This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/773600-838f-414c-ac0c-d87019512716/1/zy_MDEv1TV6ct_obsf4anZRhA5A.mft File: zy_MDEv1TV6ct_obsf4anZRhA5A.mft (raw, json) Hash identifier: Fz89kuk8ZkqiYwe3RuQKpdWelaeKJTbhKC/gCCcfVj0= Subject key identifier: 24:C5:FB:DC:60:EA:E4:66:77:3E:13:92:25:12:84:ED:2E:C9:02:59 Authority key identifier: CF:2F:CC:0C:4B:F5:4D:5E:9C:B7:FA:1B:B1:FE:1A:9D:94:61:03:90 Certificate issuer: /CN=cf2fcc0c4bf54d5e9cb7fa1bb1fe1a9d94610390 Certificate serial: 019B51F35EE111EB0AE6C87871055E1686D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zy_MDEv1TV6ct_obsf4anZRhA5A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/773600-838f-414c-ac0c-d87019512716/1/zy_MDEv1TV6ct_obsf4anZRhA5A.mft Manifest number: 1B Signing time: Wed 24 Dec 2025 20:01:02 +0000 Manifest this update: Wed 24 Dec 2025 20:01:02 +0000 Manifest next update: Thu 25 Dec 2025 20:01:02 +0000 Files and hashes: 1: c4C-s30CLt36AVb_NSs3ZWVTOhg.roa (hash: ltB4d7MLn89isK4ntD6dJU2QKunUcvt6Owh/MdSGgBg=) 2: zy_MDEv1TV6ct_obsf4anZRhA5A.crl (hash: xTnVy5D/ift1naqT1HIkDb6MrTEUW4C4FOzUe5kAHek=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/773600-838f-414c-ac0c-d87019512716/1/zy_MDEv1TV6ct_obsf4anZRhA5A.crl rsync://rpki.ripe.net/repository/DEFAULT/37/773600-838f-414c-ac0c-d87019512716/1/zy_MDEv1TV6ct_obsf4anZRhA5A.mft rsync://rpki.ripe.net/repository/DEFAULT/zy_MDEv1TV6ct_obsf4anZRhA5A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:f3:5e:e1:11:eb:0a:e6:c8:78:71:05:5e:16:86:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf2fcc0c4bf54d5e9cb7fa1bb1fe1a9d94610390 Validity Not Before: Dec 24 20:01:02 2025 GMT Not After : Dec 25 20:01:02 2025 GMT Subject: CN=24c5fbdc60eae466773e1392251284ed2ec90259 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:15:e5:9e:84:bc:66:68:32:7e:49:dd:06:3d: cd:82:09:83:83:84:35:da:ff:cf:fd:bc:e3:2e:70: 6d:1c:ac:b9:5e:e8:3b:33:41:42:57:22:17:70:1b: b2:30:b2:40:46:61:90:43:ab:4f:3b:65:0b:d5:17: ad:19:3a:e0:b6:3f:a0:a7:8e:b1:9f:bc:dc:8b:4d: c4:04:33:ce:76:ef:3b:46:b2:89:48:dc:38:0b:86: 92:96:d6:dd:af:66:b3:f1:10:73:4c:59:fe:fc:e6: bb:26:33:a9:35:e9:8a:2a:b7:73:37:fc:da:ad:5c: 64:28:45:98:92:84:ec:4d:60:b1:8e:47:8c:99:ae: 47:ad:28:74:3e:f6:67:ca:1f:51:ab:b1:ab:a8:67: c4:23:60:52:25:b9:e7:91:15:06:c0:53:13:dc:70: ff:d4:ac:0c:60:4a:26:e8:92:6d:d8:a4:61:96:90: 0c:13:66:62:52:de:da:ef:99:d4:ca:b3:df:1c:da: 79:14:e7:68:84:e3:73:b8:43:2e:4c:e8:f8:01:4b: b8:e5:4e:35:77:04:49:2b:e0:84:0c:f3:89:4e:65: a5:51:1c:4c:08:a5:6b:5b:86:3c:8c:dc:71:d1:ee: f8:27:bb:f9:5f:5c:4a:1e:93:be:ff:ab:3a:7c:d4: aa:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:C5:FB:DC:60:EA:E4:66:77:3E:13:92:25:12:84:ED:2E:C9:02:59 X509v3 Authority Key Identifier: