This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/828b0f-80e8-427b-971d-38bbcfaee6ce/1/Zo0vZMM3Rl7TjaX3zEWE34fUp0Q.mft File: Zo0vZMM3Rl7TjaX3zEWE34fUp0Q.mft (raw, json) Hash identifier: jJ47cPZekzQ1bp00J8cIrQjzrgarPiH97umwjWHS9X0= Subject key identifier: 0D:5A:F7:78:8B:75:D5:37:CA:44:30:18:60:B1:98:F8:54:D2:A7:AA Authority key identifier: 66:8D:2F:64:C3:37:46:5E:D3:8D:A5:F7:CC:45:84:DF:87:D4:A7:44 Certificate issuer: /CN=668d2f64c337465ed38da5f7cc4584df87d4a744 Certificate serial: 019B1D2A6CACD9001C4046750FE6E125FD53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zo0vZMM3Rl7TjaX3zEWE34fUp0Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/828b0f-80e8-427b-971d-38bbcfaee6ce/1/Zo0vZMM3Rl7TjaX3zEWE34fUp0Q.mft Manifest number: 1481 Signing time: Sun 14 Dec 2025 14:01:18 +0000 Manifest this update: Sun 14 Dec 2025 14:01:18 +0000 Manifest next update: Mon 15 Dec 2025 14:01:18 +0000 Files and hashes: 1: DK0Us3bVPvYwAyxNA0q9MJojynQ.roa (hash: zFzB2iAPAkpqv4wiU4d7/9a55ppm9DZ9vElT5rhcYD0=) 2: L4h95g97hPav_sLi8oU5ekfgF0c.roa (hash: gzwtuotOybzEB9lulxkeHjwR8xKOZWJlJKeZJPHVfuA=) 3: PoOOtUJXWSIrEDf1Xj5Z3VDMHSE.roa (hash: xLcUbAcJyMHzQNbU8ncdTmCAmnGI9JLzaYaEQOKQswQ=) 4: YUnFkerPf_tC9lIXfmeJMH6YBzU.roa (hash: /JxLnX44gj+6WYgNCgzFGwP4v1yZUybgTY/uSoStij0=) 5: Zo0vZMM3Rl7TjaX3zEWE34fUp0Q.crl (hash: qBJMi4mwDWpwHLOmAk0kKNnXx/n1YUKIs2y79oAJdZ4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/828b0f-80e8-427b-971d-38bbcfaee6ce/1/Zo0vZMM3Rl7TjaX3zEWE34fUp0Q.crl rsync://rpki.ripe.net/repository/DEFAULT/55/828b0f-80e8-427b-971d-38bbcfaee6ce/1/Zo0vZMM3Rl7TjaX3zEWE34fUp0Q.mft rsync://rpki.ripe.net/repository/DEFAULT/Zo0vZMM3Rl7TjaX3zEWE34fUp0Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1d:2a:6c:ac:d9:00:1c:40:46:75:0f:e6:e1:25:fd:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=668d2f64c337465ed38da5f7cc4584df87d4a744 Validity Not Before: Dec 14 14:01:18 2025 GMT Not After : Dec 15 14:01:18 2025 GMT Subject: CN=0d5af7788b75d537ca44301860b198f854d2a7aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:0d:b9:b7:d2:a4:75:60:ab:78:98:7d:c9:9b: b1:b0:9a:29:6c:68:a4:62:da:fb:92:bb:e5:63:86: 25:86:d4:bd:6c:0c:10:4e:ca:61:af:60:5f:3d:5b: b6:85:59:b3:55:70:4a:f8:a2:0e:b0:ab:eb:00:50: f0:21:57:2c:d6:5d:6f:44:d4:21:04:7a:16:0f:d8: a1:f0:c4:74:25:9c:9d:5a:34:a1:0a:29:9a:e6:c8: 7a:d0:fa:37:53:ab:d9:7c:f6:23:2f:aa:c2:7a:e3: 79:50:b9:40:b6:eb:aa:a6:2c:94:39:d4:3f:34:60: 92:fe:34:e9:b4:f5:92:be:90:1b:4f:cf:10:7f:ae: b4:47:05:75:57:f8:80:fe:f1:db:81:21:80:fb:12: 09:6e:fd:f3:cd:cb:29:2e:e2:35:16:55:0a:bd:f1: a8:64:6f:87:d4:a9:06:94:50:ce:0a:9a:61:ca:58: b3:c1:32:c0:18:43:d6:98:e4:fa:43:dd:49:30:c1: 9e:19:5f:86:e8:91:e8:ce:2a:1d:16:a5:76:21:30: ec:5e:17:06:c5:3a:b8:95:bd:25:a7:e3:f3:08:e5: 26:6a:9d:d4:b9:f8:ac:04:78:a8:d5:f1:f6:91:9f: 4f:84:10:0a:cd:a5:30:84:8c:4f:03:58:29:10:22: 86:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:5A:F7:78:8B:75:D5:37:CA:44:30:18:60:B1:98:F8:54:D2:A7:AA