This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/ZoKJC37SM0dHjU1l2wlIw9sj6-c.mft File: ZoKJC37SM0dHjU1l2wlIw9sj6-c.mft (raw, json) Hash identifier: hirwjZZMnzGR/stXooLPxAPydHJ8AcGL838o/FpBVzA= Subject key identifier: 90:3D:4B:32:CF:B9:EB:F9:74:97:52:61:F6:DA:7B:55:AD:F0:8F:C0 Authority key identifier: 66:82:89:0B:7E:D2:33:47:47:8D:4D:65:DB:09:48:C3:DB:23:EB:E7 Certificate issuer: /CN=6682890b7ed23347478d4d65db0948c3db23ebe7 Certificate serial: 019B0E935D5A695592A6836D6CF3873C9DE2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZoKJC37SM0dHjU1l2wlIw9sj6-c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/ZoKJC37SM0dHjU1l2wlIw9sj6-c.mft Manifest number: 1772 Signing time: Thu 11 Dec 2025 18:01:37 +0000 Manifest this update: Thu 11 Dec 2025 18:01:37 +0000 Manifest next update: Fri 12 Dec 2025 18:01:37 +0000 Files and hashes: 1: 0eFE803oL-x-2UtW8hW4h_oGSOQ.roa (hash: 1/pEIXtNgxj6Ggb1H5PZs612B1gxk22zRzlXx7oVu5s=) 2: ZoKJC37SM0dHjU1l2wlIw9sj6-c.crl (hash: Sa7muYRf4atpgi+qCHtgx9Y7JN38VOYe/xEQWr8kgNA=) 3: e2qB4esbK6h3v26XFDC4VZBc5KY.roa (hash: j1cRIZ5v+8OJ2fmGwhM51DYmzvrib+oAKJLnWq3m2pg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/ZoKJC37SM0dHjU1l2wlIw9sj6-c.crl rsync://rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/ZoKJC37SM0dHjU1l2wlIw9sj6-c.mft rsync://rpki.ripe.net/repository/DEFAULT/ZoKJC37SM0dHjU1l2wlIw9sj6-c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:93:5d:5a:69:55:92:a6:83:6d:6c:f3:87:3c:9d:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6682890b7ed23347478d4d65db0948c3db23ebe7 Validity Not Before: Dec 11 18:01:37 2025 GMT Not After : Dec 12 18:01:37 2025 GMT Subject: CN=903d4b32cfb9ebf974975261f6da7b55adf08fc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e8:2f:0b:f4:e8:7f:64:7c:71:bf:c5:a3:68: 88:ee:a5:02:96:d2:30:1d:83:64:22:bb:91:57:5e: 4b:64:61:5c:df:b9:5f:00:bf:df:57:35:fe:8a:41: f9:ef:24:7b:b4:c6:2f:f1:52:24:ec:4d:18:b1:33: d0:49:4d:ca:eb:f2:52:41:97:5d:00:56:e4:27:7c: 32:64:3d:e2:bd:9e:43:03:63:31:e6:c8:e4:f7:6e: 6e:08:51:2e:1a:7a:1e:c0:4d:bc:e5:79:0f:ba:d9: 26:41:bd:e6:d1:4f:c9:0b:ec:d1:e9:7a:fd:20:76: fb:90:26:c4:a8:cf:49:e0:92:e2:b0:8f:28:45:1e: b3:92:e7:96:f5:2a:83:c9:b5:c7:9c:5d:a2:59:96: 37:fe:9d:ab:09:e2:c7:78:ed:a0:fb:fd:27:aa:e4: 11:d0:cc:2e:b8:ea:45:6a:b8:d7:27:ad:f4:3d:02: ec:bf:eb:d0:76:5e:f5:09:92:68:4e:71:ae:64:d2: e0:8f:b6:22:f6:fc:3c:b1:ca:5a:4e:82:fa:49:17: 9c:c1:6c:20:77:c6:59:87:91:cd:bf:5c:fb:60:72: d2:86:15:63:a9:a0:9b:00:2c:12:af:3c:28:d6:ca: 9d:03:7c:42:e0:39:15:34:80:e8:2f:a2:a6:bf:d2: 7f:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:3D:4B:32:CF:B9:EB:F9:74:97:52:61:F6:DA:7B:55:AD:F0:8F:C0 X509v3 Authority Key Identifier: