This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.mft File: znys-nNc7q_dKiFMCe5yRpQlJQ4.mft (raw, json) Hash identifier: TDA6cD7VAkIvTTAhmvfULL7hsOsA+pjESqGgzMWONuY= Subject key identifier: 3F:A5:DB:71:8B:D2:6A:D7:19:DF:B0:31:7E:79:F9:B6:BE:73:1C:4C Authority key identifier: CE:7C:AC:FA:73:5C:EE:AF:DD:2A:21:4C:09:EE:72:46:94:25:25:0E Certificate issuer: /CN=ce7cacfa735ceeafdd2a214c09ee72469425250e Certificate serial: 019B23D0B14380B537C89AF182323C99E9AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/znys-nNc7q_dKiFMCe5yRpQlJQ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.mft Manifest number: 07C2 Signing time: Mon 15 Dec 2025 21:00:37 +0000 Manifest this update: Mon 15 Dec 2025 21:00:37 +0000 Manifest next update: Tue 16 Dec 2025 21:00:37 +0000 Files and hashes: 1: 0KTmbSRfcRK8-n1qcmKR418DNUs.roa (hash: P50v6XitnoLdzzBD57fVGVtkTs/as999tNUAveVrHNg=) 2: SBa7BiJFT-mIs1J1piv1ATsLy8Y.roa (hash: IPgzHNDHbety+MkOooZgTafgMRF/usWyWiKxf6WdA3E=) 3: dd3Agc5TCDHtIQ62hjbQNZkWxY4.roa (hash: yPBeMJO0RoRNX6fs06ij/fwJ13bpNgiBqfocAHDtu4U=) 4: znys-nNc7q_dKiFMCe5yRpQlJQ4.crl (hash: ITySBKtyyn8TjqP5iWcHbo4cthog8ciUyfGdw/2iRbQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.crl rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.mft rsync://rpki.ripe.net/repository/DEFAULT/znys-nNc7q_dKiFMCe5yRpQlJQ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 21:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:d0:b1:43:80:b5:37:c8:9a:f1:82:32:3c:99:e9:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce7cacfa735ceeafdd2a214c09ee72469425250e Validity Not Before: Dec 15 21:00:37 2025 GMT Not After : Dec 16 21:00:37 2025 GMT Subject: CN=3fa5db718bd26ad719dfb0317e79f9b6be731c4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:94:96:bc:5e:80:f7:2d:76:84:5e:c8:f6:f2: 05:e7:77:3b:fc:f8:8e:47:63:03:c5:d9:91:34:57: 96:6e:47:e2:68:52:c4:79:4a:60:d7:7c:43:03:7f: 63:a4:0d:70:4e:de:35:70:4d:8e:88:bc:27:bc:df: 41:cf:68:73:07:60:fc:37:53:f2:2c:d7:22:7d:94: 6b:72:76:43:1c:90:53:b7:13:2b:39:08:cd:f3:b9: 20:e5:19:8c:76:86:8f:8c:ee:2f:7f:7a:36:25:ce: 76:3a:36:ca:2c:93:e3:13:2c:36:c3:7d:f4:da:22: 18:60:cc:80:7f:da:53:13:46:3d:f0:88:e5:7e:4a: 48:81:7a:0f:c7:98:e3:ba:73:87:22:4c:cc:1b:fd: 53:a9:fc:40:92:8e:f5:1a:57:23:0d:6a:cb:c2:97: c2:26:7a:13:f6:dd:c6:3e:ca:b3:8e:04:c4:9f:4d: 31:b4:fe:40:43:76:3e:7f:5c:fe:53:c6:e2:20:56: a0:43:12:01:4f:12:72:93:ea:db:7a:2c:bc:32:ae: f6:38:4e:88:84:1d:9f:54:86:36:dd:62:29:c0:7a: 80:a5:39:09:bb:be:30:58:94:ed:5f:8e:59:cb:83: d2:c1:be:de:6c:25:c9:59:35:49:74:d0:33:64:07: 75:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:A5:DB:71:8B:D2:6A:D7:19:DF:B0:31:7E:79:F9:B6:BE:73:1C:4C X509v3 