This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/6e3fba-4d3a-43cb-babf-5f2882de3ec7/1/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.mft File: ZOkGJwIa3PpWJDQtPl-LSANaz7Q.mft (raw, json) Hash identifier: LLgmfMtHF2ch8qoYHQr+hi4jwuU1N2YGkLV1His/VYE= Subject key identifier: 48:47:3C:AF:18:25:FC:C1:33:3D:74:8E:34:2D:D1:6E:32:D3:35:0F Authority key identifier: 64:E9:06:27:02:1A:DC:FA:56:24:34:2D:3E:5F:8B:48:03:5A:CF:B4 Certificate issuer: /CN=64e90627021adcfa5624342d3e5f8b48035acfb4 Certificate serial: 019B2D0CBD21BB8F99A2CC0F75D417A2EC94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/6e3fba-4d3a-43cb-babf-5f2882de3ec7/1/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.mft Manifest number: 1782 Signing time: Wed 17 Dec 2025 16:02:48 +0000 Manifest this update: Wed 17 Dec 2025 16:02:48 +0000 Manifest next update: Thu 18 Dec 2025 16:02:48 +0000 Files and hashes: 1: ZOkGJwIa3PpWJDQtPl-LSANaz7Q.crl (hash: ONCMkGXYOYKOd3fFr+Vc6dpNNMloEBjiJknnPL+JC4Y=) 2: qoiJ2dkjuPKR2DINrHtiZnfckMQ.roa (hash: LgXeymWOOJplKwnla/9DQkVIgYhvAdLAg89NuJpLJ/o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/6e3fba-4d3a-43cb-babf-5f2882de3ec7/1/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/6e3fba-4d3a-43cb-babf-5f2882de3ec7/1/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.mft rsync://rpki.ripe.net/repository/DEFAULT/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 16:02:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:0c:bd:21:bb:8f:99:a2:cc:0f:75:d4:17:a2:ec:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64e90627021adcfa5624342d3e5f8b48035acfb4 Validity Not Before: Dec 17 16:02:48 2025 GMT Not After : Dec 18 16:02:48 2025 GMT Subject: CN=48473caf1825fcc1333d748e342dd16e32d3350f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:2a:a3:3a:88:19:9d:b8:51:2d:55:c9:91:ca: 92:d0:30:20:6e:ea:2d:2a:51:8a:7c:4e:37:ef:3c: 97:23:c2:fa:01:0b:96:8c:67:ee:78:35:09:4e:ff: 24:66:f0:da:67:5d:15:db:f3:10:d5:ba:31:a3:d8: 68:8b:93:f8:6c:ef:13:33:ca:68:31:45:66:40:c4: c2:77:a5:52:85:eb:43:6a:08:dd:e0:71:b0:85:38: 2a:a6:5e:81:cb:ef:8a:20:7e:d6:f9:f3:cb:6c:e5: 90:75:51:1e:f2:44:ed:37:d4:7e:56:1d:53:31:ca: bc:cd:80:de:e9:17:c2:00:f9:21:20:73:b2:70:6b: a9:82:e8:7c:b0:db:ba:64:a2:d5:89:d2:7d:30:89: 8c:d9:dc:0f:ef:a6:2f:49:71:2a:b6:da:98:a8:65: f1:01:bf:68:be:0b:a0:ca:17:c2:65:33:2d:bf:be: 15:3d:7f:7a:fa:8f:2d:f7:51:31:08:2a:49:2d:21: 90:65:cb:1f:57:f5:54:95:c8:43:94:2f:14:ea:76: 13:c5:50:ac:2d:ac:44:25:d2:85:54:8b:10:dd:bf: 2f:18:72:54:c7:71:7e:31:56:31:85:83:ec:0c:92: 66:20:c0:6b:a6:b0:44:37:42:9c:0c:77:81:e6:0d: 90:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:47:3C:AF:18:25:FC:C1:33:3D:74:8E:34:2D:D1:6E:32:D3:35:0F X509v3 Authority Key Identifier: