This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/ZjokSA8E0TGL8acNq_-ksn7zLaI.mft File: ZjokSA8E0TGL8acNq_-ksn7zLaI.mft (raw, json) Hash identifier: +h5crHuYwcwH3O92hm8IIE/T/8nPN/4Wps5su+yfNP0= Subject key identifier: 3F:BD:48:52:A0:05:93:7B:B3:9D:92:83:A0:3E:E5:4F:C0:B2:B2:A8 Authority key identifier: 66:3A:24:48:0F:04:D1:31:8B:F1:A7:0D:AB:FF:A4:B2:7E:F3:2D:A2 Certificate issuer: /CN=663a24480f04d1318bf1a70dabffa4b27ef32da2 Certificate serial: 019B3A586C17178E74C2EE848FF3B299F876 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZjokSA8E0TGL8acNq_-ksn7zLaI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/ZjokSA8E0TGL8acNq_-ksn7zLaI.mft Manifest number: 03A0 Signing time: Sat 20 Dec 2025 06:00:31 +0000 Manifest this update: Sat 20 Dec 2025 06:00:31 +0000 Manifest next update: Sun 21 Dec 2025 06:00:31 +0000 Files and hashes: 1: 1-7T2_N2cgFTeswdH8nohcZPo69o.roa (hash: vLeFlqEPiq87khe/5aqQkehrJ4tuQ2aQ8PuLVcLMIyI=) 2: G8N3qTa4VczFzinJ5WzomATxm3g.roa (hash: 9nI91Hj8CyleS8L7CFcjCsRKa59524cSRX5eWMKZBYE=) 3: ZjokSA8E0TGL8acNq_-ksn7zLaI.crl (hash: C+JhpjGj7PItR8JDFBSvoynKyqb2eOpsQ2HbE0e/aCM=) 4: lh0Ymr_ga0779X3_Cx26imTai5c.roa (hash: KAwIiW82rtUV/DIsKOEYKgQfn7noiC8wAVVTIRXrLCk=) 5: mzs5lFKEy4ZtL_t-Ol870PRlztM.roa (hash: OwW8CUre3/5rikXiPneNNGHqjsl4FYJ2I/CWMA48GjE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/ZjokSA8E0TGL8acNq_-ksn7zLaI.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/ZjokSA8E0TGL8acNq_-ksn7zLaI.mft rsync://rpki.ripe.net/repository/DEFAULT/ZjokSA8E0TGL8acNq_-ksn7zLaI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 06:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:58:6c:17:17:8e:74:c2:ee:84:8f:f3:b2:99:f8:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=663a24480f04d1318bf1a70dabffa4b27ef32da2 Validity Not Before: Dec 20 06:00:31 2025 GMT Not After : Dec 21 06:00:31 2025 GMT Subject: CN=3fbd4852a005937bb39d9283a03ee54fc0b2b2a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:59:f5:9b:4f:a7:ba:c3:00:a6:1c:2d:f7:c0: ea:6d:73:47:06:50:dd:e0:e9:da:4d:33:c8:43:3b: 2f:fd:07:58:67:69:8a:ca:94:35:d4:e4:bb:8e:95: 2b:88:77:dc:67:eb:25:77:86:b5:16:ff:c2:d3:df: d0:3e:d6:4b:e3:8a:fc:96:de:c8:6e:5b:34:73:41: d4:e4:8f:07:0c:76:0b:62:cd:2d:26:39:4d:a6:50: 14:c7:cc:62:8b:24:32:eb:74:21:46:ca:6d:31:b8: 85:2e:52:05:e8:8c:98:2e:89:12:29:b4:9c:a4:89: 93:c2:21:77:f2:2f:8e:73:5e:42:b0:f1:25:1e:60: 76:9c:c6:8b:01:44:10:ee:f1:8c:35:29:68:a6:b6: 25:fe:57:53:88:b3:4b:f3:b5:ce:ec:aa:07:0f:90: 5d:a1:08:ea:25:90:6d:73:9b:50:37:20:f0:b2:f5: fa:f0:6a:71:db:e9:73:0e:40:bb:3d:35:02:82:67: d9:da:81:39:a4:35:49:2e:b5:4f:9d:00:de:5c:a8: 42:3a:f6:0f:c8:c4:23:f9:74:8b:fd:47:43:8d:89: b8:51:b1:40:81:5f:20:bc:9e:ae:32:2b:b1:1f:2d: d6:2e:0d:c7:75:c7:00:dd:7c:7e:89:94:93:91:f5: 21:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:BD:48:52:A0:05:93:7B:B3:9D:92:83:A0:3E:E5:4F:C0:B2:B2:A8 