Authority Key Identifier: keyid:CE:7C:AC:FA:73:5C:EE:AF:DD:2A:21:4C:09:EE:72:46:94:25:25:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znys-nNc7q_dKiFMCe5yRpQlJQ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:73:96:6c:1a:d1:af:7c:94:33:2b:2a:db:be:dc:d6:70:61: f6:ef:23:57:48:28:b6:be:b8:f4:44:a1:d0:05:38:d0:2f:83: 7d:ce:43:56:59:fd:4e:cc:63:cc:b3:74:ae:10:59:d7:7c:5e: 6f:67:fd:d2:b5:35:a7:66:47:50:e2:0b:9c:09:ac:44:5f:06: c0:6e:49:84:a9:a8:32:39:a3:10:65:ca:9d:63:52:3b:a4:d4: 01:4a:29:e1:73:63:09:f1:59:ff:21:07:f8:ad:23:5a:7d:e8: 4b:c0:65:32:95:a3:c0:d9:5e:d5:c1:b0:91:9f:9d:41:08:3c: 34:36:f3:f1:27:0b:39:56:35:d8:b3:69:44:11:04:30:7d:b8: 03:c0:de:2d:af:1b:75:9a:30:0e:2c:e2:3b:d7:18:b0:92:ad: dc:17:7e:3b:84:e4:c1:6a:7c:1b:5e:14:80:48:04:db:27:5f: 13:6a:cf:ac:47:11:9a:25:09:cc:7f:49:8a:1b:cc:95:7d:9c: 6e:c4:97:11:db:13:f1:93:b0:7c:7f:62:37:a7:0f:0a:51:aa: 72:9e:b7:04:ee:be:e5:bc:27:22:c3:02:11:73:95:1d:0e:2c: 67:17:05:2a:56:35:18:83:90:6f:a0:ab:6c:c4:f8:49:17:c0: 1e:55:d3:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsj0LFDgLU3yJrxgjI8memsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlN2NhY2ZhNzM1Y2VlYWZkZDJhMjE0YzA5ZWU3MjQ2OTQy NTI1MGUwHhcNMjUxMjE1MjEwMDM3WhcNMjUxMjE2MjEwMDM3WjAzMTEwLwYDVQQD EygzZmE1ZGI3MThiZDI2YWQ3MTlkZmIwMzE3ZTc5ZjliNmJlNzMxYzRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5SWvF6A9y12hF7I9vIF53c7/PiO R2MDxdmRNFeWbkfiaFLEeUpg13xDA39jpA1wTt41cE2OiLwnvN9Bz2hzB2D8N1Py LNcifZRrcnZDHJBTtxMrOQjN87kg5RmMdoaPjO4vf3o2Jc52OjbKLJPjEyw2w330 2iIYYMyAf9pTE0Y98IjlfkpIgXoPx5jjunOHIkzMG/1TqfxAko71GlcjDWrLwpfC JnoT9t3GPsqzjgTEn00xtP5AQ3Y+f1z+U8biIFagQxIBTxJyk+rbeiy8Mq72OE6I hB2fVIY23WIpwHqApTkJu74wWJTtX45Zy4PSwb7ebCXJWTVJdNAzZAd12wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD+l23GL0mrXGd+wMX55+ba+cxxMMB8GA1UdIwQY MBaAFM58rPpzXO6v3SohTAnuckaUJSUOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvem55cy1uTmM3cV9kS2lGTUNlNXlScFFsSlE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9hNjM2ZWQtZDIwZi00ODAyLTkyODYt Yjg0ZWRhMmU4NDZhLzEvem55cy1uTmM3cV9kS2lGTUNlNXlScFFsSlE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9hNjM2ZWQtZDIwZi00ODAyLTkyODYtYjg0ZWRhMmU4NDZh LzEvem55cy1uTmM3cV9kS2lGTUNlNXlScFFsSlE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh3OWbBrR r3yUMysq277c1nBh9u8jV0gotr649ESh0AU40C+Dfc5DVln9TsxjzLN0rhBZ13xe b2f90rU1p2ZHUOILnAmsRF8GwG5JhKmoMjmjEGXKnWNSO6TUAUop4XNjCfFZ/yEH +K0jWn3oS8BlMpWjwNle1cGwkZ+dQQg8NDbz8ScLOVY12LNpRBEEMH24A8DeLa8b dZowDiziO9cYsJKt3Bd+O4TkwWp8G14UgEgE2ydfE2rPrEcRmiUJzH9JihvMlX2c bsSXEdsT8ZOwfH9iN6cPClGqcp63BO6+5bwnIsMCEXOVHQ4sZxcFKlY1GIOQb6Cr bMT4SRfAHlXToA== -----END CERTIFICATE-----Generated at Tue Dec 16 04:04:54 2025 by rpki-client