This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.mft File: zYa4ziIkgqFPmxNGjOV-mZJoSWE.mft (raw, json) Hash identifier: +JHXJB18ofWLQwCRx5b587B46EILFE0AiAd2GcZyEqQ= Subject key identifier: 71:1A:2B:CC:C6:71:EE:0C:B8:AB:B5:20:B9:D8:28:03:CA:88:CE:2F Authority key identifier: CD:86:B8:CE:22:24:82:A1:4F:9B:13:46:8C:E5:7E:99:92:68:49:61 Certificate issuer: /CN=cd86b8ce222482a14f9b13468ce57e9992684961 Certificate serial: 019B679F81F4D3A53C164896FA17C7F2F323 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zYa4ziIkgqFPmxNGjOV-mZJoSWE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.mft Manifest number: 0773 Signing time: Mon 29 Dec 2025 01:01:05 +0000 Manifest this update: Mon 29 Dec 2025 01:01:05 +0000 Manifest next update: Tue 30 Dec 2025 01:01:05 +0000 Files and hashes: 1: DQHOKV8IKLhzD_DKbK2yKJLy3qI.roa (hash: PB4sy0lCqmdf8gfZUrxsVqDoVfWeVXqM8PmI2EwyuMw=) 2: zYa4ziIkgqFPmxNGjOV-mZJoSWE.crl (hash: eekIjQX5at7t90vk22d+Hr2ThP1sxDAN4rmy6oTYNnY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.mft rsync://rpki.ripe.net/repository/DEFAULT/zYa4ziIkgqFPmxNGjOV-mZJoSWE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 20:59:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:67:9f:81:f4:d3:a5:3c:16:48:96:fa:17:c7:f2:f3:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd86b8ce222482a14f9b13468ce57e9992684961 Validity Not Before: Dec 29 01:01:05 2025 GMT Not After : Dec 30 01:01:05 2025 GMT Subject: CN=711a2bccc671ee0cb8abb520b9d82803ca88ce2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:2c:6a:f8:32:b9:30:c0:c7:e2:28:40:36:0b: 59:84:32:b6:b3:ad:ca:39:b2:77:ea:df:07:eb:c8: 96:73:bf:12:ff:6b:00:d5:b8:cf:e6:e6:04:59:61: 22:fa:e6:bf:84:6f:c7:db:f9:df:eb:26:98:a4:9a: 42:29:aa:f3:ee:72:33:43:88:a1:fb:f4:af:b2:ae: 5e:d5:75:b4:0d:93:65:0a:a0:b1:07:e2:eb:88:bb: f6:f2:b2:e0:ea:25:9c:fe:e7:69:56:35:29:cc:f3: 5e:b0:0b:10:46:6b:9e:14:03:94:d3:8d:af:b0:ef: 99:fc:27:f8:ae:60:80:50:fa:a6:b9:2b:23:f6:f0: f4:f6:e0:08:72:8e:f1:ac:9c:41:cd:71:d3:1a:34: 52:72:eb:61:a3:e7:ad:b5:ae:b5:ef:2c:52:60:43: 68:b8:af:0f:9f:eb:c8:41:7e:74:a9:cb:6e:3f:cf: 1c:21:d7:1f:43:e4:c3:63:c7:fc:dc:dd:6a:2b:fa: a9:c5:ea:c8:ad:c6:05:89:38:8d:9f:a1:94:46:a5: 3e:0b:8d:28:27:38:75:0d:10:dd:1f:a8:16:91:54: a4:77:41:4f:71:f4:4f:35:2c:b8:6b:b0:02:de:0e: 56:31:19:ff:5e:2c:f1:c0:08:57:b9:7c:f3:c8:c2: d3:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:1A:2B:CC:C6:71:EE:0C:B8:AB:B5:20:B9:D8:28:03:CA:88:CE:2F X509v3 Authority Key Identifier: