This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.mft File: zYa4ziIkgqFPmxNGjOV-mZJoSWE.mft (raw, json) Hash identifier: Zjz4Gypk2jjptnZCa375BJDjmDpk0UUrMAnGZpWttqk= Subject key identifier: 68:B2:7B:72:E5:C5:1E:A5:D9:7D:3B:8E:B1:AF:06:50:95:E8:A3:FA Authority key identifier: CD:86:B8:CE:22:24:82:A1:4F:9B:13:46:8C:E5:7E:99:92:68:49:61 Certificate issuer: /CN=cd86b8ce222482a14f9b13468ce57e9992684961 Certificate serial: 019B75240D37291994CA076721EDDDF8CA01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zYa4ziIkgqFPmxNGjOV-mZJoSWE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.mft Manifest number: 077A Signing time: Wed 31 Dec 2025 16:00:55 +0000 Manifest this update: Wed 31 Dec 2025 16:00:55 +0000 Manifest next update: Thu 01 Jan 2026 16:00:55 +0000 Files and hashes: 1: DQHOKV8IKLhzD_DKbK2yKJLy3qI.roa (hash: PB4sy0lCqmdf8gfZUrxsVqDoVfWeVXqM8PmI2EwyuMw=) 2: zYa4ziIkgqFPmxNGjOV-mZJoSWE.crl (hash: 0NXuqCrsd/UvfPFAJ5GYkHhtNHGZ1rv2gR8LkS23e0A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.mft rsync://rpki.ripe.net/repository/DEFAULT/zYa4ziIkgqFPmxNGjOV-mZJoSWE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 16:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:75:24:0d:37:29:19:94:ca:07:67:21:ed:dd:f8:ca:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd86b8ce222482a14f9b13468ce57e9992684961 Validity Not Before: Dec 31 16:00:55 2025 GMT Not After : Jan 1 16:00:55 2026 GMT Subject: CN=68b27b72e5c51ea5d97d3b8eb1af065095e8a3fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:a0:50:2a:85:e7:a1:12:e7:d7:5e:33:8f:23: 47:20:0e:2a:5f:18:13:64:fa:53:7b:75:b0:18:a8: 73:fd:e0:61:ab:bb:95:5a:bc:85:d4:5c:45:b3:bf: 30:bc:a1:4c:fd:8a:e3:8d:f6:62:94:1d:d5:d8:2a: 76:be:34:cb:33:85:8b:d2:18:fb:61:a9:27:a5:d1: 75:8a:55:9f:ef:37:c2:60:0d:81:cc:ef:48:83:e6: 4c:c3:fe:74:fc:88:56:e4:ae:62:94:fb:28:d5:46: 54:56:60:b7:78:98:06:dd:93:db:96:62:b0:a0:01: 2b:3c:14:69:d0:1b:60:32:0a:3c:fa:9a:b4:d5:11: 4a:ca:68:e6:69:36:f3:c5:6e:2a:7a:bb:1d:32:bd: 4c:68:51:f6:ee:e3:72:e3:87:0c:9c:6f:35:26:04: ed:de:b4:e6:56:52:95:5b:75:92:de:da:bc:36:4c: 26:7a:23:56:64:62:59:58:b1:60:a2:01:b5:b3:be: 0d:45:70:b4:17:f5:84:73:2c:eb:c4:e3:ee:83:2c: 07:e3:d2:11:e5:f6:fe:a2:58:c5:16:6b:e2:35:62: 83:a3:2b:46:19:2c:d0:df:06:0c:f1:e3:c5:ef:da: a9:34:00:82:ec:94:5c:e8:6c:dc:99:ec:07:d5:3f: 45:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:B2:7B:72:E5:C5:1E:A5:D9:7D:3B:8E:B1:AF:06:50:95:E8:A3:FA X509v3 Authority Key Identifier: