This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/300211-0909-4206-9136-e66d411fa6a0/1/ZJUOTljWrCf4Dwml7S8wKLga6Mo.mft File: ZJUOTljWrCf4Dwml7S8wKLga6Mo.mft (raw, json) Hash identifier: Gqn8VjuD1K05j2AeGbLhwFzcU/6fEoPr/iy2qbmi6JY= Subject key identifier: F1:91:C5:71:8C:71:45:2D:F6:F7:A8:F3:79:78:33:A5:96:A2:79:FD Authority key identifier: 64:95:0E:4E:58:D6:AC:27:F8:0F:09:A5:ED:2F:30:28:B8:1A:E8:CA Certificate issuer: /CN=64950e4e58d6ac27f80f09a5ed2f3028b81ae8ca Certificate serial: 019B3DFEBF31EF8511A557F26821D966EC27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZJUOTljWrCf4Dwml7S8wKLga6Mo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/300211-0909-4206-9136-e66d411fa6a0/1/ZJUOTljWrCf4Dwml7S8wKLga6Mo.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 23:01:03 +0000 Manifest this update: Sat 20 Dec 2025 23:01:03 +0000 Manifest next update: Sun 21 Dec 2025 23:01:03 +0000 Files and hashes: 1: WuLl5WEm72PKP2EjN4PzkOllUEM.roa (hash: l/LlCxiGWXMwDilSjuK8TtyovKGo3UjHdGI+bjDVpFw=) 2: ZJUOTljWrCf4Dwml7S8wKLga6Mo.crl (hash: 11EUlWoDoAyhlagGVaHMsH4pbMv9g1+Qo8B5jdii0rc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/300211-0909-4206-9136-e66d411fa6a0/1/ZJUOTljWrCf4Dwml7S8wKLga6Mo.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/300211-0909-4206-9136-e66d411fa6a0/1/ZJUOTljWrCf4Dwml7S8wKLga6Mo.mft rsync://rpki.ripe.net/repository/DEFAULT/ZJUOTljWrCf4Dwml7S8wKLga6Mo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:bf:31:ef:85:11:a5:57:f2:68:21:d9:66:ec:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64950e4e58d6ac27f80f09a5ed2f3028b81ae8ca Validity Not Before: Dec 20 23:01:03 2025 GMT Not After : Dec 21 23:01:03 2025 GMT Subject: CN=f191c5718c71452df6f7a8f3797833a596a279fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:8d:e1:cd:74:90:ac:e7:7a:a5:67:eb:b4:71: a0:ac:4b:34:3f:39:14:21:c8:08:c3:a7:49:1a:c9: f5:82:89:87:5a:38:d1:df:9d:13:04:ca:8a:b1:f0: 55:ff:46:93:eb:1e:37:48:df:9c:9f:af:28:07:1d: 7e:80:c2:54:5f:44:f3:40:cc:b3:68:f7:02:07:94: c8:90:32:4c:5e:61:8a:28:e7:cd:cf:e6:20:84:52: f1:71:82:b1:5e:55:67:37:7a:fe:3c:e4:1f:90:ae: c6:be:5d:5e:d8:6c:77:bc:d7:94:fd:8a:56:c3:7d: bd:e9:90:4f:3b:d2:06:67:36:2b:f3:44:a5:9b:27: b7:af:4b:6a:59:57:f4:e3:f5:94:4e:58:12:ef:6f: b8:7d:8a:cc:40:fd:54:1e:3e:e7:94:60:e3:19:5e: d1:cd:15:e4:b2:0c:38:fe:70:2b:25:f9:b8:a4:a8: 65:a3:72:2f:f3:e2:13:41:d5:82:8e:4c:79:22:8a: ec:90:52:07:31:4d:4d:0d:82:64:f7:a5:26:36:2f: b8:be:49:37:f1:4b:9e:8f:32:db:26:95:29:3a:d2: d3:b1:3a:e2:d1:34:ee:b8:fe:f7:e3:e2:b6:d7:96: 0a:fd:22:45:45:27:b1:54:6c:e1:2f:7f:8a:85:f6: 9a:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:91:C5:71:8C:71:45:2D:F6:F7:A8:F3:79:78:33:A5:96:A2:79:FD X509v3 Authority Key Identifier: keyid:64:95:0E:4E:58:D6:AC:27:F8:0F:09:A5:ED:2F:30:28:B8:1A:E8:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZJUOTljWrCf4Dwml7S8wKLga6Mo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/300211-0909-4206-9136-e66d411fa6a0/1/ZJUOTljWrCf4Dwml7S8wKLga6Mo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/300211-0909-4206-9136-e66d411fa6a0/1/ZJUOTljWrCf4Dwml7S8wKLga6Mo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:11:f6:a4:4a:f2:a1:d2:7e:7c:df:62:fa:06:90:0b:d6:11: c7:87:eb:43:da:2d:5c:cb:5b:b6:f1:d8:be:dc:4a:37:7c:34: 1b:77:ab:17:db:cd:15:f3:4c:a8:09:82:a2:4c:29:bb:e6:b1: aa:a4:f5:1f:e3:5e:2e:d3:b5:e2:65:db:9b:b5:37:c9:53:3b: 1e:6f:96:7b:2e:46:37:af:33:e7:f1:70:61:15:ef:37:4b:32: 3d:ff:2f:8a:9a:37:70:a5:77:10:f9:8a:44:80:f2:de:cb:fa: 24:f8:5c:86:a7:69:7b:4c:81:12:70:ae:55:a5:a8:7d:9f:78: e1:ba:60:86:98:47:36:7d:d4:a9:43:48:aa:21:7d:cd:03:db: 7e:ac:e7:32:35:a8:d2:12:24:72:aa:a1:a0:c0:61:f8:29:0b: af:57:3a:5e:d9:7d:94:a8:f2:f4:0c:23:f0:6c:ee:68:13:78: d8:cb:99:a7:a8:66:7c:3a:16:7d:51:d3:aa:5f:f6:2d:c1:4a: 72:1a:63:fb:c8:44:6a:f7:e6:f5:77:35:d4:f5:6c:a1:aa:d9: 13:52:fe:d9:cb:74:10:02:2b:fb:b2:46:b2:c0:79:c3:90:92: 71:49:97:29:33:40:03:70:a3:11:5f:ec:37:1d:08:e1:e1:f5: 21:87:76:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/r8x74URpVfyaCHZZuwnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0OTUwZTRlNThkNmFjMjdmODBmMDlhNWVkMmYzMDI4Yjgx YWU4Y2EwHhcNMjUxMjIwMjMwMTAzWhcNMjUxMjIxMjMwMTAzWjAzMTEwLwYDVQQD EyhmMTkxYzU3MThjNzE0NTJkZjZmN2E4ZjM3OTc4MzNhNTk2YTI3OWZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtY3hzXSQrOd6pWfrtHGgrEs0PzkU IcgIw6dJGsn1gomHWjjR350TBMqKsfBV/0aT6x43SN+cn68oBx1+gMJUX0TzQMyz aPcCB5TIkDJMXmGKKOfNz+YghFLxcYKxXlVnN3r+POQfkK7Gvl1e2Gx3vNeU/YpW w3296ZBPO9IGZzYr80Slmye3r0tqWVf04/WUTlgS72+4fYrMQP1UHj7nlGDjGV7R zRXksgw4/nArJfm4pKhlo3Iv8+ITQdWCjkx5IorskFIHMU1NDYJk96UmNi+4vkk3 8UuejzLbJpUpOtLTsTri0TTuuP734+K215YK/SJFRSexVGzhL3+KhfaaRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPGRxXGMcUUt9veo83l4M6WWonn9MB8GA1UdIwQY MBaAFGSVDk5Y1qwn+A8Jpe0vMCi4GujKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkpVT1RsaldyQ2Y0RHdtbDdTOHdLTGdhNk1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8zMDAyMTEtMDkwOS00MjA2LTkxMzYt ZTY2ZDQxMWZhNmEwLzEvWkpVT1RsaldyQ2Y0RHdtbDdTOHdLTGdhNk1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy8zMDAyMTEtMDkwOS00MjA2LTkxMzYtZTY2ZDQxMWZhNmEw LzEvWkpVT1RsaldyQ2Y0RHdtbDdTOHdLTGdhNk1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuBH2pEry odJ+fN9i+gaQC9YRx4frQ9otXMtbtvHYvtxKN3w0G3erF9vNFfNMqAmCokwpu+ax qqT1H+NeLtO14mXbm7U3yVM7Hm+Wey5GN68z5/FwYRXvN0syPf8vipo3cKV3EPmK RIDy3sv6JPhchqdpe0yBEnCuVaWofZ944bpghphHNn3UqUNIqiF9zQPbfqznMjWo 0hIkcqqhoMBh+CkLr1c6Xtl9lKjy9Awj8GzuaBN42MuZp6hmfDoWfVHTql/2LcFK chpj+8hEavfm9Xc11PVsoarZE1L+2ct0EAIr+7JGssB5w5CScUmXKTNAA3CjEV/s Nx0I4eH1IYd2Cg== -----END CERTIFICATE-----Generated at Sun Dec 21 01:16:21 2025 by rpki-client