This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.mft File: zZGetcIQg2AVXef7TyFqBVrjHwk.mft (raw, json) Hash identifier: B2GKp87s1uU5C6U1jFcqvGwY8t1aUU4DSHTETBfkqhk= Subject key identifier: 99:B9:B8:DE:A9:E3:5A:52:E8:20:02:93:A6:E5:B6:43:DE:8A:90:D8 Authority key identifier: CD:91:9E:B5:C2:10:83:60:15:5D:E7:FB:4F:21:6A:05:5A:E3:1F:09 Certificate issuer: /CN=cd919eb5c2108360155de7fb4f216a055ae31f09 Certificate serial: 019AF42E04C4B20C1FC6DD56CD04D3C56115 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZGetcIQg2AVXef7TyFqBVrjHwk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.mft Manifest number: 176A Signing time: Sat 06 Dec 2025 15:00:47 +0000 Manifest this update: Sat 06 Dec 2025 15:00:47 +0000 Manifest next update: Sun 07 Dec 2025 15:00:47 +0000 Files and hashes: 1: QrfYxaTHhTSXop-ghzKRc2pRZhA.roa (hash: PMTolMEGmvsQvzQ9GGSfcadwLJNVLNi1hDvyzf87EUg=) 2: ahq3UrSwaIQvDkIrorl5O5ztGvQ.roa (hash: rt6AciC29jxzpxpxz0n9wcvl0rWHWyCvo8/vyh12WeY=) 3: zZGetcIQg2AVXef7TyFqBVrjHwk.crl (hash: blQw8ILXd16eLZfWhsxsne5uc8kqKky5HZGp05QgSKY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.crl rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.mft rsync://rpki.ripe.net/repository/DEFAULT/zZGetcIQg2AVXef7TyFqBVrjHwk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:04:c4:b2:0c:1f:c6:dd:56:cd:04:d3:c5:61:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd919eb5c2108360155de7fb4f216a055ae31f09 Validity Not Before: Dec 6 15:00:47 2025 GMT Not After : Dec 7 15:00:47 2025 GMT Subject: CN=99b9b8dea9e35a52e8200293a6e5b643de8a90d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d4:00:14:c7:40:f9:aa:a1:5d:3d:96:33:30: 03:c9:55:1b:3d:f8:9c:89:ca:6c:9b:71:4c:be:97: d7:b4:9f:4d:7d:e6:0d:a1:07:da:4d:0b:7c:3b:7c: 3e:6e:40:59:6c:75:60:94:80:7c:8c:60:c8:47:26: 0a:dc:24:47:c1:7b:c7:1c:4a:5e:65:a9:87:4c:1a: 42:30:61:94:cf:dd:07:c6:55:99:a3:0a:b7:0d:a3: 54:d6:eb:85:75:05:e6:83:ef:9b:c1:ab:47:ab:57: fb:a7:66:a1:91:f9:06:ed:3d:7b:24:de:9b:2f:f9: d5:19:ca:c9:17:34:43:90:5a:84:50:f6:99:e8:bc: 41:28:7d:17:3a:22:6d:f2:01:59:bb:6a:e6:8d:77: 39:ed:1e:25:aa:6d:9d:fa:60:d1:d8:3f:99:dd:c7: ae:bb:e3:84:28:c6:d2:89:3c:52:a2:c6:33:ff:69: 00:cb:22:f3:93:24:78:fd:ef:25:98:40:0e:dc:92: 4f:dc:eb:fd:b5:d2:6c:57:5b:82:08:1d:33:90:08: 05:f2:79:c8:44:bb:24:29:05:cb:74:43:3b:16:a1: c7:ee:f2:45:be:17:76:17:b7:78:af:5c:76:c0:ff: 0b:07:de:f5:04:e7:66:f0:ab:a9:b0:aa:6b:e5:b4: 77:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:B9:B8:DE:A9:E3:5A:52:E8:20:02:93:A6:E5:B6:43:DE:8A:90:D8 X509v3 Authority Key Identifier: keyid:CD:91:9E:B5:C2:10:83:60:15:5D:E7:FB:4F:21:6A:05:5A:E3:1F:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZGetcIQg2AVXef7TyFqBVrjHwk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:d8:4c:0d:07:59:4d:e1:7b:95:7c:2f:8a:f6:fa:c3:d2:f8: c0:89:80:d6:d9:ed:e4:a3:59:e1:bf:2c:a4:d7:ec:89:40:56: e8:c9:14:88:ee:9d:df:86:1c:eb:d1:b3:6f:dc:5d:07:bb:ce: 30:76:f9:fc:94:a0:ca:a1:d8:34:ae:a5:01:19:f3:30:af:79: b5:5f:6f:43:f5:83:0e:5d:fa:a6:79:59:9c:32:7c:bc:35:28: 6d:b9:c9:02:f7:0b:e2:bc:03:f4:1c:e0:ec:a4:64:57:26:d7: 5a:8e:f8:45:d7:be:88:d1:5e:d0:a4:23:38:58:47:a2:13:7b: 6b:71:af:c0:82:c7:a7:37:2e:2e:b7:a1:cd:63:7f:cc:df:3e: fb:9e:c3:3d:58:9a:d5:4b:bf:3a:17:30:0b:f5:6e:10:05:eb: 1a:70:77:32:77:70:cc:3b:38:05:84:e9:0d:1d:7d:1f:16:3e: e6:8e:ea:37:96:90:04:41:f7:f9:6a:60:9a:54:d6:d3:a1:bc: b1:19:ab:b0:9b:6a:40:59:e5:9b:a6:80:c4:34:4f:e3:9a:e2: d0:a4:91:e7:41:f2:1b:8b:c3:14:5b:97:1a:60:1e:5b:50:7e: 6f:86:7b:5b:71:fb:c5:47:d3:7e:cf:5e:02:72:40:9c:e3:86: b7:f6:78:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LgTEsgwfxt1WzQTTxWEVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkOTE5ZWI1YzIxMDgzNjAxNTVkZTdmYjRmMjE2YTA1NWFl MzFmMDkwHhcNMjUxMjA2MTUwMDQ3WhcNMjUxMjA3MTUwMDQ3WjAzMTEwLwYDVQQD Eyg5OWI5YjhkZWE5ZTM1YTUyZTgyMDAyOTNhNmU1YjY0M2RlOGE5MGQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdQAFMdA+aqhXT2WMzADyVUbPfic icpsm3FMvpfXtJ9NfeYNoQfaTQt8O3w+bkBZbHVglIB8jGDIRyYK3CRHwXvHHEpe ZamHTBpCMGGUz90HxlWZowq3DaNU1uuFdQXmg++bwatHq1f7p2ahkfkG7T17JN6b L/nVGcrJFzRDkFqEUPaZ6LxBKH0XOiJt8gFZu2rmjXc57R4lqm2d+mDR2D+Z3ceu u+OEKMbSiTxSosYz/2kAyyLzkyR4/e8lmEAO3JJP3Ov9tdJsV1uCCB0zkAgF8nnI RLskKQXLdEM7FqHH7vJFvhd2F7d4r1x2wP8LB971BOdm8KupsKpr5bR38wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJm5uN6p41pS6CACk6bltkPeipDYMB8GA1UdIwQY MBaAFM2RnrXCEINgFV3n+08hagVa4x8JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelpHZXRjSVFnMkFWWGVmN1R5RnFCVnJqSHdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny80ZmM3ODAtYjI5Ni00MGI3LTk1MDgt OWY4ZTZhMTg0Mzc0LzEvelpHZXRjSVFnMkFWWGVmN1R5RnFCVnJqSHdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny80ZmM3ODAtYjI5Ni00MGI3LTk1MDgtOWY4ZTZhMTg0Mzc0 LzEvelpHZXRjSVFnMkFWWGVmN1R5RnFCVnJqSHdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAddhMDQdZ TeF7lXwvivb6w9L4wImA1tnt5KNZ4b8spNfsiUBW6MkUiO6d34Yc69Gzb9xdB7vO MHb5/JSgyqHYNK6lARnzMK95tV9vQ/WDDl36pnlZnDJ8vDUobbnJAvcL4rwD9Bzg 7KRkVybXWo74Rde+iNFe0KQjOFhHohN7a3GvwILHpzcuLrehzWN/zN8++57DPVia 1Uu/OhcwC/VuEAXrGnB3MndwzDs4BYTpDR19HxY+5o7qN5aQBEH3+WpgmlTW06G8 sRmrsJtqQFnlm6aAxDRP45ri0KSR50HyG4vDFFuXGmAeW1B+b4Z7W3H7xUfTfs9e AnJAnOOGt/Z4hA== -----END CERTIFICATE-----Generated at Sat Dec 6 18:38:54 2025 by rpki-client