This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/300211-0909-4206-9136-e66d411fa6a0/1/ZJUOTljWrCf4Dwml7S8wKLga6Mo.mft File: ZJUOTljWrCf4Dwml7S8wKLga6Mo.mft (raw, json) Hash identifier: gnoEr0oDfJRxVEUhzX2I/EnWHU7N3xoS+YNPsL7ne+M= Subject key identifier: C6:82:54:67:20:DF:27:96:97:33:7B:E6:65:EB:A3:FE:39:3D:B3:66 Authority key identifier: 64:95:0E:4E:58:D6:AC:27:F8:0F:09:A5:ED:2F:30:28:B8:1A:E8:CA Certificate issuer: /CN=64950e4e58d6ac27f80f09a5ed2f3028b81ae8ca Certificate serial: 019B383399585AE1F8F8E3FDF79E9F15801D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZJUOTljWrCf4Dwml7S8wKLga6Mo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/300211-0909-4206-9136-e66d411fa6a0/1/ZJUOTljWrCf4Dwml7S8wKLga6Mo.mft Manifest number: 1785 Signing time: Fri 19 Dec 2025 20:01:04 +0000 Manifest this update: Fri 19 Dec 2025 20:01:04 +0000 Manifest next update: Sat 20 Dec 2025 20:01:04 +0000 Files and hashes: 1: WuLl5WEm72PKP2EjN4PzkOllUEM.roa (hash: l/LlCxiGWXMwDilSjuK8TtyovKGo3UjHdGI+bjDVpFw=) 2: ZJUOTljWrCf4Dwml7S8wKLga6Mo.crl (hash: 6N6t5EbdsDxRVROqpoe8PfKnc2KkSH+gGZXdmhkfSyE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/300211-0909-4206-9136-e66d411fa6a0/1/ZJUOTljWrCf4Dwml7S8wKLga6Mo.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/300211-0909-4206-9136-e66d411fa6a0/1/ZJUOTljWrCf4Dwml7S8wKLga6Mo.mft rsync://rpki.ripe.net/repository/DEFAULT/ZJUOTljWrCf4Dwml7S8wKLga6Mo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:33:99:58:5a:e1:f8:f8:e3:fd:f7:9e:9f:15:80:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64950e4e58d6ac27f80f09a5ed2f3028b81ae8ca Validity Not Before: Dec 19 20:01:04 2025 GMT Not After : Dec 20 20:01:04 2025 GMT Subject: CN=c682546720df279697337be665eba3fe393db366 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:79:dc:4b:7e:b4:02:5c:3e:41:96:72:69:c5: db:2f:96:04:a6:99:b6:6d:5f:45:73:84:8f:7c:bd: 74:84:6c:d6:dd:41:75:9e:1d:cc:f4:39:3a:dc:4c: 51:95:80:dd:e0:c0:c0:54:b0:6c:53:1e:ab:00:d8: 19:84:30:e6:98:e9:7e:a4:d3:fd:b6:a8:55:d2:40: 29:da:8c:9f:d4:74:14:d9:c3:f5:1f:4f:e4:43:0c: eb:a0:e2:46:0f:f5:f1:c0:e1:67:95:04:32:48:5b: 7b:b6:73:78:3b:e6:75:26:29:a2:a7:fa:c1:b3:72: 80:23:a8:6d:05:d0:6c:1f:55:13:d6:42:2b:ce:fb: 24:f7:9e:1e:fb:d8:11:ac:45:1e:fc:61:a0:78:b6: fd:4b:04:b1:66:69:8a:9d:35:5e:b6:03:2e:96:d0: e3:d6:02:db:62:b5:2b:e9:b0:aa:cc:fe:43:d8:ce: 64:99:a4:1b:97:c5:0f:25:0f:54:85:ee:b9:7c:e2: f7:82:03:7d:aa:83:74:13:b8:e2:34:62:49:6a:63: 84:a1:3f:7b:28:83:cf:b9:11:ba:55:fd:5d:73:33: 3c:5b:94:6e:07:ac:6e:2e:86:2d:69:89:8c:63:09: f1:4d:87:c6:af:89:3e:2a:4f:f5:d6:78:cb:49:3a: be:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:82:54:67:20:DF:27:96:97:33:7B:E6:65:EB:A3:FE:39:3D:B3:66 X509v3 Authority Key Identifier: keyid:64:95:0E:4E:58:D6:AC:27:F8:0F:09:A5:ED:2F:30:28:B8:1A:E8:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZJUOTljWrCf4Dwml7S8wKLga6Mo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/300211-0909-4206-9136-e66d411fa6a0/1/ZJUOTljWrCf4Dwml7S8wKLga6Mo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/300211-0909-4206-9136-e66d411fa6a0/1/ZJUOTljWrCf4Dwml7S8wKLga6Mo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:32:fd:72:a8:16:77:5c:3b:92:65:d1:2c:64:e4:f1:88:0b: a6:a0:49:1b:54:a2:f7:c7:1d:98:3d:39:5a:b9:cd:ac:82:5f: a4:08:e1:cf:7a:11:8a:29:7b:bd:6a:e1:e0:30:5c:9d:4c:1c: e8:84:b4:82:7b:46:f5:5d:49:50:f4:92:bd:09:79:68:96:eb: 2f:aa:f3:6c:5a:b3:8b:f9:4a:62:76:06:8a:65:64:19:15:30: 3e:d2:42:bb:06:a1:eb:54:12:41:03:87:f4:cb:24:5d:c2:ca: 69:34:b9:97:ba:95:52:97:4f:6a:ba:14:84:65:f3:7c:a5:4a: 55:e9:98:ec:68:8c:68:52:46:d8:ab:32:23:d3:b2:2f:e8:ed: 3a:e5:2d:93:8a:46:71:25:d3:ff:fe:78:a3:45:7f:aa:a3:7a: 82:9d:13:15:9f:2c:c7:43:e3:55:4c:14:b2:7a:85:c2:1f:17: 55:d8:cf:13:0c:67:ec:e0:73:0d:73:94:79:b5:28:2b:b6:5d: 02:01:d7:48:55:32:e6:ec:77:f1:c5:d5:67:91:42:98:ad:e7: 15:82:35:79:eb:a7:9c:bd:0e:ea:2a:9d:ce:3a:b0:40:1b:17: 5f:d1:65:26:db:22:84:f6:35:f9:d1:df:db:23:69:48:78:5e: 82:67:c2:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4M5lYWuH4+OP9956fFYAdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0OTUwZTRlNThkNmFjMjdmODBmMDlhNWVkMmYzMDI4Yjgx YWU4Y2EwHhcNMjUxMjE5MjAwMTA0WhcNMjUxMjIwMjAwMTA0WjAzMTEwLwYDVQQD EyhjNjgyNTQ2NzIwZGYyNzk2OTczMzdiZTY2NWViYTNmZTM5M2RiMzY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHncS360Alw+QZZyacXbL5YEppm2 bV9Fc4SPfL10hGzW3UF1nh3M9Dk63ExRlYDd4MDAVLBsUx6rANgZhDDmmOl+pNP9 tqhV0kAp2oyf1HQU2cP1H0/kQwzroOJGD/XxwOFnlQQySFt7tnN4O+Z1Jimip/rB s3KAI6htBdBsH1UT1kIrzvsk954e+9gRrEUe/GGgeLb9SwSxZmmKnTVetgMultDj 1gLbYrUr6bCqzP5D2M5kmaQbl8UPJQ9Uhe65fOL3ggN9qoN0E7jiNGJJamOEoT97 KIPPuRG6Vf1dczM8W5RuB6xuLoYtaYmMYwnxTYfGr4k+Kk/11njLSTq+FQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMaCVGcg3yeWlzN75mXro/45PbNmMB8GA1UdIwQY MBaAFGSVDk5Y1qwn+A8Jpe0vMCi4GujKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkpVT1RsaldyQ2Y0RHdtbDdTOHdLTGdhNk1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8zMDAyMTEtMDkwOS00MjA2LTkxMzYt ZTY2ZDQxMWZhNmEwLzEvWkpVT1RsaldyQ2Y0RHdtbDdTOHdLTGdhNk1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy8zMDAyMTEtMDkwOS00MjA2LTkxMzYtZTY2ZDQxMWZhNmEw LzEvWkpVT1RsaldyQ2Y0RHdtbDdTOHdLTGdhNk1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiTL9cqgW d1w7kmXRLGTk8YgLpqBJG1Si98cdmD05WrnNrIJfpAjhz3oRiil7vWrh4DBcnUwc 6IS0gntG9V1JUPSSvQl5aJbrL6rzbFqzi/lKYnYGimVkGRUwPtJCuwah61QSQQOH 9MskXcLKaTS5l7qVUpdParoUhGXzfKVKVemY7GiMaFJG2KsyI9OyL+jtOuUtk4pG cSXT//54o0V/qqN6gp0TFZ8sx0PjVUwUsnqFwh8XVdjPEwxn7OBzDXOUebUoK7Zd AgHXSFUy5ux38cXVZ5FCmK3nFYI1eeunnL0O6iqdzjqwQBsXX9FlJtsihPY1+dHf 2yNpSHhegmfCTA== -----END CERTIFICATE-----Generated at Fri Dec 19 21:50:29 2025 by rpki-client