This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.mft File: 0zDcrR41MkVJwcmhlBerak0JreA.mft (raw, json) Hash identifier: 7J8teBqcCJwhGKjZ7PChBgEiePThrr2daLp8M08oZss= Subject key identifier: 2C:C4:A9:F0:9C:36:22:C6:DE:86:54:46:8F:DF:0D:89:B5:F7:5E:52 Authority key identifier: D3:30:DC:AD:1E:35:32:45:49:C1:C9:A1:94:17:AB:6A:4D:09:AD:E0 Certificate issuer: /CN=d330dcad1e35324549c1c9a19417ab6a4d09ade0 Certificate serial: 019AF31CE23F7074AB57D6E2C774F4EF8CDE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0zDcrR41MkVJwcmhlBerak0JreA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.mft Manifest number: 0E37 Signing time: Sat 06 Dec 2025 10:02:27 +0000 Manifest this update: Sat 06 Dec 2025 10:02:27 +0000 Manifest next update: Sun 07 Dec 2025 10:02:27 +0000 Files and hashes: 1: 0zDcrR41MkVJwcmhlBerak0JreA.crl (hash: xbMRuInq9ZDJq65HqstT9oLLs2fW5XwprYE3JFpqT78=) 2: LPCDu87vvEM5O8HyjWDakdHtl2E.roa (hash: Wurynnxc4HmLUHSiIQ2miFmjlyoy/berebBUDyFaz/I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.mft rsync://rpki.ripe.net/repository/DEFAULT/0zDcrR41MkVJwcmhlBerak0JreA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:e2:3f:70:74:ab:57:d6:e2:c7:74:f4:ef:8c:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d330dcad1e35324549c1c9a19417ab6a4d09ade0 Validity Not Before: Dec 6 10:02:27 2025 GMT Not After : Dec 7 10:02:27 2025 GMT Subject: CN=2cc4a9f09c3622c6de8654468fdf0d89b5f75e52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b7:6a:3a:31:ec:0e:19:97:6f:c0:43:47:57: 4e:48:03:7c:13:0b:0d:88:f2:01:b5:5d:d5:4c:41: a5:1d:49:b9:20:90:6f:57:8e:ed:6e:25:e0:2f:9a: c1:a8:17:24:fe:72:ea:ce:75:47:37:db:9b:c2:11: b1:de:22:07:95:cf:2f:e8:0a:30:59:7b:15:82:93: b1:d5:ac:8c:dc:54:2e:e0:05:9e:48:16:c2:5a:29: 9e:b8:bf:a8:16:d2:37:90:f4:af:d3:22:fc:e6:e6: bd:30:78:51:bc:92:1d:09:1d:0e:5d:66:41:46:b3: 28:3c:4d:6f:42:c2:c0:e4:9b:74:1a:89:a7:7d:09: ef:3f:26:d7:a5:31:e1:0f:be:75:43:7f:13:03:8d: 67:54:42:35:6d:1e:d5:77:e0:1e:c9:58:8c:1d:13: 43:26:a6:24:79:88:28:a3:f8:10:e5:7c:f4:e2:09: e2:26:08:a8:d7:ce:1b:0e:fe:0f:db:cb:85:ab:e6: f7:c7:aa:1b:09:b6:98:d0:95:47:24:8d:98:f3:86: ac:21:57:38:03:83:2f:c5:f6:6a:bd:eb:e1:c5:5b: 74:68:36:6b:57:24:2c:c6:fc:cc:86:ef:30:23:5f: 13:8f:12:2b:0e:ac:10:6d:f6:92:d6:bd:8b:50:ab: fe:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:C4:A9:F0:9C:36:22:C6:DE:86:54:46:8F:DF:0D:89:B5:F7:5E:52 X509v3 Authority Key Identifier: keyid:D3:30:DC:AD:1E:35:32:45:49:C1:C9:A1:94:17:AB:6A:4D:09:AD:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zDcrR41MkVJwcmhlBerak0JreA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:25:16:32:d5:e4:b2:15:dc:9c:04:6a:67:33:3c:7d:66:54: 79:6d:5f:0b:90:09:3b:7d:e0:43:b9:71:d2:84:2d:b9:a2:72: 93:d6:9f:8b:6d:9b:ab:8f:1e:19:33:7f:1e:47:02:1b:7e:d7: bf:bb:86:72:f4:d3:f0:2e:7a:ff:d9:b6:13:05:f0:fc:50:da: 49:5a:91:d6:7b:4e:b9:73:39:52:94:82:bb:a0:71:5c:a6:2c: 66:38:28:c8:8d:bc:cb:f0:45:98:68:9a:75:bb:e5:73:b7:e8: 83:8d:b9:81:9c:f0:77:cb:da:ae:f1:8f:4a:c2:b8:23:07:f5: a5:e4:de:93:66:7b:05:03:01:b7:93:ee:0f:70:b9:cd:2f:69: 9a:f8:d3:c2:7e:82:a4:ec:b6:3a:5c:28:a4:40:b2:d8:8a:bf: a2:b3:cf:20:16:a9:15:37:59:1e:a8:d1:0c:45:5e:ec:3a:2a: 58:34:e3:81:98:27:17:94:2e:82:bc:43:04:b8:3e:45:8c:68: f0:5f:80:22:5d:36:95:9b:19:ef:f7:96:eb:4c:25:e7:32:18: 5c:92:0f:2d:5d:df:be:4c:87:fc:48:04:78:b2:e5:76:6f:75: 3a:a2:e4:1e:0e:cd:4b:73:a7:98:d9:76:97:6f:c5:33:31:45: a1:e9:fd:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHOI/cHSrV9bix3T074zeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzMzBkY2FkMWUzNTMyNDU0OWMxYzlhMTk0MTdhYjZhNGQw OWFkZTAwHhcNMjUxMjA2MTAwMjI3WhcNMjUxMjA3MTAwMjI3WjAzMTEwLwYDVQQD EygyY2M0YTlmMDljMzYyMmM2ZGU4NjU0NDY4ZmRmMGQ4OWI1Zjc1ZTUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLdqOjHsDhmXb8BDR1dOSAN8EwsN iPIBtV3VTEGlHUm5IJBvV47tbiXgL5rBqBck/nLqznVHN9ubwhGx3iIHlc8v6Aow WXsVgpOx1ayM3FQu4AWeSBbCWimeuL+oFtI3kPSv0yL85ua9MHhRvJIdCR0OXWZB RrMoPE1vQsLA5Jt0GomnfQnvPybXpTHhD751Q38TA41nVEI1bR7Vd+AeyViMHRND JqYkeYgoo/gQ5Xz04gniJgio184bDv4P28uFq+b3x6obCbaY0JVHJI2Y84asIVc4 A4MvxfZqvevhxVt0aDZrVyQsxvzMhu8wI18TjxIrDqwQbfaS1r2LUKv+QwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCzEqfCcNiLG3oZURo/fDYm1915SMB8GA1UdIwQY MBaAFNMw3K0eNTJFScHJoZQXq2pNCa3gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHpEY3JSNDFNa1ZKd2NtaGxCZXJhazBKcmVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9mODBkZDQtZjE4NC00NWE4LWI1OGQt NjY1MTdhM2FjMTlkLzEvMHpEY3JSNDFNa1ZKd2NtaGxCZXJhazBKcmVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy9mODBkZDQtZjE4NC00NWE4LWI1OGQtNjY1MTdhM2FjMTlk LzEvMHpEY3JSNDFNa1ZKd2NtaGxCZXJhazBKcmVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATCUWMtXk shXcnARqZzM8fWZUeW1fC5AJO33gQ7lx0oQtuaJyk9afi22bq48eGTN/HkcCG37X v7uGcvTT8C56/9m2EwXw/FDaSVqR1ntOuXM5UpSCu6BxXKYsZjgoyI28y/BFmGia dbvlc7fog425gZzwd8varvGPSsK4Iwf1peTek2Z7BQMBt5PuD3C5zS9pmvjTwn6C pOy2OlwopECy2Iq/orPPIBapFTdZHqjRDEVe7DoqWDTjgZgnF5QugrxDBLg+RYxo 8F+AIl02lZsZ7/eW60wl5zIYXJIPLV3fvkyH/EgEeLLldm91OqLkHg7NS3OnmNl2 l2/FMzFFoen96Q== -----END CERTIFICATE-----Generated at Sat Dec 6 14:20:28 2025 by rpki-client