keyid:66:82:89:0B:7E:D2:33:47:47:8D:4D:65:DB:09:48:C3:DB:23:EB:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZoKJC37SM0dHjU1l2wlIw9sj6-c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/ZoKJC37SM0dHjU1l2wlIw9sj6-c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/ZoKJC37SM0dHjU1l2wlIw9sj6-c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:72:4b:06:9e:2e:e6:26:a8:0b:49:08:67:07:12:de:7e:b4: f6:4f:8a:52:71:d4:17:56:5f:f7:94:ef:13:7a:a9:20:2b:2c: 84:9c:32:27:1a:fc:6f:c1:6d:fa:b2:98:07:e7:19:f5:50:43: b0:16:47:c9:a5:c3:2a:5a:46:05:28:98:34:63:c8:4d:07:0a: bd:c3:95:7f:8e:5c:10:01:8b:cf:02:04:82:9c:4d:52:80:82: 3e:2e:e3:8a:87:08:58:eb:44:f6:60:6f:cb:7f:16:fa:2d:15: 85:b6:ba:f7:f4:de:22:61:7b:17:ec:9c:6a:6c:58:e2:74:05: 83:f6:2d:f8:a2:da:e5:f9:c6:7b:fc:94:00:84:c7:3f:03:a5: 25:ac:1a:e1:c0:00:a7:8e:6f:3f:60:33:ad:20:27:0a:97:c5: a7:91:5c:fc:3f:82:84:ae:81:21:5c:80:81:fb:58:00:47:a9: 6f:c4:d6:7d:3b:18:c3:76:1d:fc:7b:fe:0c:03:b9:77:09:d1: 05:a4:47:c1:53:36:01:f3:cc:98:3b:41:c6:d2:1f:b5:04:d3: 4a:15:d6:f7:fd:bb:53:ae:24:7f:e0:75:0f:79:e6:a8:b9:ab: 2a:e7:fe:5b:5e:10:75:a7:1d:22:28:03:83:56:f5:88:82:a8: 04:e5:1a:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOk11aaVWSpoNtbPOHPJ3iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ODI4OTBiN2VkMjMzNDc0NzhkNGQ2NWRiMDk0OGMzZGIy M2ViZTcwHhcNMjUxMjExMTgwMTM3WhcNMjUxMjEyMTgwMTM3WjAzMTEwLwYDVQQD Eyg5MDNkNGIzMmNmYjllYmY5NzQ5NzUyNjFmNmRhN2I1NWFkZjA4ZmMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAougvC/Tof2R8cb/Fo2iI7qUCltIw HYNkIruRV15LZGFc37lfAL/fVzX+ikH57yR7tMYv8VIk7E0YsTPQSU3K6/JSQZdd AFbkJ3wyZD3ivZ5DA2Mx5sjk925uCFEuGnoewE285XkPutkmQb3m0U/JC+zR6Xr9 IHb7kCbEqM9J4JLisI8oRR6zkueW9SqDybXHnF2iWZY3/p2rCeLHeO2g+/0nquQR 0MwuuOpFarjXJ630PQLsv+vQdl71CZJoTnGuZNLgj7Yi9vw8scpaToL6SRecwWwg d8ZZh5HNv1z7YHLShhVjqaCbACwSrzwo1sqdA3xC4DkVNIDoL6Kmv9J/RQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJA9SzLPuev5dJdSYfbae1Wt8I/AMB8GA1UdIwQY MBaAFGaCiQt+0jNHR41NZdsJSMPbI+vnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWm9LSkMzN1NNMGRIalUxbDJ3bEl3OXNqNi1jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8yYTk4MWQtNjdmNS00ODRlLWJlMWIt ZmY2NGE5YmE1OTdjLzEvWm9LSkMzN1NNMGRIalUxbDJ3bEl3OXNqNi1jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS8yYTk4MWQtNjdmNS00ODRlLWJlMWItZmY2NGE5YmE1OTdj LzEvWm9LSkMzN1NNMGRIalUxbDJ3bEl3OXNqNi1jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgHJLBp4u 5iaoC0kIZwcS3n609k+KUnHUF1Zf95TvE3qpICsshJwyJxr8b8Ft+rKYB+cZ9VBD sBZHyaXDKlpGBSiYNGPITQcKvcOVf45cEAGLzwIEgpxNUoCCPi7jiocIWOtE9mBv y38W+i0Vhba69/TeImF7F+ycamxY4nQFg/Yt+KLa5fnGe/yUAITHPwOlJawa4cAA p45vP2AzrSAnCpfFp5Fc/D+ChK6BIVyAgftYAEepb8TWfTsYw3Yd/Hv+DAO5dwnR BaRHwVM2AfPMmDtBxtIftQTTShXW9/27U64kf+B1D3nmqLmrKuf+W14QdacdIigD g1b1iIKoBOUaUA== -----END CERTIFICATE-----Generated at Fri Dec 12 00:27:34 2025 by rpki-client