This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/df757c-499d-4020-a5c3-61161a65d3d6/1/zivMENFrD-0oVekpX8QJ1lB7Q9Y.mft File: zivMENFrD-0oVekpX8QJ1lB7Q9Y.mft (raw, json) Hash identifier: /zBplD+LF1i9l4OEMAMHAyChvXdTQBCHl3EEVRAmBcw= Subject key identifier: 35:12:50:59:66:46:72:4E:CB:21:70:41:B3:59:A2:C7:FF:C1:C4:B4 Authority key identifier: CE:2B:CC:10:D1:6B:0F:ED:28:55:E9:29:5F:C4:09:D6:50:7B:43:D6 Certificate issuer: /CN=ce2bcc10d16b0fed2855e9295fc409d6507b43d6 Certificate serial: 019AF2097311528A7F00C4037270C0973B92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zivMENFrD-0oVekpX8QJ1lB7Q9Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/df757c-499d-4020-a5c3-61161a65d3d6/1/zivMENFrD-0oVekpX8QJ1lB7Q9Y.mft Manifest number: 025D Signing time: Sat 06 Dec 2025 05:01:36 +0000 Manifest this update: Sat 06 Dec 2025 05:01:36 +0000 Manifest next update: Sun 07 Dec 2025 05:01:36 +0000 Files and hashes: 1: 6sJ-wQpiS25QBcOh2j3bL4cTD-A.roa (hash: F4TG4ne94PDnc8s48JSfw2AY/j+2ggMyoyRrmuq/iWY=) 2: zivMENFrD-0oVekpX8QJ1lB7Q9Y.crl (hash: XKxF17lud+oiSAGA4tslhUHldg3RjxuBSJOhLgTTzq8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/df757c-499d-4020-a5c3-61161a65d3d6/1/zivMENFrD-0oVekpX8QJ1lB7Q9Y.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/df757c-499d-4020-a5c3-61161a65d3d6/1/zivMENFrD-0oVekpX8QJ1lB7Q9Y.mft rsync://rpki.ripe.net/repository/DEFAULT/zivMENFrD-0oVekpX8QJ1lB7Q9Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:73:11:52:8a:7f:00:c4:03:72:70:c0:97:3b:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce2bcc10d16b0fed2855e9295fc409d6507b43d6 Validity Not Before: Dec 6 05:01:36 2025 GMT Not After : Dec 7 05:01:36 2025 GMT Subject: CN=351250596646724ecb217041b359a2c7ffc1c4b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:02:1e:29:b3:b8:0f:8a:d3:49:fb:a7:31:e0: 2f:f7:72:fb:67:c2:ed:26:72:6a:9d:09:25:47:4d: 1c:e4:7a:cc:15:08:7f:b8:ec:48:a1:5e:97:8a:26: 2b:6e:28:2c:e9:19:6f:56:b8:82:0d:1c:dd:76:3a: 46:c2:52:a5:a2:ba:a8:4d:61:df:4b:92:ac:47:bc: 88:75:d7:6e:68:1c:dc:7e:1e:24:9b:cb:f8:ad:64: aa:9b:d6:74:81:00:b5:22:94:1a:5f:52:99:ee:3e: 24:09:dd:26:c8:c0:b6:22:33:7b:a8:5b:6b:b9:ac: df:84:91:e1:30:80:a6:f9:4d:e0:26:ea:01:10:a9: 4d:e1:44:27:55:ad:5e:16:b3:a4:6d:3b:e5:be:8d: a7:4a:29:f0:ec:3c:a8:31:0c:98:ef:1c:1b:c6:ae: 0d:2f:db:9c:7c:d7:44:52:cb:7e:68:6d:fd:46:db: a9:3e:cc:7c:76:2f:7f:73:c8:7e:52:35:fa:ac:41: 44:19:f9:93:18:18:7d:b3:10:45:4f:cd:63:dc:95: 8a:8a:27:5d:7b:47:9a:ce:7f:fe:ba:1e:e4:50:dc: 9a:93:e5:81:5b:df:37:d8:08:18:9b:ee:43:cf:52: 4d:71:8e:25:69:59:93:5e:86:ab:9b:a7:5b:0f:40: fc:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:12:50:59:66:46:72:4E:CB:21:70:41:B3:59:A2:C7:FF:C1:C4:B4 X509v3 Authority Key Identifier: keyid:CE:2B:CC:10:D1:6B:0F:ED:28:55:E9:29:5F:C4:09:D6:50:7B:43:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zivMENFrD-0oVekpX8QJ1lB7Q9Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/df757c-499d-4020-a5c3-61161a65d3d6/1/zivMENFrD-0oVekpX8QJ1lB7Q9Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/df757c-499d-4020-a5c3-61161a65d3d6/1/zivMENFrD-0oVekpX8QJ1lB7Q9Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:69:79:da:e1:97:bd:35:ab:a4:5c:51:fb:4e:51:b9:2b:1b: 7b:f5:12:01:a7:a0:21:e0:b4:3a:cf:bd:96:79:ea:3a:0c:10: 35:3b:60:bf:b7:a6:e9:7f:7d:e6:0d:3a:27:19:c9:e6:f7:38: c2:57:06:cc:bc:e0:da:5b:ee:b5:51:9e:bc:f4:a2:26:f8:14: 81:25:27:6e:50:47:33:89:b2:c8:e7:98:11:2f:87:50:4f:96: 72:fa:3b:2c:34:ca:0e:d7:10:8e:c0:ce:4a:4b:1d:f0:e5:c0: 79:fc:ea:33:ed:95:98:a8:9f:bf:3d:4d:b7:81:3c:c4:89:c5: 38:68:9c:a5:51:55:89:71:ae:0f:e8:81:f0:f9:11:6e:10:f4: f8:5e:34:bb:03:6a:8f:66:a7:b9:ec:4d:a4:21:9f:12:c3:de: 19:fb:c1:7a:1c:60:5c:92:f3:49:0b:bf:5d:a4:4b:91:2a:73: b2:25:7c:2a:36:0a:01:da:9b:7c:ca:72:6a:1b:db:74:c6:bd: 28:9c:4b:96:b0:30:5e:ef:9c:0d:4b:3a:e7:39:59:9c:22:cf: 6b:70:0f:fe:d1:3f:ed:de:98:fd:ee:9b:7b:89:69:2a:e8:17: e0:00:45:36:45:5f:2d:aa:f4:64:b2:d5:7c:21:ee:f8:24:ff: 50:3a:fe:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCXMRUop/AMQDcnDAlzuSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlMmJjYzEwZDE2YjBmZWQyODU1ZTkyOTVmYzQwOWQ2NTA3 YjQzZDYwHhcNMjUxMjA2MDUwMTM2WhcNMjUxMjA3MDUwMTM2WjAzMTEwLwYDVQQD EygzNTEyNTA1OTY2NDY3MjRlY2IyMTcwNDFiMzU5YTJjN2ZmYzFjNGI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQIeKbO4D4rTSfunMeAv93L7Z8Lt JnJqnQklR00c5HrMFQh/uOxIoV6XiiYrbigs6RlvVriCDRzddjpGwlKlorqoTWHf S5KsR7yIddduaBzcfh4km8v4rWSqm9Z0gQC1IpQaX1KZ7j4kCd0myMC2IjN7qFtr uazfhJHhMICm+U3gJuoBEKlN4UQnVa1eFrOkbTvlvo2nSinw7DyoMQyY7xwbxq4N L9ucfNdEUst+aG39RtupPsx8di9/c8h+UjX6rEFEGfmTGBh9sxBFT81j3JWKiidd e0eazn/+uh7kUNyak+WBW9832AgYm+5Dz1JNcY4laVmTXoarm6dbD0D84QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDUSUFlmRnJOyyFwQbNZosf/wcS0MB8GA1UdIwQY MBaAFM4rzBDRaw/tKFXpKV/ECdZQe0PWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveml2TUVORnJELTBvVmVrcFg4UUoxbEI3UTlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9kZjc1N2MtNDk5ZC00MDIwLWE1YzMt NjExNjFhNjVkM2Q2LzEveml2TUVORnJELTBvVmVrcFg4UUoxbEI3UTlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS9kZjc1N2MtNDk5ZC00MDIwLWE1YzMtNjExNjFhNjVkM2Q2 LzEveml2TUVORnJELTBvVmVrcFg4UUoxbEI3UTlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkml52uGX vTWrpFxR+05RuSsbe/USAaegIeC0Os+9lnnqOgwQNTtgv7em6X995g06JxnJ5vc4 wlcGzLzg2lvutVGevPSiJvgUgSUnblBHM4myyOeYES+HUE+Wcvo7LDTKDtcQjsDO Sksd8OXAefzqM+2VmKifvz1Nt4E8xInFOGicpVFViXGuD+iB8PkRbhD0+F40uwNq j2anuexNpCGfEsPeGfvBehxgXJLzSQu/XaRLkSpzsiV8KjYKAdqbfMpyahvbdMa9 KJxLlrAwXu+cDUs65zlZnCLPa3AP/tE/7d6Y/e6be4lpKugX4ABFNkVfLar0ZLLV fCHu+CT/UDr+Iw== -----END CERTIFICATE-----Generated at Sat Dec 6 13:49:10 2025 by rpki-client