X509v3 Authority Key Identifier: keyid:66:8D:2F:64:C3:37:46:5E:D3:8D:A5:F7:CC:45:84:DF:87:D4:A7:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zo0vZMM3Rl7TjaX3zEWE34fUp0Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/828b0f-80e8-427b-971d-38bbcfaee6ce/1/Zo0vZMM3Rl7TjaX3zEWE34fUp0Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/828b0f-80e8-427b-971d-38bbcfaee6ce/1/Zo0vZMM3Rl7TjaX3zEWE34fUp0Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:cc:a9:02:b3:e4:d7:24:fe:d1:8a:b5:72:98:72:76:ea:7d: e5:d0:db:b9:3f:dd:3c:e0:07:46:bf:ff:bc:eb:f4:2e:59:91: 70:60:1e:21:17:ac:d0:2a:da:a7:db:91:47:0b:ea:63:d1:ef: 5c:67:42:77:00:62:1c:f3:1a:1b:b2:77:00:af:94:d2:44:11: 70:69:d6:ac:2e:55:ab:e8:70:a3:d5:12:8f:44:b1:0f:11:e5: c8:0b:4e:3e:18:59:5e:c4:e8:c4:e5:26:3b:ff:1e:46:17:f3: 5a:0a:da:2c:fa:df:32:2a:11:80:f9:e8:1f:be:85:c5:af:9e: c6:26:38:cb:07:aa:6b:f7:ec:21:e6:ca:b8:ef:44:3e:b9:ea: 33:7f:82:21:40:9e:53:b3:79:3b:76:7b:5b:8f:56:2c:3d:51: 45:7b:91:aa:b7:44:33:49:f4:6e:70:d9:dc:e2:b2:c8:d5:d3: 17:e8:d5:d5:96:04:98:c7:3b:6f:f7:bc:5d:64:03:e9:fb:c2: 94:3d:10:b4:f2:36:07:a8:0f:78:8c:7d:05:1c:44:ad:8c:d2: 77:41:56:a2:9d:87:fb:67:d1:1d:34:78:9b:ab:c3:aa:8e:cf: 39:cd:c5:13:35:e2:1e:4c:32:f7:aa:fc:af:54:0e:af:bc:13: cf:cb:6e:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsdKmys2QAcQEZ1D+bhJf1TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2OGQyZjY0YzMzNzQ2NWVkMzhkYTVmN2NjNDU4NGRmODdk NGE3NDQwHhcNMjUxMjE0MTQwMTE4WhcNMjUxMjE1MTQwMTE4WjAzMTEwLwYDVQQD EygwZDVhZjc3ODhiNzVkNTM3Y2E0NDMwMTg2MGIxOThmODU0ZDJhN2FhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtg25t9KkdWCreJh9yZuxsJopbGik Ytr7krvlY4YlhtS9bAwQTsphr2BfPVu2hVmzVXBK+KIOsKvrAFDwIVcs1l1vRNQh BHoWD9ih8MR0JZydWjShCima5sh60Po3U6vZfPYjL6rCeuN5ULlAtuuqpiyUOdQ/ NGCS/jTptPWSvpAbT88Qf660RwV1V/iA/vHbgSGA+xIJbv3zzcspLuI1FlUKvfGo ZG+H1KkGlFDOCpphylizwTLAGEPWmOT6Q91JMMGeGV+G6JHoziodFqV2ITDsXhcG xTq4lb0lp+PzCOUmap3UufisBHio1fH2kZ9PhBAKzaUwhIxPA1gpECKGKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA1a93iLddU3ykQwGGCxmPhU0qeqMB8GA1UdIwQY MBaAFGaNL2TDN0Ze042l98xFhN+H1KdEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWm8wdlpNTTNSbDdUamFYM3pFV0UzNGZVcDBRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS84MjhiMGYtODBlOC00MjdiLTk3MWQt MzhiYmNmYWVlNmNlLzEvWm8wdlpNTTNSbDdUamFYM3pFV0UzNGZVcDBRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS84MjhiMGYtODBlOC00MjdiLTk3MWQtMzhiYmNmYWVlNmNl LzEvWm8wdlpNTTNSbDdUamFYM3pFV0UzNGZVcDBRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEcypArPk 1yT+0Yq1cphydup95dDbuT/dPOAHRr//vOv0LlmRcGAeIRes0Crap9uRRwvqY9Hv XGdCdwBiHPMaG7J3AK+U0kQRcGnWrC5Vq+hwo9USj0SxDxHlyAtOPhhZXsToxOUm O/8eRhfzWgraLPrfMioRgPnoH76Fxa+exiY4yweqa/fsIebKuO9EPrnqM3+CIUCe U7N5O3Z7W49WLD1RRXuRqrdEM0n0bnDZ3OKyyNXTF+jV1ZYEmMc7b/e8XWQD6fvC lD0QtPI2B6gPeIx9BRxErYzSd0FWop2H+2fRHTR4m6vDqo7POc3FEzXiHkwy96r8 r1QOr7wTz8tu6w== -----END CERTIFICATE-----Generated at Sun Dec 14 21:40:48 2025 by rpki-client