keyid:64:E9:06:27:02:1A:DC:FA:56:24:34:2D:3E:5F:8B:48:03:5A:CF:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6e3fba-4d3a-43cb-babf-5f2882de3ec7/1/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6e3fba-4d3a-43cb-babf-5f2882de3ec7/1/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:c1:ff:88:95:9e:13:94:bb:86:a1:f3:68:ca:22:cd:4d:e7: 30:9d:9d:fa:57:7d:f4:0a:a5:6b:51:7f:79:2f:ef:4f:5e:9e: 37:1c:8a:3b:41:6c:c1:d1:dc:1a:83:87:a1:fe:3f:45:ab:a7: 7a:1d:b8:15:61:d9:1a:d7:dd:85:d0:50:dc:76:dc:87:eb:5f: f3:98:24:6b:07:16:c1:64:4c:f0:eb:ed:2f:c3:0e:0b:13:a2: 01:ff:50:63:ae:75:4f:51:9d:6b:64:cc:29:0a:41:9a:a5:ce: 88:12:aa:39:83:58:37:e9:f0:09:7f:e2:2f:51:59:10:54:30: 62:a5:94:12:76:ed:91:21:d6:fd:48:4f:56:e1:9b:28:23:ec: ae:c0:58:55:14:27:05:68:78:3f:bc:02:31:5a:74:15:33:16: a8:a0:bf:79:03:7c:91:4e:7c:e3:99:d1:c8:64:75:b2:28:ba: ef:46:9c:a2:b0:af:c9:2d:f2:53:65:f4:c3:51:9d:17:53:ff: 28:b8:50:a0:86:65:d8:bf:7a:16:39:31:b9:08:32:2e:65:f9: 1a:dd:15:ee:16:e0:e5:6a:37:3a:c1:37:d7:31:5c:c4:8c:c5: 0e:1a:22:f5:a9:4b:8d:e0:ab:b1:5f:d2:2f:da:2b:66:e0:be: b6:4d:f4:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstDL0hu4+ZoswPddQXouyUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0ZTkwNjI3MDIxYWRjZmE1NjI0MzQyZDNlNWY4YjQ4MDM1 YWNmYjQwHhcNMjUxMjE3MTYwMjQ4WhcNMjUxMjE4MTYwMjQ4WjAzMTEwLwYDVQQD Eyg0ODQ3M2NhZjE4MjVmY2MxMzMzZDc0OGUzNDJkZDE2ZTMyZDMzNTBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyyqjOogZnbhRLVXJkcqS0DAgbuot KlGKfE437zyXI8L6AQuWjGfueDUJTv8kZvDaZ10V2/MQ1boxo9hoi5P4bO8TM8po MUVmQMTCd6VShetDagjd4HGwhTgqpl6By++KIH7W+fPLbOWQdVEe8kTtN9R+Vh1T Mcq8zYDe6RfCAPkhIHOycGupguh8sNu6ZKLVidJ9MImM2dwP76YvSXEqttqYqGXx Ab9ovgugyhfCZTMtv74VPX96+o8t91ExCCpJLSGQZcsfV/VUlchDlC8U6nYTxVCs LaxEJdKFVIsQ3b8vGHJUx3F+MVYxhYPsDJJmIMBrprBEN0KcDHeB5g2QrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEhHPK8YJfzBMz10jjQt0W4y0zUPMB8GA1UdIwQY MBaAFGTpBicCGtz6ViQ0LT5fi0gDWs+0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWk9rR0p3SWEzUHBXSkRRdFBsLUxTQU5hejdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy82ZTNmYmEtNGQzYS00M2NiLWJhYmYt NWYyODgyZGUzZWM3LzEvWk9rR0p3SWEzUHBXSkRRdFBsLUxTQU5hejdRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy82ZTNmYmEtNGQzYS00M2NiLWJhYmYtNWYyODgyZGUzZWM3 LzEvWk9rR0p3SWEzUHBXSkRRdFBsLUxTQU5hejdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAecH/iJWe E5S7hqHzaMoizU3nMJ2d+ld99Aqla1F/eS/vT16eNxyKO0FswdHcGoOHof4/Raun eh24FWHZGtfdhdBQ3Hbch+tf85gkawcWwWRM8OvtL8MOCxOiAf9QY651T1Gda2TM KQpBmqXOiBKqOYNYN+nwCX/iL1FZEFQwYqWUEnbtkSHW/UhPVuGbKCPsrsBYVRQn BWh4P7wCMVp0FTMWqKC/eQN8kU5845nRyGR1sii670acorCvyS3yU2X0w1GdF1P/ KLhQoIZl2L96FjkxuQgyLmX5Gt0V7hbg5Wo3OsE31zFcxIzFDhoi9alLjeCrsV/S L9orZuC+tk30hg== -----END CERTIFICATE-----Generated at Wed Dec 17 21:40:04 2025 by rpki-client