This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/c540e3-d2c7-4f08-9178-ae30686c8589/1/ZoOpbPURpnkZ2QDz_JNAmTQfh9g.mft File: ZoOpbPURpnkZ2QDz_JNAmTQfh9g.mft (raw, json) Hash identifier: u10zd0tZ5369NLJCA0IVmNhA8BWA6nz0z+oWa9Ka6Zg= Subject key identifier: 06:9C:9C:4A:53:F9:36:21:B2:97:BB:A9:A3:0E:93:91:B9:00:A5:0F Authority key identifier: 66:83:A9:6C:F5:11:A6:79:19:D9:00:F3:FC:93:40:99:34:1F:87:D8 Certificate issuer: /CN=6683a96cf511a67919d900f3fc934099341f87d8 Certificate serial: 019B34C5E4C89940631FE2D35D91C2ADAD17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZoOpbPURpnkZ2QDz_JNAmTQfh9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/c540e3-d2c7-4f08-9178-ae30686c8589/1/ZoOpbPURpnkZ2QDz_JNAmTQfh9g.mft Manifest number: 0F63 Signing time: Fri 19 Dec 2025 04:02:22 +0000 Manifest this update: Fri 19 Dec 2025 04:02:22 +0000 Manifest next update: Sat 20 Dec 2025 04:02:22 +0000 Files and hashes: 1: ZoOpbPURpnkZ2QDz_JNAmTQfh9g.crl (hash: CLzCQOt19BsKhmD5GuOuq/ApuauSImj5PEILvu5/Gns=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/c540e3-d2c7-4f08-9178-ae30686c8589/1/ZoOpbPURpnkZ2QDz_JNAmTQfh9g.crl rsync://rpki.ripe.net/repository/DEFAULT/46/c540e3-d2c7-4f08-9178-ae30686c8589/1/ZoOpbPURpnkZ2QDz_JNAmTQfh9g.mft rsync://rpki.ripe.net/repository/DEFAULT/ZoOpbPURpnkZ2QDz_JNAmTQfh9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:02:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c5:e4:c8:99:40:63:1f:e2:d3:5d:91:c2:ad:ad:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6683a96cf511a67919d900f3fc934099341f87d8 Validity Not Before: Dec 19 04:02:22 2025 GMT Not After : Dec 20 04:02:22 2025 GMT Subject: CN=069c9c4a53f93621b297bba9a30e9391b900a50f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:37:b0:e0:b2:ca:d3:49:fc:3a:d6:d0:45:b0: d2:0a:09:d4:b0:06:c9:95:08:80:9e:21:a6:f8:2e: 44:a6:9c:76:dd:e8:27:dc:86:57:bb:8b:16:9d:ed: e7:6f:b9:b5:e2:34:ff:79:b8:49:52:03:94:ac:23: 81:93:d9:6b:b5:c8:78:08:69:29:cb:ee:aa:55:4d: 6e:ba:5b:57:7f:c0:cc:bf:5f:79:f5:d4:73:cf:f8: 32:bb:18:6b:f9:b6:81:24:86:0c:c9:62:50:66:27: 2d:64:de:d8:8c:8e:c6:b4:1c:ab:e7:2b:ad:9f:ff: 74:f2:39:26:83:94:96:51:6c:ba:5d:c5:43:89:10: c6:3d:d9:a2:99:1b:37:41:09:fc:13:1f:19:05:f3: 94:ec:db:0d:e6:ff:df:b5:cd:a5:61:0c:9a:ca:2a: b2:c1:bd:01:12:7f:4d:83:49:9e:9f:80:8c:1c:36: 1d:14:c7:90:02:58:65:40:5c:1c:2b:0b:eb:bd:9c: bc:f7:e8:31:9a:c0:b3:c0:30:1a:6d:bb:2f:55:e2: 8f:0c:66:66:ab:ec:05:7a:b2:61:3d:5a:50:2a:6f: 11:02:74:91:97:73:1e:21:81:ea:b7:1d:5d:d0:51: 9f:b6:48:22:e3:f8:53:d7:01:7a:aa:5d:86:12:8f: f4:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:9C:9C:4A:53:F9:36:21:B2:97:BB:A9:A3:0E:93:91:B9:00:A5:0F X509v3 Authority Key Identifier: