This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/ZjokSA8E0TGL8acNq_-ksn7zLaI.mft File: ZjokSA8E0TGL8acNq_-ksn7zLaI.mft (raw, json) Hash identifier: 2D7NjTmaC9pyeSZ5TcWCN2ML1eMN5qgP89Jj84uarQM= Subject key identifier: 0A:D4:3A:37:B4:97:F4:2F:94:BC:99:47:9E:AD:7D:38:D5:53:DB:F9 Authority key identifier: 66:3A:24:48:0F:04:D1:31:8B:F1:A7:0D:AB:FF:A4:B2:7E:F3:2D:A2 Certificate issuer: /CN=663a24480f04d1318bf1a70dabffa4b27ef32da2 Certificate serial: 019B11CA4D80655D70F797D6E971C729ACDC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZjokSA8E0TGL8acNq_-ksn7zLaI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/ZjokSA8E0TGL8acNq_-ksn7zLaI.mft Manifest number: 038B Signing time: Fri 12 Dec 2025 09:00:29 +0000 Manifest this update: Fri 12 Dec 2025 09:00:29 +0000 Manifest next update: Sat 13 Dec 2025 09:00:29 +0000 Files and hashes: 1: 1-7T2_N2cgFTeswdH8nohcZPo69o.roa (hash: vLeFlqEPiq87khe/5aqQkehrJ4tuQ2aQ8PuLVcLMIyI=) 2: G8N3qTa4VczFzinJ5WzomATxm3g.roa (hash: 9nI91Hj8CyleS8L7CFcjCsRKa59524cSRX5eWMKZBYE=) 3: ZjokSA8E0TGL8acNq_-ksn7zLaI.crl (hash: iuxBAOnYr7/FLZu8akT/1DDLPcWMlsfjJDm8SHLsAho=) 4: lh0Ymr_ga0779X3_Cx26imTai5c.roa (hash: KAwIiW82rtUV/DIsKOEYKgQfn7noiC8wAVVTIRXrLCk=) 5: mzs5lFKEy4ZtL_t-Ol870PRlztM.roa (hash: OwW8CUre3/5rikXiPneNNGHqjsl4FYJ2I/CWMA48GjE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/ZjokSA8E0TGL8acNq_-ksn7zLaI.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/ZjokSA8E0TGL8acNq_-ksn7zLaI.mft rsync://rpki.ripe.net/repository/DEFAULT/ZjokSA8E0TGL8acNq_-ksn7zLaI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:ca:4d:80:65:5d:70:f7:97:d6:e9:71:c7:29:ac:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=663a24480f04d1318bf1a70dabffa4b27ef32da2 Validity Not Before: Dec 12 09:00:29 2025 GMT Not After : Dec 13 09:00:29 2025 GMT Subject: CN=0ad43a37b497f42f94bc99479ead7d38d553dbf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:1b:5b:d3:c0:f1:e2:c2:1b:14:6d:12:e8:c6: 98:a0:5c:45:4b:2d:54:b3:87:b1:70:f5:7b:26:fa: 9b:2a:c2:b7:67:de:fd:c6:b5:9f:5f:dd:51:de:83: 46:d3:29:96:cb:40:84:f7:c3:81:ba:86:b0:ef:92: 9a:cc:6b:33:49:c1:3c:d5:20:a3:11:a9:66:1a:9e: ed:5a:42:cc:2f:13:28:d9:c2:9c:ff:4e:02:39:11: d6:82:93:3a:7f:f8:62:ba:e4:63:3b:2c:24:1d:6e: 14:d6:55:a2:d5:e0:d4:79:3d:5a:37:e3:8c:bd:ff: 62:a1:a9:1f:51:df:43:4a:a3:cc:7c:9f:4e:63:8d: b7:9a:e7:75:9a:8f:3d:3c:f3:5f:f3:9a:0a:83:56: 61:2d:54:8b:e6:08:e8:f9:83:fe:8f:83:66:70:22: c4:9f:dc:e9:2c:70:a0:96:f8:e5:b3:27:62:00:1f: 52:7e:5a:c9:bb:b2:58:f7:fc:31:ef:03:29:2f:fc: ec:f4:9c:84:a9:b9:b4:d8:32:a2:1d:b2:0a:ef:9f: b4:d1:82:1b:82:ea:d2:4f:f7:f8:3d:00:e9:5b:8a: 41:b2:16:4b:b0:f4:59:06:df:0a:00:2c:16:76:48: 45:70:42:e0:09:c3:92:ac:d3:74:3d:11:bf:01:53: 74:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:D4:3A:37:B4:97:F4:2F:94:BC:99:47:9E:AD:7D:38:D5:53:DB:F9 X509v3 Authority Key