This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft File: 0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft (raw, json) Hash identifier: thHiDVBAZ+6Wyw/vegEbIb4UqVJsZF9r3aLlqVU1vqA= Subject key identifier: 09:65:3E:E8:41:C0:28:F5:2A:52:4B:93:2D:C7:51:F5:60:84:4B:06 Authority key identifier: D1:98:83:41:D3:60:78:65:F5:0F:5B:B0:2A:9A:3F:5C:2D:E5:8A:92 Certificate issuer: /CN=d1988341d3607865f50f5bb02a9a3f5c2de58a92 Certificate serial: 019B435BD0E20A5A4569EB26660774BF85F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ZiDQdNgeGX1D1uwKpo_XC3lipI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft Manifest number: 02EE Signing time: Mon 22 Dec 2025 00:00:49 +0000 Manifest this update: Mon 22 Dec 2025 00:00:49 +0000 Manifest next update: Tue 23 Dec 2025 00:00:49 +0000 Files and hashes: 1: 0ZiDQdNgeGX1D1uwKpo_XC3lipI.crl (hash: 5ISRHcLGcI973VKAKBn/5OU5dVPOohalg8A0FKpKbqA=) 2: 7YhU_vK5G08AkR9W5LfWHGVyypQ.roa (hash: RlhL4E2mBOXIjwSddZ4sZnexQ4dNTH+ubROkoPIYvn0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.crl rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft rsync://rpki.ripe.net/repository/DEFAULT/0ZiDQdNgeGX1D1uwKpo_XC3lipI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:5b:d0:e2:0a:5a:45:69:eb:26:66:07:74:bf:85:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1988341d3607865f50f5bb02a9a3f5c2de58a92 Validity Not Before: Dec 22 00:00:49 2025 GMT Not After : Dec 23 00:00:49 2025 GMT Subject: CN=09653ee841c028f52a524b932dc751f560844b06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:6c:4a:e8:55:f1:f1:33:7b:e0:7a:d6:03:8c: 77:2d:88:b5:d3:4a:27:18:17:e1:e8:6c:ec:df:f3: ba:85:99:86:ee:77:c4:2f:37:ec:d2:d3:8d:fc:ea: ae:a7:8e:b2:8f:ae:d2:e7:88:db:0d:eb:d2:eb:ce: 9d:1f:af:c4:c8:f5:7e:9f:ce:94:cb:55:ab:30:81: 6d:64:2b:4c:35:e5:80:2b:72:fc:72:84:a4:80:cd: d2:e1:aa:c0:4b:d5:03:3f:ea:df:76:7e:f9:bc:48: e3:2f:6d:e6:8a:94:c2:9d:55:68:a1:6a:5e:58:a4: ee:31:0c:98:ae:02:af:d3:b6:cb:72:af:04:b9:e8: 40:3b:a4:59:af:a8:d1:20:b5:e7:bd:7a:e1:34:ba: 60:46:f5:b1:c5:d3:fa:b0:88:75:58:22:78:09:45: 68:2c:d8:ed:b7:5d:c8:40:fd:4b:5f:46:07:d8:f2: dc:71:ed:a8:72:37:c3:b6:9a:e0:c7:ad:e9:05:56: cf:f3:5f:6e:dc:df:11:75:c6:2f:17:b8:7d:50:57: 12:86:cb:78:d9:b9:7a:9a:d2:fb:37:02:9c:f0:9e: a8:a2:83:07:fb:f4:22:b3:e9:23:04:48:7c:61:ff: a3:3b:a3:90:d9:98:5b:ae:01:eb:60:2e:68:a3:17: 9b:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:65:3E:E8:41:C0:28:F5:2A:52:4B:93:2D:C7:51:F5:60:84:4B:06 X509v3 Authority Key Identifier: