This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.mft File: 0Zk_eMrkRZqbniaJrTDwvETMZyQ.mft (raw, json) Hash identifier: Of+qDNs3hNOFW4BHSdRAwDi8pRl2eWGho0SV7EabA7k= Subject key identifier: C0:19:34:DB:49:7E:3E:4E:C6:E9:1F:CB:51:55:BC:62:5B:B3:A2:23 Authority key identifier: D1:99:3F:78:CA:E4:45:9A:9B:9E:26:89:AD:30:F0:BC:44:CC:67:24 Certificate issuer: /CN=d1993f78cae4459a9b9e2689ad30f0bc44cc6724 Certificate serial: 019B66FADE93ACDCB6F71D294DFAF99934B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Zk_eMrkRZqbniaJrTDwvETMZyQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.mft Manifest number: 04F2 Signing time: Sun 28 Dec 2025 22:01:15 +0000 Manifest this update: Sun 28 Dec 2025 22:01:15 +0000 Manifest next update: Mon 29 Dec 2025 22:01:15 +0000 Files and hashes: 1: 0Zk_eMrkRZqbniaJrTDwvETMZyQ.crl (hash: mnN6v5Pwnb0YxSyzdzBDcZT4+oxa6UnWc7MLe6/eR4w=) 2: 5KVSG33DPZC1TKz5q9NlgQSJY8U.roa (hash: GwSKpHIjNmK499qIKezXAfYrejsXUCWzE4VXptKGrTs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.mft rsync://rpki.ripe.net/repository/DEFAULT/0Zk_eMrkRZqbniaJrTDwvETMZyQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 21:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:66:fa:de:93:ac:dc:b6:f7:1d:29:4d:fa:f9:99:34:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1993f78cae4459a9b9e2689ad30f0bc44cc6724 Validity Not Before: Dec 28 22:01:15 2025 GMT Not After : Dec 29 22:01:15 2025 GMT Subject: CN=c01934db497e3e4ec6e91fcb5155bc625bb3a223 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:2f:8c:2c:1b:f1:32:75:9a:02:48:c7:2d:05: 65:27:7e:19:e0:92:34:15:6b:2e:7e:aa:60:59:1d: a8:17:d9:b1:c3:51:03:12:3d:24:84:74:d3:04:4d: e2:df:62:96:da:85:c8:a9:1e:ea:61:bb:01:f5:b2: b9:db:28:a7:8e:f5:97:6d:a5:ab:d0:e1:56:0f:42: 4c:9b:1a:3c:0a:d5:6e:2a:8c:68:0e:2b:f5:b9:23: c1:4e:06:bd:9f:4f:c8:5a:a3:b5:23:8e:be:bc:39: 0e:56:f4:f7:36:49:90:ba:49:ce:f0:76:7c:4d:99: e6:a1:29:af:86:ac:0d:ca:af:a7:80:5f:f5:5e:3f: 30:50:a6:55:3c:18:e7:a3:39:16:85:ba:50:19:86: b1:4e:5b:42:99:69:ad:c3:21:47:5b:63:f1:ce:71: 59:60:1f:ad:68:8e:96:ad:96:d5:fa:18:60:41:2f: c9:c2:5e:fc:ca:31:bb:9d:fd:9c:bd:9c:08:8b:88: 79:98:29:e6:82:69:96:d3:a0:de:fe:69:7a:27:5d: 0f:b7:5e:ba:75:86:0e:42:83:fd:46:e1:cb:0f:72: 0c:d4:37:f7:fb:56:96:10:a9:2a:19:f1:78:ab:00: d3:55:e3:be:5b:e6:d2:7b:a9:73:51:df:89:09:33: 2f:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:19:34:DB:49:7E:3E:4E:C6:E9:1F:CB:51:55:BC:62:5B:B3:A2:23 X509v3 Authority Key Identifier: keyid:D1:99:3F:78:CA:E4:45:9A:9B:9E:26:89:AD:30:F0:BC:44:CC:67:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Zk_eMrkRZqbniaJrTDwvETMZyQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:35:73:d1:d7:78:30:5a:3d:ba:58:e1:75:3f:e1:2e:86:f6: df:14:55:0f:49:4a:f7:c6:56:40:22:d3:77:d2:3c:d4:b8:83: f5:31:6c:b1:23:63:8f:41:62:23:3b:1a:6c:f6:ca:c9:96:1b: 47:c6:f1:d3:e1:d2:aa:fc:dd:58:85:4c:9b:ae:0d:e0:1a:d8: d1:f6:c4:74:f1:2e:e1:73:54:32:6e:1e:df:0b:5a:e4:fc:ec: ee:3b:45:b4:0b:65:ca:5b:5b:ff:79:ad:8a:65:fe:87:11:6f: 03:b1:d7:2c:88:52:84:38:3e:6b:3a:a5:bc:dd:57:dd:67:eb: 20:be:b5:9c:59:02:1c:1d:13:e1:5c:82:02:7b:21:f6:f9:a9: 4c:28:a7:81:28:e4:68:75:21:c5:82:20:dc:44:e1:99:31:ae: 8f:0f:82:dc:1c:c0:bf:3a:33:4d:f4:2f:26:23:c5:c9:b3:5a: fb:12:45:61:7b:32:c4:fb:87:98:a6:8f:97:a1:4c:f1:51:b1: bc:e5:9b:6f:15:19:ff:49:de:40:a3:fa:2f:ad:8b:5f:6f:39: 0f:82:ce:86:24:dd:bb:b8:e0:68:af:27:34:25:ec:e0:fd:b9: 3a:e5:6b:c9:8f:e9:71:5b:8f:0e:96:1f:60:0b:61:9a:e2:0c: d6:28:5b:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtm+t6TrNy29x0pTfr5mTS0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxOTkzZjc4Y2FlNDQ1OWE5YjllMjY4OWFkMzBmMGJjNDRj YzY3MjQwHhcNMjUxMjI4MjIwMTE1WhcNMjUxMjI5MjIwMTE1WjAzMTEwLwYDVQQD EyhjMDE5MzRkYjQ5N2UzZTRlYzZlOTFmY2I1MTU1YmM2MjViYjNhMjIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0S+MLBvxMnWaAkjHLQVlJ34Z4JI0 FWsufqpgWR2oF9mxw1EDEj0khHTTBE3i32KW2oXIqR7qYbsB9bK52yinjvWXbaWr 0OFWD0JMmxo8CtVuKoxoDiv1uSPBTga9n0/IWqO1I46+vDkOVvT3NkmQuknO8HZ8 TZnmoSmvhqwNyq+ngF/1Xj8wUKZVPBjnozkWhbpQGYaxTltCmWmtwyFHW2PxznFZ YB+taI6WrZbV+hhgQS/Jwl78yjG7nf2cvZwIi4h5mCnmgmmW06De/ml6J10Pt166 dYYOQoP9RuHLD3IM1Df3+1aWEKkqGfF4qwDTVeO+W+bSe6lzUd+JCTMvjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMAZNNtJfj5Oxukfy1FVvGJbs6IjMB8GA1UdIwQY MBaAFNGZP3jK5EWam54mia0w8LxEzGckMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFprX2VNcmtSWnFibmlhSnJURHd2RVRNWnlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8yZWJjNzktN2I5NC00YmY4LTkxMzMt NGIwNTc3NGRlMzcxLzEvMFprX2VNcmtSWnFibmlhSnJURHd2RVRNWnlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC8yZWJjNzktN2I5NC00YmY4LTkxMzMtNGIwNTc3NGRlMzcx LzEvMFprX2VNcmtSWnFibmlhSnJURHd2RVRNWnlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANDVz0dd4 MFo9uljhdT/hLob23xRVD0lK98ZWQCLTd9I81LiD9TFssSNjj0FiIzsabPbKyZYb R8bx0+HSqvzdWIVMm64N4BrY0fbEdPEu4XNUMm4e3wta5Pzs7jtFtAtlyltb/3mt imX+hxFvA7HXLIhShDg+azqlvN1X3WfrIL61nFkCHB0T4VyCAnsh9vmpTCingSjk aHUhxYIg3EThmTGujw+C3BzAvzozTfQvJiPFybNa+xJFYXsyxPuHmKaPl6FM8VGx vOWbbxUZ/0neQKP6L62LX285D4LOhiTdu7jgaK8nNCXs4P25OuVryY/pcVuPDpYf YAthmuIM1ihbFQ== -----END CERTIFICATE-----Generated at Mon Dec 29 06:50:39 2025 by rpki-client