This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/27d409-7659-453e-b36f-297d52f0c283/1/zzKCScw17CfMEOGLiCxsE4l8hJc.mft File: zzKCScw17CfMEOGLiCxsE4l8hJc.mft (raw, json) Hash identifier: ZvSq0Y5bVZn0mvQsEHbcbvkCt/7TZJrXJNr6Wgv1PJo= Subject key identifier: 8A:73:F9:4E:8D:11:C8:01:4B:94:05:98:75:D8:03:64:99:21:4C:E8 Authority key identifier: CF:32:82:49:CC:35:EC:27:CC:10:E1:8B:88:2C:6C:13:89:7C:84:97 Certificate issuer: /CN=cf328249cc35ec27cc10e18b882c6c13897c8497 Certificate serial: 019AF12CCB1711C794F120650CED7D5A5B8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zzKCScw17CfMEOGLiCxsE4l8hJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/27d409-7659-453e-b36f-297d52f0c283/1/zzKCScw17CfMEOGLiCxsE4l8hJc.mft Manifest number: 0EFA Signing time: Sat 06 Dec 2025 01:00:35 +0000 Manifest this update: Sat 06 Dec 2025 01:00:35 +0000 Manifest next update: Sun 07 Dec 2025 01:00:35 +0000 Files and hashes: 1: zzKCScw17CfMEOGLiCxsE4l8hJc.crl (hash: 9e9BpW2HpxDrH63cdOsrJgUZCYFSFl5aYbukSXSEA0M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/27d409-7659-453e-b36f-297d52f0c283/1/zzKCScw17CfMEOGLiCxsE4l8hJc.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/27d409-7659-453e-b36f-297d52f0c283/1/zzKCScw17CfMEOGLiCxsE4l8hJc.mft rsync://rpki.ripe.net/repository/DEFAULT/zzKCScw17CfMEOGLiCxsE4l8hJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:cb:17:11:c7:94:f1:20:65:0c:ed:7d:5a:5b:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf328249cc35ec27cc10e18b882c6c13897c8497 Validity Not Before: Dec 6 01:00:35 2025 GMT Not After : Dec 7 01:00:35 2025 GMT Subject: CN=8a73f94e8d11c8014b94059875d8036499214ce8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:9a:ef:d6:48:c3:c6:dc:d2:cf:f6:f0:45:b5: 96:e7:5a:28:c1:32:e9:dc:04:16:83:b3:9d:d4:c7: 44:ae:a5:f7:60:f8:a2:05:b1:cd:a9:e1:67:8b:f9: e5:c2:6a:e9:ab:f6:4d:34:bb:16:c4:72:df:b9:ae: 31:af:37:20:cf:e5:c3:af:67:d2:69:45:88:d8:94: 3f:ec:8b:81:13:90:cc:19:fe:f9:3b:fc:31:20:78: 14:99:14:25:9f:2f:94:d2:8b:77:84:f5:c0:0d:bf: df:c5:51:0e:77:23:a4:b0:fd:e9:e5:34:dc:6e:a7: c5:36:ce:b1:50:42:90:62:0b:23:87:f2:8f:05:0e: 8a:61:b7:82:6e:34:e6:73:04:de:94:c6:3c:50:f9: 3d:1f:22:70:4d:a7:85:1c:46:b9:e5:06:f0:1a:b1: 69:94:d5:ea:49:aa:2b:a1:fe:02:d5:8f:9a:56:08: f1:42:f6:26:42:24:74:a3:22:9b:08:a0:ac:62:f7: 57:6a:32:81:b6:43:d8:13:bc:0a:53:af:a9:03:c5: d1:0c:97:8b:59:3f:23:f3:f4:72:f2:cf:e4:ff:2c: 94:8a:83:45:65:c3:bd:51:8e:c4:4d:bb:df:6f:63: 79:39:be:54:74:7c:4b:a2:e5:e1:85:42:b2:6a:fb: ca:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:73:F9:4E:8D:11:C8:01:4B:94:05:98:75:D8:03:64:99:21:4C:E8 X509v3 Authority Key Identifier: keyid:CF:32:82:49:CC:35:EC:27:CC:10:E1:8B:88:2C:6C:13:89:7C:84:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zzKCScw17CfMEOGLiCxsE4l8hJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/27d409-7659-453e-b36f-297d52f0c283/1/zzKCScw17CfMEOGLiCxsE4l8hJc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/27d409-7659-453e-b36f-297d52f0c283/1/zzKCScw17CfMEOGLiCxsE4l8hJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:19:88:99:eb:97:06:cc:7d:4d:df:90:19:12:9b:4f:7d:18: b8:8e:cb:16:03:2e:06:76:93:bb:dd:50:9a:d9:74:ff:b3:01: e2:9d:da:52:de:c1:d5:e1:7f:84:41:0e:9f:6c:fd:d5:c2:37: ed:3c:99:db:52:d7:0b:f2:28:22:17:78:3a:52:c7:1c:bd:64: 6a:45:91:98:5c:80:35:f5:52:0d:0b:ba:a3:4f:35:08:b2:bb: 68:8f:da:cb:f4:0f:4d:7e:2c:d0:16:1e:c5:23:bb:2a:bd:4f: f6:25:a3:18:34:55:ae:c5:9f:ce:63:33:af:8e:5c:8e:1b:8c: 16:cf:22:93:69:d4:a7:78:8b:26:6f:5b:14:31:4d:cc:e1:39: b5:7b:30:36:67:3c:f7:4b:98:74:fd:ba:d8:ca:6c:8b:31:8d: d9:75:2c:1d:c4:57:19:20:09:73:a6:fb:40:aa:2a:ba:0f:61: 88:03:e6:24:8b:35:8b:ae:43:f6:8d:ae:05:df:c8:91:54:dc: 2c:50:f3:54:9f:7f:b6:1b:41:95:76:27:1b:7e:b5:bf:73:70: 65:6b:a6:f3:6e:8d:e3:5a:87:11:0d:8d:49:5e:5b:98:75:ae: 49:9f:3f:1b:ba:a3:07:9b:65:ce:62:6a:fa:59:74:1f:2b:5f: 31:29:82:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLMsXEceU8SBlDO19WluKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmMzI4MjQ5Y2MzNWVjMjdjYzEwZTE4Yjg4MmM2YzEzODk3 Yzg0OTcwHhcNMjUxMjA2MDEwMDM1WhcNMjUxMjA3MDEwMDM1WjAzMTEwLwYDVQQD Eyg4YTczZjk0ZThkMTFjODAxNGI5NDA1OTg3NWQ4MDM2NDk5MjE0Y2U4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5rv1kjDxtzSz/bwRbWW51oowTLp 3AQWg7Od1MdErqX3YPiiBbHNqeFni/nlwmrpq/ZNNLsWxHLfua4xrzcgz+XDr2fS aUWI2JQ/7IuBE5DMGf75O/wxIHgUmRQlny+U0ot3hPXADb/fxVEOdyOksP3p5TTc bqfFNs6xUEKQYgsjh/KPBQ6KYbeCbjTmcwTelMY8UPk9HyJwTaeFHEa55QbwGrFp lNXqSaorof4C1Y+aVgjxQvYmQiR0oyKbCKCsYvdXajKBtkPYE7wKU6+pA8XRDJeL WT8j8/Ry8s/k/yyUioNFZcO9UY7ETbvfb2N5Ob5UdHxLouXhhUKyavvKYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIpz+U6NEcgBS5QFmHXYA2SZIUzoMB8GA1UdIwQY MBaAFM8ygknMNewnzBDhi4gsbBOJfISXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenpLQ1NjdzE3Q2ZNRU9HTGlDeHNFNGw4aEpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8yN2Q0MDktNzY1OS00NTNlLWIzNmYt Mjk3ZDUyZjBjMjgzLzEvenpLQ1NjdzE3Q2ZNRU9HTGlDeHNFNGw4aEpjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS8yN2Q0MDktNzY1OS00NTNlLWIzNmYtMjk3ZDUyZjBjMjgz LzEvenpLQ1NjdzE3Q2ZNRU9HTGlDeHNFNGw4aEpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsxmImeuX Bsx9Td+QGRKbT30YuI7LFgMuBnaTu91Qmtl0/7MB4p3aUt7B1eF/hEEOn2z91cI3 7TyZ21LXC/IoIhd4OlLHHL1kakWRmFyANfVSDQu6o081CLK7aI/ay/QPTX4s0BYe xSO7Kr1P9iWjGDRVrsWfzmMzr45cjhuMFs8ik2nUp3iLJm9bFDFNzOE5tXswNmc8 90uYdP262MpsizGN2XUsHcRXGSAJc6b7QKoqug9hiAPmJIs1i65D9o2uBd/IkVTc LFDzVJ9/thtBlXYnG361v3NwZWum826N41qHEQ2NSV5bmHWuSZ8/G7qjB5tlzmJq +ll0HytfMSmCWQ== -----END CERTIFICATE-----Generated at Sat Dec 6 06:57:02 2025 by rpki-client