This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/300211-0909-4206-9136-e66d411fa6a0/1/ZJUOTljWrCf4Dwml7S8wKLga6Mo.mft File: ZJUOTljWrCf4Dwml7S8wKLga6Mo.mft (raw, json) Hash identifier: OUOl1frgQ5SYr2Iz4tjzKEcOEbwogaRRw8bZN0Bwq8c= Subject key identifier: 7C:7A:3D:C1:95:16:04:5C:46:75:01:57:E6:37:C2:22:33:48:8B:1B Authority key identifier: 64:95:0E:4E:58:D6:AC:27:F8:0F:09:A5:ED:2F:30:28:B8:1A:E8:CA Certificate issuer: /CN=64950e4e58d6ac27f80f09a5ed2f3028b81ae8ca Certificate serial: 019AF2ADF60E2C56F8C11DF2822483726455 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZJUOTljWrCf4Dwml7S8wKLga6Mo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/300211-0909-4206-9136-e66d411fa6a0/1/ZJUOTljWrCf4Dwml7S8wKLga6Mo.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 08:01:18 +0000 Manifest this update: Sat 06 Dec 2025 08:01:18 +0000 Manifest next update: Sun 07 Dec 2025 08:01:18 +0000 Files and hashes: 1: WuLl5WEm72PKP2EjN4PzkOllUEM.roa (hash: l/LlCxiGWXMwDilSjuK8TtyovKGo3UjHdGI+bjDVpFw=) 2: ZJUOTljWrCf4Dwml7S8wKLga6Mo.crl (hash: Yqm6LLgq63uFtRyXZhmRgZkXv8BHz1E1+gEwRO+692Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/300211-0909-4206-9136-e66d411fa6a0/1/ZJUOTljWrCf4Dwml7S8wKLga6Mo.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/300211-0909-4206-9136-e66d411fa6a0/1/ZJUOTljWrCf4Dwml7S8wKLga6Mo.mft rsync://rpki.ripe.net/repository/DEFAULT/ZJUOTljWrCf4Dwml7S8wKLga6Mo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:f6:0e:2c:56:f8:c1:1d:f2:82:24:83:72:64:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64950e4e58d6ac27f80f09a5ed2f3028b81ae8ca Validity Not Before: Dec 6 08:01:18 2025 GMT Not After : Dec 7 08:01:18 2025 GMT Subject: CN=7c7a3dc19516045c46750157e637c22233488b1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b9:ca:02:ce:98:65:bf:b7:01:19:09:8a:c4: 5b:30:a4:86:f1:1d:cb:69:7b:79:5d:86:43:aa:03: b4:b9:6c:74:e9:68:29:cc:a3:0c:58:f3:13:bc:e1: 15:d7:07:db:aa:26:aa:63:45:ba:66:5f:e4:59:fa: b7:70:a2:68:aa:f1:b8:ee:34:65:13:79:cd:8b:cc: 22:3d:36:a7:70:32:ca:e8:53:43:cf:7f:1f:82:fd: b9:b7:f3:6e:82:fd:f2:77:77:55:08:9e:15:f1:72: 76:a0:09:87:fe:87:7e:aa:27:83:d2:be:26:a0:ca: 6c:a1:d4:19:06:98:82:71:0d:c5:11:87:a5:cf:44: c8:c7:d3:f6:50:e8:d7:e5:4a:e9:a0:df:e4:4a:48: 7d:17:5b:ae:b3:7e:0d:71:58:02:00:f3:51:73:ed: f7:3b:06:d2:86:e8:96:12:58:3c:2d:b1:d0:a5:bc: 3d:37:86:e9:7e:61:33:1d:6d:51:cf:9e:fb:34:cf: f6:c6:7a:f6:c0:b6:66:14:80:1d:af:2b:08:7c:50: 8d:ba:41:64:53:ea:89:f7:4d:ee:98:06:39:a8:91: f6:3a:30:61:15:a6:e7:bb:bc:eb:34:c9:aa:35:21: c8:94:56:24:e5:fd:d5:94:6a:21:f7:8b:84:8f:52: 46:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:7A:3D:C1:95:16:04:5C:46:75:01:57:E6:37:C2:22:33:48:8B:1B X509v3 Authority Key Identifier: