This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/ZjokSA8E0TGL8acNq_-ksn7zLaI.mft File: ZjokSA8E0TGL8acNq_-ksn7zLaI.mft (raw, json) Hash identifier: ONHN0ELZwi3OOBxVEI+0em731WCRIA94e7V2+mMTvWs= Subject key identifier: 60:88:34:A0:09:15:CC:3C:AB:74:39:BB:4F:33:2D:3F:F7:D3:C8:03 Authority key identifier: 66:3A:24:48:0F:04:D1:31:8B:F1:A7:0D:AB:FF:A4:B2:7E:F3:2D:A2 Certificate issuer: /CN=663a24480f04d1318bf1a70dabffa4b27ef32da2 Certificate serial: 019AF4D28A5AD3FDD98B2A06A8DF7EEF5947 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZjokSA8E0TGL8acNq_-ksn7zLaI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/ZjokSA8E0TGL8acNq_-ksn7zLaI.mft Manifest number: 037C Signing time: Sat 06 Dec 2025 18:00:29 +0000 Manifest this update: Sat 06 Dec 2025 18:00:29 +0000 Manifest next update: Sun 07 Dec 2025 18:00:29 +0000 Files and hashes: 1: 1-7T2_N2cgFTeswdH8nohcZPo69o.roa (hash: vLeFlqEPiq87khe/5aqQkehrJ4tuQ2aQ8PuLVcLMIyI=) 2: G8N3qTa4VczFzinJ5WzomATxm3g.roa (hash: 9nI91Hj8CyleS8L7CFcjCsRKa59524cSRX5eWMKZBYE=) 3: ZjokSA8E0TGL8acNq_-ksn7zLaI.crl (hash: p1uIi35r7uJHM/qVYwP2uvcexwkW0732dyeYFdjNgDc=) 4: lh0Ymr_ga0779X3_Cx26imTai5c.roa (hash: KAwIiW82rtUV/DIsKOEYKgQfn7noiC8wAVVTIRXrLCk=) 5: mzs5lFKEy4ZtL_t-Ol870PRlztM.roa (hash: OwW8CUre3/5rikXiPneNNGHqjsl4FYJ2I/CWMA48GjE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/ZjokSA8E0TGL8acNq_-ksn7zLaI.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/ZjokSA8E0TGL8acNq_-ksn7zLaI.mft rsync://rpki.ripe.net/repository/DEFAULT/ZjokSA8E0TGL8acNq_-ksn7zLaI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:d2:8a:5a:d3:fd:d9:8b:2a:06:a8:df:7e:ef:59:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=663a24480f04d1318bf1a70dabffa4b27ef32da2 Validity Not Before: Dec 6 18:00:29 2025 GMT Not After : Dec 7 18:00:29 2025 GMT Subject: CN=608834a00915cc3cab7439bb4f332d3ff7d3c803 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:ae:69:b0:f1:10:81:a0:2a:03:9f:98:6e:15: 17:54:b7:91:90:91:0b:69:70:04:b2:27:65:ae:b2: 0e:f9:dd:92:7a:fe:a0:d5:d5:28:f8:9e:d2:e5:29: 3c:55:44:6d:68:cf:66:00:0d:f0:7e:0e:e4:46:c6: 5c:49:bb:f8:70:55:d7:73:3c:f2:49:08:11:51:ad: b2:28:e4:80:b2:88:9d:11:90:09:20:24:2a:7f:1a: b6:91:cb:94:07:80:a0:36:c1:ce:65:f6:82:e6:ba: 6d:33:ae:ac:cb:f0:37:f5:a9:74:74:ae:f7:9e:ec: b4:79:b4:56:15:c3:07:a5:79:92:4c:ba:71:3d:ea: 40:cb:d2:6a:85:99:7b:64:2e:4f:a3:53:bc:fb:ab: 3b:01:e6:65:a6:72:24:d6:1f:e4:83:90:b7:81:46: 76:cb:20:35:a6:e5:8e:92:29:99:70:ef:eb:f3:8c: d1:dd:94:9b:d0:85:64:f9:25:6a:5a:3f:db:fc:d8: 6e:91:b9:0d:29:f7:2d:c8:f3:37:c0:65:6e:90:a3: 38:33:6b:78:c4:fb:99:e8:5a:59:ea:51:94:8e:04: 36:21:6e:46:1c:e2:52:c2:ae:0f:b0:9b:1c:98:11: 69:01:ce:16:c2:8a:44:6f:f9:93:16:3a:08:41:ab: 0f:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:88:34:A0:09:15:CC:3C:AB:74:39:BB:4F:33:2D:3F:F7:D3:C8:03 X509v3 Authority Key