This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/ZoKJC37SM0dHjU1l2wlIw9sj6-c.mft File: ZoKJC37SM0dHjU1l2wlIw9sj6-c.mft (raw, json) Hash identifier: BzKCoJRRVArCJcDphtowx6as6oU1qqJWnyAlF36U/CU= Subject key identifier: 77:83:6E:FA:67:AE:20:CC:3F:F9:E9:41:ED:73:10:EF:74:36:50:F2 Authority key identifier: 66:82:89:0B:7E:D2:33:47:47:8D:4D:65:DB:09:48:C3:DB:23:EB:E7 Certificate issuer: /CN=6682890b7ed23347478d4d65db0948c3db23ebe7 Certificate serial: 019AF38A0A9CDFD48A14BD7DA1D362C53674 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZoKJC37SM0dHjU1l2wlIw9sj6-c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/ZoKJC37SM0dHjU1l2wlIw9sj6-c.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 12:01:41 +0000 Manifest this update: Sat 06 Dec 2025 12:01:41 +0000 Manifest next update: Sun 07 Dec 2025 12:01:41 +0000 Files and hashes: 1: 0eFE803oL-x-2UtW8hW4h_oGSOQ.roa (hash: 1/pEIXtNgxj6Ggb1H5PZs612B1gxk22zRzlXx7oVu5s=) 2: ZoKJC37SM0dHjU1l2wlIw9sj6-c.crl (hash: YwDmcoksiqA/PgEd7K/7eBj8ncShfP+PQ3zjQ19ZI4Q=) 3: e2qB4esbK6h3v26XFDC4VZBc5KY.roa (hash: j1cRIZ5v+8OJ2fmGwhM51DYmzvrib+oAKJLnWq3m2pg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/ZoKJC37SM0dHjU1l2wlIw9sj6-c.crl rsync://rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/ZoKJC37SM0dHjU1l2wlIw9sj6-c.mft rsync://rpki.ripe.net/repository/DEFAULT/ZoKJC37SM0dHjU1l2wlIw9sj6-c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:8a:0a:9c:df:d4:8a:14:bd:7d:a1:d3:62:c5:36:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6682890b7ed23347478d4d65db0948c3db23ebe7 Validity Not Before: Dec 6 12:01:41 2025 GMT Not After : Dec 7 12:01:41 2025 GMT Subject: CN=77836efa67ae20cc3ff9e941ed7310ef743650f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:06:5e:d8:0c:84:02:cb:a7:3f:c6:2f:5f:d1: ab:aa:04:c4:74:2a:7d:12:ef:12:db:09:63:e1:2d: 9d:57:df:1d:b2:55:c1:5a:5f:65:2a:c6:3e:9c:2a: 88:f7:66:06:9c:dc:20:ab:20:08:83:44:30:8a:63: de:c5:77:2c:f5:89:ca:37:6d:83:62:f6:99:10:a1: e9:db:52:a5:99:14:8f:0e:a2:93:b6:e7:a2:df:99: df:b8:d9:d4:90:8b:cb:28:bc:4f:e3:1a:a9:e3:b7: 99:d4:a1:90:f1:85:93:02:9d:f1:71:4d:8e:65:22: 48:2d:15:e2:45:67:96:b2:14:81:00:70:18:ba:51: 19:db:0f:9b:7a:6f:b9:92:10:88:1a:ff:ef:02:c9: a8:99:e9:1e:b7:a4:15:5c:74:c9:5c:e5:3a:4c:c3: 5e:24:2b:2b:22:67:90:bb:27:a3:08:50:b0:23:dc: 79:fd:1b:25:bc:b8:cc:d9:b5:4c:eb:44:30:e7:33: 1f:52:31:19:a7:8d:dc:01:c7:96:fd:cd:95:60:dd: 84:4a:d4:94:96:1f:75:f1:ad:05:a9:52:cb:e3:98: 00:f1:2d:33:0d:fd:74:e1:c9:79:b8:90:f4:c4:ea: 0d:3d:12:6e:ec:90:de:ce:3f:4b:47:c9:63:46:ff: f3:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:83:6E:FA:67:AE:20:CC:3F:F9:E9:41:ED:73:10:EF:74:36:50:F2 X509v3 Authority Key Identifier: keyid:66:82:89:0B:7E:D2:33:47:47:8D:4D:65:DB:09:48:C3:DB:23:EB:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZoKJC37SM0dHjU1l2wlIw9sj6-c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/ZoKJC37SM0dHjU1l2wlIw9sj6-c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/ZoKJC37SM0dHjU1l2wlIw9sj6-c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:08:09:4e:61:bd:a3:bb:2c:d0:5d:29:61:83:0c:18:2f:fb: 46:a2:cb:ba:f0:79:77:7c:30:16:38:f6:82:06:67:0b:52:09: 9e:77:d8:f4:b4:78:ca:d7:db:0d:75:4a:05:bb:e5:0a:92:fd: fb:c1:24:60:75:db:e8:a1:aa:1f:f0:46:37:6f:d5:2d:f1:ab: d1:d7:b5:3d:6c:75:12:16:b1:09:67:c9:f5:56:81:61:b3:d2: 18:13:66:74:7c:78:3f:e6:e7:05:75:01:00:9a:12:a0:b0:d2: 4c:8a:0a:9a:ca:f5:b1:7e:0c:86:5b:fc:2f:b1:8d:17:d6:2a: e7:b9:62:1d:3b:22:4d:d9:17:9c:74:0f:15:42:c5:1c:fb:86: 7e:17:1e:7b:28:33:e8:0e:ee:6d:b4:62:e0:27:21:3d:1a:8a: 80:5e:a7:9c:2b:21:1d:4d:4d:11:bd:6c:e4:29:d0:41:a0:f9: cf:51:68:fc:50:82:93:07:ea:e2:b7:98:59:6b:36:e3:c8:90: 58:2f:6f:f3:43:ea:e8:c0:40:5b:27:c3:70:ef:0b:18:b2:0a: 8a:19:a7:27:cd:0f:1a:f6:95:bc:92:bb:78:2f:43:68:b8:48: 7a:15:77:25:5c:49:a9:ea:08:ad:70:14:da:c3:b2:f2:d6:9a: 40:25:21:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzigqc39SKFL19odNixTZ0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ODI4OTBiN2VkMjMzNDc0NzhkNGQ2NWRiMDk0OGMzZGIy M2ViZTcwHhcNMjUxMjA2MTIwMTQxWhcNMjUxMjA3MTIwMTQxWjAzMTEwLwYDVQQD Eyg3NzgzNmVmYTY3YWUyMGNjM2ZmOWU5NDFlZDczMTBlZjc0MzY1MGYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjAZe2AyEAsunP8YvX9GrqgTEdCp9 Eu8S2wlj4S2dV98dslXBWl9lKsY+nCqI92YGnNwgqyAIg0QwimPexXcs9YnKN22D YvaZEKHp21KlmRSPDqKTtuei35nfuNnUkIvLKLxP4xqp47eZ1KGQ8YWTAp3xcU2O ZSJILRXiRWeWshSBAHAYulEZ2w+bem+5khCIGv/vAsmomeket6QVXHTJXOU6TMNe JCsrImeQuyejCFCwI9x5/RslvLjM2bVM60Qw5zMfUjEZp43cAceW/c2VYN2EStSU lh918a0FqVLL45gA8S0zDf104cl5uJD0xOoNPRJu7JDezj9LR8ljRv/znQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHeDbvpnriDMP/npQe1zEO90NlDyMB8GA1UdIwQY MBaAFGaCiQt+0jNHR41NZdsJSMPbI+vnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWm9LSkMzN1NNMGRIalUxbDJ3bEl3OXNqNi1jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8yYTk4MWQtNjdmNS00ODRlLWJlMWIt ZmY2NGE5YmE1OTdjLzEvWm9LSkMzN1NNMGRIalUxbDJ3bEl3OXNqNi1jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS8yYTk4MWQtNjdmNS00ODRlLWJlMWItZmY2NGE5YmE1OTdj LzEvWm9LSkMzN1NNMGRIalUxbDJ3bEl3OXNqNi1jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYwgJTmG9 o7ss0F0pYYMMGC/7RqLLuvB5d3wwFjj2ggZnC1IJnnfY9LR4ytfbDXVKBbvlCpL9 +8EkYHXb6KGqH/BGN2/VLfGr0de1PWx1EhaxCWfJ9VaBYbPSGBNmdHx4P+bnBXUB AJoSoLDSTIoKmsr1sX4Mhlv8L7GNF9Yq57liHTsiTdkXnHQPFULFHPuGfhceeygz 6A7ubbRi4CchPRqKgF6nnCshHU1NEb1s5CnQQaD5z1Fo/FCCkwfq4reYWWs248iQ WC9v80Pq6MBAWyfDcO8LGLIKihmnJ80PGvaVvJK7eC9DaLhIehV3JVxJqeoIrXAU 2sOy8taaQCUhDw== -----END CERTIFICATE-----Generated at Sat Dec 6 14:57:33 2025 by rpki-client