This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/c540e3-d2c7-4f08-9178-ae30686c8589/1/ZoOpbPURpnkZ2QDz_JNAmTQfh9g.mft File: ZoOpbPURpnkZ2QDz_JNAmTQfh9g.mft (raw, json) Hash identifier: +s7GxavJp/zX04ZGkpy51uS7c3FxOzVVkiI+UcsOK8g= Subject key identifier: 6D:B0:1A:DB:AB:C2:4B:16:59:4A:81:B8:35:B4:17:56:98:96:C5:CB Authority key identifier: 66:83:A9:6C:F5:11:A6:79:19:D9:00:F3:FC:93:40:99:34:1F:87:D8 Certificate issuer: /CN=6683a96cf511a67919d900f3fc934099341f87d8 Certificate serial: 019B6AD6D2FFFB4BBD0416E80CEDDF881945 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZoOpbPURpnkZ2QDz_JNAmTQfh9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/c540e3-d2c7-4f08-9178-ae30686c8589/1/ZoOpbPURpnkZ2QDz_JNAmTQfh9g.mft Manifest number: 0F7F Signing time: Mon 29 Dec 2025 16:00:22 +0000 Manifest this update: Mon 29 Dec 2025 16:00:22 +0000 Manifest next update: Tue 30 Dec 2025 16:00:22 +0000 Files and hashes: 1: ZoOpbPURpnkZ2QDz_JNAmTQfh9g.crl (hash: DK1Tk7rSKulTkHJWaBFOVpGzdh0ZO83wxPqu2yjf+bI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/c540e3-d2c7-4f08-9178-ae30686c8589/1/ZoOpbPURpnkZ2QDz_JNAmTQfh9g.crl rsync://rpki.ripe.net/repository/DEFAULT/46/c540e3-d2c7-4f08-9178-ae30686c8589/1/ZoOpbPURpnkZ2QDz_JNAmTQfh9g.mft rsync://rpki.ripe.net/repository/DEFAULT/ZoOpbPURpnkZ2QDz_JNAmTQfh9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 16:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6a:d6:d2:ff:fb:4b:bd:04:16:e8:0c:ed:df:88:19:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6683a96cf511a67919d900f3fc934099341f87d8 Validity Not Before: Dec 29 16:00:22 2025 GMT Not After : Dec 30 16:00:22 2025 GMT Subject: CN=6db01adbabc24b16594a81b835b417569896c5cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:d6:ec:23:b3:e8:99:6b:29:dc:c6:d2:32:51: d0:73:5e:f8:50:cd:76:12:fe:25:3e:8b:47:62:c6: ea:0c:39:71:48:25:a0:b0:b3:48:cc:ad:30:88:a6: ae:3a:6c:c1:05:a7:90:24:7d:dc:5f:0d:a1:88:3c: 72:34:84:d4:0c:0d:9c:da:90:aa:9a:15:f5:8e:9f: 3b:57:01:90:e0:36:69:1c:b5:20:b9:3d:e5:0b:85: 4a:b3:a0:85:4b:db:cd:0f:0d:ac:38:a9:5f:2f:de: 0f:1b:28:9c:94:46:b3:f0:a9:b5:ab:4c:fa:eb:81: 56:1a:b8:7e:5a:45:1f:e2:5e:0f:0c:58:26:9c:0d: c0:f8:ff:8d:b3:44:b5:d2:3c:7f:6c:b0:48:b8:50: b6:07:3d:57:fc:ec:41:72:1e:f3:20:df:da:9e:c2: 57:d5:69:33:45:39:2c:1c:9f:75:31:fd:72:e4:87: 67:10:33:8e:fa:30:08:86:5a:78:ca:1c:29:85:f1: 78:b8:88:9f:db:9c:a6:e9:bc:de:01:ec:ad:8d:e3: af:66:f3:10:ad:0c:01:ff:af:a8:89:fc:0b:9b:32: ce:77:8a:36:e4:86:2a:79:18:19:e0:3f:67:cc:33: c1:a0:e5:f0:97:72:f8:b3:b6:7f:5b:30:b5:08:ed: 49:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:B0:1A:DB:AB:C2:4B:16:59:4A:81:B8:35:B4:17:56:98:96:C5:CB X509v3 Authority Key Identifier: keyid:66:83:A9:6C:F5:11:A6:79:19:D9:00:F3:FC:93:40:99:34:1F:87:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZoOpbPURpnkZ2QDz_JNAmTQfh9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/c540e3-d2c7-4f08-9178-ae30686c8589/1/ZoOpbPURpnkZ2QDz_JNAmTQfh9g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/c540e3-d2c7-4f08-9178-ae30686c8589/1/ZoOpbPURpnkZ2QDz_JNAmTQfh9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:2a:e0:80:91:37:a4:10:ef:8f:53:66:75:2e:e4:ce:82:19: 33:9a:af:bc:20:c4:94:c9:a8:cb:8a:4a:2b:96:20:7e:aa:93: f0:bb:c0:8a:d8:f9:ae:89:5a:2c:a7:a2:75:31:b3:6d:3e:51: 91:f5:2b:9b:5e:34:d4:82:cd:b1:a7:b9:33:4d:b2:ca:6e:8a: 49:9b:f0:66:16:ca:6a:db:38:f2:9b:98:d3:69:02:62:47:1d: 04:d2:3f:70:c1:18:a4:21:2b:0a:fb:7a:6f:22:ef:7b:75:8d: f0:c6:47:aa:b3:87:96:d3:cb:08:3a:4b:c7:90:ef:24:2b:03: 94:62:6f:8e:bc:12:c4:24:85:ea:a5:11:bb:38:76:3a:df:60: b3:a9:f4:40:9a:a5:ca:98:ff:34:ef:87:93:eb:a0:4c:a9:45: 94:af:74:21:b0:4e:98:5f:42:40:f0:9a:84:22:6d:2e:ae:66: 79:b0:14:21:f1:40:28:5c:d9:5a:a9:29:46:44:d0:9c:98:97: 04:aa:13:0e:f2:83:e3:db:67:c9:9b:73:72:0a:63:33:86:07: 88:e3:b7:69:de:86:78:f4:2b:ac:b8:32:bb:0d:4f:58:fd:f8: c5:e3:ad:fc:b2:ce:f6:ac:b1:fa:02:07:50:46:20:22:a0:76: 30:da:19:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtq1tL/+0u9BBboDO3fiBlFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ODNhOTZjZjUxMWE2NzkxOWQ5MDBmM2ZjOTM0MDk5MzQx Zjg3ZDgwHhcNMjUxMjI5MTYwMDIyWhcNMjUxMjMwMTYwMDIyWjAzMTEwLwYDVQQD Eyg2ZGIwMWFkYmFiYzI0YjE2NTk0YTgxYjgzNWI0MTc1Njk4OTZjNWNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2NbsI7PomWsp3MbSMlHQc174UM12 Ev4lPotHYsbqDDlxSCWgsLNIzK0wiKauOmzBBaeQJH3cXw2hiDxyNITUDA2c2pCq mhX1jp87VwGQ4DZpHLUguT3lC4VKs6CFS9vNDw2sOKlfL94PGyiclEaz8Km1q0z6 64FWGrh+WkUf4l4PDFgmnA3A+P+Ns0S10jx/bLBIuFC2Bz1X/OxBch7zIN/ansJX 1WkzRTksHJ91Mf1y5IdnEDOO+jAIhlp4yhwphfF4uIif25ym6bzeAeytjeOvZvMQ rQwB/6+oifwLmzLOd4o25IYqeRgZ4D9nzDPBoOXwl3L4s7Z/WzC1CO1JoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG2wGturwksWWUqBuDW0F1aYlsXLMB8GA1UdIwQY MBaAFGaDqWz1EaZ5GdkA8/yTQJk0H4fYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWm9PcGJQVVJwbmtaMlFEel9KTkFtVFFmaDlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9jNTQwZTMtZDJjNy00ZjA4LTkxNzgt YWUzMDY4NmM4NTg5LzEvWm9PcGJQVVJwbmtaMlFEel9KTkFtVFFmaDlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni9jNTQwZTMtZDJjNy00ZjA4LTkxNzgtYWUzMDY4NmM4NTg5 LzEvWm9PcGJQVVJwbmtaMlFEel9KTkFtVFFmaDlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOSrggJE3 pBDvj1NmdS7kzoIZM5qvvCDElMmoy4pKK5YgfqqT8LvAitj5rolaLKeidTGzbT5R kfUrm1401ILNsae5M02yym6KSZvwZhbKats48puY02kCYkcdBNI/cMEYpCErCvt6 byLve3WN8MZHqrOHltPLCDpLx5DvJCsDlGJvjrwSxCSF6qURuzh2Ot9gs6n0QJql ypj/NO+Hk+ugTKlFlK90IbBOmF9CQPCahCJtLq5mebAUIfFAKFzZWqkpRkTQnJiX BKoTDvKD49tnyZtzcgpjM4YHiOO3ad6GePQrrLgyuw1PWP34xeOt/LLO9qyx+gIH UEYgIqB2MNoZng== -----END CERTIFICATE-----Generated at Tue Dec 30 01:31:44 2025 by rpki-client