X509v3 Authority Key Identifier: keyid:66:3A:24:48:0F:04:D1:31:8B:F1:A7:0D:AB:FF:A4:B2:7E:F3:2D:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZjokSA8E0TGL8acNq_-ksn7zLaI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/ZjokSA8E0TGL8acNq_-ksn7zLaI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/ZjokSA8E0TGL8acNq_-ksn7zLaI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:7d:95:dd:6e:44:56:84:08:d4:29:27:db:1c:29:c6:16:d2: 06:74:25:cd:86:6d:25:e9:f7:66:0c:c7:94:9a:4a:9c:7d:a1: 51:31:7c:bf:69:0c:f9:37:d7:16:ae:e5:19:24:c1:55:40:53: 03:d0:9d:a3:5d:61:e8:54:47:e2:e2:87:b0:42:2e:e3:1c:72: 22:f8:a1:38:6b:8e:61:10:e8:2f:7f:22:b9:28:0a:26:c4:d7: ea:0d:1f:c6:ca:be:c8:92:87:8c:86:37:1f:7f:15:89:5a:10: 4d:c4:a1:29:88:65:68:d0:6d:e4:15:e8:3b:ec:73:d7:c3:65: 73:f0:a4:26:94:d7:bc:c9:3d:8d:67:08:bf:49:89:42:85:a0: 7c:f7:ac:08:69:72:2a:10:01:98:25:70:85:b4:f7:b3:a5:ac: c0:22:a8:64:17:64:d8:c9:e3:7a:6a:27:08:42:e8:38:f1:3b: 35:6a:e1:9b:19:b3:eb:97:69:bd:2d:64:84:24:7e:74:f8:5f: 67:da:8b:6b:c2:85:b4:24:4a:d8:52:54:7c:7b:6c:22:13:1f: 4d:31:a4:dd:91:58:9f:c6:18:84:4d:9e:01:18:42:68:76:6c: 74:0b:57:e1:34:2e:4a:43:22:19:af:e2:ca:cb:bd:63:b0:b5: 71:fc:df:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6WGwXF450wu6Ej/Oymfh2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2M2EyNDQ4MGYwNGQxMzE4YmYxYTcwZGFiZmZhNGIyN2Vm MzJkYTIwHhcNMjUxMjIwMDYwMDMxWhcNMjUxMjIxMDYwMDMxWjAzMTEwLwYDVQQD EygzZmJkNDg1MmEwMDU5MzdiYjM5ZDkyODNhMDNlZTU0ZmMwYjJiMmE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA11n1m0+nusMAphwt98DqbXNHBlDd 4OnaTTPIQzsv/QdYZ2mKypQ11OS7jpUriHfcZ+sld4a1Fv/C09/QPtZL44r8lt7I bls0c0HU5I8HDHYLYs0tJjlNplAUx8xiiyQy63QhRsptMbiFLlIF6IyYLokSKbSc pImTwiF38i+Oc15CsPElHmB2nMaLAUQQ7vGMNSloprYl/ldTiLNL87XO7KoHD5Bd oQjqJZBtc5tQNyDwsvX68Gpx2+lzDkC7PTUCgmfZ2oE5pDVJLrVPnQDeXKhCOvYP yMQj+XSL/UdDjYm4UbFAgV8gvJ6uMiuxHy3WLg3HdccA3Xx+iZSTkfUhDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD+9SFKgBZN7s52Sg6A+5U/AsrKoMB8GA1UdIwQY MBaAFGY6JEgPBNExi/GnDav/pLJ+8y2iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmpva1NBOEUwVEdMOGFjTnFfLWtzbjd6TGFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi82ZjgwYTgtNmI2YS00ZDk2LWJmNDkt Nzc1ZjVmNzRkNTgxLzEvWmpva1NBOEUwVEdMOGFjTnFfLWtzbjd6TGFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi82ZjgwYTgtNmI2YS00ZDk2LWJmNDktNzc1ZjVmNzRkNTgx LzEvWmpva1NBOEUwVEdMOGFjTnFfLWtzbjd6TGFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANX2V3W5E VoQI1Ckn2xwpxhbSBnQlzYZtJen3ZgzHlJpKnH2hUTF8v2kM+TfXFq7lGSTBVUBT A9Cdo11h6FRH4uKHsEIu4xxyIvihOGuOYRDoL38iuSgKJsTX6g0fxsq+yJKHjIY3 H38ViVoQTcShKYhlaNBt5BXoO+xz18Nlc/CkJpTXvMk9jWcIv0mJQoWgfPesCGly KhABmCVwhbT3s6WswCKoZBdk2MnjemonCELoOPE7NWrhmxmz65dpvS1khCR+dPhf Z9qLa8KFtCRK2FJUfHtsIhMfTTGk3ZFYn8YYhE2eARhCaHZsdAtX4TQuSkMiGa/i ysu9Y7C1cfzf1Q== -----END CERTIFICATE-----Generated at Sat Dec 20 14:14:46 2025 by rpki-client