This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.mft File: 0zDcrR41MkVJwcmhlBerak0JreA.mft (raw, json) Hash identifier: ygWDTqJqFKfhQTg6ypKH6N6R/12S4jrcNVdjpyOvVzQ= Subject key identifier: 82:AB:87:D5:DA:01:01:2A:A1:4D:F1:BC:B8:B8:0C:3A:B9:F2:51:54 Authority key identifier: D3:30:DC:AD:1E:35:32:45:49:C1:C9:A1:94:17:AB:6A:4D:09:AD:E0 Certificate issuer: /CN=d330dcad1e35324549c1c9a19417ab6a4d09ade0 Certificate serial: 019B424ABDE5CD1A1B8F876F787BE5702FC9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0zDcrR41MkVJwcmhlBerak0JreA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.mft Manifest number: 0E60 Signing time: Sun 21 Dec 2025 19:02:32 +0000 Manifest this update: Sun 21 Dec 2025 19:02:32 +0000 Manifest next update: Mon 22 Dec 2025 19:02:32 +0000 Files and hashes: 1: 0zDcrR41MkVJwcmhlBerak0JreA.crl (hash: 0kBb4T4stDrh8XvJS+NMUwTRdil3AeJTn/u7LyScbsU=) 2: LPCDu87vvEM5O8HyjWDakdHtl2E.roa (hash: Wurynnxc4HmLUHSiIQ2miFmjlyoy/berebBUDyFaz/I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.mft rsync://rpki.ripe.net/repository/DEFAULT/0zDcrR41MkVJwcmhlBerak0JreA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 19:02:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:4a:bd:e5:cd:1a:1b:8f:87:6f:78:7b:e5:70:2f:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d330dcad1e35324549c1c9a19417ab6a4d09ade0 Validity Not Before: Dec 21 19:02:32 2025 GMT Not After : Dec 22 19:02:32 2025 GMT Subject: CN=82ab87d5da01012aa14df1bcb8b80c3ab9f25154 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:99:d7:4d:40:86:29:e4:15:7e:20:de:9a:b2: bd:74:25:45:63:b3:02:d2:95:71:43:f6:83:66:17: 25:1b:94:34:10:60:d2:4c:c6:b3:10:52:64:95:77: bf:4f:f4:d7:22:c2:87:ad:ea:b3:e5:4c:cc:bc:82: 2a:c9:64:76:70:2f:9f:1f:65:8e:4a:16:85:36:f7: e1:ac:1c:9e:8e:38:06:36:79:51:21:a0:f9:42:b0: 02:cb:52:21:7b:35:df:eb:f5:e3:1b:6b:9b:e4:97: 02:32:ba:3b:95:6e:4b:b1:53:a4:0d:c1:06:f1:66: ec:f0:16:1a:2b:ae:74:92:c4:98:c0:13:10:a4:a8: 46:d0:d7:e2:cb:9a:da:2c:eb:60:03:8b:2c:b9:cd: e4:6f:27:df:ef:25:6b:4b:d0:80:cd:47:a6:4c:1e: 15:f9:a4:72:17:d5:fe:00:a4:34:39:02:1f:a5:fe: 22:b3:62:82:c2:f2:d7:36:7b:89:a9:02:1b:39:ba: 0c:a0:64:86:a7:b0:0c:b6:f0:9f:08:af:64:50:2d: be:47:ce:86:90:fe:fd:b7:08:82:9c:00:6d:7e:ae: 71:eb:48:3f:6f:5b:d9:87:a3:09:e2:63:7a:49:f4: cd:86:41:d5:75:6c:f6:7e:bf:f4:0a:cd:90:fc:81: b0:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:AB:87:D5:DA:01:01:2A:A1:4D:F1:BC:B8:B8:0C:3A:B9:F2:51:54 X509v3 Authority Key Identifier: keyid:D3:30:DC:AD:1E:35:32:45:49:C1:C9:A1:94:17:AB:6A:4D:09:AD:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zDcrR41MkVJwcmhlBerak0JreA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:b3:a0:40:37:76:88:38:b2:97:fd:47:07:c1:4b:1e:5b:78: 3b:d3:94:f6:89:83:3b:bb:dc:88:44:09:61:e2:dc:39:70:0b: 93:ab:cc:3e:a9:a0:47:0e:cc:91:78:0a:b0:e6:ca:34:10:42: d0:c2:4f:1e:8d:18:13:9b:be:b5:50:5e:8a:4c:60:ea:56:d1: b3:76:ba:3b:32:31:83:be:90:61:68:5c:0d:b8:10:70:7c:a0: b7:d5:35:26:65:d3:a9:84:ac:dd:63:27:ea:c9:5b:62:49:f1: e9:fd:0b:dc:97:d6:df:d6:5f:85:a3:af:97:b0:8d:ae:ba:ae: 84:4b:44:0a:93:80:eb:62:da:f0:06:c3:56:4f:50:16:99:9e: b5:56:12:35:76:26:25:73:b3:ad:e4:82:67:7a:e6:71:3d:83: 6e:d7:59:6d:74:78:4b:a5:1b:2d:e5:57:4b:a4:51:3f:c9:b9: ef:b9:9b:ea:e7:70:62:dc:71:73:2e:05:9c:48:61:e9:db:e8: ca:fd:35:63:32:07:45:51:57:41:c7:dd:b7:c3:56:26:3a:61: 00:c8:9c:38:e0:d6:23:89:8c:f5:33:82:45:76:c1:61:5d:4c: 88:6a:28:f5:f4:ce:db:0b:e4:e5:1a:73:5e:83:43:6a:a5:4f: 2b:b2:0a:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSr3lzRobj4dveHvlcC/JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzMzBkY2FkMWUzNTMyNDU0OWMxYzlhMTk0MTdhYjZhNGQw OWFkZTAwHhcNMjUxMjIxMTkwMjMyWhcNMjUxMjIyMTkwMjMyWjAzMTEwLwYDVQQD Eyg4MmFiODdkNWRhMDEwMTJhYTE0ZGYxYmNiOGI4MGMzYWI5ZjI1MTU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5nXTUCGKeQVfiDemrK9dCVFY7MC 0pVxQ/aDZhclG5Q0EGDSTMazEFJklXe/T/TXIsKHreqz5UzMvIIqyWR2cC+fH2WO ShaFNvfhrByejjgGNnlRIaD5QrACy1IhezXf6/XjG2ub5JcCMro7lW5LsVOkDcEG 8Wbs8BYaK650ksSYwBMQpKhG0Nfiy5raLOtgA4ssuc3kbyff7yVrS9CAzUemTB4V +aRyF9X+AKQ0OQIfpf4is2KCwvLXNnuJqQIbOboMoGSGp7AMtvCfCK9kUC2+R86G kP79twiCnABtfq5x60g/b1vZh6MJ4mN6SfTNhkHVdWz2fr/0Cs2Q/IGwcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIKrh9XaAQEqoU3xvLi4DDq58lFUMB8GA1UdIwQY MBaAFNMw3K0eNTJFScHJoZQXq2pNCa3gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHpEY3JSNDFNa1ZKd2NtaGxCZXJhazBKcmVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9mODBkZDQtZjE4NC00NWE4LWI1OGQt NjY1MTdhM2FjMTlkLzEvMHpEY3JSNDFNa1ZKd2NtaGxCZXJhazBKcmVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy9mODBkZDQtZjE4NC00NWE4LWI1OGQtNjY1MTdhM2FjMTlk LzEvMHpEY3JSNDFNa1ZKd2NtaGxCZXJhazBKcmVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVLOgQDd2 iDiyl/1HB8FLHlt4O9OU9omDO7vciEQJYeLcOXALk6vMPqmgRw7MkXgKsObKNBBC 0MJPHo0YE5u+tVBeikxg6lbRs3a6OzIxg76QYWhcDbgQcHygt9U1JmXTqYSs3WMn 6slbYknx6f0L3JfW39ZfhaOvl7CNrrquhEtECpOA62La8AbDVk9QFpmetVYSNXYm JXOzreSCZ3rmcT2DbtdZbXR4S6UbLeVXS6RRP8m577mb6udwYtxxcy4FnEhh6dvo yv01YzIHRVFXQcfdt8NWJjphAMicOODWI4mM9TOCRXbBYV1MiGoo9fTO2wvk5Rpz XoNDaqVPK7IKFg== -----END CERTIFICATE-----Generated at Mon Dec 22 00:01:44 2025 by rpki-client