keyid:D1:98:83:41:D3:60:78:65:F5:0F:5B:B0:2A:9A:3F:5C:2D:E5:8A:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ZiDQdNgeGX1D1uwKpo_XC3lipI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:f0:a6:27:30:98:51:ae:db:34:f9:24:9b:e1:eb:bc:60:82: 20:99:67:62:9b:a2:79:2d:e4:8c:5a:c0:21:c8:ff:bc:6a:e3: ac:20:a6:6c:5b:b7:a6:52:21:2d:9b:7f:86:50:9a:dc:21:b9: 2c:fb:16:fd:10:ce:01:66:c2:71:ce:ba:44:33:0c:f5:d0:da: 34:c0:eb:e7:fc:7b:1c:2e:6e:7e:fe:54:94:db:f8:01:5a:39: e7:db:a9:a8:8c:79:29:ca:c0:4f:f9:36:20:d8:63:23:ab:f0: 55:66:dc:a3:0d:73:41:b9:d2:be:64:1d:44:8b:3f:19:7b:ee: 51:49:c3:66:5e:21:52:e9:28:fb:3a:b7:21:fa:d4:8d:a5:a8: ca:1a:34:27:79:ca:c8:dd:6b:c3:a8:ae:0c:e5:af:10:e6:38: 8c:8e:d9:ed:40:23:f5:f3:19:05:12:83:bc:c1:7c:79:d9:c8: 9d:fd:a6:4a:c5:3d:ce:37:e6:4d:a2:b3:99:11:5e:81:0b:a7: 27:de:bc:18:41:ac:82:f5:12:bf:01:5c:81:42:c7:c6:a3:0c: 1d:76:6e:03:b7:89:16:28:75:b5:2a:fe:ca:c0:b7:a6:09:46: 68:3e:14:00:1f:37:01:b6:ea:06:7c:94:a0:53:bb:87:e9:df: 61:4a:2d:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDW9DiClpFaesmZgd0v4XxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxOTg4MzQxZDM2MDc4NjVmNTBmNWJiMDJhOWEzZjVjMmRl NThhOTIwHhcNMjUxMjIyMDAwMDQ5WhcNMjUxMjIzMDAwMDQ5WjAzMTEwLwYDVQQD EygwOTY1M2VlODQxYzAyOGY1MmE1MjRiOTMyZGM3NTFmNTYwODQ0YjA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2xK6FXx8TN74HrWA4x3LYi100on GBfh6Gzs3/O6hZmG7nfELzfs0tON/Oqup46yj67S54jbDevS686dH6/EyPV+n86U y1WrMIFtZCtMNeWAK3L8coSkgM3S4arAS9UDP+rfdn75vEjjL23mipTCnVVooWpe WKTuMQyYrgKv07bLcq8EuehAO6RZr6jRILXnvXrhNLpgRvWxxdP6sIh1WCJ4CUVo LNjtt13IQP1LX0YH2PLcce2ocjfDtprgx63pBVbP819u3N8RdcYvF7h9UFcShst4 2bl6mtL7NwKc8J6oooMH+/Qis+kjBEh8Yf+jO6OQ2ZhbrgHrYC5ooxebcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAllPuhBwCj1KlJLky3HUfVghEsGMB8GA1UdIwQY MBaAFNGYg0HTYHhl9Q9bsCqaP1wt5YqSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFppRFFkTmdlR1gxRDF1d0twb19YQzNsaXBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8yMzI5ZjMtYTI4ZS00OWRlLTk4YTMt OTMyMGExYzczYjFkLzEvMFppRFFkTmdlR1gxRDF1d0twb19YQzNsaXBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS8yMzI5ZjMtYTI4ZS00OWRlLTk4YTMtOTMyMGExYzczYjFk LzEvMFppRFFkTmdlR1gxRDF1d0twb19YQzNsaXBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWPCmJzCY Ua7bNPkkm+HrvGCCIJlnYpuieS3kjFrAIcj/vGrjrCCmbFu3plIhLZt/hlCa3CG5 LPsW/RDOAWbCcc66RDMM9dDaNMDr5/x7HC5ufv5UlNv4AVo559upqIx5KcrAT/k2 INhjI6vwVWbcow1zQbnSvmQdRIs/GXvuUUnDZl4hUuko+zq3IfrUjaWoyho0J3nK yN1rw6iuDOWvEOY4jI7Z7UAj9fMZBRKDvMF8ednInf2mSsU9zjfmTaKzmRFegQun J968GEGsgvUSvwFcgULHxqMMHXZuA7eJFih1tSr+ysC3pglGaD4UAB83AbbqBnyU oFO7h+nfYUotgQ== -----END CERTIFICATE-----Generated at Mon Dec 22 02:34:57 2025 by rpki-client