keyid:CD:86:B8:CE:22:24:82:A1:4F:9B:13:46:8C:E5:7E:99:92:68:49:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zYa4ziIkgqFPmxNGjOV-mZJoSWE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:d2:42:e0:28:61:aa:d2:02:ad:1a:37:14:2f:e0:e0:75:ad: 96:89:da:ec:a7:0b:52:35:0c:54:29:f3:36:f5:4b:2c:56:2c: b2:07:37:c5:ad:e3:64:0f:9b:90:f7:13:21:25:46:1c:e7:12: 77:8b:8b:44:7a:22:b3:cb:52:83:7f:b0:92:6c:3a:21:f1:54: 45:84:d5:19:db:97:f7:8c:e3:32:26:f8:64:02:c4:19:94:ee: 3b:7c:7d:23:b4:8a:c9:06:ae:43:1b:e6:a0:f9:72:6a:d0:4e: 57:1d:9f:b6:31:32:df:09:71:f6:a8:0c:e6:5d:db:84:7c:d6: c6:8e:7c:d6:72:b0:dd:e3:00:73:87:2a:da:35:1d:7b:cb:f7: 30:c4:94:52:55:48:93:31:12:f9:ce:d3:2d:f1:1d:b7:d4:13: d7:46:fd:2f:0a:2a:fd:17:3d:b4:e4:d1:79:6a:a9:30:ae:30: 60:0b:df:6d:02:1b:f2:e4:a9:32:1d:64:58:e2:d8:37:f0:bf: e2:6f:74:b8:e5:f5:91:2a:15:63:35:38:43:a5:ee:0c:54:4a: 60:25:94:c8:d5:0e:80:c8:de:a6:cd:99:da:8b:25:b5:2a:fa: 44:5f:56:07:77:62:1f:c2:0a:f0:40:6e:4c:00:9f:87:0f:e0: 54:bf:a9:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt1JA03KRmUygdnIe3d+MoBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkODZiOGNlMjIyNDgyYTE0ZjliMTM0NjhjZTU3ZTk5OTI2 ODQ5NjEwHhcNMjUxMjMxMTYwMDU1WhcNMjYwMTAxMTYwMDU1WjAzMTEwLwYDVQQD Eyg2OGIyN2I3MmU1YzUxZWE1ZDk3ZDNiOGViMWFmMDY1MDk1ZThhM2ZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7aBQKoXnoRLn114zjyNHIA4qXxgT ZPpTe3WwGKhz/eBhq7uVWryF1FxFs78wvKFM/YrjjfZilB3V2Cp2vjTLM4WL0hj7 YaknpdF1ilWf7zfCYA2BzO9Ig+ZMw/50/IhW5K5ilPso1UZUVmC3eJgG3ZPblmKw oAErPBRp0BtgMgo8+pq01RFKymjmaTbzxW4qersdMr1MaFH27uNy44cMnG81JgTt 3rTmVlKVW3WS3tq8NkwmeiNWZGJZWLFgogG1s74NRXC0F/WEcyzrxOPugywH49IR 5fb+oljFFmviNWKDoytGGSzQ3wYM8ePF79qpNACC7JRc6GzcmewH1T9FNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGiye3LlxR6l2X07jrGvBlCV6KP6MB8GA1UdIwQY MBaAFM2GuM4iJIKhT5sTRozlfpmSaElhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvellhNHppSWtncUZQbXhOR2pPVi1tWkpvU1dFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC82MDgxMTQtYTk3YS00ODc3LTk0Yzct ZGMyZDU1NzUwM2VlLzEvellhNHppSWtncUZQbXhOR2pPVi1tWkpvU1dFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC82MDgxMTQtYTk3YS00ODc3LTk0YzctZGMyZDU1NzUwM2Vl LzEvellhNHppSWtncUZQbXhOR2pPVi1tWkpvU1dFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALNJC4Chh qtICrRo3FC/g4HWtlona7KcLUjUMVCnzNvVLLFYssgc3xa3jZA+bkPcTISVGHOcS d4uLRHois8tSg3+wkmw6IfFURYTVGduX94zjMib4ZALEGZTuO3x9I7SKyQauQxvm oPlyatBOVx2ftjEy3wlx9qgM5l3bhHzWxo581nKw3eMAc4cq2jUde8v3MMSUUlVI kzES+c7TLfEdt9QT10b9Lwoq/Rc9tOTReWqpMK4wYAvfbQIb8uSpMh1kWOLYN/C/ 4m90uOX1kSoVYzU4Q6XuDFRKYCWUyNUOgMjeps2Z2osltSr6RF9WB3diH8IK8EBu TACfhw/gVL+pLg== -----END CERTIFICATE-----Generated at Wed Dec 31 21:06:52 2025 by rpki-client