This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.mft File: zybJGvCrJmijYBstlX3EzgAtWYY.mft (raw, json) Hash identifier: PUZLaNYuJUzlw8Kbnpst/lTGqK4BmRLYOW6AbAXyJLw= Subject key identifier: EF:87:DB:D8:CC:1F:3F:5C:F6:0A:F9:56:17:74:E7:15:D7:8C:A3:2D Authority key identifier: CF:26:C9:1A:F0:AB:26:68:A3:60:1B:2D:95:7D:C4:CE:00:2D:59:86 Certificate issuer: /CN=cf26c91af0ab2668a3601b2d957dc4ce002d5986 Certificate serial: 019B503C510E9FD0994522BB650091B62008 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zybJGvCrJmijYBstlX3EzgAtWYY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.mft Manifest number: 1796 Signing time: Wed 24 Dec 2025 12:01:28 +0000 Manifest this update: Wed 24 Dec 2025 12:01:28 +0000 Manifest next update: Thu 25 Dec 2025 12:01:28 +0000 Files and hashes: 1: JauXkuBrJ-Jj9T7iuekamPiA2KM.roa (hash: +JxWUzvZHawG/TTDHvvjcR4tNCgM0dBRjS+5hf64dGM=) 2: zybJGvCrJmijYBstlX3EzgAtWYY.crl (hash: 5KfM9nNbo2QMJaSGmykk8MDQqcz/1hnNijIUTxr39tY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.mft rsync://rpki.ripe.net/repository/DEFAULT/zybJGvCrJmijYBstlX3EzgAtWYY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:3c:51:0e:9f:d0:99:45:22:bb:65:00:91:b6:20:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf26c91af0ab2668a3601b2d957dc4ce002d5986 Validity Not Before: Dec 24 12:01:28 2025 GMT Not After : Dec 25 12:01:28 2025 GMT Subject: CN=ef87dbd8cc1f3f5cf60af9561774e715d78ca32d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:6f:6f:2c:a0:15:f9:94:9e:6e:0f:db:f8:00: d2:36:8a:fe:39:f0:a4:ba:c3:0b:f3:33:f6:b4:df: a2:e6:02:bf:40:02:b8:4f:94:2c:2d:b1:47:17:1a: 45:16:8c:6e:44:85:7f:12:db:41:d3:b6:7a:5f:32: 45:3d:c2:57:6d:c3:81:5f:a3:fd:6e:f6:9f:fc:d5: 6a:20:c9:1c:1e:fa:b0:bc:cc:e4:e0:a1:cd:d6:9c: 5a:83:3a:4c:3c:89:4e:cb:3c:63:ad:53:6f:03:a5: 2d:99:56:73:16:39:c9:f8:95:d9:da:2b:79:cd:58: b1:cd:d8:51:a0:96:e8:cb:42:5f:2c:68:86:34:d7: 7e:23:2c:4c:d4:4d:35:f1:73:fe:0e:6a:1d:53:6f: 11:15:52:0c:51:c0:8f:0f:93:5a:aa:2d:c1:54:d6: 99:15:8d:89:46:c1:8a:ab:1d:17:53:48:4d:0b:c9: 7e:89:14:b6:84:55:4b:37:ec:85:e6:cd:a3:43:ac: 16:19:14:77:d6:7c:b0:0f:9f:ef:d9:88:d3:4e:12: 62:74:d7:66:c5:d7:2e:0a:69:b1:9c:f4:10:fe:a4: 16:a4:6b:c4:9c:7a:b5:15:54:1b:d5:99:52:72:0c: 81:df:94:d5:fb:67:79:6e:a8:18:c7:66:5e:4f:fa: 04:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:87:DB:D8:CC:1F:3F:5C:F6:0A:F9:56:17:74:E7:15:D7:8C:A3:2D X509v3 Authority Key Identifier: