This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.mft File: zfaOwSf7MsZ5IYr8duG26qWVIbs.mft (raw, json) Hash identifier: fZZAZDlpE0ywbvqP/adipg7CuKtcvtezDZOMX6ySOBE= Subject key identifier: 23:60:DB:2D:17:13:EA:80:F7:17:69:1C:97:BE:BB:CF:40:DD:00:80 Authority key identifier: CD:F6:8E:C1:27:FB:32:C6:79:21:8A:FC:76:E1:B6:EA:A5:95:21:BB Certificate issuer: /CN=cdf68ec127fb32c679218afc76e1b6eaa59521bb Certificate serial: 019AF12CD8C7B1031CEF3D3A78F953BA72A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfaOwSf7MsZ5IYr8duG26qWVIbs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 01:00:39 +0000 Manifest this update: Sat 06 Dec 2025 01:00:39 +0000 Manifest next update: Sun 07 Dec 2025 01:00:39 +0000 Files and hashes: 1: J0wD1VHXSK8IW6oG7-DG_smgYpA.roa (hash: CViIeXhdVqcAItp5448I2Btx/FMsFejPzyYEyeUsBBw=) 2: zfaOwSf7MsZ5IYr8duG26qWVIbs.crl (hash: yimgt7sugx4KUZ+G0GijBafrRY+sr4FsrbjpsJBEkhs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.mft rsync://rpki.ripe.net/repository/DEFAULT/zfaOwSf7MsZ5IYr8duG26qWVIbs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:d8:c7:b1:03:1c:ef:3d:3a:78:f9:53:ba:72:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdf68ec127fb32c679218afc76e1b6eaa59521bb Validity Not Before: Dec 6 01:00:39 2025 GMT Not After : Dec 7 01:00:39 2025 GMT Subject: CN=2360db2d1713ea80f717691c97bebbcf40dd0080 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:65:7b:8c:2d:15:bd:53:a8:d9:7f:f0:6f:af: aa:2b:41:16:bf:4c:15:93:a7:5b:00:91:60:df:c2: 63:a0:49:58:b9:ee:09:c0:98:56:24:c2:09:14:6f: f0:1e:34:67:fe:24:5f:23:f3:48:a5:3b:d7:ee:cd: b9:5b:45:ef:94:16:91:59:de:46:4c:c1:56:71:ce: 34:43:3b:e0:4d:97:66:f7:c2:98:03:8d:a5:03:f6: 97:62:73:6a:8b:0a:9b:1d:34:7f:ae:af:4b:c7:a7: ba:fb:c9:f5:be:79:02:b8:c1:9b:36:64:e5:dd:07: 87:f0:60:3c:9b:2e:46:97:58:5a:15:5b:3d:5c:48: 4c:d4:50:b9:9e:71:d5:95:e6:1d:23:f0:a2:68:e0: 23:1b:1f:02:a3:bc:09:31:64:5d:9f:b9:9f:2e:7d: bc:c5:37:39:06:be:94:37:97:6d:51:fa:cd:1f:8a: 82:67:27:d1:08:68:a7:f3:65:35:16:20:e2:4b:02: 17:d5:df:7c:94:79:25:82:fc:36:40:41:93:b1:fc: 53:2b:d8:d5:7e:5f:04:f5:a9:b9:f8:6b:26:cf:9e: e3:34:e0:28:67:49:70:6c:b2:8f:dd:28:ca:89:90: 33:74:2b:b9:bd:be:eb:73:c5:7a:6c:94:59:15:9c: 0b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:60:DB:2D:17:13:EA:80:F7:17:69:1C:97:BE:BB:CF:40:DD:00:80 X509v3 Authority Key Identifier: keyid:CD:F6:8E:C1:27:FB:32:C6:79:21:8A:FC:76:E1:B6:EA:A5:95:21:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfaOwSf7MsZ5IYr8duG26qWVIbs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:fd:9b:7f:92:3c:ae:21:0b:16:c4:2e:9b:46:2c:cf:cd:8b: 