This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/f9a00a-84ee-47a0-9ea1-f179db5f04b6/1/ZKDbECcDCCx8pVSrtbInYAGNVj8.mft File: ZKDbECcDCCx8pVSrtbInYAGNVj8.mft (raw, json) Hash identifier: qv3DvL5xBZxqpL20FQGNc/KVIrwxA0ZZGYFNeyfggTQ= Subject key identifier: 8C:93:26:AB:4D:E1:3D:DE:03:D8:A5:F5:AC:12:34:C5:EC:CF:8A:D7 Authority key identifier: 64:A0:DB:10:27:03:08:2C:7C:A5:54:AB:B5:B2:27:60:01:8D:56:3F Certificate issuer: /CN=64a0db102703082c7ca554abb5b22760018d563f Certificate serial: 019AF16440B9636548E729B2D53CBFAEEFE4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZKDbECcDCCx8pVSrtbInYAGNVj8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/f9a00a-84ee-47a0-9ea1-f179db5f04b6/1/ZKDbECcDCCx8pVSrtbInYAGNVj8.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 02:01:10 +0000 Manifest this update: Sat 06 Dec 2025 02:01:10 +0000 Manifest next update: Sun 07 Dec 2025 02:01:10 +0000 Files and hashes: 1: ZKDbECcDCCx8pVSrtbInYAGNVj8.crl (hash: i/rjvbn18qZ7gXJly6CCDwA30yZQTue5R1GzF8LNmuU=) 2: tClIzpB8AXYvJfeCisA8HxpOd74.roa (hash: sXbqNinLjTETFbK42QOaktsLVCyYHDlotZvPtCRaxBU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/f9a00a-84ee-47a0-9ea1-f179db5f04b6/1/ZKDbECcDCCx8pVSrtbInYAGNVj8.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/f9a00a-84ee-47a0-9ea1-f179db5f04b6/1/ZKDbECcDCCx8pVSrtbInYAGNVj8.mft rsync://rpki.ripe.net/repository/DEFAULT/ZKDbECcDCCx8pVSrtbInYAGNVj8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:40:b9:63:65:48:e7:29:b2:d5:3c:bf:ae:ef:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64a0db102703082c7ca554abb5b22760018d563f Validity Not Before: Dec 6 02:01:10 2025 GMT Not After : Dec 7 02:01:10 2025 GMT Subject: CN=8c9326ab4de13dde03d8a5f5ac1234c5eccf8ad7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:82:8d:2b:4b:28:79:2d:67:69:b4:7e:43:82: e1:38:78:bc:92:ef:71:4b:5a:71:4f:ef:2f:a2:c2: 34:9e:6b:49:75:c6:13:17:63:85:e6:45:26:cf:e3: 78:f7:2d:b0:04:d7:ce:a8:10:ce:6b:6f:60:34:7b: 8e:e8:e8:e1:2c:ec:05:f8:df:de:56:c7:94:b3:70: c5:af:e7:9b:17:69:62:7c:d1:5b:16:04:cc:c1:50: f0:b7:71:f4:a3:3d:cf:d0:da:39:95:9a:2e:f6:31: c4:2a:f2:54:ca:64:fa:f3:18:d0:a7:64:c8:73:28: e6:1f:8c:23:bc:ad:da:4a:0c:c3:07:5b:c3:57:23: e4:c3:be:93:2c:27:a8:88:36:fc:ad:4d:47:ec:3c: 87:3e:bf:2e:46:c5:95:33:ba:22:0e:4f:66:db:62: 30:ca:f3:1a:48:54:0b:39:c7:5e:77:22:02:4c:fc: e6:b3:6f:e0:ef:cd:2a:47:95:34:9c:db:a8:be:0d: fa:83:0e:91:d6:de:25:35:b5:1c:e5:1a:b1:53:e0: 26:3f:1c:ba:96:27:a9:d8:4b:04:e4:4e:41:c4:77: d1:a4:d6:17:b5:93:b6:fb:12:f4:07:f0:8c:39:00: 92:a6:9a:b2:dc:28:3d:bf:7a:21:e8:df:f0:ff:fc: be:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:93:26:AB:4D:E1:3D:DE:03:D8:A5:F5:AC:12:34:C5:EC:CF:8A:D7 X509v3 Authority Key Identifier: