This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/zyddD-Y5mOobfTnlGPsyn3a-0WY.mft File: zyddD-Y5mOobfTnlGPsyn3a-0WY.mft (raw, json) Hash identifier: lMOJfnMpUZbTzIzT+ij5SCv6jCPkXhWlvBpEu4oitZM= Subject key identifier: F9:59:C3:F8:65:EE:2C:C1:62:4A:D3:E5:0F:67:D0:E2:CD:D4:DA:98 Authority key identifier: CF:27:5D:0F:E6:39:98:EA:1B:7D:39:E5:18:FB:32:9F:76:BE:D1:66 Certificate issuer: /CN=cf275d0fe63998ea1b7d39e518fb329f76bed166 Certificate serial: 019B4280728E4EBB6DA300C344A05D60C558 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zyddD-Y5mOobfTnlGPsyn3a-0WY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/zyddD-Y5mOobfTnlGPsyn3a-0WY.mft Manifest number: 0579 Signing time: Sun 21 Dec 2025 20:01:12 +0000 Manifest this update: Sun 21 Dec 2025 20:01:12 +0000 Manifest next update: Mon 22 Dec 2025 20:01:12 +0000 Files and hashes: 1: vk0CZ3RFiVMIPV6fJBbYIndo60g.roa (hash: nhR9r0G3s61c+Tu68ZLIyGOtCmlcHBQEXfCV7pOI8N4=) 2: zyddD-Y5mOobfTnlGPsyn3a-0WY.crl (hash: Tr97tSu3dzVr0CbguhNVavwXrK34KyS1m9w1t5w8pBA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/zyddD-Y5mOobfTnlGPsyn3a-0WY.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/zyddD-Y5mOobfTnlGPsyn3a-0WY.mft rsync://rpki.ripe.net/repository/DEFAULT/zyddD-Y5mOobfTnlGPsyn3a-0WY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 20:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:80:72:8e:4e:bb:6d:a3:00:c3:44:a0:5d:60:c5:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf275d0fe63998ea1b7d39e518fb329f76bed166 Validity Not Before: Dec 21 20:01:12 2025 GMT Not After : Dec 22 20:01:12 2025 GMT Subject: CN=f959c3f865ee2cc1624ad3e50f67d0e2cdd4da98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ff:53:7b:19:55:aa:d5:52:f0:ed:14:42:ef: 07:97:9a:0a:62:e3:df:d9:b9:98:b7:25:9a:c6:c0: 30:71:10:bf:53:2c:71:37:e3:14:e4:98:39:18:0f: ff:00:aa:93:e1:1a:bf:b3:e2:33:78:5a:07:00:5b: 5a:e5:22:b9:01:1e:91:a0:a5:38:31:85:58:7a:06: 97:98:d4:79:4b:a0:3f:9d:fb:41:d3:c9:a5:f5:de: b9:56:70:de:95:ab:14:dd:de:6f:bb:8d:10:2a:f3: 22:95:de:02:9a:72:ae:b3:36:03:9f:02:ee:5a:72: 0d:bc:99:0c:1d:82:2f:61:7b:93:45:5c:51:c1:0d: 63:bb:de:50:0a:de:63:13:df:b3:ff:fb:00:f6:97: 22:54:7c:f5:15:63:71:17:50:f9:c5:a8:c0:39:a2: 42:ec:19:8e:04:93:ef:85:58:ad:61:db:bd:b5:39: cd:1a:db:5b:0e:e8:31:56:1a:15:79:46:29:6c:ce: e3:fb:df:f1:7b:06:e5:36:d5:5c:7b:27:8a:3b:6c: a6:f3:df:23:01:0b:13:33:06:12:73:c2:af:79:75: 0c:50:ba:7b:4c:7f:fb:2c:58:8c:c2:85:e8:c2:cc: 2d:67:45:07:be:82:7c:81:04:b9:ac:d8:a6:61:6f: c6:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:59:C3:F8:65:EE:2C:C1:62:4A:D3:E5:0F:67:D0:E2:CD:D4:DA:98 X509v3 Authority Key Identifier: keyid:CF:27:5D:0F:E6:39:98:EA:1B:7D:39:E5:18:FB:32:9F:76:BE:D1:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zyddD-Y5mOobfTnlGPsyn3a-0WY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/zyddD-Y5mOobfTnlGPsyn3a-0WY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/zyddD-Y5mOobfTnlGPsyn3a-0WY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:23:64:be:2f:3d:ed:f4:ed:70:ac:fb:ff:75:b5:95:f9:f7: 5d:a9:a3:ab:bd:0b:b5:4d:0b:ad:5c:c9:7e:91:95:7b:c8:a1: f0:06:1b:a3:b3:d2:8b:be:d6:1b:76:05:97:ed:22:a7:06:97: 3b:1c:73:98:df:a3:88:e7:dd:9c:3a:e2:3e:8e:20:3d:7e:83: 51:c3:b6:ca:15:c8:61:1b:d2:b2:bd:d0:eb:30:6f:32:22:4d: 50:04:e7:12:5b:a8:7d:72:5f:4f:a7:a9:c4:be:16:26:14:15: cf:9d:da:95:f5:fd:a4:7e:e1:09:40:d6:5c:7a:8f:31:09:ec: b9:a3:db:4b:e5:b3:48:e5:f6:99:d9:fb:f8:76:e2:f8:93:d2: 3c:c2:86:b5:0a:57:45:6a:89:14:b1:70:6d:4a:f1:94:4e:6a: 31:1e:b9:49:ab:7a:2d:b3:d6:d7:99:6a:aa:c9:80:1d:61:64: ee:2c:b1:6a:7c:e4:9a:b5:af:74:89:09:da:d0:d3:02:6d:8e: 13:59:25:a7:01:e5:33:51:5a:40:3d:38:d7:5c:ff:6f:a6:2a: b3:19:d5:38:e5:06:dd:1d:a7:df:8f:6f:8c:fd:4e:50:43:47: 28:b5:43:e1:61:7b:16:f7:e3:b6:0e:4a:df:32:96:0b:a0:36: 55:49:54:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCgHKOTrttowDDRKBdYMVYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmMjc1ZDBmZTYzOTk4ZWExYjdkMzllNTE4ZmIzMjlmNzZi ZWQxNjYwHhcNMjUxMjIxMjAwMTEyWhcNMjUxMjIyMjAwMTEyWjAzMTEwLwYDVQQD EyhmOTU5YzNmODY1ZWUyY2MxNjI0YWQzZTUwZjY3ZDBlMmNkZDRkYTk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/9TexlVqtVS8O0UQu8Hl5oKYuPf 2bmYtyWaxsAwcRC/UyxxN+MU5Jg5GA//AKqT4Rq/s+IzeFoHAFta5SK5AR6RoKU4 MYVYegaXmNR5S6A/nftB08ml9d65VnDelasU3d5vu40QKvMild4CmnKuszYDnwLu WnINvJkMHYIvYXuTRVxRwQ1ju95QCt5jE9+z//sA9pciVHz1FWNxF1D5xajAOaJC 7BmOBJPvhVitYdu9tTnNGttbDugxVhoVeUYpbM7j+9/xewblNtVceyeKO2ym898j AQsTMwYSc8KveXUMULp7TH/7LFiMwoXowswtZ0UHvoJ8gQS5rNimYW/GrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPlZw/hl7izBYkrT5Q9n0OLN1NqYMB8GA1UdIwQY MBaAFM8nXQ/mOZjqG3055Rj7Mp92vtFmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenlkZEQtWTVtT29iZlRubEdQc3luM2EtMFdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9hNzg1MWMtYmI3OC00ZjI5LWExZDkt N2I5OTE4MjRiZDgzLzEvenlkZEQtWTVtT29iZlRubEdQc3luM2EtMFdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9hNzg1MWMtYmI3OC00ZjI5LWExZDktN2I5OTE4MjRiZDgz LzEvenlkZEQtWTVtT29iZlRubEdQc3luM2EtMFdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdCNkvi89 7fTtcKz7/3W1lfn3Xamjq70LtU0LrVzJfpGVe8ih8AYbo7PSi77WG3YFl+0ipwaX OxxzmN+jiOfdnDriPo4gPX6DUcO2yhXIYRvSsr3Q6zBvMiJNUATnEluofXJfT6ep xL4WJhQVz53alfX9pH7hCUDWXHqPMQnsuaPbS+WzSOX2mdn7+Hbi+JPSPMKGtQpX RWqJFLFwbUrxlE5qMR65Sat6LbPW15lqqsmAHWFk7iyxanzkmrWvdIkJ2tDTAm2O E1klpwHlM1FaQD0411z/b6YqsxnVOOUG3R2n349vjP1OUENHKLVD4WF7Fvfjtg5K 3zKWC6A2VUlUnw== -----END CERTIFICATE-----Generated at Mon Dec 22 03:46:48 2025 by rpki-client