h16gYb3G9w4A== -----END CERTIFICATE-----Generated at Sun Dec 28 07:29:21 2025 by rpki-client