Identifier: keyid:66:3A:24:48:0F:04:D1:31:8B:F1:A7:0D:AB:FF:A4:B2:7E:F3:2D:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZjokSA8E0TGL8acNq_-ksn7zLaI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/ZjokSA8E0TGL8acNq_-ksn7zLaI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/ZjokSA8E0TGL8acNq_-ksn7zLaI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:ea:87:c7:6e:2f:01:be:76:3d:34:b2:d4:4b:16:41:49:7d: b2:1e:b0:ed:16:3a:55:2e:b8:01:43:0a:2a:57:ce:37:c0:15: 9c:f4:fd:dc:96:9e:b9:7d:c4:0b:72:76:40:32:26:2f:21:51: 7d:c4:97:cf:84:61:f4:cc:f1:f1:7a:88:7b:4f:11:04:60:b8: 71:e5:b2:4e:25:56:d2:3e:8a:dc:54:5d:a0:15:8b:d1:d0:70: 7d:80:24:37:01:8d:21:3b:f1:45:04:72:0b:04:bb:32:4e:5e: d9:00:de:71:56:86:cb:89:af:32:f9:c1:fa:bb:58:00:5d:ad: ac:1a:b3:ac:93:a8:37:0e:5c:5d:41:f3:5b:76:46:51:e1:a6: b2:5e:f7:a9:75:d4:4f:e9:aa:0d:c7:21:80:b6:85:aa:9c:c6: 66:ca:bb:fa:01:0a:44:da:2a:86:ff:cb:fb:7c:81:46:ed:81: 52:39:18:ec:a4:15:39:49:95:24:1c:98:91:eb:a4:23:24:39: b6:0d:97:5d:91:c9:ce:fb:93:9f:56:a2:23:9e:14:55:ab:f7: fb:92:eb:ef:95:e0:e9:84:35:0d:04:5d:b2:0e:5e:0b:9b:bc: b6:91:e6:64:64:84:5e:94:3e:60:78:87:c3:c2:93:41:2c:ba: 2c:35:51:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr00opa0/3ZiyoGqN9+71lHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2M2EyNDQ4MGYwNGQxMzE4YmYxYTcwZGFiZmZhNGIyN2Vm MzJkYTIwHhcNMjUxMjA2MTgwMDI5WhcNMjUxMjA3MTgwMDI5WjAzMTEwLwYDVQQD Eyg2MDg4MzRhMDA5MTVjYzNjYWI3NDM5YmI0ZjMzMmQzZmY3ZDNjODAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAia5psPEQgaAqA5+YbhUXVLeRkJEL aXAEsidlrrIO+d2Sev6g1dUo+J7S5Sk8VURtaM9mAA3wfg7kRsZcSbv4cFXXczzy SQgRUa2yKOSAsoidEZAJICQqfxq2kcuUB4CgNsHOZfaC5rptM66sy/A39al0dK73 nuy0ebRWFcMHpXmSTLpxPepAy9JqhZl7ZC5Po1O8+6s7AeZlpnIk1h/kg5C3gUZ2 yyA1puWOkimZcO/r84zR3ZSb0IVk+SVqWj/b/NhukbkNKfctyPM3wGVukKM4M2t4 xPuZ6FpZ6lGUjgQ2IW5GHOJSwq4PsJscmBFpAc4WwopEb/mTFjoIQasPbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGCINKAJFcw8q3Q5u08zLT/308gDMB8GA1UdIwQY MBaAFGY6JEgPBNExi/GnDav/pLJ+8y2iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmpva1NBOEUwVEdMOGFjTnFfLWtzbjd6TGFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi82ZjgwYTgtNmI2YS00ZDk2LWJmNDkt Nzc1ZjVmNzRkNTgxLzEvWmpva1NBOEUwVEdMOGFjTnFfLWtzbjd6TGFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi82ZjgwYTgtNmI2YS00ZDk2LWJmNDktNzc1ZjVmNzRkNTgx LzEvWmpva1NBOEUwVEdMOGFjTnFfLWtzbjd6TGFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAuqHx24v Ab52PTSy1EsWQUl9sh6w7RY6VS64AUMKKlfON8AVnPT93JaeuX3EC3J2QDImLyFR fcSXz4Rh9Mzx8XqIe08RBGC4ceWyTiVW0j6K3FRdoBWL0dBwfYAkNwGNITvxRQRy CwS7Mk5e2QDecVaGy4mvMvnB+rtYAF2trBqzrJOoNw5cXUHzW3ZGUeGmsl73qXXU T+mqDcchgLaFqpzGZsq7+gEKRNoqhv/L+3yBRu2BUjkY7KQVOUmVJByYkeukIyQ5 tg2XXZHJzvuTn1aiI54UVav3+5Lr75Xg6YQ1DQRdsg5eC5u8tpHmZGSEXpQ+YHiH w8KTQSy6LDVRaw== -----END CERTIFICATE-----Generated at Sat Dec 6 20:29:01 2025 by rpki-client