This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft File: 0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft (raw, json) Hash identifier: Kq2U2CHXT2ijgn8blqKQ3fO3sRe2sr0xpRGHO+HdaVA= Subject key identifier: BB:C2:18:1B:C6:4A:D7:04:95:48:5A:81:56:96:79:54:5B:00:06:89 Authority key identifier: D1:98:83:41:D3:60:78:65:F5:0F:5B:B0:2A:9A:3F:5C:2D:E5:8A:92 Certificate issuer: /CN=d1988341d3607865f50f5bb02a9a3f5c2de58a92 Certificate serial: 019AF23FA9FDC9638BA228CE29AFDFD4BFBB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ZiDQdNgeGX1D1uwKpo_XC3lipI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft Manifest number: 02C4 Signing time: Sat 06 Dec 2025 06:00:49 +0000 Manifest this update: Sat 06 Dec 2025 06:00:49 +0000 Manifest next update: Sun 07 Dec 2025 06:00:49 +0000 Files and hashes: 1: 0ZiDQdNgeGX1D1uwKpo_XC3lipI.crl (hash: Ec9EQml+pI5kq4FUTC5ev1fywD3wFCEmI4TA2xIeN8I=) 2: 7YhU_vK5G08AkR9W5LfWHGVyypQ.roa (hash: RlhL4E2mBOXIjwSddZ4sZnexQ4dNTH+ubROkoPIYvn0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.crl rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft rsync://rpki.ripe.net/repository/DEFAULT/0ZiDQdNgeGX1D1uwKpo_XC3lipI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:a9:fd:c9:63:8b:a2:28:ce:29:af:df:d4:bf:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1988341d3607865f50f5bb02a9a3f5c2de58a92 Validity Not Before: Dec 6 06:00:49 2025 GMT Not After : Dec 7 06:00:49 2025 GMT Subject: CN=bbc2181bc64ad70495485a81569679545b000689 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:bf:93:6a:fd:dd:7a:74:fc:27:6e:0d:f0:2d: ef:b1:7c:39:24:2b:77:79:ff:d7:fd:22:29:3b:91: 67:ef:fa:8c:82:1f:69:5b:66:d1:a1:68:60:1a:7e: 8d:3f:02:db:d6:1f:e6:53:b8:0c:c0:6f:c6:8b:0c: 70:fd:71:b2:ae:89:96:cd:30:5a:ba:b5:fb:87:85: c8:73:d6:80:78:a4:d2:07:5a:d2:e2:3c:22:01:36: 2d:68:57:fe:d9:ec:27:9b:88:66:f4:87:fe:46:d6: 36:e7:60:6d:90:f7:e9:12:a1:1f:a6:19:66:12:e0: 53:1f:ea:0b:b9:08:3e:f5:0f:a6:cb:48:95:66:93: a3:d3:8b:48:b1:d4:e7:3a:88:f3:83:c4:64:e9:f1: 40:dd:50:c9:78:6f:31:8a:47:fb:d8:45:02:5f:df: 26:88:27:5b:fc:a9:5d:99:fd:c3:84:88:5b:00:a7: 8d:81:7d:62:fa:8b:fb:e4:cd:12:04:1e:b9:e0:f6: 90:4b:4c:96:31:36:03:3f:ed:65:02:61:b2:f0:e0: 6f:ff:9a:de:b9:04:13:1e:5e:6a:b8:49:5c:40:65: 04:87:22:62:aa:d6:4a:50:8b:d7:14:af:d7:15:04: 79:6a:60:ae:9d:c3:fc:49:0d:b4:5b:9c:b1:fc:f4: c7:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:C2:18:1B:C6:4A:D7:04:95:48:5A:81:56:96:79:54:5B:00:06:89 X509v3 Authority Key Identifier: keyid:D1:98:83:41:D3:60:78:65:F5:0F:5B:B0:2A:9A:3F:5C:2D:E5:8A:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ZiDQdNgeGX1D1uwKpo_XC3lipI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:a6:9c:6c:97:63:8b:2d:c2:c4:5f:3a:eb:53:7f:ff:cb:b3: f9:da:d0:a4:d8:99:70:34:ed:bf:55:36:14:d4:2c:ec:d3:57: 5b:cc:99:ed:b4:53:fa:98:51:6e:9d:ec:2c:3b:48:75:5b:9c: bc:07:0c:d1:c1:db:39:fb:0a:e6:10:62:e8:0a:1f:49:7f:7b: f1:c7:70:ad:c0:77:df:be:56:91:b3:0a:5c:f9:f3:ba:63:d7: 68:87:2c:f9:9b:96:27:90:92:05:76:b5:7e:19:3c:71:de:63: c6:6f:a0:99:5b:da:48:77:17:90:48:b8:9b:3f:ae:d3:9d:ef: c2:dd:60:a8:cb:b5:91:aa:bf:34:a3:43:fb:ba:76:28:89:ac: d0:74:db:6f:36:77:20:26:77:9f:d8:c9:be:d3:f2:88:d0:d6: 77:37:7a:cd:f1:9e:be:82:a9:7b:b5:70:e9:8a:1f:07:06:18: 61:6d:ab:61:2e:c1:fe:0d:c5:a6:71:b1:fd:55:a6:f8:97:a4: 8f:6f:c8:02:ec:4d:5a:14:d1:ac:22:fc:0e:c4:f0:98:c8:60: 29:d1:a3:a6:79:f6:1c:af:e3:83:04:dd:7b:d7:05:02:08:4d: 7d:28:c4:f2:7b:b2:84:65:40:96:9d:e9:0a:7e:3c:07:f5:84: e4:dd:e5:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP6n9yWOLoijOKa/f1L+7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxOTg4MzQxZDM2MDc4NjVmNTBmNWJiMDJhOWEzZjVjMmRl NThhOTIwHhcNMjUxMjA2MDYwMDQ5WhcNMjUxMjA3MDYwMDQ5WjAzMTEwLwYDVQQD EyhiYmMyMTgxYmM2NGFkNzA0OTU0ODVhODE1Njk2Nzk1NDViMDAwNjg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7+Tav3denT8J24N8C3vsXw5JCt3 ef/X/SIpO5Fn7/qMgh9pW2bRoWhgGn6NPwLb1h/mU7gMwG/Giwxw/XGyromWzTBa urX7h4XIc9aAeKTSB1rS4jwiATYtaFf+2ewnm4hm9If+RtY252BtkPfpEqEfphlm EuBTH+oLuQg+9Q+my0iVZpOj04tIsdTnOojzg8Rk6fFA3VDJeG8xikf72EUCX98m iCdb/Kldmf3DhIhbAKeNgX1i+ov75M0SBB654PaQS0yWMTYDP+1lAmGy8OBv/5re uQQTHl5quElcQGUEhyJiqtZKUIvXFK/XFQR5amCuncP8SQ20W5yx/PTHgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLvCGBvGStcElUhagVaWeVRbAAaJMB8GA1UdIwQY MBaAFNGYg0HTYHhl9Q9bsCqaP1wt5YqSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFppRFFkTmdlR1gxRDF1d0twb19YQzNsaXBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8yMzI5ZjMtYTI4ZS00OWRlLTk4YTMt OTMyMGExYzczYjFkLzEvMFppRFFkTmdlR1gxRDF1d0twb19YQzNsaXBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS8yMzI5ZjMtYTI4ZS00OWRlLTk4YTMtOTMyMGExYzczYjFk LzEvMFppRFFkTmdlR1gxRDF1d0twb19YQzNsaXBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKaacbJdj iy3CxF8661N//8uz+drQpNiZcDTtv1U2FNQs7NNXW8yZ7bRT+phRbp3sLDtIdVuc vAcM0cHbOfsK5hBi6AofSX978cdwrcB3375WkbMKXPnzumPXaIcs+ZuWJ5CSBXa1 fhk8cd5jxm+gmVvaSHcXkEi4mz+u053vwt1gqMu1kaq/NKND+7p2KIms0HTbbzZ3 ICZ3n9jJvtPyiNDWdzd6zfGevoKpe7Vw6YofBwYYYW2rYS7B/g3FpnGx/VWm+Jek j2/IAuxNWhTRrCL8DsTwmMhgKdGjpnn2HK/jgwTde9cFAghNfSjE8nuyhGVAlp3p Cn48B/WE5N3lWA== -----END CERTIFICATE-----Generated at Sat Dec 6 14:48:53 2025 by rpki-client