This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.mft File: zZGetcIQg2AVXef7TyFqBVrjHwk.mft (raw, json) Hash identifier: IIGbCmGlnQgKUu60Rh4QcJVYoDgaEtHFkt7S4DjfdSI= Subject key identifier: 27:B4:A5:7C:62:98:BE:BB:6C:A4:7D:10:8D:FE:C0:93:EB:37:7D:37 Authority key identifier: CD:91:9E:B5:C2:10:83:60:15:5D:E7:FB:4F:21:6A:05:5A:E3:1F:09 Certificate issuer: /CN=cd919eb5c2108360155de7fb4f216a055ae31f09 Certificate serial: 019B2C2FA4013ED2AFFE6DF6F9FBEA79F279 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZGetcIQg2AVXef7TyFqBVrjHwk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.mft Manifest number: 1787 Signing time: Wed 17 Dec 2025 12:01:18 +0000 Manifest this update: Wed 17 Dec 2025 12:01:18 +0000 Manifest next update: Thu 18 Dec 2025 12:01:18 +0000 Files and hashes: 1: QrfYxaTHhTSXop-ghzKRc2pRZhA.roa (hash: PMTolMEGmvsQvzQ9GGSfcadwLJNVLNi1hDvyzf87EUg=) 2: ahq3UrSwaIQvDkIrorl5O5ztGvQ.roa (hash: rt6AciC29jxzpxpxz0n9wcvl0rWHWyCvo8/vyh12WeY=) 3: zZGetcIQg2AVXef7TyFqBVrjHwk.crl (hash: C8vpYdXlQA/lDkutUwQRTtQ1CN7k0JouRZ7I3w1Qoqs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.crl rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.mft rsync://rpki.ripe.net/repository/DEFAULT/zZGetcIQg2AVXef7TyFqBVrjHwk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 12:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:2f:a4:01:3e:d2:af:fe:6d:f6:f9:fb:ea:79:f2:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd919eb5c2108360155de7fb4f216a055ae31f09 Validity Not Before: Dec 17 12:01:18 2025 GMT Not After : Dec 18 12:01:18 2025 GMT Subject: CN=27b4a57c6298bebb6ca47d108dfec093eb377d37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:91:27:12:6a:4e:fd:a3:da:33:6c:42:17:c9: d6:2c:aa:73:a1:6a:bd:c6:bd:96:9a:68:45:1e:e6: fe:e1:d0:00:86:b0:d4:8b:48:dd:f5:c6:ef:1d:d7: fe:4c:53:27:64:82:ed:13:28:5a:f5:2a:3b:d0:0c: 7b:45:6a:0c:9b:64:1b:bc:a1:8a:b6:ff:d4:78:62: d9:50:d6:e2:22:fc:71:59:93:bb:67:0e:3e:31:33: da:cd:aa:46:af:3c:23:e3:85:29:cd:35:62:95:08: ff:d8:19:8e:09:d7:06:60:ad:9d:52:c6:ff:b2:18: 57:15:9a:30:9c:75:93:8c:fb:cd:5e:56:b0:70:e0: dd:7e:d2:21:24:93:f7:65:63:4d:8e:e8:7a:3d:b7: 10:c3:03:68:a8:cf:7e:d3:17:b6:49:a2:5c:0c:7d: dd:07:96:58:b0:17:78:8b:0a:e5:a9:1e:1b:05:b3: 76:c7:1a:19:04:31:9f:be:74:8f:02:da:6a:81:5f: cf:1d:b4:3b:da:32:40:39:80:9e:0c:29:54:22:7a: aa:ba:25:c4:22:9b:17:53:b3:3a:08:26:31:9c:f2: f3:81:23:07:57:44:ea:e3:d8:cf:61:f6:64:2d:c2: 64:07:43:1c:9d:d7:76:ed:b0:cd:3c:66:b2:a6:31: b1:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:B4:A5:7C:62:98:BE:BB:6C:A4:7D:10:8D:FE:C0:93:EB:37:7D:37 X509v3 Authority Key Identifier: keyid:CD:91:9E:B5:C2:10:83:60:15:5D:E7:FB:4F:21:6A:05:5A:E3:1F:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZGetcIQg2AVXef7TyFqBVrjHwk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:0e:d6:00:c9:76:01:99:92:f4:fa:a0:b3:4d:cc:49:91:f8: 99:e1:e1:31:a9:7e:54:6f:b1:8d:53:8b:92:0e:ff:1d:bf:e9: 24:9e:17:d1:4a:e7:5a:30:fd:ad:a7:f7:fa:15:da:f5:7f:c4: 93:65:2b:cb:59:d5:c9:a8:a7:26:bd:ba:f1:79:ec:0e:bd:20: b2:84:19:85:86:e4:43:d0:b4:10:78:28:94:bf:65:fd:bf:86: 57:19:5e:ec:13:54:7c:af:6a:91:66:85:db:24:0a:55:5d:88: 3f:14:18:74:47:85:6f:d3:8d:b0:4e:bd:7a:39:4c:c3:e2:73: c1:6f:36:ba:ea:88:46:8e:14:3b:b4:60:64:54:d9:1f:44:af: 84:a3:7d:7e:c6:38:07:75:17:a0:9d:92:29:77:a7:04:46:46: 0a:30:b8:57:b6:6f:62:7c:73:4c:93:35:7f:8a:33:4e:82:80: fc:93:bb:78:ba:c2:e9:a0:e9:8c:7f:b1:5c:81:0c:c4:db:a5: b4:c4:08:74:7c:47:82:4c:10:f7:85:73:ed:1e:32:c1:4e:5e: c8:55:2d:a6:d3:80:75:e9:0c:d0:2d:88:1e:4c:1e:09:73:58: 8b:40:9a:54:d5:f9:d7:79:9f:af:c8:ee:e5:28:fc:37:53:9f: 29:6d:da:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssL6QBPtKv/m32+fvqefJ5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkOTE5ZWI1YzIxMDgzNjAxNTVkZTdmYjRmMjE2YTA1NWFl MzFmMDkwHhcNMjUxMjE3MTIwMTE4WhcNMjUxMjE4MTIwMTE4WjAzMTEwLwYDVQQD EygyN2I0YTU3YzYyOThiZWJiNmNhNDdkMTA4ZGZlYzA5M2ViMzc3ZDM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2pEnEmpO/aPaM2xCF8nWLKpzoWq9 xr2WmmhFHub+4dAAhrDUi0jd9cbvHdf+TFMnZILtEyha9So70Ax7RWoMm2QbvKGK tv/UeGLZUNbiIvxxWZO7Zw4+MTPazapGrzwj44UpzTVilQj/2BmOCdcGYK2dUsb/ shhXFZownHWTjPvNXlawcODdftIhJJP3ZWNNjuh6PbcQwwNoqM9+0xe2SaJcDH3d B5ZYsBd4iwrlqR4bBbN2xxoZBDGfvnSPAtpqgV/PHbQ72jJAOYCeDClUInqquiXE IpsXU7M6CCYxnPLzgSMHV0Tq49jPYfZkLcJkB0Mcndd27bDNPGaypjGxZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCe0pXximL67bKR9EI3+wJPrN303MB8GA1UdIwQY MBaAFM2RnrXCEINgFV3n+08hagVa4x8JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelpHZXRjSVFnMkFWWGVmN1R5RnFCVnJqSHdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny80ZmM3ODAtYjI5Ni00MGI3LTk1MDgt OWY4ZTZhMTg0Mzc0LzEvelpHZXRjSVFnMkFWWGVmN1R5RnFCVnJqSHdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny80ZmM3ODAtYjI5Ni00MGI3LTk1MDgtOWY4ZTZhMTg0Mzc0 LzEvelpHZXRjSVFnMkFWWGVmN1R5RnFCVnJqSHdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFg7WAMl2 AZmS9Pqgs03MSZH4meHhMal+VG+xjVOLkg7/Hb/pJJ4X0UrnWjD9raf3+hXa9X/E k2Ury1nVyainJr268XnsDr0gsoQZhYbkQ9C0EHgolL9l/b+GVxle7BNUfK9qkWaF 2yQKVV2IPxQYdEeFb9ONsE69ejlMw+JzwW82uuqIRo4UO7RgZFTZH0SvhKN9fsY4 B3UXoJ2SKXenBEZGCjC4V7ZvYnxzTJM1f4ozToKA/JO7eLrC6aDpjH+xXIEMxNul tMQIdHxHgkwQ94Vz7R4ywU5eyFUtptOAdekM0C2IHkweCXNYi0CaVNX513mfr8ju 5Sj8N1OfKW3axQ== -----END CERTIFICATE-----Generated at Wed Dec 17 22:21:55 2025 by rpki-client