This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/27fbc6-ccde-460b-9ff9-a1cc23160a48/1/zznV9duFr0wmCPwMM8zE8nIBcYc.mft File: zznV9duFr0wmCPwMM8zE8nIBcYc.mft (raw, json) Hash identifier: +qVi8yxYX8M2PcZqWPW116TWFgU75zwm7NAbo0FD4Q4= Subject key identifier: 4B:DC:5D:86:1F:82:E9:52:58:FE:2E:66:8D:43:C5:9C:DE:CE:83:1F Authority key identifier: CF:39:D5:F5:DB:85:AF:4C:26:08:FC:0C:33:CC:C4:F2:72:01:71:87 Certificate issuer: /CN=cf39d5f5db85af4c2608fc0c33ccc4f272017187 Certificate serial: 019AF578632E0E58A7E649E351087AA9A96F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zznV9duFr0wmCPwMM8zE8nIBcYc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/27fbc6-ccde-460b-9ff9-a1cc23160a48/1/zznV9duFr0wmCPwMM8zE8nIBcYc.mft Manifest number: 1478 Signing time: Sat 06 Dec 2025 21:01:38 +0000 Manifest this update: Sat 06 Dec 2025 21:01:38 +0000 Manifest next update: Sun 07 Dec 2025 21:01:38 +0000 Files and hashes: 1: XT0r1xatcrf8NjjWTZF7b5a24HM.roa (hash: HAbpapRpy/03wUOXVxWbKajCF7qZTjcvLamoCBH0lfc=) 2: zznV9duFr0wmCPwMM8zE8nIBcYc.crl (hash: A/nZVoBNa6Xu5C4HpHaLSxyBjI5V4NVWjdxClesT08I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/27fbc6-ccde-460b-9ff9-a1cc23160a48/1/zznV9duFr0wmCPwMM8zE8nIBcYc.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/27fbc6-ccde-460b-9ff9-a1cc23160a48/1/zznV9duFr0wmCPwMM8zE8nIBcYc.mft rsync://rpki.ripe.net/repository/DEFAULT/zznV9duFr0wmCPwMM8zE8nIBcYc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:78:63:2e:0e:58:a7:e6:49:e3:51:08:7a:a9:a9:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf39d5f5db85af4c2608fc0c33ccc4f272017187 Validity Not Before: Dec 6 21:01:38 2025 GMT Not After : Dec 7 21:01:38 2025 GMT Subject: CN=4bdc5d861f82e95258fe2e668d43c59cdece831f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:38:e2:11:98:cc:46:59:24:b6:33:8d:4d:55: c9:93:c7:03:2d:d8:52:90:6c:84:d0:ae:b4:0f:9d: bb:05:78:62:1c:ea:a9:49:52:c3:2c:9c:e0:bc:76: 08:a0:b1:62:a7:fa:b0:ff:9c:94:66:d0:e6:78:49: 07:2b:5f:66:4c:fc:f8:95:b0:36:bf:63:05:6f:56: 65:85:06:0a:cb:3e:04:8c:d8:bd:51:58:0e:a6:8a: b5:2d:3a:ca:d0:05:0c:18:2f:4f:c7:2e:f6:fd:31: 6b:87:7a:06:c9:60:86:4e:cc:82:4b:b5:47:eb:fa: 29:5f:b5:c8:3b:f6:ae:02:fe:ca:37:f6:57:3e:54: dd:f9:c7:17:ac:1e:32:14:db:ae:08:70:cb:aa:2e: 6f:5d:54:f1:03:11:5b:b4:82:f1:24:41:af:36:1e: e1:98:91:8e:08:6c:8a:7d:06:7a:28:9c:89:a2:4c: fe:30:e4:50:e3:8c:34:f5:98:aa:90:9f:a8:9d:27: 27:22:6a:68:ee:04:1b:30:d1:91:d9:e1:dd:76:ef: e6:ae:87:41:85:b6:f0:88:0e:b9:7b:fe:9f:92:07: 66:77:e1:6f:40:11:2b:d1:60:74:e1:e5:4b:89:95: 9d:33:7d:58:48:e5:32:91:b7:86:c1:a4:19:6c:52: 79:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:DC:5D:86:1F:82:E9:52:58:FE:2E:66:8D:43:C5:9C:DE:CE:83:1F X509v3 Authority Key Identifier: keyid:CF:39:D5:F5:DB:85:AF:4C:26:08:FC:0C:33:CC:C4:F2:72:01:71:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zznV9duFr0wmCPwMM8zE8nIBcYc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/27fbc6-ccde-460b-9ff9-a1cc23160a48/1/zznV9duFr0wmCPwMM8zE8nIBcYc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/27fbc6-ccde-460b-9ff9-a1cc23160a48/1/zznV9duFr0wmCPwMM8zE8nIBcYc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:fa:9c:71:fd:31:27:d2:08:e3:65:bd:92:59:cd:06:4a:7c: 66:e1:47:84:b6:76:8a:f6:01:a5:6b:c0:20:9e:e0:fe:b5:94: cb:07:8e:10:72:71:9c:e6:51:9f:94:4b:5b:73:f6:c5:fb:52: 26:ae:cd:18:27:60:67:34:c2:b7:fb:ef:c1:48:1e:58:c8:c8: 0f:9b:da:d0:f6:e7:8e:47:09:18:7e:b1:18:46:b8:83:eb:51: 86:39:fa:c7:a4:53:e3:57:af:2f:4b:03:31:b8:96:71:72:02: 29:6e:25:38:12:a1:1e:7a:31:a4:ab:8e:e1:7c:21:1d:29:c6: 5e:a6:10:88:c0:22:07:b2:2b:90:a7:34:89:61:6b:c1:ee:38: b3:bd:07:cf:b9:a7:44:9a:64:b0:b8:06:1b:ac:3c:8b:9e:88: 05:52:49:9a:c4:f5:ce:2a:dc:db:bb:ed:15:fc:bc:5d:e6:3a: e5:4c:c9:7c:ac:f6:d9:fb:53:c5:ed:fc:eb:ba:11:14:b8:23: 8c:5d:c2:82:f1:12:1a:ff:d3:c4:52:3f:14:81:f4:6e:f4:12: 51:a9:6c:99:82:11:85:4f:ed:68:d6:3e:72:18:0f:3c:42:d0: d6:0b:54:20:aa:4c:72:b3:53:92:83:8a:2a:05:f9:22:ae:86: ad:fa:4b:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1eGMuDlin5knjUQh6qalvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmMzlkNWY1ZGI4NWFmNGMyNjA4ZmMwYzMzY2NjNGYyNzIw MTcxODcwHhcNMjUxMjA2MjEwMTM4WhcNMjUxMjA3MjEwMTM4WjAzMTEwLwYDVQQD Eyg0YmRjNWQ4NjFmODJlOTUyNThmZTJlNjY4ZDQzYzU5Y2RlY2U4MzFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTjiEZjMRlkktjONTVXJk8cDLdhS kGyE0K60D527BXhiHOqpSVLDLJzgvHYIoLFip/qw/5yUZtDmeEkHK19mTPz4lbA2 v2MFb1ZlhQYKyz4EjNi9UVgOpoq1LTrK0AUMGC9Pxy72/TFrh3oGyWCGTsyCS7VH 6/opX7XIO/auAv7KN/ZXPlTd+ccXrB4yFNuuCHDLqi5vXVTxAxFbtILxJEGvNh7h mJGOCGyKfQZ6KJyJokz+MORQ44w09ZiqkJ+onScnImpo7gQbMNGR2eHddu/mrodB hbbwiA65e/6fkgdmd+FvQBEr0WB04eVLiZWdM31YSOUykbeGwaQZbFJ5IQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEvcXYYfgulSWP4uZo1DxZzezoMfMB8GA1UdIwQY MBaAFM851fXbha9MJgj8DDPMxPJyAXGHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenpuVjlkdUZyMHdtQ1B3TU04ekU4bklCY1ljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8yN2ZiYzYtY2NkZS00NjBiLTlmZjkt YTFjYzIzMTYwYTQ4LzEvenpuVjlkdUZyMHdtQ1B3TU04ekU4bklCY1ljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy8yN2ZiYzYtY2NkZS00NjBiLTlmZjktYTFjYzIzMTYwYTQ4 LzEvenpuVjlkdUZyMHdtQ1B3TU04ekU4bklCY1ljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASfqccf0x J9II42W9klnNBkp8ZuFHhLZ2ivYBpWvAIJ7g/rWUyweOEHJxnOZRn5RLW3P2xftS Jq7NGCdgZzTCt/vvwUgeWMjID5va0PbnjkcJGH6xGEa4g+tRhjn6x6RT41evL0sD MbiWcXICKW4lOBKhHnoxpKuO4XwhHSnGXqYQiMAiB7IrkKc0iWFrwe44s70Hz7mn RJpksLgGG6w8i56IBVJJmsT1zirc27vtFfy8XeY65UzJfKz22ftTxe3867oRFLgj jF3CgvESGv/TxFI/FIH0bvQSUalsmYIRhU/taNY+chgPPELQ1gtUIKpMcrNTkoOK KgX5Iq6GrfpL9A== -----END CERTIFICATE-----Generated at Sun Dec 7 02:50:02 2025 by rpki-client