This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/df757c-499d-4020-a5c3-61161a65d3d6/1/zivMENFrD-0oVekpX8QJ1lB7Q9Y.mft File: zivMENFrD-0oVekpX8QJ1lB7Q9Y.mft (raw, json) Hash identifier: MjQ1TuNsKhyWQ6ZKaLzs9lOvd148VYaMjWVV7a127Pk= Subject key identifier: 6D:DD:31:E9:23:35:BD:8B:E0:A6:18:20:09:F1:02:BC:1E:A2:B1:83 Authority key identifier: CE:2B:CC:10:D1:6B:0F:ED:28:55:E9:29:5F:C4:09:D6:50:7B:43:D6 Certificate issuer: /CN=ce2bcc10d16b0fed2855e9295fc409d6507b43d6 Certificate serial: 019B3F48B12A8E0293E72D8FA5D7307F7153 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zivMENFrD-0oVekpX8QJ1lB7Q9Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/df757c-499d-4020-a5c3-61161a65d3d6/1/zivMENFrD-0oVekpX8QJ1lB7Q9Y.mft Manifest number: 0285 Signing time: Sun 21 Dec 2025 05:01:27 +0000 Manifest this update: Sun 21 Dec 2025 05:01:27 +0000 Manifest next update: Mon 22 Dec 2025 05:01:27 +0000 Files and hashes: 1: KWrcvpROrYGOwG3-oqsXPNMfFDk.roa (hash: UFnDH1kBqyWioGuvQqX1adr28AYT6aanInwk+hkuyEE=) 2: zivMENFrD-0oVekpX8QJ1lB7Q9Y.crl (hash: igAToVOEVpouNeBjCCXu5oq5Xs6BKsZX+GwsVdkZJ9I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/df757c-499d-4020-a5c3-61161a65d3d6/1/zivMENFrD-0oVekpX8QJ1lB7Q9Y.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/df757c-499d-4020-a5c3-61161a65d3d6/1/zivMENFrD-0oVekpX8QJ1lB7Q9Y.mft rsync://rpki.ripe.net/repository/DEFAULT/zivMENFrD-0oVekpX8QJ1lB7Q9Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:48:b1:2a:8e:02:93:e7:2d:8f:a5:d7:30:7f:71:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce2bcc10d16b0fed2855e9295fc409d6507b43d6 Validity Not Before: Dec 21 05:01:27 2025 GMT Not After : Dec 22 05:01:27 2025 GMT Subject: CN=6ddd31e92335bd8be0a6182009f102bc1ea2b183 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:c2:4c:49:61:07:eb:37:fe:30:82:e2:ef:c7: 5a:3c:37:bb:2b:b7:8b:dd:1d:cb:83:dc:4b:96:e0: 4b:5a:cb:79:19:de:51:da:c5:ee:5d:64:b4:f5:32: 4c:4f:9a:c5:f5:20:f2:8a:bf:a5:ab:8a:5d:de:ae: 5a:cd:69:11:69:92:f5:a7:af:43:d0:58:76:4c:c0: dd:78:0d:6e:09:8f:a5:14:94:0f:e6:7d:4b:ae:4b: 16:ac:d5:4a:f1:28:ff:05:05:08:3f:5d:79:7a:27: 82:77:0b:34:fb:47:7e:7b:19:27:7b:27:0b:69:50: d8:60:59:8d:4d:8a:23:20:43:ba:c9:24:a6:bd:84: b2:83:81:49:48:bc:0c:70:cf:2a:8b:c3:3f:c9:f3: 5e:03:d6:32:2b:02:bf:77:47:aa:bd:51:58:4e:c3: 42:c7:8f:e6:e7:17:98:2a:d1:11:00:a3:1f:9a:0b: 18:1b:39:cc:c6:76:b0:85:9c:d1:74:54:7e:b6:59: bf:08:79:2a:e7:ee:3a:67:f2:07:38:57:b4:4a:07: c3:aa:90:55:7c:56:ee:cd:6d:94:84:1e:e2:d8:4e: 64:b3:da:9a:2c:3b:27:e6:0d:76:08:fb:ae:56:be: 1a:2d:0c:e4:be:6f:37:c8:dd:25:e1:60:ea:91:a4: 25:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:DD:31:E9:23:35:BD:8B:E0:A6:18:20:09:F1:02:BC:1E:A2:B1:83 X509v3 Authority Key Identifier: keyid:CE:2B:CC:10:D1:6B:0F:ED:28:55:E9:29:5F:C4:09:D6:50:7B:43:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zivMENFrD-0oVekpX8QJ1lB7Q9Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/df757c-499d-4020-a5c3-61161a65d3d6/1/zivMENFrD-0oVekpX8QJ1lB7Q9Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/df757c-499d-4020-a5c3-61161a65d3d6/1/zivMENFrD-0oVekpX8QJ1lB7Q9Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:ca:77:b4:d8:40:c2:63:1e:2e:3f:65:fc:b6:42:be:ff:3c: 99:ba:fe:24:da:19:45:6f:0b:3f:4f:9b:f4:b4:91:39:63:6f: 19:00:3b:b7:68:c0:3c:4d:97:37:19:bd:32:52:4f:3f:68:4e: 7a:1f:02:ad:76:7e:a3:cf:0e:c8:55:f8:50:c5:41:3f:3d:c9: 5b:3c:af:10:0b:2e:27:1d:29:56:f3:db:98:0e:75:71:52:72: 63:ef:3c:52:1d:87:ee:75:01:d4:79:c9:d6:ee:0c:6a:28:58: f5:81:8c:24:9c:0a:5b:c8:0f:24:42:df:03:11:98:71:80:f0: aa:1d:f8:06:e8:b0:83:b1:b5:03:be:40:89:f8:91:b1:29:ee: e6:a5:67:d3:03:51:05:02:b7:20:a8:56:3d:05:38:46:98:dd: 41:58:d2:16:76:1f:e1:36:a9:2f:48:6e:5c:cb:fb:25:d6:bc: 64:fd:fc:e1:8c:37:69:e5:88:9a:10:e7:07:8d:b0:30:21:b4: 4f:9f:54:19:ba:71:13:28:53:da:76:18:0e:f7:c0:3f:32:85: 1b:dc:cf:a7:68:62:c3:a9:6d:09:45:b7:5e:57:94:0e:f3:0e: a3:fe:d2:5a:84:bf:d9:b3:7a:39:95:52:65:b9:47:69:e7:b5: b9:f0:96:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/SLEqjgKT5y2Ppdcwf3FTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlMmJjYzEwZDE2YjBmZWQyODU1ZTkyOTVmYzQwOWQ2NTA3 YjQzZDYwHhcNMjUxMjIxMDUwMTI3WhcNMjUxMjIyMDUwMTI3WjAzMTEwLwYDVQQD Eyg2ZGRkMzFlOTIzMzViZDhiZTBhNjE4MjAwOWYxMDJiYzFlYTJiMTgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2MJMSWEH6zf+MILi78daPDe7K7eL 3R3Lg9xLluBLWst5Gd5R2sXuXWS09TJMT5rF9SDyir+lq4pd3q5azWkRaZL1p69D 0Fh2TMDdeA1uCY+lFJQP5n1LrksWrNVK8Sj/BQUIP115eieCdws0+0d+exkneycL aVDYYFmNTYojIEO6ySSmvYSyg4FJSLwMcM8qi8M/yfNeA9YyKwK/d0eqvVFYTsNC x4/m5xeYKtERAKMfmgsYGznMxnawhZzRdFR+tlm/CHkq5+46Z/IHOFe0SgfDqpBV fFbuzW2UhB7i2E5ks9qaLDsn5g12CPuuVr4aLQzkvm83yN0l4WDqkaQlqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG3dMekjNb2L4KYYIAnxArweorGDMB8GA1UdIwQY MBaAFM4rzBDRaw/tKFXpKV/ECdZQe0PWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveml2TUVORnJELTBvVmVrcFg4UUoxbEI3UTlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9kZjc1N2MtNDk5ZC00MDIwLWE1YzMt NjExNjFhNjVkM2Q2LzEveml2TUVORnJELTBvVmVrcFg4UUoxbEI3UTlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS9kZjc1N2MtNDk5ZC00MDIwLWE1YzMtNjExNjFhNjVkM2Q2 LzEveml2TUVORnJELTBvVmVrcFg4UUoxbEI3UTlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqMp3tNhA wmMeLj9l/LZCvv88mbr+JNoZRW8LP0+b9LSROWNvGQA7t2jAPE2XNxm9MlJPP2hO eh8CrXZ+o88OyFX4UMVBPz3JWzyvEAsuJx0pVvPbmA51cVJyY+88Uh2H7nUB1HnJ 1u4MaihY9YGMJJwKW8gPJELfAxGYcYDwqh34Buiwg7G1A75AifiRsSnu5qVn0wNR BQK3IKhWPQU4RpjdQVjSFnYf4TapL0huXMv7Jda8ZP384Yw3aeWImhDnB42wMCG0 T59UGbpxEyhT2nYYDvfAPzKFG9zPp2hiw6ltCUW3XleUDvMOo/7SWoS/2bN6OZVS ZblHaee1ufCW4g== -----END CERTIFICATE-----Generated at Sun Dec 21 09:01:03 2025 by rpki-client