37:ab:62:b9:51:61:14:cd:6d:49:2f:fc:13:ef:74:49:99:2b: 2b:75:ad:df:77:82:8a:8f:27:35:47:75:13:9d:7f:91:83:01: 68:a4:71:27:24:2c:e3:f6:e5:04:4d:cd:4d:e0:51:55:61:23: 63:04:f2:ee:f9:35:a4:c6:48:0a:dc:53:cf:65:1c:54:b6:00: c3:c2:a3:f1:aa:97:62:76:9c:49:77:d8:64:3f:a2:a2:eb:8c: 84:26:b8:67:07:48:28:f8:5c:ea:1f:4c:da:b6:79:cc:d0:d7: f1:17:ec:b9:2d:27:3a:03:63:f2:fe:25:69:0d:87:b3:37:ac: d2:37:b6:09:2a:f0:74:c5:27:31:fe:1c:29:df:db:93:1f:1e: 09:ae:11:e8:5b:da:28:48:92:40:20:68:16:5f:cb:14:02:27: c5:5b:a8:67:e3:dd:1f:2c:10:86:08:76:95:b8:69:25:03:2d: 03:ab:ea:53:28:c4:02:10:8b:59:59:ac:03:89:ca:fe:7e:22: d5:49:af:e5:7a:67:ba:ac:18:13:b0:06:3e:c8:c2:7e:1d:c0: d7:79:28:39:6a:25:7c:c8:2a:0d:fd:8f:9f:f3:d5:19:f9:ea: 60:5e:c7:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLNjHsQMc7z06ePlTunKhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkZjY4ZWMxMjdmYjMyYzY3OTIxOGFmYzc2ZTFiNmVhYTU5 NTIxYmIwHhcNMjUxMjA2MDEwMDM5WhcNMjUxMjA3MDEwMDM5WjAzMTEwLwYDVQQD EygyMzYwZGIyZDE3MTNlYTgwZjcxNzY5MWM5N2JlYmJjZjQwZGQwMDgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWV7jC0VvVOo2X/wb6+qK0EWv0wV k6dbAJFg38JjoElYue4JwJhWJMIJFG/wHjRn/iRfI/NIpTvX7s25W0XvlBaRWd5G TMFWcc40QzvgTZdm98KYA42lA/aXYnNqiwqbHTR/rq9Lx6e6+8n1vnkCuMGbNmTl 3QeH8GA8my5Gl1haFVs9XEhM1FC5nnHVleYdI/CiaOAjGx8Co7wJMWRdn7mfLn28 xTc5Br6UN5dtUfrNH4qCZyfRCGin82U1FiDiSwIX1d98lHklgvw2QEGTsfxTK9jV fl8E9am5+Gsmz57jNOAoZ0lwbLKP3SjKiZAzdCu5vb7rc8V6bJRZFZwLTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCNg2y0XE+qA9xdpHJe+u89A3QCAMB8GA1UdIwQY MBaAFM32jsEn+zLGeSGK/HbhtuqllSG7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemZhT3dTZjdNc1o1SVlyOGR1RzI2cVdWSWJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8wODM3N2YtZjIzMi00NGIwLWEzYjUt OTgyNDZhNGNiNmY4LzEvemZhT3dTZjdNc1o1SVlyOGR1RzI2cVdWSWJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS8wODM3N2YtZjIzMi00NGIwLWEzYjUtOTgyNDZhNGNiNmY4 LzEvemZhT3dTZjdNc1o1SVlyOGR1RzI2cVdWSWJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOv2bf5I8 riELFsQum0Ysz82LN6tiuVFhFM1tSS/8E+90SZkrK3Wt33eCio8nNUd1E51/kYMB aKRxJyQs4/blBE3NTeBRVWEjYwTy7vk1pMZICtxTz2UcVLYAw8Kj8aqXYnacSXfY ZD+iouuMhCa4ZwdIKPhc6h9M2rZ5zNDX8RfsuS0nOgNj8v4laQ2Hszes0je2CSrw dMUnMf4cKd/bkx8eCa4R6FvaKEiSQCBoFl/LFAInxVuoZ+PdHywQhgh2lbhpJQMt A6vqUyjEAhCLWVmsA4nK/n4i1Umv5XpnuqwYE7AGPsjCfh3A13koOWolfMgqDf2P n/PVGfnqYF7H7g== -----END CERTIFICATE-----Generated at Sat Dec 6 09:21:47 2025 by rpki-client