This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/7206c7-ff26-40ce-be71-231ac6ed9785/1/zzaFkhY6Sa04_60dQZp3UrMz2nc.mft File: zzaFkhY6Sa04_60dQZp3UrMz2nc.mft (raw, json) Hash identifier: e1fc4gx1GxMmqTebOpJc+gseZl5xivP5zFr2eK3oKgI= Subject key identifier: EF:4B:87:B1:BB:E4:AD:17:96:C7:30:FC:58:A6:87:EB:C8:95:B1:08 Authority key identifier: CF:36:85:92:16:3A:49:AD:38:FF:AD:1D:41:9A:77:52:B3:33:DA:77 Certificate issuer: /CN=cf368592163a49ad38ffad1d419a7752b333da77 Certificate serial: 019B1EAAB681005332DC33DC53901C1FB434 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zzaFkhY6Sa04_60dQZp3UrMz2nc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/7206c7-ff26-40ce-be71-231ac6ed9785/1/zzaFkhY6Sa04_60dQZp3UrMz2nc.mft Manifest number: 0AAE Signing time: Sun 14 Dec 2025 21:01:02 +0000 Manifest this update: Sun 14 Dec 2025 21:01:02 +0000 Manifest next update: Mon 15 Dec 2025 21:01:02 +0000 Files and hashes: 1: slxq6aORhvR8ox82bJzLl-kYQrU.roa (hash: ZHj8y1bs7bZjE7NP/f98Eczzt5W05lwyMtCauXhXnlo=) 2: zzaFkhY6Sa04_60dQZp3UrMz2nc.crl (hash: yMj43vCEbUY3rHxrtdPtYQpjuqktCAP56/XjQjuNC7E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/7206c7-ff26-40ce-be71-231ac6ed9785/1/zzaFkhY6Sa04_60dQZp3UrMz2nc.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/7206c7-ff26-40ce-be71-231ac6ed9785/1/zzaFkhY6Sa04_60dQZp3UrMz2nc.mft rsync://rpki.ripe.net/repository/DEFAULT/zzaFkhY6Sa04_60dQZp3UrMz2nc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 21:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1e:aa:b6:81:00:53:32:dc:33:dc:53:90:1c:1f:b4:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf368592163a49ad38ffad1d419a7752b333da77 Validity Not Before: Dec 14 21:01:02 2025 GMT Not After : Dec 15 21:01:02 2025 GMT Subject: CN=ef4b87b1bbe4ad1796c730fc58a687ebc895b108 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:bc:97:0f:88:7b:86:25:27:1b:8d:60:99:f9: 0a:eb:9d:38:a8:09:11:a6:0f:ac:24:0d:8e:09:28: 02:01:79:d3:a5:a6:f0:55:e5:ea:00:80:e5:ed:4e: 46:55:ee:aa:33:ec:c4:e6:2e:4c:b5:02:ba:38:66: 28:ad:65:45:a1:b5:40:9f:cb:9d:e4:c9:c9:c2:3c: 5c:f3:20:fb:e6:68:7a:69:4e:86:30:29:d5:15:9a: 9a:41:00:ea:a5:14:09:58:aa:d9:65:c4:c9:7c:7f: 0d:8c:4f:04:a8:2b:18:18:e7:98:55:2a:9b:79:e6: b1:57:03:b4:70:5d:76:df:9d:f7:2b:f0:e0:f0:26: a2:41:a7:38:e6:e1:36:50:81:bd:1a:c6:b3:ad:61: c9:d2:25:b5:38:11:ba:e3:60:d8:16:f6:a7:22:81: b3:a4:95:f6:4c:ed:11:89:c6:39:98:1d:fe:26:a1: c8:25:2b:35:69:db:cc:95:07:cc:0c:8e:ea:6a:37: 1d:a9:ad:4e:29:64:f2:ab:10:4f:64:76:b9:e5:d9: c1:52:97:39:87:30:e2:de:53:91:1a:ec:8f:9c:83: 51:16:fb:e1:b8:16:09:4b:78:b1:d8:d8:46:6d:3b: 4b:f8:72:88:85:d3:40:12:0e:b1:df:29:ce:db:88: 64:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:4B:87:B1:BB:E4:AD:17:96:C7:30:FC:58:A6:87:EB:C8:95:B1:08 X509v3 Authority Key Identifier: keyid:CF:36:85:92:16:3A:49:AD:38:FF:AD:1D:41:9A:77:52:B3:33:DA:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zzaFkhY6Sa04_60dQZp3UrMz2nc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/7206c7-ff26-40ce-be71-231ac6ed9785/1/zzaFkhY6Sa04_60dQZp3UrMz2nc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/7206c7-ff26-40ce-be71-231ac6ed9785/1/zzaFkhY6Sa04_60dQZp3UrMz2nc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:67:31:4f:40:54:d8:f7:0b:89:f5:8e:ff:90:07:77:27:1a: 01:68:46:85:70:f2:5a:23:f2:df:d4:cb:38:bf:f3:76:15:34: 9a:74:aa:20:6d:c3:f8:71:a4:81:8b:d5:1f:d9:f5:0a:bf:89: 74:59:0c:b5:0c:8f:df:ec:f3:9c:75:4d:e9:79:e7:5e:59:7d: 9b:de:8d:2a:fd:55:1d:62:08:2a:03:bc:9e:24:11:e5:1f:ba: 2e:f2:02:bf:23:c3:26:8d:85:56:98:18:f3:34:5c:25:18:86: 33:7a:d9:05:2a:80:41:37:20:c5:3b:eb:80:7f:90:ab:be:0f: a1:12:17:d4:1b:ee:a8:36:65:4d:68:d4:31:09:69:c1:6b:fa: c1:a7:76:64:2f:7c:d3:26:3c:1f:e4:39:14:bd:c5:be:25:9b: d7:cb:50:9a:99:f1:79:85:7c:7f:45:1c:b4:61:6c:58:52:c7: 67:5f:04:18:54:d7:e2:6a:c1:aa:54:58:f8:00:b5:ae:06:52: 79:b0:93:03:5f:5a:c7:71:62:dc:92:b1:bd:ff:79:ac:91:53: bc:9d:0d:1d:3f:c7:cc:75:d3:7d:5d:50:82:a1:9f:97:ce:f3: ae:10:7a:84:14:ab:8d:28:0b:b9:8a:74:53:9e:f1:88:e5:3a: 16:87:87:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZseqraBAFMy3DPcU5AcH7Q0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmMzY4NTkyMTYzYTQ5YWQzOGZmYWQxZDQxOWE3NzUyYjMz M2RhNzcwHhcNMjUxMjE0MjEwMTAyWhcNMjUxMjE1MjEwMTAyWjAzMTEwLwYDVQQD EyhlZjRiODdiMWJiZTRhZDE3OTZjNzMwZmM1OGE2ODdlYmM4OTViMTA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbyXD4h7hiUnG41gmfkK6504qAkR pg+sJA2OCSgCAXnTpabwVeXqAIDl7U5GVe6qM+zE5i5MtQK6OGYorWVFobVAn8ud 5MnJwjxc8yD75mh6aU6GMCnVFZqaQQDqpRQJWKrZZcTJfH8NjE8EqCsYGOeYVSqb eeaxVwO0cF123533K/Dg8CaiQac45uE2UIG9GsazrWHJ0iW1OBG642DYFvanIoGz pJX2TO0RicY5mB3+JqHIJSs1advMlQfMDI7qajcdqa1OKWTyqxBPZHa55dnBUpc5 hzDi3lORGuyPnINRFvvhuBYJS3ix2NhGbTtL+HKIhdNAEg6x3ynO24hkOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO9Lh7G75K0Xlscw/Fimh+vIlbEIMB8GA1UdIwQY MBaAFM82hZIWOkmtOP+tHUGad1KzM9p3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenphRmtoWTZTYTA0XzYwZFFacDNVck16Mm5jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS83MjA2YzctZmYyNi00MGNlLWJlNzEt MjMxYWM2ZWQ5Nzg1LzEvenphRmtoWTZTYTA0XzYwZFFacDNVck16Mm5jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS83MjA2YzctZmYyNi00MGNlLWJlNzEtMjMxYWM2ZWQ5Nzg1 LzEvenphRmtoWTZTYTA0XzYwZFFacDNVck16Mm5jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArWcxT0BU 2PcLifWO/5AHdycaAWhGhXDyWiPy39TLOL/zdhU0mnSqIG3D+HGkgYvVH9n1Cr+J dFkMtQyP3+zznHVN6XnnXll9m96NKv1VHWIIKgO8niQR5R+6LvICvyPDJo2FVpgY 8zRcJRiGM3rZBSqAQTcgxTvrgH+Qq74PoRIX1BvuqDZlTWjUMQlpwWv6wad2ZC98 0yY8H+Q5FL3FviWb18tQmpnxeYV8f0UctGFsWFLHZ18EGFTX4mrBqlRY+AC1rgZS ebCTA19ax3Fi3JKxvf95rJFTvJ0NHT/HzHXTfV1QgqGfl87zrhB6hBSrjSgLuYp0 U57xiOU6FoeH2g== -----END CERTIFICATE-----Generated at Mon Dec 15 04:56:02 2025 by rpki-client