This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/27d409-7659-453e-b36f-297d52f0c283/1/zzKCScw17CfMEOGLiCxsE4l8hJc.mft File: zzKCScw17CfMEOGLiCxsE4l8hJc.mft (raw, json) Hash identifier: flH+Ho4Chery+Fx+6Y72sEW7Nqa6jevnrMne7Earrqo= Subject key identifier: D4:B3:26:D5:25:05:49:7D:C1:AC:94:AC:4B:36:4F:F8:7F:CA:5D:6F Authority key identifier: CF:32:82:49:CC:35:EC:27:CC:10:E1:8B:88:2C:6C:13:89:7C:84:97 Certificate issuer: /CN=cf328249cc35ec27cc10e18b882c6c13897c8497 Certificate serial: 019B2AAE996CFAA6C7B34B167E0EA8832560 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zzKCScw17CfMEOGLiCxsE4l8hJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/27d409-7659-453e-b36f-297d52f0c283/1/zzKCScw17CfMEOGLiCxsE4l8hJc.mft Manifest number: 0F18 Signing time: Wed 17 Dec 2025 05:00:44 +0000 Manifest this update: Wed 17 Dec 2025 05:00:44 +0000 Manifest next update: Thu 18 Dec 2025 05:00:44 +0000 Files and hashes: 1: Gaonav40tTJpKCNRA2Pgw8c6CJI.asa (hash: qQGsDuLfuc8HGPjQosjqKzgl1S/2LQUHdjWbkc+kEYQ=) 2: zzKCScw17CfMEOGLiCxsE4l8hJc.crl (hash: i3aEDA51F0V8rfRu+CEcBAU0b04ZdNgB7Hc1N/hqlcE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/27d409-7659-453e-b36f-297d52f0c283/1/zzKCScw17CfMEOGLiCxsE4l8hJc.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/27d409-7659-453e-b36f-297d52f0c283/1/zzKCScw17CfMEOGLiCxsE4l8hJc.mft rsync://rpki.ripe.net/repository/DEFAULT/zzKCScw17CfMEOGLiCxsE4l8hJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 05:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2a:ae:99:6c:fa:a6:c7:b3:4b:16:7e:0e:a8:83:25:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf328249cc35ec27cc10e18b882c6c13897c8497 Validity Not Before: Dec 17 05:00:44 2025 GMT Not After : Dec 18 05:00:44 2025 GMT Subject: CN=d4b326d52505497dc1ac94ac4b364ff87fca5d6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:61:f5:e7:d1:e8:2d:32:7b:75:57:22:ae:64: 99:5c:42:b1:b5:b7:74:69:f4:58:89:aa:ca:00:42: 39:39:8b:66:63:38:bc:7f:ab:69:1a:c9:ac:d5:81: a5:6a:2c:0c:49:8c:a6:1b:32:34:c1:e2:cb:85:98: 57:22:8b:1b:45:25:b7:69:3c:33:c4:f1:ae:7c:e8: a6:94:0f:e5:48:f3:bc:10:c0:84:26:ce:59:20:af: 79:40:33:03:49:fc:f9:42:da:bc:4a:03:0e:34:c5: 67:b7:2a:dc:8d:a1:33:43:d5:3f:a8:52:a8:d6:c7: f0:d5:5e:d9:9a:97:c5:a5:e2:6d:eb:02:d3:9d:d6: ea:82:ec:6e:77:f6:ed:50:aa:05:11:c4:b8:ae:2d: 35:48:94:31:79:6a:e5:5a:16:12:b5:4c:64:99:0d: db:4d:9f:76:60:15:13:20:45:01:c8:89:da:df:c8: c5:fa:c8:77:40:71:36:20:14:11:28:d1:4f:12:fc: 7b:82:68:4b:d5:f7:1c:bc:e1:49:50:05:d7:d0:53: a8:c3:3d:7a:15:16:5c:76:d4:86:a7:1d:fc:57:33: 52:15:ad:e7:41:13:db:09:34:d8:19:ee:b4:90:f6: 66:0f:d3:6a:69:2b:93:05:c8:02:66:63:d6:84:92: d3:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:B3:26:D5:25:05:49:7D:C1:AC:94:AC:4B:36:4F:F8:7F:CA:5D:6F X509v3 Authority Key Identifier: keyid:CF:32:82:49:CC:35:EC:27:CC:10:E1:8B:88:2C:6C:13:89:7C:84:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zzKCScw17CfMEOGLiCxsE4l8hJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/27d409-7659-453e-b36f-297d52f0c283/1/zzKCScw17CfMEOGLiCxsE4l8hJc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/27d409-7659-453e-b36f-297d52f0c283/1/zzKCScw17CfMEOGLiCxsE4l8hJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:09:52:1c:db:b1:cc:1a:8b:fb:0a:df:16:8d:84:61:6a:07: d1:62:7b:eb:7b:98:75:8f:80:53:27:46:27:6e:8d:d1:f6:2c: 38:e8:27:c8:a3:35:e9:80:d5:c5:b4:ee:66:18:42:29:e4:cf: a2:bc:97:45:d1:3e:d2:33:32:24:27:82:a3:2a:0f:ba:3f:8a: 52:f0:b7:f3:fe:84:41:5f:56:e3:e4:57:8e:53:f9:5a:1a:3b: 36:8d:a0:4c:46:a3:3b:9f:ff:52:09:52:c6:9c:e9:f2:44:ac: b3:34:0b:e3:e8:36:37:cc:45:f7:5d:df:04:d2:7d:b5:9a:21: 3b:fb:ac:fb:3d:5c:9b:ac:0e:56:55:cc:54:c6:bd:f8:99:c2: f1:0d:27:29:b6:f2:93:56:41:7a:f9:67:40:bd:d0:29:94:db: 2d:45:6e:5f:b4:c4:3d:61:59:ce:22:bd:fa:68:a6:80:3d:a3: 10:a3:60:91:fc:88:7b:e6:1a:8a:ac:e3:75:96:d5:c0:aa:e1: 9d:2f:2b:5c:29:20:f7:a4:eb:d7:47:68:f7:47:cf:30:e7:b8: 24:96:c4:fd:61:3a:36:d6:4e:66:26:2c:51:a7:8a:42:04:00: 22:d3:10:36:6a:56:6c:3d:e4:13:90:0d:0b:15:52:14:a4:7c: 3b:8a:40:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsqrpls+qbHs0sWfg6ogyVgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmMzI4MjQ5Y2MzNWVjMjdjYzEwZTE4Yjg4MmM2YzEzODk3 Yzg0OTcwHhcNMjUxMjE3MDUwMDQ0WhcNMjUxMjE4MDUwMDQ0WjAzMTEwLwYDVQQD EyhkNGIzMjZkNTI1MDU0OTdkYzFhYzk0YWM0YjM2NGZmODdmY2E1ZDZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6mH159HoLTJ7dVcirmSZXEKxtbd0 afRYiarKAEI5OYtmYzi8f6tpGsms1YGlaiwMSYymGzI0weLLhZhXIosbRSW3aTwz xPGufOimlA/lSPO8EMCEJs5ZIK95QDMDSfz5Qtq8SgMONMVntyrcjaEzQ9U/qFKo 1sfw1V7ZmpfFpeJt6wLTndbqguxud/btUKoFEcS4ri01SJQxeWrlWhYStUxkmQ3b TZ92YBUTIEUByIna38jF+sh3QHE2IBQRKNFPEvx7gmhL1fccvOFJUAXX0FOowz16 FRZcdtSGpx38VzNSFa3nQRPbCTTYGe60kPZmD9NqaSuTBcgCZmPWhJLTdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNSzJtUlBUl9wayUrEs2T/h/yl1vMB8GA1UdIwQY MBaAFM8ygknMNewnzBDhi4gsbBOJfISXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenpLQ1NjdzE3Q2ZNRU9HTGlDeHNFNGw4aEpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8yN2Q0MDktNzY1OS00NTNlLWIzNmYt Mjk3ZDUyZjBjMjgzLzEvenpLQ1NjdzE3Q2ZNRU9HTGlDeHNFNGw4aEpjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS8yN2Q0MDktNzY1OS00NTNlLWIzNmYtMjk3ZDUyZjBjMjgz LzEvenpLQ1NjdzE3Q2ZNRU9HTGlDeHNFNGw4aEpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAAlSHNux zBqL+wrfFo2EYWoH0WJ763uYdY+AUydGJ26N0fYsOOgnyKM16YDVxbTuZhhCKeTP oryXRdE+0jMyJCeCoyoPuj+KUvC38/6EQV9W4+RXjlP5Who7No2gTEajO5//UglS xpzp8kSsszQL4+g2N8xF913fBNJ9tZohO/us+z1cm6wOVlXMVMa9+JnC8Q0nKbby k1ZBevlnQL3QKZTbLUVuX7TEPWFZziK9+mimgD2jEKNgkfyIe+YaiqzjdZbVwKrh nS8rXCkg96Tr10do90fPMOe4JJbE/WE6NtZOZiYsUaeKQgQAItMQNmpWbD3kE5AN CxVSFKR8O4pAfA== -----END CERTIFICATE-----Generated at Wed Dec 17 13:45:19 2025 by rpki-client