keyid:64:95:0E:4E:58:D6:AC:27:F8:0F:09:A5:ED:2F:30:28:B8:1A:E8:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZJUOTljWrCf4Dwml7S8wKLga6Mo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/300211-0909-4206-9136-e66d411fa6a0/1/ZJUOTljWrCf4Dwml7S8wKLga6Mo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/300211-0909-4206-9136-e66d411fa6a0/1/ZJUOTljWrCf4Dwml7S8wKLga6Mo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:90:d2:36:e0:16:54:3b:f3:f8:2c:70:90:04:59:4d:f3:f8: d8:45:d9:81:ea:38:54:62:f8:cf:8a:9d:26:12:74:89:f5:e9: 6c:e2:8a:41:8b:3d:d3:a5:cb:01:84:47:6b:2f:a0:a2:01:77: a9:f0:ad:64:b2:2d:eb:fe:d5:5f:d1:7e:ed:52:e3:0a:f3:7f: 7b:53:77:1b:4e:62:4a:7d:ed:8e:33:fa:ae:47:b3:42:af:bf: 0f:25:1f:5e:b9:5b:81:53:e2:b6:2b:1c:89:08:44:ac:22:ae: 25:da:35:6a:43:3a:dd:7b:e6:62:33:eb:8e:f7:8d:2f:a2:b1: 19:73:4f:f9:40:44:64:8d:af:4b:c0:81:34:ee:e2:61:1a:98: b3:62:01:d9:54:56:27:3c:7b:44:c9:47:b9:9d:41:b5:36:a1: 5d:94:4f:ec:79:0c:c7:61:66:7d:f0:6f:70:20:8f:44:f6:eb: 05:fe:4e:73:d5:d4:1d:60:99:ae:d0:ab:8b:1a:73:1b:0b:25: 1c:13:76:ff:e4:ef:3d:c3:ee:45:55:86:bc:7e:de:38:1c:5a: ce:01:33:fa:fc:63:26:bf:2c:9f:dd:e7:cf:0e:b9:f0:f7:b7: 98:d2:3c:61:28:cb:62:34:6d:ce:b6:e2:1b:c3:b1:43:9a:58: 3f:be:4b:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrfYOLFb4wR3ygiSDcmRVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0OTUwZTRlNThkNmFjMjdmODBmMDlhNWVkMmYzMDI4Yjgx YWU4Y2EwHhcNMjUxMjA2MDgwMTE4WhcNMjUxMjA3MDgwMTE4WjAzMTEwLwYDVQQD Eyg3YzdhM2RjMTk1MTYwNDVjNDY3NTAxNTdlNjM3YzIyMjMzNDg4YjFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7nKAs6YZb+3ARkJisRbMKSG8R3L aXt5XYZDqgO0uWx06WgpzKMMWPMTvOEV1wfbqiaqY0W6Zl/kWfq3cKJoqvG47jRl E3nNi8wiPTancDLK6FNDz38fgv25t/Nugv3yd3dVCJ4V8XJ2oAmH/od+qieD0r4m oMpsodQZBpiCcQ3FEYelz0TIx9P2UOjX5UrpoN/kSkh9F1uus34NcVgCAPNRc+33 OwbShuiWElg8LbHQpbw9N4bpfmEzHW1Rz577NM/2xnr2wLZmFIAdrysIfFCNukFk U+qJ903umAY5qJH2OjBhFabnu7zrNMmqNSHIlFYk5f3VlGoh94uEj1JGkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHx6PcGVFgRcRnUBV+Y3wiIzSIsbMB8GA1UdIwQY MBaAFGSVDk5Y1qwn+A8Jpe0vMCi4GujKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkpVT1RsaldyQ2Y0RHdtbDdTOHdLTGdhNk1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8zMDAyMTEtMDkwOS00MjA2LTkxMzYt ZTY2ZDQxMWZhNmEwLzEvWkpVT1RsaldyQ2Y0RHdtbDdTOHdLTGdhNk1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy8zMDAyMTEtMDkwOS00MjA2LTkxMzYtZTY2ZDQxMWZhNmEw LzEvWkpVT1RsaldyQ2Y0RHdtbDdTOHdLTGdhNk1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuJDSNuAW VDvz+CxwkARZTfP42EXZgeo4VGL4z4qdJhJ0ifXpbOKKQYs906XLAYRHay+gogF3 qfCtZLIt6/7VX9F+7VLjCvN/e1N3G05iSn3tjjP6rkezQq+/DyUfXrlbgVPitisc iQhErCKuJdo1akM63XvmYjPrjveNL6KxGXNP+UBEZI2vS8CBNO7iYRqYs2IB2VRW Jzx7RMlHuZ1BtTahXZRP7HkMx2FmffBvcCCPRPbrBf5Oc9XUHWCZrtCrixpzGwsl HBN2/+TvPcPuRVWGvH7eOBxazgEz+vxjJr8sn93nzw658Pe3mNI8YSjLYjRtzrbi G8OxQ5pYP75Law== -----END CERTIFICATE-----Generated at Sat Dec 6 11:00:51 2025 by rpki-client