keyid:CF:2F:CC:0C:4B:F5:4D:5E:9C:B7:FA:1B:B1:FE:1A:9D:94:61:03:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zy_MDEv1TV6ct_obsf4anZRhA5A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/773600-838f-414c-ac0c-d87019512716/1/zy_MDEv1TV6ct_obsf4anZRhA5A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/773600-838f-414c-ac0c-d87019512716/1/zy_MDEv1TV6ct_obsf4anZRhA5A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:c7:6a:1d:04:a6:e1:ae:57:a7:d6:a8:a7:a4:55:14:eb:20: c6:f6:3f:52:44:b1:bc:73:e6:0c:59:2b:d5:7f:62:91:0c:04: 00:74:cc:d0:b6:11:62:a1:b7:d8:6d:e0:50:28:d0:54:aa:b9: a4:e0:82:41:cd:ee:82:f7:b7:7c:0f:76:8c:73:dc:fa:c3:4a: 6d:8d:68:f3:b1:52:b8:78:8e:42:73:7e:5d:22:c8:73:65:86: 16:61:7c:85:65:17:55:57:f1:9a:2f:ad:ee:bb:97:6b:f4:08: 1a:91:f7:b6:f5:f3:65:fc:b7:68:1d:0c:65:cb:db:04:f3:72: 7c:2c:81:e6:46:ce:40:1d:5a:1d:c7:ff:2b:59:f1:a3:b1:4b: 0d:84:24:d7:68:78:2b:b0:7e:50:3a:96:b3:43:0e:5f:86:e3: 1d:b9:14:40:27:9c:d5:08:8b:2d:3c:ba:a2:78:4a:7b:3b:36: 71:e8:d3:83:6d:01:eb:47:ae:35:a2:c1:a8:3b:18:ac:ad:59: 8a:cb:90:90:52:08:0c:05:24:8b:fd:84:59:66:4c:79:7a:ac: 66:d6:26:bd:2e:c4:71:6d:68:7e:4a:e0:df:79:79:02:58:a5: a5:e6:bc:0c:73:d7:b0:49:27:0f:b3:b0:22:ca:54:0d:ae:04: b5:43:b8:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtR817hEesK5sh4cQVeFobWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmMmZjYzBjNGJmNTRkNWU5Y2I3ZmExYmIxZmUxYTlkOTQ2 MTAzOTAwHhcNMjUxMjI0MjAwMTAyWhcNMjUxMjI1MjAwMTAyWjAzMTEwLwYDVQQD EygyNGM1ZmJkYzYwZWFlNDY2NzczZTEzOTIyNTEyODRlZDJlYzkwMjU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhRXlnoS8ZmgyfkndBj3NggmDg4Q1 2v/P/bzjLnBtHKy5Xug7M0FCVyIXcBuyMLJARmGQQ6tPO2UL1RetGTrgtj+gp46x n7zci03EBDPOdu87RrKJSNw4C4aSltbdr2az8RBzTFn+/Oa7JjOpNemKKrdzN/za rVxkKEWYkoTsTWCxjkeMma5HrSh0PvZnyh9Rq7GrqGfEI2BSJbnnkRUGwFMT3HD/ 1KwMYEom6JJt2KRhlpAME2ZiUt7a75nUyrPfHNp5FOdohONzuEMuTOj4AUu45U41 dwRJK+CEDPOJTmWlURxMCKVrW4Y8jNxx0e74J7v5X1xKHpO+/6s6fNSqpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCTF+9xg6uRmdz4TkiUShO0uyQJZMB8GA1UdIwQY MBaAFM8vzAxL9U1enLf6G7H+Gp2UYQOQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenlfTURFdjFUVjZjdF9vYnNmNGFuWlJoQTVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy83NzM2MDAtODM4Zi00MTRjLWFjMGMt ZDg3MDE5NTEyNzE2LzEvenlfTURFdjFUVjZjdF9vYnNmNGFuWlJoQTVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy83NzM2MDAtODM4Zi00MTRjLWFjMGMtZDg3MDE5NTEyNzE2 LzEvenlfTURFdjFUVjZjdF9vYnNmNGFuWlJoQTVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAocdqHQSm 4a5Xp9aop6RVFOsgxvY/UkSxvHPmDFkr1X9ikQwEAHTM0LYRYqG32G3gUCjQVKq5 pOCCQc3ugve3fA92jHPc+sNKbY1o87FSuHiOQnN+XSLIc2WGFmF8hWUXVVfxmi+t 7ruXa/QIGpH3tvXzZfy3aB0MZcvbBPNyfCyB5kbOQB1aHcf/K1nxo7FLDYQk12h4 K7B+UDqWs0MOX4bjHbkUQCec1QiLLTy6onhKezs2cejTg20B60euNaLBqDsYrK1Z isuQkFIIDAUki/2EWWZMeXqsZtYmvS7EcW1ofkrg33l5Alilpea8DHPXsEknD7Ow IspUDa4EtUO41g== -----END CERTIFICATE-----Generated at Wed Dec 24 23:14:44 2025 by rpki-client