Identifier: keyid:66:3A:24:48:0F:04:D1:31:8B:F1:A7:0D:AB:FF:A4:B2:7E:F3:2D:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZjokSA8E0TGL8acNq_-ksn7zLaI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/ZjokSA8E0TGL8acNq_-ksn7zLaI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/ZjokSA8E0TGL8acNq_-ksn7zLaI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:93:ce:03:5d:5a:57:d0:96:49:4d:99:f2:c7:b3:0b:06:17: 24:fb:4e:40:0f:28:19:c8:7c:3e:68:ed:34:01:fc:bd:09:da: e2:14:79:2d:94:e4:39:aa:bc:a4:62:cb:e3:8e:d3:4c:fa:c2: b6:9d:85:d7:d6:27:4b:24:72:36:44:6b:3f:dc:94:d8:60:3b: 75:fd:60:f6:61:32:7e:21:3e:4c:41:dd:26:10:da:05:0f:8c: ab:7f:22:69:97:88:aa:d2:ce:6f:0a:db:da:69:ac:32:0e:09: 02:a3:18:45:83:7c:ca:fa:13:ba:22:13:26:0e:a4:3c:33:b7: cc:b9:1a:80:dc:88:a2:24:98:a6:40:04:d9:b5:86:23:70:00: 77:30:f4:56:f2:dd:26:aa:a0:5d:ee:64:62:3e:bb:96:f0:2a: 5c:bc:b2:e0:4a:63:77:11:14:a8:28:c5:bc:c0:9e:93:3b:c5: 8b:be:72:9a:04:64:21:1b:47:fc:f3:1a:90:70:cf:09:db:f4: c6:a6:88:8b:67:e4:0d:0b:aa:96:6e:40:54:71:b8:25:f2:44: 72:2b:aa:34:44:22:b7:e2:97:1e:c8:16:c9:e5:2d:93:e0:ff: d1:79:55:5f:7e:58:8d:55:59:44:1e:04:32:f3:27:e5:ef:9b: 08:82:0e:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsRyk2AZV1w95fW6XHHKazcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2M2EyNDQ4MGYwNGQxMzE4YmYxYTcwZGFiZmZhNGIyN2Vm MzJkYTIwHhcNMjUxMjEyMDkwMDI5WhcNMjUxMjEzMDkwMDI5WjAzMTEwLwYDVQQD EygwYWQ0M2EzN2I0OTdmNDJmOTRiYzk5NDc5ZWFkN2QzOGQ1NTNkYmY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6xtb08Dx4sIbFG0S6MaYoFxFSy1U s4excPV7JvqbKsK3Z979xrWfX91R3oNG0ymWy0CE98OBuoaw75KazGszScE81SCj EalmGp7tWkLMLxMo2cKc/04CORHWgpM6f/hiuuRjOywkHW4U1lWi1eDUeT1aN+OM vf9ioakfUd9DSqPMfJ9OY423mud1mo89PPNf85oKg1ZhLVSL5gjo+YP+j4NmcCLE n9zpLHCglvjlsydiAB9SflrJu7JY9/wx7wMpL/zs9JyEqbm02DKiHbIK75+00YIb gurST/f4PQDpW4pBshZLsPRZBt8KACwWdkhFcELgCcOSrNN0PRG/AVN07wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFArUOje0l/QvlLyZR56tfTjVU9v5MB8GA1UdIwQY MBaAFGY6JEgPBNExi/GnDav/pLJ+8y2iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmpva1NBOEUwVEdMOGFjTnFfLWtzbjd6TGFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi82ZjgwYTgtNmI2YS00ZDk2LWJmNDkt Nzc1ZjVmNzRkNTgxLzEvWmpva1NBOEUwVEdMOGFjTnFfLWtzbjd6TGFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi82ZjgwYTgtNmI2YS00ZDk2LWJmNDktNzc1ZjVmNzRkNTgx LzEvWmpva1NBOEUwVEdMOGFjTnFfLWtzbjd6TGFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuJPOA11a V9CWSU2Z8sezCwYXJPtOQA8oGch8PmjtNAH8vQna4hR5LZTkOaq8pGLL447TTPrC tp2F19YnSyRyNkRrP9yU2GA7df1g9mEyfiE+TEHdJhDaBQ+Mq38iaZeIqtLObwrb 2mmsMg4JAqMYRYN8yvoTuiITJg6kPDO3zLkagNyIoiSYpkAE2bWGI3AAdzD0VvLd JqqgXe5kYj67lvAqXLyy4EpjdxEUqCjFvMCekzvFi75ymgRkIRtH/PMakHDPCdv0 xqaIi2fkDQuqlm5AVHG4JfJEciuqNEQit+KXHsgWyeUtk+D/0XlVX35YjVVZRB4E MvMn5e+bCIIO1A== -----END CERTIFICATE-----Generated at Fri Dec 12 12:41:23 2025 by rpki-client