keyid:CD:86:B8:CE:22:24:82:A1:4F:9B:13:46:8C:E5:7E:99:92:68:49:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zYa4ziIkgqFPmxNGjOV-mZJoSWE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:bf:8f:49:c6:53:93:0e:e8:8f:c8:a9:a2:15:cc:bc:b3:45: aa:b9:f6:0b:a7:44:be:60:f1:60:b2:ef:18:d0:f5:a7:ec:48: 0c:ae:df:fd:4d:3d:9d:12:d8:e2:69:a0:e4:1a:1b:92:0f:6d: 46:fb:92:ff:f6:a6:a7:1e:04:01:88:8a:5f:0e:c7:e1:28:6e: 65:64:32:30:51:fd:5e:11:18:41:46:a8:ac:e3:fa:6d:8f:87: 7e:d5:aa:18:10:97:09:c2:e3:2f:6a:e0:9e:f4:34:a1:6d:09: d0:c3:04:af:b6:39:21:46:5a:57:b9:82:2a:16:16:0a:d2:06: 8a:bb:0f:d3:2d:0c:9a:1f:b0:4c:2e:83:af:51:40:5b:59:f7: 45:5c:fa:be:48:ea:88:76:4c:5f:74:c7:81:33:7d:c2:81:ed: 4c:7e:99:88:b6:90:e1:6a:11:f3:19:3b:3a:3c:5a:12:5d:49: 5a:43:cc:38:63:2f:70:ad:90:d7:8f:4e:03:5d:0e:00:1a:c6: d4:fb:cd:40:e2:78:d4:b4:84:bf:a0:7b:d3:74:45:a0:c5:98: df:47:84:59:98:ce:6e:ab:5f:af:94:86:c6:00:8c:b9:1b:83: 47:d7:39:10:fd:ed:09:5b:bd:bb:bd:72:c3:d2:87:5d:a5:d1: 4c:b1:1d:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtnn4H006U8FkiW+hfH8vMjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkODZiOGNlMjIyNDgyYTE0ZjliMTM0NjhjZTU3ZTk5OTI2 ODQ5NjEwHhcNMjUxMjI5MDEwMTA1WhcNMjUxMjMwMDEwMTA1WjAzMTEwLwYDVQQD Eyg3MTFhMmJjY2M2NzFlZTBjYjhhYmI1MjBiOWQ4MjgwM2NhODhjZTJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ixq+DK5MMDH4ihANgtZhDK2s63K ObJ36t8H68iWc78S/2sA1bjP5uYEWWEi+ua/hG/H2/nf6yaYpJpCKarz7nIzQ4ih +/Svsq5e1XW0DZNlCqCxB+LriLv28rLg6iWc/udpVjUpzPNesAsQRmueFAOU042v sO+Z/Cf4rmCAUPqmuSsj9vD09uAIco7xrJxBzXHTGjRScutho+etta617yxSYENo uK8Pn+vIQX50qctuP88cIdcfQ+TDY8f83N1qK/qpxerIrcYFiTiNn6GURqU+C40o Jzh1DRDdH6gWkVSkd0FPcfRPNSy4a7AC3g5WMRn/XizxwAhXuXzzyMLTYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHEaK8zGce4MuKu1ILnYKAPKiM4vMB8GA1UdIwQY MBaAFM2GuM4iJIKhT5sTRozlfpmSaElhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvellhNHppSWtncUZQbXhOR2pPVi1tWkpvU1dFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC82MDgxMTQtYTk3YS00ODc3LTk0Yzct ZGMyZDU1NzUwM2VlLzEvellhNHppSWtncUZQbXhOR2pPVi1tWkpvU1dFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC82MDgxMTQtYTk3YS00ODc3LTk0YzctZGMyZDU1NzUwM2Vl LzEvellhNHppSWtncUZQbXhOR2pPVi1tWkpvU1dFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd7+PScZT kw7oj8ipohXMvLNFqrn2C6dEvmDxYLLvGND1p+xIDK7f/U09nRLY4mmg5Bobkg9t RvuS//ampx4EAYiKXw7H4ShuZWQyMFH9XhEYQUaorOP6bY+HftWqGBCXCcLjL2rg nvQ0oW0J0MMEr7Y5IUZaV7mCKhYWCtIGirsP0y0Mmh+wTC6Dr1FAW1n3RVz6vkjq iHZMX3THgTN9woHtTH6ZiLaQ4WoR8xk7OjxaEl1JWkPMOGMvcK2Q149OA10OABrG 1PvNQOJ41LSEv6B703RFoMWY30eEWZjObqtfr5SGxgCMuRuDR9c5EP3tCVu9u71y w9KHXaXRTLEd5A== -----END CERTIFICATE-----Generated at Mon Dec 29 03:29:42 2025 by rpki-client