keyid:CF:26:C9:1A:F0:AB:26:68:A3:60:1B:2D:95:7D:C4:CE:00:2D:59:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zybJGvCrJmijYBstlX3EzgAtWYY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:66:ca:f0:cb:69:17:4a:47:fc:98:df:85:05:f9:1a:a8:78: 68:63:d1:f1:3a:cb:c3:6c:f5:c3:57:82:ff:c9:55:15:db:f0: 69:c9:c0:61:5d:df:3c:db:84:b8:bc:c6:5b:41:35:52:83:15: 65:7d:6d:69:45:ad:8d:a5:6e:63:0b:e9:85:54:df:9d:ce:70: 7c:5f:96:32:96:88:4e:a1:3c:5f:5a:03:f6:b5:90:34:ac:a7: ec:8e:62:03:43:18:61:ae:71:67:17:31:39:19:2a:5f:cd:cb: b0:51:0f:fa:54:7f:41:e2:0c:35:95:5c:c0:8f:77:bf:00:c7: 8f:66:c1:4d:e4:f6:f8:58:f8:ac:65:00:5f:c3:24:c6:15:1a: f2:de:78:9b:6f:6d:63:20:24:5e:30:a7:22:2a:6d:a0:89:fd: 61:5a:3b:a3:db:40:01:bc:16:9c:ef:d4:5a:ed:1a:3a:ca:d5: 51:c5:14:51:f5:67:f9:07:0a:a8:34:3a:cf:a5:4c:a0:59:81: 15:bc:b1:cc:b3:1b:44:93:d4:50:25:99:95:b6:28:38:48:c5: 00:16:4f:26:cf:78:a5:9e:fa:2a:05:22:f1:d7:5a:23:9b:a3: 11:d1:de:42:00:b6:bf:a7:ce:e1:53:34:30:f0:ec:69:b8:3b: be:4b:d0:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQPFEOn9CZRSK7ZQCRtiAIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmMjZjOTFhZjBhYjI2NjhhMzYwMWIyZDk1N2RjNGNlMDAy ZDU5ODYwHhcNMjUxMjI0MTIwMTI4WhcNMjUxMjI1MTIwMTI4WjAzMTEwLwYDVQQD EyhlZjg3ZGJkOGNjMWYzZjVjZjYwYWY5NTYxNzc0ZTcxNWQ3OGNhMzJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA829vLKAV+ZSebg/b+ADSNor+OfCk usML8zP2tN+i5gK/QAK4T5QsLbFHFxpFFoxuRIV/EttB07Z6XzJFPcJXbcOBX6P9 bvaf/NVqIMkcHvqwvMzk4KHN1pxagzpMPIlOyzxjrVNvA6UtmVZzFjnJ+JXZ2it5 zVixzdhRoJboy0JfLGiGNNd+IyxM1E018XP+DmodU28RFVIMUcCPD5Naqi3BVNaZ FY2JRsGKqx0XU0hNC8l+iRS2hFVLN+yF5s2jQ6wWGRR31nywD5/v2YjTThJidNdm xdcuCmmxnPQQ/qQWpGvEnHq1FVQb1ZlScgyB35TV+2d5bqgYx2ZeT/oEtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO+H29jMHz9c9gr5Vhd05xXXjKMtMB8GA1UdIwQY MBaAFM8myRrwqyZoo2AbLZV9xM4ALVmGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenliSkd2Q3JKbWlqWUJzdGxYM0V6Z0F0V1lZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS83NmRkZDctMGFmMi00M2NlLTk4NTkt NmJjODM5NDY1NmI3LzEvenliSkd2Q3JKbWlqWUJzdGxYM0V6Z0F0V1lZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS83NmRkZDctMGFmMi00M2NlLTk4NTktNmJjODM5NDY1NmI3 LzEvenliSkd2Q3JKbWlqWUJzdGxYM0V6Z0F0V1lZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcmbK8Mtp F0pH/JjfhQX5Gqh4aGPR8TrLw2z1w1eC/8lVFdvwacnAYV3fPNuEuLzGW0E1UoMV ZX1taUWtjaVuYwvphVTfnc5wfF+WMpaITqE8X1oD9rWQNKyn7I5iA0MYYa5xZxcx ORkqX83LsFEP+lR/QeIMNZVcwI93vwDHj2bBTeT2+Fj4rGUAX8MkxhUa8t54m29t YyAkXjCnIiptoIn9YVo7o9tAAbwWnO/UWu0aOsrVUcUUUfVn+QcKqDQ6z6VMoFmB FbyxzLMbRJPUUCWZlbYoOEjFABZPJs94pZ76KgUi8ddaI5ujEdHeQgC2v6fO4VM0 MPDsabg7vkvQmQ== -----END CERTIFICATE-----Generated at Wed Dec 24 15:16:23 2025 by rpki-client