This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/f9a00a-84ee-47a0-9ea1-f179db5f04b6/1/ZKDbECcDCCx8pVSrtbInYAGNVj8.mft File: ZKDbECcDCCx8pVSrtbInYAGNVj8.mft (raw, json) Hash identifier: HW8cGS0yyGF9fc9JVGIxvJsP+dM3mRGspLHYs+DIt5w= Subject key identifier: AD:5C:94:ED:83:82:DE:77:52:B5:C3:73:C2:8D:CA:E6:B8:72:80:11 Authority key identifier: 64:A0:DB:10:27:03:08:2C:7C:A5:54:AB:B5:B2:27:60:01:8D:56:3F Certificate issuer: /CN=64a0db102703082c7ca554abb5b22760018d563f Certificate serial: 019B2B53B1EAFB0ACE1236FF97A6EC4108AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZKDbECcDCCx8pVSrtbInYAGNVj8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/f9a00a-84ee-47a0-9ea1-f179db5f04b6/1/ZKDbECcDCCx8pVSrtbInYAGNVj8.mft Manifest number: 1780 Signing time: Wed 17 Dec 2025 08:01:03 +0000 Manifest this update: Wed 17 Dec 2025 08:01:03 +0000 Manifest next update: Thu 18 Dec 2025 08:01:03 +0000 Files and hashes: 1: ZKDbECcDCCx8pVSrtbInYAGNVj8.crl (hash: UI5+Mh1rwuTuMCCrHPSBIhAdWkOU/QgQ6E+BG2Sd1IM=) 2: tClIzpB8AXYvJfeCisA8HxpOd74.roa (hash: sXbqNinLjTETFbK42QOaktsLVCyYHDlotZvPtCRaxBU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/f9a00a-84ee-47a0-9ea1-f179db5f04b6/1/ZKDbECcDCCx8pVSrtbInYAGNVj8.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/f9a00a-84ee-47a0-9ea1-f179db5f04b6/1/ZKDbECcDCCx8pVSrtbInYAGNVj8.mft rsync://rpki.ripe.net/repository/DEFAULT/ZKDbECcDCCx8pVSrtbInYAGNVj8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 08:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:53:b1:ea:fb:0a:ce:12:36:ff:97:a6:ec:41:08:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64a0db102703082c7ca554abb5b22760018d563f Validity Not Before: Dec 17 08:01:03 2025 GMT Not After : Dec 18 08:01:03 2025 GMT Subject: CN=ad5c94ed8382de7752b5c373c28dcae6b8728011 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b7:2c:d3:cc:fb:0b:24:db:6a:54:ba:3c:1f: 6f:73:dc:a7:50:50:2b:f5:f4:38:40:b2:14:56:57: 39:04:bb:4b:31:b8:45:17:6c:49:cc:f2:5c:aa:22: 7d:4e:52:59:29:7f:ad:4a:6a:12:5d:d3:17:12:f8: 5a:00:c1:26:34:1d:3e:26:b9:46:63:86:41:f1:5a: f5:ca:83:ad:b8:df:e0:1a:d3:9d:0b:3e:f2:56:ea: 8e:13:be:4c:f2:79:6f:a7:18:c8:f7:ae:13:b6:a1: 65:05:a6:2b:30:a1:30:64:86:f8:11:d2:af:9e:4e: e5:d7:22:d9:e2:ea:eb:5c:6f:bf:cf:1f:24:86:82: 24:da:35:14:c4:03:15:d0:7e:58:d1:e5:8c:ec:82: 22:f7:e2:c9:64:34:a6:e7:99:44:46:3e:36:33:33: 45:7f:88:fe:bf:6c:6d:3a:7a:8b:a5:cb:07:30:6f: 7f:8c:bd:37:f9:ae:6b:c8:97:09:2e:da:17:2b:a1: ae:40:78:fc:83:23:1f:29:00:99:73:2f:9c:92:8a: e3:c4:75:18:ad:45:3c:d6:ed:35:a8:fa:3a:84:45: 8e:c4:3c:96:8a:0e:54:e6:c5:26:f3:16:72:e7:94: 9e:d7:67:35:26:1e:1e:9e:b5:0b:98:35:77:59:d8: ac:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:5C:94:ED:83:82:DE:77:52:B5:C3:73:C2:8D:CA:E6:B8:72:80:11 X509v3 Authority Key Identifier: keyid:64:A0:DB:10:27:03:08:2C:7C:A5:54:AB:B5:B2:27:60:01:8D:56:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZKDbECcDCCx8pVSrtbInYAGNVj8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/f9a00a-84ee-47a0-9ea1-f179db5f04b6/1/ZKDbECcDCCx8pVSrtbInYAGNVj8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/f9a00a-84ee-47a0-9ea1-f179db5f04b6/1/ZKDbECcDCCx8pVSrtbInYAGNVj8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:a8:f5:45:03:36:94:cb:79:6b:cc:ba:e8:48:78:53:3e:56: a1:4e:b7:cc:1a:67:af:9d:5b:4e:29:cd:8c:5b:39:b1:57:3a: af:ac:0f:ef:b7:16:a3:16:e6:8a:f9:a2:5b:e9:76:f2:f1:2d: 93:e4:bc:c1:29:d1:8a:26:a5:13:ad:47:03:4f:95:ff:d8:87: 85:7f:d2:a0:e5:3b:09:20:81:26:e0:97:47:ea:82:21:ff:18: 48:4c:db:6d:79:91:52:41:86:d3:a5:43:b8:9a:2a:7a:bc:e5: 81:de:94:d2:5a:c8:86:32:9b:1c:60:c1:59:07:75:5d:ea:20: 6a:44:f9:07:ad:38:3b:b0:c2:4b:6e:5d:cb:95:5c:48:bf:d2: 6c:e4:30:c6:00:ea:4e:cc:01:f3:51:b4:f6:18:4a:7d:dc:4c: fb:c2:b9:ff:80:3e:0b:4c:10:7b:1a:f3:4c:62:50:b0:a5:df: 0c:c0:8c:9e:fe:82:8f:31:62:c0:c6:c7:3c:c4:ac:ad:38:e1: 76:03:2f:a4:2e:66:8c:83:44:db:96:1b:70:a0:8f:9c:80:54: 57:93:2f:af:23:56:2f:7e:9c:7e:f7:2d:45:26:f4:7c:78:d5: ac:da:71:4a:f2:54:60:0b:13:c6:dd:98:ae:24:03:5b:eb:fd: ae:0c:74:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrU7Hq+wrOEjb/l6bsQQirMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0YTBkYjEwMjcwMzA4MmM3Y2E1NTRhYmI1YjIyNzYwMDE4 ZDU2M2YwHhcNMjUxMjE3MDgwMTAzWhcNMjUxMjE4MDgwMTAzWjAzMTEwLwYDVQQD EyhhZDVjOTRlZDgzODJkZTc3NTJiNWMzNzNjMjhkY2FlNmI4NzI4MDExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7cs08z7CyTbalS6PB9vc9ynUFAr 9fQ4QLIUVlc5BLtLMbhFF2xJzPJcqiJ9TlJZKX+tSmoSXdMXEvhaAMEmNB0+JrlG Y4ZB8Vr1yoOtuN/gGtOdCz7yVuqOE75M8nlvpxjI964TtqFlBaYrMKEwZIb4EdKv nk7l1yLZ4urrXG+/zx8khoIk2jUUxAMV0H5Y0eWM7IIi9+LJZDSm55lERj42MzNF f4j+v2xtOnqLpcsHMG9/jL03+a5ryJcJLtoXK6GuQHj8gyMfKQCZcy+ckorjxHUY rUU81u01qPo6hEWOxDyWig5U5sUm8xZy55Se12c1Jh4enrULmDV3WdiskQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK1clO2Dgt53UrXDc8KNyua4coARMB8GA1UdIwQY MBaAFGSg2xAnAwgsfKVUq7WyJ2ABjVY/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWktEYkVDY0RDQ3g4cFZTcnRiSW5ZQUdOVmo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9mOWEwMGEtODRlZS00N2EwLTllYTEt ZjE3OWRiNWYwNGI2LzEvWktEYkVDY0RDQ3g4cFZTcnRiSW5ZQUdOVmo4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9mOWEwMGEtODRlZS00N2EwLTllYTEtZjE3OWRiNWYwNGI2 LzEvWktEYkVDY0RDQ3g4cFZTcnRiSW5ZQUdOVmo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI6j1RQM2 lMt5a8y66Eh4Uz5WoU63zBpnr51bTinNjFs5sVc6r6wP77cWoxbmivmiW+l28vEt k+S8wSnRiialE61HA0+V/9iHhX/SoOU7CSCBJuCXR+qCIf8YSEzbbXmRUkGG06VD uJoqerzlgd6U0lrIhjKbHGDBWQd1XeogakT5B604O7DCS25dy5VcSL/SbOQwxgDq TswB81G09hhKfdxM+8K5/4A+C0wQexrzTGJQsKXfDMCMnv6CjzFiwMbHPMSsrTjh dgMvpC5mjINE25YbcKCPnIBUV5MvryNWL36cfvctRSb0fHjVrNpxSvJUYAsTxt2Y riQDW+v9rgx01w== -----END CERTIFICATE-----Generated at Wed Dec 17 13:44:48 2025 by rpki-client