This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/6f6758-c233-4ac0-99b0-5a922a62c571/1/zyww80STxFKhc-TeDEYsg6cRwzg.mft File: zyww80STxFKhc-TeDEYsg6cRwzg.mft (raw, json) Hash identifier: 4iMvoTCmPJlogc12uo5fE+uk6Cdu3B7kORBgrUICjHQ= Subject key identifier: 33:85:3C:2B:0C:1D:2C:0F:EE:59:43:7B:ED:30:4A:18:67:1A:24:3D Authority key identifier: CF:2C:30:F3:44:93:C4:52:A1:73:E4:DE:0C:46:2C:83:A7:11:C3:38 Certificate issuer: /CN=cf2c30f34493c452a173e4de0c462c83a711c338 Certificate serial: 019B3B3476C396B32167D8578B4633EA29E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zyww80STxFKhc-TeDEYsg6cRwzg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/6f6758-c233-4ac0-99b0-5a922a62c571/1/zyww80STxFKhc-TeDEYsg6cRwzg.mft Manifest number: 0C41 Signing time: Sat 20 Dec 2025 10:00:52 +0000 Manifest this update: Sat 20 Dec 2025 10:00:52 +0000 Manifest next update: Sun 21 Dec 2025 10:00:52 +0000 Files and hashes: 1: Oj0m_8ITZBnb4aEFgYoQp36qZx8.roa (hash: uBJLArWgkSjRK8aGJtgjmrvAPeBkh4zJ1gBYT+tPHh4=) 2: SoEVRIqaPwIGQBCw5SCqT_ArGX0.roa (hash: xcx1cSlLCFDJBjd8JSFFyykHeM6rd2VPa9v4P9cRUKQ=) 3: zyww80STxFKhc-TeDEYsg6cRwzg.crl (hash: 9IobV62i1Tyu9d5OawK2+Vl5ntp6GhdmspgCTl450Ak=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/6f6758-c233-4ac0-99b0-5a922a62c571/1/zyww80STxFKhc-TeDEYsg6cRwzg.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/6f6758-c233-4ac0-99b0-5a922a62c571/1/zyww80STxFKhc-TeDEYsg6cRwzg.mft rsync://rpki.ripe.net/repository/DEFAULT/zyww80STxFKhc-TeDEYsg6cRwzg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:34:76:c3:96:b3:21:67:d8:57:8b:46:33:ea:29:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf2c30f34493c452a173e4de0c462c83a711c338 Validity Not Before: Dec 20 10:00:52 2025 GMT Not After : Dec 21 10:00:52 2025 GMT Subject: CN=33853c2b0c1d2c0fee59437bed304a18671a243d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d4:bf:c5:99:ef:17:46:26:e4:f9:c1:69:e7: ec:8c:3c:e8:9d:52:bf:1f:6c:1f:c5:2e:2d:ac:f3: 56:d4:c3:b8:90:11:64:20:7c:9b:0a:89:fb:bb:c7: a0:c3:62:0c:d7:21:49:61:a5:24:8d:2f:5f:1a:fb: 25:eb:8d:b9:38:5b:b7:ac:06:f9:26:50:90:b3:39: f1:59:d6:77:5e:4b:0c:d2:62:54:90:2b:66:30:95: 0e:67:10:fe:9c:ee:6a:75:ef:a9:4b:ed:50:0f:ba: ba:a9:4d:de:27:13:66:d8:48:53:3f:c9:9c:31:bb: 6d:5f:4f:aa:0c:26:84:e4:14:3a:99:77:40:50:00: ab:2e:44:20:45:6d:06:19:5d:e5:17:b0:8c:a4:6e: 0f:11:b1:2a:09:c7:b0:0d:b1:a1:64:3a:2a:1c:23: e1:d4:a3:17:a6:1c:2a:50:4e:32:1e:e2:1c:b8:f3: d3:b2:7c:d3:56:0a:73:9b:bf:60:be:a5:10:7d:00: 49:1d:6e:8b:0e:a1:2a:88:c1:3e:38:af:ce:ff:59: 64:c1:35:25:01:64:6e:ee:59:3a:c6:05:ea:25:47: cf:60:de:45:9f:9c:6a:4d:34:0e:66:c3:79:8a:13: cd:fb:3a:18:c0:c1:dd:5c:44:ea:6f:8b:4f:5a:a7: e2:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:85:3C:2B:0C:1D:2C:0F:EE:59:43:7B:ED:30:4A:18:67:1A:24:3D X509v3 Authority Key Identifier: keyid:CF:2C:30:F3:44:93:C4:52:A1:73:E4:DE:0C:46:2C:83:A7:11:C3:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zyww80STxFKhc-TeDEYsg6cRwzg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/6f6758-c233-4ac0-99b0-5a922a62c571/1/zyww80STxFKhc-TeDEYsg6cRwzg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/6f6758-c233-4ac0-99b0-5a922a62c571/1/zyww80STxFKhc-TeDEYsg6cRwzg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:d2:69:af:0a:e6:b4:5a:22:69:56:08:65:d9:17:d2:79:af: 14:4c:5f:62:67:7e:f7:5d:b9:da:ba:26:0a:dc:3a:ec:07:d1: 77:da:b4:f7:40:dd:c2:72:72:64:3e:a4:9c:90:6e:4e:15:01: 67:80:84:8b:1e:c8:ba:b6:ed:7d:46:81:33:1b:71:d5:2a:60: 07:b9:5c:6f:5c:67:88:6c:4f:ab:0c:a7:15:de:f7:a0:18:d7: f8:ae:32:0b:51:fa:86:2f:47:f3:ed:48:6e:3f:6c:b0:a8:1d: d1:11:69:44:ba:9e:cd:d6:78:e4:84:93:0b:d0:54:38:03:25: d7:b8:eb:53:5c:88:97:f6:b9:29:aa:60:8d:66:56:7a:f2:94: e6:8d:a7:17:f8:a2:06:a5:c1:69:c5:96:37:f2:d8:0c:5d:78: 58:46:97:84:40:5f:1f:15:d6:b9:b4:08:80:21:53:49:d1:cd: df:f1:1b:af:30:33:20:6d:78:af:b3:c8:43:e5:1b:26:1f:4c: 67:7d:53:bb:aa:a6:4f:77:95:fe:e7:08:ee:2a:23:53:00:db: ff:46:bc:f3:c8:2f:e6:94:bf:14:59:87:9e:ae:0e:c0:e5:48: 62:3e:f6:53:b6:a2:fe:29:47:6a:0d:67:b9:66:6d:19:e8:a8: 13:7d:6e:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7NHbDlrMhZ9hXi0Yz6iniMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmMmMzMGYzNDQ5M2M0NTJhMTczZTRkZTBjNDYyYzgzYTcx MWMzMzgwHhcNMjUxMjIwMTAwMDUyWhcNMjUxMjIxMTAwMDUyWjAzMTEwLwYDVQQD EygzMzg1M2MyYjBjMWQyYzBmZWU1OTQzN2JlZDMwNGExODY3MWEyNDNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntS/xZnvF0Ym5PnBaefsjDzonVK/ H2wfxS4trPNW1MO4kBFkIHybCon7u8egw2IM1yFJYaUkjS9fGvsl6425OFu3rAb5 JlCQsznxWdZ3XksM0mJUkCtmMJUOZxD+nO5qde+pS+1QD7q6qU3eJxNm2EhTP8mc MbttX0+qDCaE5BQ6mXdAUACrLkQgRW0GGV3lF7CMpG4PEbEqCcewDbGhZDoqHCPh 1KMXphwqUE4yHuIcuPPTsnzTVgpzm79gvqUQfQBJHW6LDqEqiME+OK/O/1lkwTUl AWRu7lk6xgXqJUfPYN5Fn5xqTTQOZsN5ihPN+zoYwMHdXETqb4tPWqfi8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDOFPCsMHSwP7llDe+0wShhnGiQ9MB8GA1UdIwQY MBaAFM8sMPNEk8RSoXPk3gxGLIOnEcM4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenl3dzgwU1R4RktoYy1UZURFWXNnNmNSd3pnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi82ZjY3NTgtYzIzMy00YWMwLTk5YjAt NWE5MjJhNjJjNTcxLzEvenl3dzgwU1R4RktoYy1UZURFWXNnNmNSd3pnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi82ZjY3NTgtYzIzMy00YWMwLTk5YjAtNWE5MjJhNjJjNTcx LzEvenl3dzgwU1R4RktoYy1UZURFWXNnNmNSd3pnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ9Jprwrm tFoiaVYIZdkX0nmvFExfYmd+91252romCtw67AfRd9q090DdwnJyZD6knJBuThUB Z4CEix7IurbtfUaBMxtx1SpgB7lcb1xniGxPqwynFd73oBjX+K4yC1H6hi9H8+1I bj9ssKgd0RFpRLqezdZ45ISTC9BUOAMl17jrU1yIl/a5KapgjWZWevKU5o2nF/ii BqXBacWWN/LYDF14WEaXhEBfHxXWubQIgCFTSdHN3/EbrzAzIG14r7PIQ+UbJh9M Z31Tu6qmT3eV/ucI7iojUwDb/0a888gv5pS/FFmHnq4OwOVIYj72U7ai/ilHag1n uWZtGeioE31uog== -----END CERTIFICATE-----Generated at Sat Dec 20 19:09:12 2025 by rpki-client