This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/10zp2eGKKooGy02bCLWc12siEYQ.mft File: 10zp2eGKKooGy02bCLWc12siEYQ.mft (raw, json) Hash identifier: ua5VZ1wALqwkh2PT4ydjm8rS46XXxDpQCzGHrXI0iTk= Subject key identifier: 92:99:FF:5F:C1:FB:27:96:35:FF:FB:FA:C3:F6:02:EC:46:A5:00:E4 Authority key identifier: D7:4C:E9:D9:E1:8A:2A:8A:06:CB:4D:9B:08:B5:9C:D7:6B:22:11:84 Certificate issuer: /CN=d74ce9d9e18a2a8a06cb4d9b08b59cd76b221184 Certificate serial: 019AF16473947E68DC51FF48D97247A57A17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10zp2eGKKooGy02bCLWc12siEYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/10zp2eGKKooGy02bCLWc12siEYQ.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 02:01:23 +0000 Manifest this update: Sat 06 Dec 2025 02:01:23 +0000 Manifest next update: Sun 07 Dec 2025 02:01:23 +0000 Files and hashes: 1: 10zp2eGKKooGy02bCLWc12siEYQ.crl (hash: HFv4gCzTXkDnBghmGqPrIepa4mCbtG20pE3LPnQ0yuU=) 2: ukTm-wxzEJj-s_OEsyy8V9c_Wr4.roa (hash: fj9aOH6SJjD+OTCiFFLafnYvA1jJNlZv9daAJcHZMJs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/10zp2eGKKooGy02bCLWc12siEYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/10zp2eGKKooGy02bCLWc12siEYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/10zp2eGKKooGy02bCLWc12siEYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:73:94:7e:68:dc:51:ff:48:d9:72:47:a5:7a:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d74ce9d9e18a2a8a06cb4d9b08b59cd76b221184 Validity Not Before: Dec 6 02:01:23 2025 GMT Not After : Dec 7 02:01:23 2025 GMT Subject: CN=9299ff5fc1fb279635fffbfac3f602ec46a500e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:b0:d8:fc:cc:f6:d5:f2:76:fc:e2:3a:8c:13: ca:71:8c:a2:30:e8:ba:3c:95:c3:69:c8:7f:da:f8: f6:93:a6:43:96:2a:e9:e0:2f:79:68:5f:1c:dc:0a: 73:6c:c5:07:ac:fc:e5:30:c5:3c:b8:23:51:72:75: 5b:6a:af:e1:ed:60:1d:fc:6b:92:86:c4:24:ca:b8: 38:e7:fa:a8:93:51:6f:e9:bc:1c:9c:37:cc:f0:a3: 78:04:2b:3e:81:4a:f5:b0:c5:14:b8:43:a6:88:a5: d9:18:a5:9a:97:c6:27:64:6b:1c:be:4e:85:b5:95: 32:c4:ec:c3:98:34:99:ba:89:ee:ab:91:9b:05:e4: 27:00:f7:3b:e2:2f:20:df:76:f8:61:1c:32:47:43: 56:9b:63:a5:05:a4:8c:32:e9:c7:0a:31:86:4a:78: c2:27:79:97:ec:a6:32:54:88:ef:d0:ac:51:0f:f6: 9a:1b:aa:c8:34:85:f7:0d:80:68:84:0b:30:e2:24: e8:0c:71:7f:6c:b4:ea:cd:b4:cd:b0:e0:8b:f1:5c: 62:bd:5f:56:e1:ba:64:be:7c:7d:28:be:c8:48:b5: 5f:5c:e9:80:d2:fe:9f:68:ab:dc:2b:11:e8:25:2f: e9:11:5a:82:02:d5:95:69:49:4c:b2:ce:e2:d2:9c: e4:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:99:FF:5F:C1:FB:27:96:35:FF:FB:FA:C3:F6:02:EC:46:A5:00:E4 X509v3 Authority Key Identifier: keyid:D7:4C:E9:D9:E1:8A:2A:8A:06:CB:4D:9B:08:B5:9C:D7:6B:22:11:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10zp2eGKKooGy02bCLWc12siEYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/10zp2eGKKooGy02bCLWc12siEYQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/10zp2eGKKooGy02bCLWc12siEYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:58:05:b3:6b:87:3e:a8:d0:d0:67:e9:4f:91:1c:a8:38:03: f5:59:60:fb:9a:6c:57:76:c7:c0:ac:43:bd:71:d1:c5:1a:d2: ac:25:db:fc:90:f8:e0:f6:f2:7a:44:50:3f:b1:9c:5a:ab:fd: 84:e8:e3:0b:4a:de:cd:6a:9a:f0:62:c8:9b:8e:33:72:fe:6d: 2d:ad:89:13:be:e1:44:7d:a9:e5:cc:f9:f0:bc:ac:63:80:86: 3c:e7:02:ce:67:37:62:1d:42:d0:eb:45:e5:9a:fc:e5:47:69: 6e:80:5b:0e:a2:76:4e:70:50:c3:6a:d2:66:f0:0c:97:4d:c7: c3:6e:8f:e1:87:20:c2:da:c8:19:02:dc:7a:fa:26:f0:91:df: 02:90:e0:72:81:bb:40:b0:5c:5c:a7:b1:89:bd:66:25:48:61: 18:b6:f8:8c:52:dd:cf:1c:6e:d6:5b:68:ab:c0:80:76:b3:c1: f7:63:de:9c:cd:da:12:e4:38:57:15:6b:7e:67:83:7e:1a:d8: ac:81:fc:6d:b6:27:d1:62:32:6b:a3:9b:85:47:98:13:13:49: d9:cf:95:0e:df:dc:2a:71:eb:c6:64:ac:98:1c:39:c6:53:63: 12:bb:c5:6b:17:3a:16:03:43:6f:5b:9e:c5:fa:8b:05:9d:08: 6e:b8:4b:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZHOUfmjcUf9I2XJHpXoXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NGNlOWQ5ZTE4YTJhOGEwNmNiNGQ5YjA4YjU5Y2Q3NmIy MjExODQwHhcNMjUxMjA2MDIwMTIzWhcNMjUxMjA3MDIwMTIzWjAzMTEwLwYDVQQD Eyg5Mjk5ZmY1ZmMxZmIyNzk2MzVmZmZiZmFjM2Y2MDJlYzQ2YTUwMGU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3rDY/Mz21fJ2/OI6jBPKcYyiMOi6 PJXDach/2vj2k6ZDlirp4C95aF8c3ApzbMUHrPzlMMU8uCNRcnVbaq/h7WAd/GuS hsQkyrg45/qok1Fv6bwcnDfM8KN4BCs+gUr1sMUUuEOmiKXZGKWal8YnZGscvk6F tZUyxOzDmDSZuonuq5GbBeQnAPc74i8g33b4YRwyR0NWm2OlBaSMMunHCjGGSnjC J3mX7KYyVIjv0KxRD/aaG6rINIX3DYBohAsw4iToDHF/bLTqzbTNsOCL8VxivV9W 4bpkvnx9KL7ISLVfXOmA0v6faKvcKxHoJS/pEVqCAtWVaUlMss7i0pzkzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJKZ/1/B+yeWNf/7+sP2AuxGpQDkMB8GA1UdIwQY MBaAFNdM6dnhiiqKBstNmwi1nNdrIhGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTB6cDJlR0tLb29HeTAyYkNMV2MxMnNpRVlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9lZDVjMWUtMmQ1Zi00MjIyLWJkYzct NjNiOTUyNDBkNzQ1LzEvMTB6cDJlR0tLb29HeTAyYkNMV2MxMnNpRVlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9lZDVjMWUtMmQ1Zi00MjIyLWJkYzctNjNiOTUyNDBkNzQ1 LzEvMTB6cDJlR0tLb29HeTAyYkNMV2MxMnNpRVlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZlgFs2uH PqjQ0GfpT5EcqDgD9Vlg+5psV3bHwKxDvXHRxRrSrCXb/JD44PbyekRQP7GcWqv9 hOjjC0rezWqa8GLIm44zcv5tLa2JE77hRH2p5cz58LysY4CGPOcCzmc3Yh1C0OtF 5Zr85UdpboBbDqJ2TnBQw2rSZvAMl03Hw26P4YcgwtrIGQLcevom8JHfApDgcoG7 QLBcXKexib1mJUhhGLb4jFLdzxxu1ltoq8CAdrPB92PenM3aEuQ4VxVrfmeDfhrY rIH8bbYn0WIya6ObhUeYExNJ2c+VDt/cKnHrxmSsmBw5xlNjErvFaxc6FgNDb1ue xfqLBZ0IbrhL5w== -----END CERTIFICATE-----Generated at Sat Dec 6 07:23:29 2025 by rpki-client