keyid:64:A0:DB:10:27:03:08:2C:7C:A5:54:AB:B5:B2:27:60:01:8D:56:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZKDbECcDCCx8pVSrtbInYAGNVj8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/f9a00a-84ee-47a0-9ea1-f179db5f04b6/1/ZKDbECcDCCx8pVSrtbInYAGNVj8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/f9a00a-84ee-47a0-9ea1-f179db5f04b6/1/ZKDbECcDCCx8pVSrtbInYAGNVj8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:ca:e9:d6:bc:a5:9a:c0:58:e7:05:dd:22:2a:75:69:26:0e: a7:ba:c1:f8:68:0e:25:9a:2d:fb:c9:df:0e:0b:d3:41:3c:4c: 02:69:df:95:f1:7a:fd:22:e4:2c:2d:ad:9f:52:fd:20:d3:3f: 6d:c4:54:3f:28:e9:d2:55:63:37:17:16:51:44:f5:ee:31:d8: d4:7d:0a:ae:e2:f4:ff:03:3e:5b:9d:63:39:2d:b7:7d:f8:5e: 52:14:6e:fe:ac:b7:9a:ce:43:b2:2e:84:b8:57:1a:8a:0b:ff: ff:58:96:c4:03:6f:09:9b:81:f9:fd:f6:2b:51:55:3a:ba:88: 93:6b:3e:34:ed:c5:70:2c:77:22:9d:f2:44:ba:aa:bc:e1:9e: bf:c5:ea:ac:60:4b:5e:67:d5:a3:41:35:6d:e5:78:b5:8b:63: b4:74:be:f5:85:8b:d3:38:05:89:fe:54:0b:7c:78:4c:c6:1e: 2c:91:24:6c:52:03:f8:a3:55:ed:b5:e2:cb:3d:e6:26:70:ce: 55:ef:71:12:4b:52:e8:0b:56:73:cb:a5:62:88:d9:a3:29:57: 08:df:b4:ae:46:72:9e:7a:9b:d6:83:88:6a:17:a3:01:61:61: b8:0e:c0:12:bf:de:c1:86:74:f8:c4:8e:c8:0c:94:88:70:c0: 27:4a:4c:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZEC5Y2VI5ymy1Ty/ru/kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0YTBkYjEwMjcwMzA4MmM3Y2E1NTRhYmI1YjIyNzYwMDE4 ZDU2M2YwHhcNMjUxMjA2MDIwMTEwWhcNMjUxMjA3MDIwMTEwWjAzMTEwLwYDVQQD Eyg4YzkzMjZhYjRkZTEzZGRlMDNkOGE1ZjVhYzEyMzRjNWVjY2Y4YWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIKNK0soeS1nabR+Q4LhOHi8ku9x S1pxT+8vosI0nmtJdcYTF2OF5kUmz+N49y2wBNfOqBDOa29gNHuO6OjhLOwF+N/e VseUs3DFr+ebF2lifNFbFgTMwVDwt3H0oz3P0No5lZou9jHEKvJUymT68xjQp2TI cyjmH4wjvK3aSgzDB1vDVyPkw76TLCeoiDb8rU1H7DyHPr8uRsWVM7oiDk9m22Iw yvMaSFQLOcdedyICTPzms2/g780qR5U0nNuovg36gw6R1t4lNbUc5RqxU+AmPxy6 liep2EsE5E5BxHfRpNYXtZO2+xL0B/CMOQCSppqy3Cg9v3oh6N/w//y+VQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIyTJqtN4T3eA9il9awSNMXsz4rXMB8GA1UdIwQY MBaAFGSg2xAnAwgsfKVUq7WyJ2ABjVY/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWktEYkVDY0RDQ3g4cFZTcnRiSW5ZQUdOVmo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9mOWEwMGEtODRlZS00N2EwLTllYTEt ZjE3OWRiNWYwNGI2LzEvWktEYkVDY0RDQ3g4cFZTcnRiSW5ZQUdOVmo4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9mOWEwMGEtODRlZS00N2EwLTllYTEtZjE3OWRiNWYwNGI2 LzEvWktEYkVDY0RDQ3g4cFZTcnRiSW5ZQUdOVmo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl8rp1ryl msBY5wXdIip1aSYOp7rB+GgOJZot+8nfDgvTQTxMAmnflfF6/SLkLC2tn1L9INM/ bcRUPyjp0lVjNxcWUUT17jHY1H0KruL0/wM+W51jOS23ffheUhRu/qy3ms5Dsi6E uFcaigv//1iWxANvCZuB+f32K1FVOrqIk2s+NO3FcCx3Ip3yRLqqvOGev8XqrGBL XmfVo0E1beV4tYtjtHS+9YWL0zgFif5UC3x4TMYeLJEkbFID+KNV7bXiyz3mJnDO Ve9xEktS6AtWc8ulYojZoylXCN+0rkZynnqb1oOIahejAWFhuA7AEr/ewYZ0+MSO yAyUiHDAJ0pM2g== -----END CERTIFICATE-----Generated at Sat Dec 6 09:59:07 2025 by rpki-client