This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/0c9b35-3952-4e2f-b4ce-721bebd8a1d5/1/FNCEOyRfwnNc8kdQTE8b2FX_zvw.mft File: FNCEOyRfwnNc8kdQTE8b2FX_zvw.mft (raw, json) Hash identifier: 3K+XgMH9gWGyP958WkETF5PG0uUs1d7QPSenpmeNVyM= Subject key identifier: 8A:26:87:1B:09:3C:34:69:8A:8D:13:CA:7E:32:DD:EA:4B:8E:0E:E9 Authority key identifier: 14:D0:84:3B:24:5F:C2:73:5C:F2:47:50:4C:4F:1B:D8:55:FF:CE:FC Certificate issuer: /CN=14d0843b245fc2735cf247504c4f1bd855ffcefc Certificate serial: 019AF31C6AFEB8D56B421AD7C724BA09F449 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNCEOyRfwnNc8kdQTE8b2FX_zvw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/0c9b35-3952-4e2f-b4ce-721bebd8a1d5/1/FNCEOyRfwnNc8kdQTE8b2FX_zvw.mft Manifest number: 0DE6 Signing time: Sat 06 Dec 2025 10:01:57 +0000 Manifest this update: Sat 06 Dec 2025 10:01:57 +0000 Manifest next update: Sun 07 Dec 2025 10:01:57 +0000 Files and hashes: 1: FNCEOyRfwnNc8kdQTE8b2FX_zvw.crl (hash: ujO6Y4Qn3hSPde1hC0WcBZiGfvjjNd6YoBgJiBIY+aQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/0c9b35-3952-4e2f-b4ce-721bebd8a1d5/1/FNCEOyRfwnNc8kdQTE8b2FX_zvw.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/0c9b35-3952-4e2f-b4ce-721bebd8a1d5/1/FNCEOyRfwnNc8kdQTE8b2FX_zvw.mft rsync://rpki.ripe.net/repository/DEFAULT/FNCEOyRfwnNc8kdQTE8b2FX_zvw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:6a:fe:b8:d5:6b:42:1a:d7:c7:24:ba:09:f4:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14d0843b245fc2735cf247504c4f1bd855ffcefc Validity Not Before: Dec 6 10:01:57 2025 GMT Not After : Dec 7 10:01:57 2025 GMT Subject: CN=8a26871b093c34698a8d13ca7e32ddea4b8e0ee9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:35:7e:af:90:70:2e:b7:f8:ac:0e:68:c8:37: 63:6f:ac:e3:ea:c6:e1:a8:60:85:e5:5d:4e:9f:5e: 81:e6:75:36:17:23:e4:97:95:84:cf:5d:4e:91:79: 74:a2:fc:cb:9e:8b:73:53:5f:31:7b:8c:07:32:c1: e8:c7:1a:fa:70:14:6e:8b:e3:ff:ee:8b:3c:6d:85: 2e:79:02:ed:b6:b1:32:0e:22:6e:7c:10:5e:ca:51: e1:93:8c:77:92:25:92:bd:33:ce:9d:e5:e1:07:59: 0d:15:95:73:68:b6:1b:9b:9e:51:f2:5c:07:5a:6f: 70:52:6f:2c:38:3b:10:62:07:0d:f3:e6:e4:ac:e7: bc:7c:2c:c6:02:6b:af:d2:90:e5:4b:db:75:d4:66: a6:f7:d4:bd:dc:53:78:c6:c9:72:38:c5:a5:0b:e4: 4a:3a:74:ce:e5:52:d6:5f:c4:4a:3a:84:64:b7:76: db:27:c7:5a:a2:eb:1e:ee:32:8f:0b:bc:ff:2a:4c: 42:93:b8:47:95:0a:b1:8b:d2:86:3d:ee:80:cf:58: cf:e3:e8:ec:04:06:a5:5d:a0:84:c6:13:3b:3b:b2: 97:f7:95:19:5c:ee:86:3a:3a:29:f3:7c:c7:d7:f0: 09:21:73:98:c1:3b:59:68:87:11:f8:ff:2a:f9:c7: c6:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:26:87:1B:09:3C:34:69:8A:8D:13:CA:7E:32:DD:EA:4B:8E:0E:E9 X509v3 Authority Key Identifier: keyid:14:D0:84:3B:24:5F:C2:73:5C:F2:47:50:4C:4F:1B:D8:55:FF:CE:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNCEOyRfwnNc8kdQTE8b2FX_zvw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/0c9b35-3952-4e2f-b4ce-721bebd8a1d5/1/FNCEOyRfwnNc8kdQTE8b2FX_zvw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/0c9b35-3952-4e2f-b4ce-721bebd8a1d5/1/FNCEOyRfwnNc8kdQTE8b2FX_zvw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:96:2e:03:e4:cf:46:4c:52:50:4f:39:d4:20:d4:57:73:5f: d0:cd:76:fc:35:dc:ed:b7:38:0b:11:47:cc:de:4a:c1:26:b4: 95:c2:0d:16:d8:d0:a2:d1:18:4d:1a:22:c3:c6:4a:7c:90:f2: e9:a0:b6:1c:da:ed:0e:66:ab:21:c0:3d:8b:a3:4b:cf:fe:d3: 91:6c:0b:48:63:ed:2f:a3:bd:a6:f2:b9:15:86:2b:70:4d:92: 00:28:8b:1b:3c:f3:e4:f4:b0:e5:ff:ec:aa:5b:6a:7f:6e:c3: 3c:ea:53:3b:ef:90:37:9c:3f:44:99:42:41:da:17:eb:92:13: 8b:5f:2b:43:c5:29:a4:39:32:7a:1b:38:87:1b:ad:12:db:4c: 0d:4f:27:1d:e3:a8:f6:57:08:2d:5b:29:6f:9e:21:51:8c:5a: 0c:b4:02:56:7e:a0:76:0c:93:5d:fb:6d:a8:ca:4d:84:8b:1e: 3b:8e:83:fa:f9:50:5c:e4:61:c4:de:04:a0:6b:bf:7c:03:94: c4:ea:89:c9:85:40:c5:0a:ad:d3:af:c1:e4:13:93:c2:78:98: f3:43:a1:ec:70:95:ef:88:e7:fd:7a:d2:e1:68:c8:c1:db:61: dc:9d:8d:76:7e:5c:72:04:83:0e:dc:fd:c1:14:06:af:d4:e4: 99:00:f0:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHGr+uNVrQhrXxyS6CfRJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0ZDA4NDNiMjQ1ZmMyNzM1Y2YyNDc1MDRjNGYxYmQ4NTVm ZmNlZmMwHhcNMjUxMjA2MTAwMTU3WhcNMjUxMjA3MTAwMTU3WjAzMTEwLwYDVQQD Eyg4YTI2ODcxYjA5M2MzNDY5OGE4ZDEzY2E3ZTMyZGRlYTRiOGUwZWU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDV+r5BwLrf4rA5oyDdjb6zj6sbh qGCF5V1On16B5nU2FyPkl5WEz11OkXl0ovzLnotzU18xe4wHMsHoxxr6cBRui+P/ 7os8bYUueQLttrEyDiJufBBeylHhk4x3kiWSvTPOneXhB1kNFZVzaLYbm55R8lwH Wm9wUm8sODsQYgcN8+bkrOe8fCzGAmuv0pDlS9t11Gam99S93FN4xslyOMWlC+RK OnTO5VLWX8RKOoRkt3bbJ8daouse7jKPC7z/KkxCk7hHlQqxi9KGPe6Az1jP4+js BAalXaCExhM7O7KX95UZXO6GOjop83zH1/AJIXOYwTtZaIcR+P8q+cfGPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIomhxsJPDRpio0Tyn4y3epLjg7pMB8GA1UdIwQY MBaAFBTQhDskX8JzXPJHUExPG9hV/878MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRk5DRU95UmZ3bk5jOGtkUVRFOGIyRlhfenZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8wYzliMzUtMzk1Mi00ZTJmLWI0Y2Ut NzIxYmViZDhhMWQ1LzEvRk5DRU95UmZ3bk5jOGtkUVRFOGIyRlhfenZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS8wYzliMzUtMzk1Mi00ZTJmLWI0Y2UtNzIxYmViZDhhMWQ1 LzEvRk5DRU95UmZ3bk5jOGtkUVRFOGIyRlhfenZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPpYuA+TP RkxSUE851CDUV3Nf0M12/DXc7bc4CxFHzN5KwSa0lcINFtjQotEYTRoiw8ZKfJDy 6aC2HNrtDmarIcA9i6NLz/7TkWwLSGPtL6O9pvK5FYYrcE2SACiLGzzz5PSw5f/s qltqf27DPOpTO++QN5w/RJlCQdoX65ITi18rQ8UppDkyehs4hxutEttMDU8nHeOo 9lcILVspb54hUYxaDLQCVn6gdgyTXfttqMpNhIseO46D+vlQXORhxN4EoGu/fAOU xOqJyYVAxQqt06/B5BOTwniY80Oh7HCV74jn/XrS4WjIwdth3J2Ndn5ccgSDDtz9 wRQGr9TkmQDwwA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:27:03 2025 by rpki-client