This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/6e3fba-4d3a-43cb-babf-5f2882de3ec7/1/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.mft File: ZOkGJwIa3PpWJDQtPl-LSANaz7Q.mft (raw, json) Hash identifier: eIw053vazshdHk7sLJP0nRPZJi7Pt/cyDLX3vai9wsg= Subject key identifier: CC:B4:62:CE:E9:FB:70:5B:01:7E:9D:30:7F:02:D1:82:25:FC:4E:16 Authority key identifier: 64:E9:06:27:02:1A:DC:FA:56:24:34:2D:3E:5F:8B:48:03:5A:CF:B4 Certificate issuer: /CN=64e90627021adcfa5624342d3e5f8b48035acfb4 Certificate serial: 019B59775D77E680DF643E7428C0A72E639B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/6e3fba-4d3a-43cb-babf-5f2882de3ec7/1/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.mft Manifest number: 1799 Signing time: Fri 26 Dec 2025 07:02:33 +0000 Manifest this update: Fri 26 Dec 2025 07:02:33 +0000 Manifest next update: Sat 27 Dec 2025 07:02:33 +0000 Files and hashes: 1: ZOkGJwIa3PpWJDQtPl-LSANaz7Q.crl (hash: imxUPdkjG2ae391UYtQTRsBjcdSYiyTvmnxyIznc68U=) 2: qoiJ2dkjuPKR2DINrHtiZnfckMQ.roa (hash: LgXeymWOOJplKwnla/9DQkVIgYhvAdLAg89NuJpLJ/o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/6e3fba-4d3a-43cb-babf-5f2882de3ec7/1/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/6e3fba-4d3a-43cb-babf-5f2882de3ec7/1/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.mft rsync://rpki.ripe.net/repository/DEFAULT/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:77:5d:77:e6:80:df:64:3e:74:28:c0:a7:2e:63:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64e90627021adcfa5624342d3e5f8b48035acfb4 Validity Not Before: Dec 26 07:02:33 2025 GMT Not After : Dec 27 07:02:33 2025 GMT Subject: CN=ccb462cee9fb705b017e9d307f02d18225fc4e16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a5:49:25:d7:1d:82:c2:84:a6:37:d5:2e:75: 4a:aa:79:fe:eb:cb:b6:c5:7b:f4:ef:5f:46:d9:36: 01:6a:b8:9b:a5:ff:2e:b0:15:2a:49:8a:2b:88:02: 80:3f:90:e9:2a:f7:5e:9f:41:dd:90:28:fb:07:eb: 8e:ed:73:52:47:55:17:a3:31:b4:01:b6:c3:27:e5: 15:08:82:4b:68:fb:4a:4e:33:80:00:9e:f4:16:d4: 01:6c:5f:28:b7:62:67:d8:2c:09:2b:14:14:9d:67: f2:86:6c:45:c8:06:a0:c5:9b:84:c4:8d:68:5a:5b: fe:ef:84:30:0c:95:a0:32:3a:f9:ff:af:d2:3c:87: bd:37:ef:a2:3b:3b:d7:c4:78:16:79:7b:64:83:e3: b3:52:22:85:f4:45:cb:8b:aa:4c:3c:3d:b0:46:7c: bd:32:ef:72:96:3a:67:0b:dc:9b:a7:42:00:b9:4a: d5:70:b1:ad:a2:c0:da:d7:d3:42:c2:4d:54:59:01: 9b:3a:da:0b:52:42:7a:c0:cb:85:f9:60:87:94:0f: 46:6b:ab:78:c9:e3:5a:ec:42:76:58:85:d9:d8:84: c0:5c:73:37:85:d3:2d:08:67:ea:38:f5:95:0c:e4: 6f:9a:c2:48:90:cb:73:21:32:58:24:66:70:81:03: c1:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:B4:62:CE:E9:FB:70:5B:01:7E:9D:30:7F:02:D1:82:25:FC:4E:16 X509v3 Authority Key Identifier: keyid:64:E9:06:27:02:1A:DC:FA:56:24:34:2D:3E:5F:8B:48:03:5A:CF:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6e3fba-4d3a-43cb-babf-5f2882de3ec7/1/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6e3fba-4d3a-43cb-babf-5f2882de3ec7/1/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:89:6c:00:47:9f:03:66:10:f0:d5:7a:82:43:eb:18:ce:65: eb:0f:b5:2d:ea:03:01:e4:cb:80:1b:a7:e4:75:f6:e8:b6:98: d9:f0:c7:2b:03:29:30:d6:be:d5:99:20:96:10:3e:ae:af:fa: e0:c6:35:21:2b:b4:de:79:9f:f4:5f:a9:c7:b1:71:d6:ba:ea: 1d:01:81:b0:12:6a:44:25:8c:b4:f0:0c:05:11:03:a1:17:00: 97:28:73:74:7d:ac:e1:ea:2f:a1:8d:2a:d4:c1:bc:12:a1:2a: 0b:96:b3:86:ff:56:46:5e:5a:f7:27:ac:65:28:b8:66:b9:58: b2:0f:9d:48:76:46:f3:23:09:56:ea:a1:47:40:0e:69:b3:87: af:27:13:41:f1:5c:fb:7b:cc:53:6c:52:2f:26:e2:a1:87:63: 3f:63:20:4c:03:8a:76:97:c0:9c:9f:9c:83:58:69:e7:94:be: 41:b4:c6:52:83:eb:08:f6:29:e6:f6:07:c5:95:3b:16:05:20: 97:1c:bc:64:eb:c3:ba:57:f0:06:06:8c:62:f6:21:35:9b:81: 1e:35:ad:f7:c7:bb:c8:85:5b:bd:3e:db:e5:ff:6f:59:3d:6d: 27:86:62:06:c8:85:fa:82:50:11:b0:f6:1a:56:e7:92:ff:69: 07:44:13:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZd1135oDfZD50KMCnLmObMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0ZTkwNjI3MDIxYWRjZmE1NjI0MzQyZDNlNWY4YjQ4MDM1 YWNmYjQwHhcNMjUxMjI2MDcwMjMzWhcNMjUxMjI3MDcwMjMzWjAzMTEwLwYDVQQD EyhjY2I0NjJjZWU5ZmI3MDViMDE3ZTlkMzA3ZjAyZDE4MjI1ZmM0ZTE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6VJJdcdgsKEpjfVLnVKqnn+68u2 xXv0719G2TYBaribpf8usBUqSYoriAKAP5DpKvden0HdkCj7B+uO7XNSR1UXozG0 AbbDJ+UVCIJLaPtKTjOAAJ70FtQBbF8ot2Jn2CwJKxQUnWfyhmxFyAagxZuExI1o Wlv+74QwDJWgMjr5/6/SPIe9N++iOzvXxHgWeXtkg+OzUiKF9EXLi6pMPD2wRny9 Mu9yljpnC9ybp0IAuUrVcLGtosDa19NCwk1UWQGbOtoLUkJ6wMuF+WCHlA9Ga6t4 yeNa7EJ2WIXZ2ITAXHM3hdMtCGfqOPWVDORvmsJIkMtzITJYJGZwgQPBJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMy0Ys7p+3BbAX6dMH8C0YIl/E4WMB8GA1UdIwQY MBaAFGTpBicCGtz6ViQ0LT5fi0gDWs+0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWk9rR0p3SWEzUHBXSkRRdFBsLUxTQU5hejdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy82ZTNmYmEtNGQzYS00M2NiLWJhYmYt NWYyODgyZGUzZWM3LzEvWk9rR0p3SWEzUHBXSkRRdFBsLUxTQU5hejdRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy82ZTNmYmEtNGQzYS00M2NiLWJhYmYtNWYyODgyZGUzZWM3 LzEvWk9rR0p3SWEzUHBXSkRRdFBsLUxTQU5hejdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVolsAEef A2YQ8NV6gkPrGM5l6w+1LeoDAeTLgBun5HX26LaY2fDHKwMpMNa+1ZkglhA+rq/6 4MY1ISu03nmf9F+px7Fx1rrqHQGBsBJqRCWMtPAMBREDoRcAlyhzdH2s4eovoY0q 1MG8EqEqC5azhv9WRl5a9yesZSi4ZrlYsg+dSHZG8yMJVuqhR0AOabOHrycTQfFc +3vMU2xSLybioYdjP2MgTAOKdpfAnJ+cg1hp55S+QbTGUoPrCPYp5vYHxZU7FgUg lxy8ZOvDulfwBgaMYvYhNZuBHjWt98e7yIVbvT7b5f9vWT1tJ4ZiBsiF+oJQEbD2 Glbnkv9pB0QTpg== -----END CERTIFICATE-----Generated at Fri Dec 26 14:15:52 2025 by rpki-client