keyid:66:83:A9:6C:F5:11:A6:79:19:D9:00:F3:FC:93:40:99:34:1F:87:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZoOpbPURpnkZ2QDz_JNAmTQfh9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/c540e3-d2c7-4f08-9178-ae30686c8589/1/ZoOpbPURpnkZ2QDz_JNAmTQfh9g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/c540e3-d2c7-4f08-9178-ae30686c8589/1/ZoOpbPURpnkZ2QDz_JNAmTQfh9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:0c:8e:9e:95:df:c7:5b:18:f9:61:15:c1:a2:65:fe:13:73: 25:8d:7c:55:6c:81:91:cc:1b:49:73:30:75:c8:77:35:61:55: bc:95:b2:bc:c3:4c:c5:5e:e4:1f:3f:d9:66:8f:29:af:f8:b4: 88:e4:64:39:86:71:53:3c:d2:6d:7a:4a:5e:68:e3:00:69:10: 65:02:50:19:e8:4b:76:0e:3a:8c:6b:10:82:69:55:65:74:ff: 32:e6:fc:fc:ce:f1:ee:c2:ea:5c:5f:1e:53:8f:c5:58:15:e0: 6c:13:c7:4f:24:bb:44:34:96:4e:59:a7:0c:ae:b6:a1:a3:b3: 79:96:19:5f:48:8e:49:18:84:c9:a5:57:79:cc:89:fe:4b:d3: 2b:61:85:06:ee:8d:20:eb:4f:f0:ac:95:8d:7d:f4:59:9a:7a: d1:af:ab:e7:a8:b7:3e:5f:30:e3:e9:01:bc:2d:ca:c2:16:b5: 49:45:2d:06:b5:a4:fd:3e:91:b6:2b:0a:43:ef:a1:bf:13:b2: 0c:55:0e:90:8c:de:91:2a:0a:40:e0:e9:b0:7b:52:27:f2:56: 4f:f5:c8:53:ed:61:61:3f:ce:b0:88:50:8a:94:26:f2:f4:22: fd:57:da:21:e7:89:be:6b:15:01:75:81:80:01:a5:6c:6e:d8: 2a:30:b2:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xeTImUBjH+LTXZHCra0XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ODNhOTZjZjUxMWE2NzkxOWQ5MDBmM2ZjOTM0MDk5MzQx Zjg3ZDgwHhcNMjUxMjE5MDQwMjIyWhcNMjUxMjIwMDQwMjIyWjAzMTEwLwYDVQQD EygwNjljOWM0YTUzZjkzNjIxYjI5N2JiYTlhMzBlOTM5MWI5MDBhNTBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzew4LLK00n8OtbQRbDSCgnUsAbJ lQiAniGm+C5Eppx23egn3IZXu4sWne3nb7m14jT/ebhJUgOUrCOBk9lrtch4CGkp y+6qVU1uultXf8DMv1959dRzz/gyuxhr+baBJIYMyWJQZictZN7YjI7GtByr5yut n/908jkmg5SWUWy6XcVDiRDGPdmimRs3QQn8Ex8ZBfOU7NsN5v/ftc2lYQyayiqy wb0BEn9Ng0men4CMHDYdFMeQAlhlQFwcKwvrvZy89+gxmsCzwDAabbsvVeKPDGZm q+wFerJhPVpQKm8RAnSRl3MeIYHqtx1d0FGftkgi4/hT1wF6ql2GEo/0tQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAacnEpT+TYhspe7qaMOk5G5AKUPMB8GA1UdIwQY MBaAFGaDqWz1EaZ5GdkA8/yTQJk0H4fYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWm9PcGJQVVJwbmtaMlFEel9KTkFtVFFmaDlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9jNTQwZTMtZDJjNy00ZjA4LTkxNzgt YWUzMDY4NmM4NTg5LzEvWm9PcGJQVVJwbmtaMlFEel9KTkFtVFFmaDlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni9jNTQwZTMtZDJjNy00ZjA4LTkxNzgtYWUzMDY4NmM4NTg5 LzEvWm9PcGJQVVJwbmtaMlFEel9KTkFtVFFmaDlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJAyOnpXf x1sY+WEVwaJl/hNzJY18VWyBkcwbSXMwdch3NWFVvJWyvMNMxV7kHz/ZZo8pr/i0 iORkOYZxUzzSbXpKXmjjAGkQZQJQGehLdg46jGsQgmlVZXT/Mub8/M7x7sLqXF8e U4/FWBXgbBPHTyS7RDSWTlmnDK62oaOzeZYZX0iOSRiEyaVXecyJ/kvTK2GFBu6N IOtP8KyVjX30WZp60a+r56i3Pl8w4+kBvC3Kwha1SUUtBrWk/T6RtisKQ++hvxOy DFUOkIzekSoKQODpsHtSJ/JWT/XIU+1hYT/OsIhQipQm8vQi/VfaIeeJvmsVAXWB gAGlbG7YKjCywA== -----END CERTIFICATE-----Generated at Fri Dec 19 14:36:29 2025 by rpki-client