This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft File: ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft (raw, json) Hash identifier: z3ry7CwoUBiSARtL7Szba1zj5w3M9jXJtyhLOAqIdA8= Subject key identifier: 98:ED:52:46:DC:12:C9:96:0C:04:79:B6:73:C0:33:02:04:BE:1A:69 Authority key identifier: 65:83:D3:22:EF:24:C8:71:98:B7:65:EA:1D:1C:42:C2:83:A7:F8:F6 Certificate issuer: /CN=6583d322ef24c87198b765ea1d1c42c283a7f8f6 Certificate serial: 019B5D89B78B38EF0E7C913C4F3A5ABF8FB0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft Manifest number: 1101 Signing time: Sat 27 Dec 2025 02:01:05 +0000 Manifest this update: Sat 27 Dec 2025 02:01:05 +0000 Manifest next update: Sun 28 Dec 2025 02:01:05 +0000 Files and hashes: 1: DkGvgDnbdtEHDMx7b64dzBjhPco.roa (hash: 8mB0OA1c8Mmrq7iJrmaJaIVGUwLhqVKrizBW/uXLsCE=) 2: ZYPTIu8kyHGYt2XqHRxCwoOn-PY.crl (hash: FdEZCZfJS8YXE6hzIIIZGkZ/N8VYYHdXPRxle/kzbh0=) 3: ZiWYCsD1Dry724z5OmJJ8Oawr6w.roa (hash: pA+krdDNaZYU7n+P4r9c22BIzRTJGvLkmVz3LgTk2aU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.crl rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft rsync://rpki.ripe.net/repository/DEFAULT/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5d:89:b7:8b:38:ef:0e:7c:91:3c:4f:3a:5a:bf:8f:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6583d322ef24c87198b765ea1d1c42c283a7f8f6 Validity Not Before: Dec 27 02:01:05 2025 GMT Not After : Dec 28 02:01:05 2025 GMT Subject: CN=98ed5246dc12c9960c0479b673c0330204be1a69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:5b:f1:ee:97:8b:51:9d:59:cc:71:b5:09:b3: ff:c4:4d:82:c6:37:f1:51:11:07:82:e7:70:71:63: 00:23:b7:ec:fd:86:2e:76:7b:fd:1a:c0:de:35:16: 11:2f:60:1a:20:ff:5b:06:a2:53:7f:d1:80:83:c6: c3:23:c2:d0:d0:b2:81:9f:d6:95:72:58:d2:19:87: f7:2e:06:7f:5b:bc:b7:54:ee:09:65:78:fd:28:23: a1:ba:27:e5:dd:cb:6f:c4:09:12:ea:47:68:12:96: 3f:14:b2:e8:e1:82:9b:19:71:47:eb:7d:fe:53:9d: 50:ba:52:87:66:29:9e:7d:d5:4b:29:60:78:9c:a0: e3:0d:c9:8e:7e:ba:1a:41:ee:c5:e0:27:2b:2a:d1: c2:4d:22:a6:bc:ac:81:ed:b9:02:40:ee:cf:45:59: 73:59:77:1c:f3:e1:b8:10:7a:16:dd:bc:86:07:cf: 07:d7:2a:a2:19:d7:8c:cb:f0:cd:5d:be:00:0b:20: 63:34:e8:82:81:89:70:bc:5b:77:f6:4a:a9:80:b1: 64:7d:ad:d3:84:32:6b:5d:37:f8:98:26:40:a1:d3: 13:75:9c:d7:95:29:ea:98:38:c6:33:07:42:7a:74: 13:99:78:a6:18:e1:57:11:48:3f:f5:65:bc:bf:b9: fd:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:ED:52:46:DC:12:C9:96:0C:04:79:B6:73:C0:33:02:04:BE:1A:69 X509v3 Authority Key Identifier: keyid:65:83:D3:22:EF:24:C8:71:98:B7:65:EA:1D:1C:42:C2:83:A7:F8:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:52:25:bc:87:e5:38:c7:8f:05:28:fb:1a:07:93:b8:33:ec: e1:47:ed:05:6f:52:b0:97:bb:09:55:5a:34:5a:26:04:8d:e5: f9:44:39:54:c8:e8:a3:a0:8e:b1:c9:de:8e:96:7a:25:0c:89: df:9f:d3:fb:17:e2:cc:3f:b0:67:6d:80:1c:23:ce:94:78:0f: 54:30:c5:f8:2e:09:61:18:20:f9:f5:29:fc:f5:31:c6:5d:50: 6c:14:9f:cd:31:a9:08:40:f9:d1:df:95:da:56:da:4e:65:11: d9:39:5c:3b:cd:52:f4:3c:ef:e9:4b:1c:03:75:fd:16:04:74: 1e:a9:46:53:9e:af:a7:e1:21:9e:9c:10:93:ec:0c:c0:80:f0: 53:94:dd:f4:91:17:33:bd:00:5b:31:17:68:99:10:e0:ad:94: bb:45:1a:ec:b2:db:ae:35:d4:fe:ea:f7:fd:00:e6:90:56:77: 22:f7:d3:7d:a1:43:eb:a2:b6:88:b5:97:f2:9b:8f:ff:3e:56: 37:2a:51:be:c1:bf:33:63:fc:16:18:76:e2:04:34:61:bd:25: b9:08:c3:e2:8b:9d:83:ad:25:7c:f6:86:78:e8:14:ec:ac:56: 0f:df:9e:19:77:9c:ce:b5:e3:1c:e4:b4:56:94:94:ae:41:e4: 59:4a:a0:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtdibeLOO8OfJE8Tzpav4+wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1ODNkMzIyZWYyNGM4NzE5OGI3NjVlYTFkMWM0MmMyODNh N2Y4ZjYwHhcNMjUxMjI3MDIwMTA1WhcNMjUxMjI4MDIwMTA1WjAzMTEwLwYDVQQD Eyg5OGVkNTI0NmRjMTJjOTk2MGMwNDc5YjY3M2MwMzMwMjA0YmUxYTY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Vvx7peLUZ1ZzHG1CbP/xE2Cxjfx UREHgudwcWMAI7fs/YYudnv9GsDeNRYRL2AaIP9bBqJTf9GAg8bDI8LQ0LKBn9aV cljSGYf3LgZ/W7y3VO4JZXj9KCOhuifl3ctvxAkS6kdoEpY/FLLo4YKbGXFH633+ U51QulKHZimefdVLKWB4nKDjDcmOfroaQe7F4CcrKtHCTSKmvKyB7bkCQO7PRVlz WXcc8+G4EHoW3byGB88H1yqiGdeMy/DNXb4ACyBjNOiCgYlwvFt39kqpgLFkfa3T hDJrXTf4mCZAodMTdZzXlSnqmDjGMwdCenQTmXimGOFXEUg/9WW8v7n9yQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJjtUkbcEsmWDAR5tnPAMwIEvhppMB8GA1UdIwQY MBaAFGWD0yLvJMhxmLdl6h0cQsKDp/j2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWllQVEl1OGt5SEdZdDJYcUhSeEN3b09uLVBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9mMDk3MWEtODg5MS00YjUzLTk0NGMt NWJlOWUxMTdkYmRhLzEvWllQVEl1OGt5SEdZdDJYcUhSeEN3b09uLVBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni9mMDk3MWEtODg5MS00YjUzLTk0NGMtNWJlOWUxMTdkYmRh LzEvWllQVEl1OGt5SEdZdDJYcUhSeEN3b09uLVBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASlIlvIfl OMePBSj7GgeTuDPs4UftBW9SsJe7CVVaNFomBI3l+UQ5VMjoo6COscnejpZ6JQyJ 35/T+xfizD+wZ22AHCPOlHgPVDDF+C4JYRgg+fUp/PUxxl1QbBSfzTGpCED50d+V 2lbaTmUR2TlcO81S9Dzv6UscA3X9FgR0HqlGU56vp+EhnpwQk+wMwIDwU5Td9JEX M70AWzEXaJkQ4K2Uu0Ua7LLbrjXU/ur3/QDmkFZ3IvfTfaFD66K2iLWX8puP/z5W NypRvsG/M2P8Fhh24gQ0Yb0luQjD4oudg60lfPaGeOgU7KxWD9+eGXeczrXjHOS0 VpSUrkHkWUqgCA== -----END CERTIFICATE-----Generated at Sat Dec 27 06:36:27 2025 by rpki-client