This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.mft File: 0Zk_eMrkRZqbniaJrTDwvETMZyQ.mft (raw, json) Hash identifier: wliFeSH4BCXEvC/qYopZIthIypmNAXJlil0zL35bZ8A= Subject key identifier: 5F:9A:BD:9E:C7:3B:D2:C3:27:39:9F:2C:02:4B:AE:94:89:A4:AA:B2 Authority key identifier: D1:99:3F:78:CA:E4:45:9A:9B:9E:26:89:AD:30:F0:BC:44:CC:67:24 Certificate issuer: /CN=d1993f78cae4459a9b9e2689ad30f0bc44cc6724 Certificate serial: 019B4626DAB8D7FEC586A0AF1F875DC86B12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Zk_eMrkRZqbniaJrTDwvETMZyQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.mft Manifest number: 04E1 Signing time: Mon 22 Dec 2025 13:01:49 +0000 Manifest this update: Mon 22 Dec 2025 13:01:49 +0000 Manifest next update: Tue 23 Dec 2025 13:01:49 +0000 Files and hashes: 1: 0Zk_eMrkRZqbniaJrTDwvETMZyQ.crl (hash: SUUcurUmPurx76EP4ZSBbxuGTBEt5iHw/SpuzQk75Ig=) 2: 5KVSG33DPZC1TKz5q9NlgQSJY8U.roa (hash: GwSKpHIjNmK499qIKezXAfYrejsXUCWzE4VXptKGrTs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.mft rsync://rpki.ripe.net/repository/DEFAULT/0Zk_eMrkRZqbniaJrTDwvETMZyQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 13:01:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:26:da:b8:d7:fe:c5:86:a0:af:1f:87:5d:c8:6b:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1993f78cae4459a9b9e2689ad30f0bc44cc6724 Validity Not Before: Dec 22 13:01:49 2025 GMT Not After : Dec 23 13:01:49 2025 GMT Subject: CN=5f9abd9ec73bd2c327399f2c024bae9489a4aab2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:da:a3:b8:9d:d9:fa:94:be:bd:5b:fc:3f:ea: 7d:4a:74:98:e8:bb:9a:19:0f:6b:ff:44:77:b5:20: de:fc:ff:aa:b7:d0:2b:da:f4:45:3d:01:67:b2:23: 0a:01:07:f6:e0:7c:6b:28:b7:52:c7:0e:12:f5:c2: 67:22:ce:56:3c:70:e5:10:7d:cb:5b:51:dd:c3:d1: 63:51:e2:a2:be:82:d9:5a:5f:eb:72:e8:33:8e:f0: 2d:51:a1:26:dc:b7:08:32:35:2b:6b:f2:fb:5d:7e: ea:3a:4f:44:e6:10:eb:4a:e0:bf:67:20:96:18:b7: ec:0f:21:ed:f8:75:d8:33:90:25:e6:bc:da:52:c3: b0:12:34:3a:9b:8d:a9:b1:81:65:b3:c2:4a:f7:88: 8c:4d:23:03:19:99:52:ca:1c:95:4a:b0:5a:2d:df: 2a:93:5d:18:26:3d:97:e1:d8:ab:30:28:94:95:67: a2:1f:0b:57:91:d9:6e:da:44:4f:18:2e:59:48:b4: 2f:06:fc:78:7a:7a:f3:55:ca:38:0e:50:d5:8d:a6: 6b:24:88:08:43:82:62:e5:6f:ab:e3:fa:df:65:53: 83:19:88:4c:58:bb:d8:03:96:e2:dd:f1:e7:f9:71: 0f:a3:6d:cc:ea:a3:4a:ca:3b:bc:66:e6:3c:f8:24: f6:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:9A:BD:9E:C7:3B:D2:C3:27:39:9F:2C:02:4B:AE:94:89:A4:AA:B2 X509v3 Authority Key Identifier: keyid:D1:99:3F:78:CA:E4:45:9A:9B:9E:26:89:AD:30:F0:BC:44:CC:67:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Zk_eMrkRZqbniaJrTDwvETMZyQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:fc:e4:8a:56:74:7f:b7:00:5a:1f:85:b7:d1:4c:39:f9:62: 55:98:63:38:3d:60:20:f6:00:df:25:be:57:2b:b6:2d:24:b2: 4f:8c:08:b0:ba:9d:26:7f:5a:03:12:5d:e6:23:85:d1:92:fd: 96:5a:5e:0c:0c:43:45:c9:df:7c:18:6a:d3:5c:c9:85:84:31: b9:23:92:41:10:02:32:99:97:76:29:40:0f:38:34:5f:5d:9b: 20:26:3f:73:3c:54:d9:d5:22:32:b0:72:ea:65:f8:f6:37:e4: cc:81:7e:97:5f:32:e1:f2:59:0e:a7:63:3c:6b:aa:88:6c:c0: 3e:9a:6f:dd:ed:61:9c:6b:f2:eb:f9:70:15:e2:dc:4c:9c:42: 30:e0:c8:34:4d:93:d7:7d:2b:fd:46:9e:12:7e:58:82:90:f6: b2:26:23:e1:53:90:0e:a2:4c:16:28:5d:8e:06:a4:ad:82:24: 3a:3c:23:d7:3c:82:ea:4d:1f:40:11:85:c5:26:fe:5e:f4:05: 07:51:58:22:00:c1:91:82:8e:c8:41:74:c0:8a:3d:2d:f0:43: 52:4c:1d:c0:2a:c2:c8:6a:f5:ef:11:51:13:3b:3b:87:6e:b1: 8f:fa:81:3b:32:4f:e9:3a:f6:ed:ae:26:26:31:cb:34:08:65: c7:c8:c9:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGJtq41/7FhqCvH4ddyGsSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxOTkzZjc4Y2FlNDQ1OWE5YjllMjY4OWFkMzBmMGJjNDRj YzY3MjQwHhcNMjUxMjIyMTMwMTQ5WhcNMjUxMjIzMTMwMTQ5WjAzMTEwLwYDVQQD Eyg1ZjlhYmQ5ZWM3M2JkMmMzMjczOTlmMmMwMjRiYWU5NDg5YTRhYWIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNqjuJ3Z+pS+vVv8P+p9SnSY6Lua GQ9r/0R3tSDe/P+qt9Ar2vRFPQFnsiMKAQf24HxrKLdSxw4S9cJnIs5WPHDlEH3L W1Hdw9FjUeKivoLZWl/rcugzjvAtUaEm3LcIMjUra/L7XX7qOk9E5hDrSuC/ZyCW GLfsDyHt+HXYM5Al5rzaUsOwEjQ6m42psYFls8JK94iMTSMDGZlSyhyVSrBaLd8q k10YJj2X4dirMCiUlWeiHwtXkdlu2kRPGC5ZSLQvBvx4enrzVco4DlDVjaZrJIgI Q4Ji5W+r4/rfZVODGYhMWLvYA5bi3fHn+XEPo23M6qNKyju8ZuY8+CT22wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF+avZ7HO9LDJzmfLAJLrpSJpKqyMB8GA1UdIwQY MBaAFNGZP3jK5EWam54mia0w8LxEzGckMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFprX2VNcmtSWnFibmlhSnJURHd2RVRNWnlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8yZWJjNzktN2I5NC00YmY4LTkxMzMt NGIwNTc3NGRlMzcxLzEvMFprX2VNcmtSWnFibmlhSnJURHd2RVRNWnlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC8yZWJjNzktN2I5NC00YmY4LTkxMzMtNGIwNTc3NGRlMzcx LzEvMFprX2VNcmtSWnFibmlhSnJURHd2RVRNWnlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVvzkilZ0 f7cAWh+Ft9FMOfliVZhjOD1gIPYA3yW+Vyu2LSSyT4wIsLqdJn9aAxJd5iOF0ZL9 llpeDAxDRcnffBhq01zJhYQxuSOSQRACMpmXdilADzg0X12bICY/czxU2dUiMrBy 6mX49jfkzIF+l18y4fJZDqdjPGuqiGzAPppv3e1hnGvy6/lwFeLcTJxCMODINE2T 130r/UaeEn5YgpD2siYj4VOQDqJMFihdjgakrYIkOjwj1zyC6k0fQBGFxSb+XvQF B1FYIgDBkYKOyEF0wIo9LfBDUkwdwCrCyGr17xFREzs7h26xj/qBOzJP6Tr27a4m JjHLNAhlx8jJeQ== -----END CERTIFICATE-----Generated at Mon Dec 22 17:21:39 2025 by rpki-client