This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.mft File: zZGetcIQg2AVXef7TyFqBVrjHwk.mft (raw, json) Hash identifier: nbygh/7AcyzoX+U48obcwk0Y3EJ104d2EPEIkO/KYO8= Subject key identifier: F7:A0:F9:28:5A:8F:8F:0E:CC:54:3E:95:C1:14:6A:3C:20:A7:2B:12 Authority key identifier: CD:91:9E:B5:C2:10:83:60:15:5D:E7:FB:4F:21:6A:05:5A:E3:1F:09 Certificate issuer: /CN=cd919eb5c2108360155de7fb4f216a055ae31f09 Certificate serial: 019B0F3777F47D27828CF1A12C1ED279FD48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZGetcIQg2AVXef7TyFqBVrjHwk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.mft Manifest number: 1778 Signing time: Thu 11 Dec 2025 21:00:51 +0000 Manifest this update: Thu 11 Dec 2025 21:00:51 +0000 Manifest next update: Fri 12 Dec 2025 21:00:51 +0000 Files and hashes: 1: QrfYxaTHhTSXop-ghzKRc2pRZhA.roa (hash: PMTolMEGmvsQvzQ9GGSfcadwLJNVLNi1hDvyzf87EUg=) 2: ahq3UrSwaIQvDkIrorl5O5ztGvQ.roa (hash: rt6AciC29jxzpxpxz0n9wcvl0rWHWyCvo8/vyh12WeY=) 3: zZGetcIQg2AVXef7TyFqBVrjHwk.crl (hash: 6jlH+W7mNaY6wve4M7CKO2Wc3e5MKPCbWhsGbXXFdSU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.crl rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.mft rsync://rpki.ripe.net/repository/DEFAULT/zZGetcIQg2AVXef7TyFqBVrjHwk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 21:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:37:77:f4:7d:27:82:8c:f1:a1:2c:1e:d2:79:fd:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd919eb5c2108360155de7fb4f216a055ae31f09 Validity Not Before: Dec 11 21:00:51 2025 GMT Not After : Dec 12 21:00:51 2025 GMT Subject: CN=f7a0f9285a8f8f0ecc543e95c1146a3c20a72b12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:22:90:43:06:86:c6:8d:0b:41:b8:26:b8:68: 34:1b:35:1c:ea:7b:a6:78:d8:8a:15:40:c4:c8:71: be:58:4e:28:d8:ed:d4:12:d7:bf:ec:c0:f7:b8:c6: 04:ab:14:de:9c:a4:ad:a8:dc:40:74:55:d1:9f:6b: c7:64:64:bf:6a:97:d0:9d:c1:b2:32:68:20:7c:d9: 6a:25:10:c2:9e:65:10:61:98:bb:af:8d:bb:0f:61: 76:ab:ef:47:f1:82:c3:b7:59:58:0d:98:c0:69:53: 1a:1e:a0:98:50:82:0e:aa:9d:80:d7:9e:d3:68:08: 4d:a6:b1:14:52:ff:0a:05:f9:0f:7d:38:aa:17:46: 78:0a:95:3b:7d:26:e4:15:70:37:02:59:1a:2b:e4: 0d:91:e6:d8:ee:7e:64:c4:5b:78:86:81:01:91:6f: f4:47:81:af:18:aa:18:24:c3:70:65:e0:3f:4a:fb: bb:e7:5d:b6:3b:02:8c:0e:a5:97:03:ca:ec:6e:52: 10:51:77:56:d9:94:cd:99:fa:08:3a:a6:48:e9:e9: a1:1a:d8:2c:af:8a:8c:0b:b7:23:28:56:eb:86:b5: 25:89:a1:e2:53:cc:ec:a2:23:2a:c8:fa:9b:cb:e3: c2:c7:dc:cd:7e:88:dd:4e:8d:fd:dd:1c:5c:06:07: b4:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:A0:F9:28:5A:8F:8F:0E:CC:54:3E:95:C1:14:6A:3C:20:A7:2B:12 X509v3 Authority Key Identifier: keyid:CD:91:9E:B5:C2:10:83:60:15:5D:E7:FB:4F:21:6A:05:5A:E3:1F:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZGetcIQg2AVXef7TyFqBVrjHwk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:fe:48:dd:86:75:4b:9f:ee:2e:d4:2b:e4:6e:28:61:71:a6: 2d:94:e3:96:c7:b5:e9:bf:38:fe:f0:ed:25:d5:db:5f:04:05: ca:7c:80:51:35:d4:69:ec:f6:70:71:de:69:51:21:8b:01:dd: 07:d4:7b:df:5c:9f:36:a0:c5:2a:4b:cb:e9:6c:08:01:42:2d: 24:e9:82:6a:89:e4:a4:54:61:ad:1d:69:5c:f0:26:92:45:44: 59:16:af:af:c6:8d:95:ed:9f:e6:84:38:2b:8f:c7:8f:5d:07: df:20:ce:45:d8:44:8f:7c:ce:4f:a8:20:27:e3:04:3c:ba:9b: 74:5a:4a:40:0f:d1:49:63:25:0c:8c:f7:67:ed:f1:82:39:91: 1c:6b:ae:31:01:c2:01:b7:57:a8:99:1f:42:96:36:c8:7d:f7: c1:50:00:78:36:41:c3:83:f3:cb:31:1c:23:6b:64:dd:1c:cf: c3:92:93:d9:05:dd:b2:00:97:4e:92:e4:b8:21:00:b6:68:07: 78:d3:d2:6b:6d:23:22:1c:89:69:b0:fa:51:bf:db:b1:52:9f: 7a:7c:29:60:a9:99:e2:b3:41:a1:7f:5c:9e:2d:71:8b:be:4a: c9:02:a4:24:ba:8f:b6:3e:2d:a6:ed:61:26:2a:f0:2a:b6:56: d0:8a:1b:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPN3f0fSeCjPGhLB7Sef1IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkOTE5ZWI1YzIxMDgzNjAxNTVkZTdmYjRmMjE2YTA1NWFl MzFmMDkwHhcNMjUxMjExMjEwMDUxWhcNMjUxMjEyMjEwMDUxWjAzMTEwLwYDVQQD EyhmN2EwZjkyODVhOGY4ZjBlY2M1NDNlOTVjMTE0NmEzYzIwYTcyYjEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCKQQwaGxo0LQbgmuGg0GzUc6num eNiKFUDEyHG+WE4o2O3UEte/7MD3uMYEqxTenKStqNxAdFXRn2vHZGS/apfQncGy MmggfNlqJRDCnmUQYZi7r427D2F2q+9H8YLDt1lYDZjAaVMaHqCYUIIOqp2A157T aAhNprEUUv8KBfkPfTiqF0Z4CpU7fSbkFXA3AlkaK+QNkebY7n5kxFt4hoEBkW/0 R4GvGKoYJMNwZeA/Svu75122OwKMDqWXA8rsblIQUXdW2ZTNmfoIOqZI6emhGtgs r4qMC7cjKFbrhrUliaHiU8zsoiMqyPqby+PCx9zNfojdTo393RxcBge0LwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPeg+Shaj48OzFQ+lcEUajwgpysSMB8GA1UdIwQY MBaAFM2RnrXCEINgFV3n+08hagVa4x8JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelpHZXRjSVFnMkFWWGVmN1R5RnFCVnJqSHdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny80ZmM3ODAtYjI5Ni00MGI3LTk1MDgt OWY4ZTZhMTg0Mzc0LzEvelpHZXRjSVFnMkFWWGVmN1R5RnFCVnJqSHdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny80ZmM3ODAtYjI5Ni00MGI3LTk1MDgtOWY4ZTZhMTg0Mzc0 LzEvelpHZXRjSVFnMkFWWGVmN1R5RnFCVnJqSHdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGf5I3YZ1 S5/uLtQr5G4oYXGmLZTjlse16b84/vDtJdXbXwQFynyAUTXUaez2cHHeaVEhiwHd B9R731yfNqDFKkvL6WwIAUItJOmCaonkpFRhrR1pXPAmkkVEWRavr8aNle2f5oQ4 K4/Hj10H3yDORdhEj3zOT6ggJ+MEPLqbdFpKQA/RSWMlDIz3Z+3xgjmRHGuuMQHC AbdXqJkfQpY2yH33wVAAeDZBw4PzyzEcI2tk3RzPw5KT2QXdsgCXTpLkuCEAtmgH eNPSa20jIhyJabD6Ub/bsVKfenwpYKmZ4rNBoX9cni1xi75KyQKkJLqPtj4tpu1h JirwKrZW0Iobjg== -----END CERTIFICATE-----Generated at Fri Dec 12 07:01:43 2025 by rpki-client