This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/7206c7-ff26-40ce-be71-231ac6ed9785/1/zzaFkhY6Sa04_60dQZp3UrMz2nc.mft File: zzaFkhY6Sa04_60dQZp3UrMz2nc.mft (raw, json) Hash identifier: O2B2eu1oricO3NjTn4TlJQ0RNGxcpDnGOd8EuYjqi1A= Subject key identifier: A9:CA:09:88:1F:0D:0C:F7:99:48:65:11:DF:F6:21:EE:DD:37:AB:10 Authority key identifier: CF:36:85:92:16:3A:49:AD:38:FF:AD:1D:41:9A:77:52:B3:33:DA:77 Certificate issuer: /CN=cf368592163a49ad38ffad1d419a7752b333da77 Certificate serial: 019AF23F80341AF49ACE87FA1FB764C1EADB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zzaFkhY6Sa04_60dQZp3UrMz2nc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/7206c7-ff26-40ce-be71-231ac6ed9785/1/zzaFkhY6Sa04_60dQZp3UrMz2nc.mft Manifest number: 0A97 Signing time: Sat 06 Dec 2025 06:00:38 +0000 Manifest this update: Sat 06 Dec 2025 06:00:38 +0000 Manifest next update: Sun 07 Dec 2025 06:00:38 +0000 Files and hashes: 1: slxq6aORhvR8ox82bJzLl-kYQrU.roa (hash: ZHj8y1bs7bZjE7NP/f98Eczzt5W05lwyMtCauXhXnlo=) 2: zzaFkhY6Sa04_60dQZp3UrMz2nc.crl (hash: fXI0JhEn5KeP7ue5z5GAa5lQ7QndO3208iQOpFakNU8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/7206c7-ff26-40ce-be71-231ac6ed9785/1/zzaFkhY6Sa04_60dQZp3UrMz2nc.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/7206c7-ff26-40ce-be71-231ac6ed9785/1/zzaFkhY6Sa04_60dQZp3UrMz2nc.mft rsync://rpki.ripe.net/repository/DEFAULT/zzaFkhY6Sa04_60dQZp3UrMz2nc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:80:34:1a:f4:9a:ce:87:fa:1f:b7:64:c1:ea:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf368592163a49ad38ffad1d419a7752b333da77 Validity Not Before: Dec 6 06:00:38 2025 GMT Not After : Dec 7 06:00:38 2025 GMT Subject: CN=a9ca09881f0d0cf799486511dff621eedd37ab10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:a0:6d:fa:b6:20:f9:2b:42:0e:84:29:38:09: cc:2b:99:9e:12:72:55:9d:63:c9:26:a1:bd:31:75: 3d:63:0a:af:ef:25:f3:03:16:5a:2b:e0:ea:47:8e: 44:00:fd:db:8d:89:da:e8:0e:d4:81:4e:9b:de:0e: 09:5b:dd:7b:70:87:bd:cc:54:e6:3d:ad:1c:c6:20: 1a:52:68:f7:62:a8:dd:4e:cc:72:b9:fe:69:8d:64: 6a:2d:e7:cc:70:8b:db:eb:52:82:48:38:ce:a7:9b: c4:44:d2:9e:79:15:c7:01:fe:fd:62:aa:90:0a:a5: ca:e3:b9:dc:cd:98:30:b2:ba:24:01:52:e0:96:fd: 25:90:f5:ae:63:38:3c:ec:e0:ee:37:81:0b:7a:33: 13:46:18:d9:b4:d0:bd:3b:61:7e:41:44:65:23:5b: 7d:c5:84:08:b3:be:fc:d7:1b:39:e7:88:d4:8b:ca: 03:0d:3f:88:0d:dd:fd:b3:bf:a1:51:e8:c6:bd:34: d0:fa:11:db:27:0d:1f:dd:cc:e9:63:de:7f:09:3e: fa:a6:bb:3a:32:2a:bc:69:60:97:2b:f6:10:8d:b9: d0:46:0b:2d:d6:3d:85:5a:b4:f6:cc:d8:52:2d:c0: 3b:fd:c0:11:c8:30:bd:ba:6d:90:bc:b3:8a:6e:29: f0:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:CA:09:88:1F:0D:0C:F7:99:48:65:11:DF:F6:21:EE:DD:37:AB:10 X509v3 Authority Key Identifier: keyid:CF:36:85:92:16:3A:49:AD:38:FF:AD:1D:41:9A:77:52:B3:33:DA:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zzaFkhY6Sa04_60dQZp3UrMz2nc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/7206c7-ff26-40ce-be71-231ac6ed9785/1/zzaFkhY6Sa04_60dQZp3UrMz2nc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/7206c7-ff26-40ce-be71-231ac6ed9785/1/zzaFkhY6Sa04_60dQZp3UrMz2nc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:ec:f5:0b:7d:cf:10:3d:54:33:ea:5a:6c:ba:98:65:1d:12: a4:fc:01:81:4a:8d:21:e0:9d:98:cc:5f:c7:5b:04:0d:52:b9: 89:82:72:bb:68:d0:d3:83:ea:57:14:7a:d8:2f:ba:a3:72:56: d8:76:8b:6a:c6:cb:65:06:16:53:fb:e8:87:8c:6b:79:7b:97: 69:3b:63:91:16:47:ff:2c:00:81:34:bd:81:3e:a1:d4:1f:be: 13:30:63:a6:86:5a:85:74:75:6c:85:5d:e6:40:f0:b5:15:96: bc:0d:97:aa:d1:77:ca:64:4c:65:51:c7:bd:03:3f:16:7b:25: cb:d1:5e:b4:e2:ee:ad:7d:ec:51:4f:2d:7e:17:45:21:ff:ea: c3:b1:e4:af:89:ff:4d:bf:d5:50:0d:ce:5a:23:4a:e1:31:f9: 33:78:62:8b:2c:0d:8b:da:06:df:b9:08:45:9b:2c:e6:aa:f2: ef:91:b9:1b:3a:c0:1c:45:6a:ce:5c:de:12:b3:40:bb:85:5a: 56:34:14:8a:52:28:8e:4a:94:d7:12:b6:a4:c2:a3:2a:8e:69: 4b:94:23:5f:90:f0:69:41:d8:83:cd:be:f1:c9:2b:b4:cd:1c: 30:d4:44:df:b3:ea:cb:f4:0b:89:69:10:f5:eb:db:01:28:ab: d2:90:bf:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP4A0GvSazof6H7dkwerbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmMzY4NTkyMTYzYTQ5YWQzOGZmYWQxZDQxOWE3NzUyYjMz M2RhNzcwHhcNMjUxMjA2MDYwMDM4WhcNMjUxMjA3MDYwMDM4WjAzMTEwLwYDVQQD EyhhOWNhMDk4ODFmMGQwY2Y3OTk0ODY1MTFkZmY2MjFlZWRkMzdhYjEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2aBt+rYg+StCDoQpOAnMK5meEnJV nWPJJqG9MXU9Ywqv7yXzAxZaK+DqR45EAP3bjYna6A7UgU6b3g4JW917cIe9zFTm Pa0cxiAaUmj3YqjdTsxyuf5pjWRqLefMcIvb61KCSDjOp5vERNKeeRXHAf79YqqQ CqXK47nczZgwsrokAVLglv0lkPWuYzg87ODuN4ELejMTRhjZtNC9O2F+QURlI1t9 xYQIs7781xs554jUi8oDDT+IDd39s7+hUejGvTTQ+hHbJw0f3czpY95/CT76prs6 Miq8aWCXK/YQjbnQRgst1j2FWrT2zNhSLcA7/cARyDC9um2QvLOKbinwbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKnKCYgfDQz3mUhlEd/2Ie7dN6sQMB8GA1UdIwQY MBaAFM82hZIWOkmtOP+tHUGad1KzM9p3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenphRmtoWTZTYTA0XzYwZFFacDNVck16Mm5jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS83MjA2YzctZmYyNi00MGNlLWJlNzEt MjMxYWM2ZWQ5Nzg1LzEvenphRmtoWTZTYTA0XzYwZFFacDNVck16Mm5jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS83MjA2YzctZmYyNi00MGNlLWJlNzEtMjMxYWM2ZWQ5Nzg1 LzEvenphRmtoWTZTYTA0XzYwZFFacDNVck16Mm5jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZOz1C33P ED1UM+pabLqYZR0SpPwBgUqNIeCdmMxfx1sEDVK5iYJyu2jQ04PqVxR62C+6o3JW 2HaLasbLZQYWU/voh4xreXuXaTtjkRZH/ywAgTS9gT6h1B++EzBjpoZahXR1bIVd 5kDwtRWWvA2XqtF3ymRMZVHHvQM/Fnsly9FetOLurX3sUU8tfhdFIf/qw7Hkr4n/ Tb/VUA3OWiNK4TH5M3hiiywNi9oG37kIRZss5qry75G5GzrAHEVqzlzeErNAu4Va VjQUilIojkqU1xK2pMKjKo5pS5QjX5DwaUHYg82+8ckrtM0cMNRE37Pqy/QLiWkQ 9evbASir0pC/7Q== -----END CERTIFICATE-----Generated at Sat Dec 6 12:05:32 2025 by rpki-client