This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.mft File: zYa4ziIkgqFPmxNGjOV-mZJoSWE.mft (raw, json) Hash identifier: W/6GJh6ObSnu+kWTXaHbnKo8U0hDzzwpoXoizE6gm0w= Subject key identifier: 9A:63:B8:78:E8:29:F9:76:C5:82:C8:C0:02:C4:D6:C7:15:DB:1A:B7 Authority key identifier: CD:86:B8:CE:22:24:82:A1:4F:9B:13:46:8C:E5:7E:99:92:68:49:61 Certificate issuer: /CN=cd86b8ce222482a14f9b13468ce57e9992684961 Certificate serial: 019B3F11A145139EF68970BFC7A59A5844E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zYa4ziIkgqFPmxNGjOV-mZJoSWE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.mft Manifest number: 075E Signing time: Sun 21 Dec 2025 04:01:18 +0000 Manifest this update: Sun 21 Dec 2025 04:01:18 +0000 Manifest next update: Mon 22 Dec 2025 04:01:18 +0000 Files and hashes: 1: DQHOKV8IKLhzD_DKbK2yKJLy3qI.roa (hash: PB4sy0lCqmdf8gfZUrxsVqDoVfWeVXqM8PmI2EwyuMw=) 2: zYa4ziIkgqFPmxNGjOV-mZJoSWE.crl (hash: O4g4PorsWTpRafJg4JpvPKccUlAJgxrlYQ0UIvTofKY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.mft rsync://rpki.ripe.net/repository/DEFAULT/zYa4ziIkgqFPmxNGjOV-mZJoSWE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:11:a1:45:13:9e:f6:89:70:bf:c7:a5:9a:58:44:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd86b8ce222482a14f9b13468ce57e9992684961 Validity Not Before: Dec 21 04:01:18 2025 GMT Not After : Dec 22 04:01:18 2025 GMT Subject: CN=9a63b878e829f976c582c8c002c4d6c715db1ab7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:08:91:36:fa:7f:f0:29:b5:0f:6e:07:c8:2a: ef:58:df:94:34:53:11:78:db:36:cd:65:91:32:83: 6b:a0:6d:3b:a1:64:07:2e:ec:60:7f:4e:89:3f:78: 76:cc:07:35:67:ea:0a:ee:3a:3c:4f:96:7b:52:3a: 7f:68:54:bf:20:7a:29:c3:f1:f4:9e:5f:83:7c:20: fa:15:8c:cd:2e:7f:b3:88:82:60:be:68:1a:dc:95: 54:ba:f9:e3:75:cf:24:75:25:be:5a:e5:a1:35:66: c7:5a:a4:96:ba:c9:cf:44:1c:7c:de:b8:4d:33:a0: 17:e6:de:c5:49:8f:b5:f0:4e:0d:17:0f:0e:54:c9: 82:b3:f8:79:8d:8b:ad:53:a2:49:1d:e8:d7:8d:16: 17:70:13:99:64:35:79:a6:2c:56:75:ba:09:ed:6a: 5a:a8:88:38:89:ad:dd:d6:87:08:bf:5b:70:24:9d: 30:2c:57:49:7c:11:c3:17:19:81:ad:eb:bd:05:9b: f5:f7:8c:a5:64:ee:48:47:9e:58:b0:f8:0e:bf:6b: 6a:ce:7c:c5:bd:1b:c2:71:7c:5e:91:cc:e7:28:62: 5d:d2:77:0b:5f:ec:4a:86:75:e1:b8:28:4b:13:f2: 77:ee:65:d5:da:eb:dd:e5:5a:6a:57:ab:6c:63:c6: 03:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:63:B8:78:E8:29:F9:76:C5:82:C8:C0:02:C4:D6:C7:15:DB:1A:B7 X509v3 Authority Key Identifier: keyid:CD:86:B8:CE:22:24:82:A1:4F:9B:13:46:8C:E5:7E:99:92:68:49:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zYa4ziIkgqFPmxNGjOV-mZJoSWE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:cf:32:90:c8:da:8e:ee:d7:d2:bc:33:d7:f9:5e:52:b9:7c: b6:d6:cd:1c:ae:34:f4:70:1a:ef:52:57:5e:e3:b6:52:fc:cb: bf:64:bf:df:64:88:77:44:05:0c:5f:31:ec:4a:c4:60:62:50: 44:d5:05:98:39:3c:1e:ba:55:08:43:0a:8b:45:7b:58:da:37: 48:db:35:2a:fd:0a:1d:02:e4:ef:50:23:66:07:ed:1d:2f:87: 90:5c:35:67:c7:c8:28:03:36:37:92:e7:82:f9:0f:63:1b:9a: 80:c1:e7:6d:f6:ae:b0:56:ae:e0:89:e9:e3:4b:65:2d:f5:19: be:53:44:13:ba:04:b6:4a:fa:9f:77:05:bf:65:dc:89:43:f0: 45:04:55:7b:b8:8c:6f:c9:2e:8e:82:7b:07:c3:e4:8d:84:d2: 02:f9:b4:33:ee:4d:ee:cc:3a:73:b1:4e:e5:e7:6e:10:d0:f3: f6:d5:07:50:eb:e6:8a:48:93:f1:4c:49:ad:4e:9c:7d:91:84: 45:e6:ad:db:5e:95:f6:3c:d0:32:35:a9:dd:6f:60:3b:9e:ab: 2d:0b:81:c1:53:32:45:75:b9:2f:d9:02:cc:08:f2:fe:f8:75: f4:e1:09:46:2a:25:96:04:ea:31:6b:31:64:da:4c:06:76:1c: 5b:3b:22:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/EaFFE572iXC/x6WaWETmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkODZiOGNlMjIyNDgyYTE0ZjliMTM0NjhjZTU3ZTk5OTI2 ODQ5NjEwHhcNMjUxMjIxMDQwMTE4WhcNMjUxMjIyMDQwMTE4WjAzMTEwLwYDVQQD Eyg5YTYzYjg3OGU4MjlmOTc2YzU4MmM4YzAwMmM0ZDZjNzE1ZGIxYWI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4giRNvp/8Cm1D24HyCrvWN+UNFMR eNs2zWWRMoNroG07oWQHLuxgf06JP3h2zAc1Z+oK7jo8T5Z7Ujp/aFS/IHopw/H0 nl+DfCD6FYzNLn+ziIJgvmga3JVUuvnjdc8kdSW+WuWhNWbHWqSWusnPRBx83rhN M6AX5t7FSY+18E4NFw8OVMmCs/h5jYutU6JJHejXjRYXcBOZZDV5pixWdboJ7Wpa qIg4ia3d1ocIv1twJJ0wLFdJfBHDFxmBreu9BZv194ylZO5IR55YsPgOv2tqznzF vRvCcXxekcznKGJd0ncLX+xKhnXhuChLE/J37mXV2uvd5VpqV6tsY8YDRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJpjuHjoKfl2xYLIwALE1scV2xq3MB8GA1UdIwQY MBaAFM2GuM4iJIKhT5sTRozlfpmSaElhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvellhNHppSWtncUZQbXhOR2pPVi1tWkpvU1dFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC82MDgxMTQtYTk3YS00ODc3LTk0Yzct ZGMyZDU1NzUwM2VlLzEvellhNHppSWtncUZQbXhOR2pPVi1tWkpvU1dFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC82MDgxMTQtYTk3YS00ODc3LTk0YzctZGMyZDU1NzUwM2Vl LzEvellhNHppSWtncUZQbXhOR2pPVi1tWkpvU1dFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXs8ykMja ju7X0rwz1/leUrl8ttbNHK409HAa71JXXuO2UvzLv2S/32SId0QFDF8x7ErEYGJQ RNUFmDk8HrpVCEMKi0V7WNo3SNs1Kv0KHQLk71AjZgftHS+HkFw1Z8fIKAM2N5Ln gvkPYxuagMHnbfausFau4Inp40tlLfUZvlNEE7oEtkr6n3cFv2XciUPwRQRVe7iM b8kujoJ7B8PkjYTSAvm0M+5N7sw6c7FO5eduENDz9tUHUOvmikiT8UxJrU6cfZGE Reat216V9jzQMjWp3W9gO56rLQuBwVMyRXW5L9kCzAjy/vh19OEJRiollgTqMWsx ZNpMBnYcWzsizQ== -----END CERTIFICATE-----Generated at Sun Dec 21 09:46:35 2025 by rpki-client