This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/773600-838f-414c-ac0c-d87019512716/1/zy_MDEv1TV6ct_obsf4anZRhA5A.mft File: zy_MDEv1TV6ct_obsf4anZRhA5A.mft (raw, json) Hash identifier: 71xqtIayqXQ2XwbEgyxoES/i71Z54P2DSJIDdLzB9vs= Subject key identifier: 08:D6:7D:12:0A:2D:37:72:93:A9:56:FD:E1:8F:57:5E:46:26:80:42 Authority key identifier: CF:2F:CC:0C:4B:F5:4D:5E:9C:B7:FA:1B:B1:FE:1A:9D:94:61:03:90 Certificate issuer: /CN=cf2fcc0c4bf54d5e9cb7fa1bb1fe1a9d94610390 Certificate serial: 019B3AC6F43839E9ECB659F84EDED9FD631A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zy_MDEv1TV6ct_obsf4anZRhA5A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/773600-838f-414c-ac0c-d87019512716/1/zy_MDEv1TV6ct_obsf4anZRhA5A.mft Manifest number: 0F Signing time: Sat 20 Dec 2025 08:01:15 +0000 Manifest this update: Sat 20 Dec 2025 08:01:15 +0000 Manifest next update: Sun 21 Dec 2025 08:01:15 +0000 Files and hashes: 1: c4C-s30CLt36AVb_NSs3ZWVTOhg.roa (hash: ltB4d7MLn89isK4ntD6dJU2QKunUcvt6Owh/MdSGgBg=) 2: zy_MDEv1TV6ct_obsf4anZRhA5A.crl (hash: hRgwKCvbr/twm4ePT8zHQJunJJ+E/5Ma0gVKneGOLPI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/773600-838f-414c-ac0c-d87019512716/1/zy_MDEv1TV6ct_obsf4anZRhA5A.crl rsync://rpki.ripe.net/repository/DEFAULT/37/773600-838f-414c-ac0c-d87019512716/1/zy_MDEv1TV6ct_obsf4anZRhA5A.mft rsync://rpki.ripe.net/repository/DEFAULT/zy_MDEv1TV6ct_obsf4anZRhA5A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 08:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:c6:f4:38:39:e9:ec:b6:59:f8:4e:de:d9:fd:63:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf2fcc0c4bf54d5e9cb7fa1bb1fe1a9d94610390 Validity Not Before: Dec 20 08:01:15 2025 GMT Not After : Dec 21 08:01:15 2025 GMT Subject: CN=08d67d120a2d377293a956fde18f575e46268042 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ba:09:6d:63:32:d3:22:a5:34:6d:90:39:0c: 0a:c8:b9:aa:af:ed:cf:91:01:de:ce:e5:f9:dd:23: 73:a1:c7:93:40:23:3b:74:8c:bb:b0:b1:36:74:c9: ea:2e:56:fd:4e:68:a4:a0:34:98:3d:af:c6:03:60: 0f:6a:71:95:22:3e:fb:48:6f:81:9b:c0:6b:43:a5: c7:c7:44:4f:09:e8:f6:29:ce:e4:84:ea:ea:74:5e: 01:76:84:30:0a:50:f4:ba:7e:40:c4:50:ff:3c:ea: ec:77:25:a0:8d:90:6a:73:79:0f:69:82:7e:e7:26: 49:68:a9:1a:70:70:10:cc:ab:86:30:3d:53:97:3a: 1c:e3:72:63:4c:13:80:46:57:9e:74:e9:54:cb:b8: a9:90:30:ab:76:26:48:01:d8:bb:95:52:f3:71:0b: 80:83:06:d5:d6:75:e0:6b:7b:5f:d8:dd:e8:c2:20: a4:6e:9b:15:2f:bb:c1:86:ad:4d:cb:ac:88:49:fb: ea:dc:b7:4b:bc:1a:03:85:f3:7f:d9:bf:68:2a:cc: 35:ca:a8:1e:4a:d8:f4:ae:ac:88:25:4b:2d:05:07: 63:cd:78:20:60:d0:ec:3f:0f:38:22:3d:94:9e:63: 4b:59:d5:5d:a9:c1:88:48:e0:89:da:3f:61:b9:ab: 65:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:D6:7D:12:0A:2D:37:72:93:A9:56:FD:E1:8F:57:5E:46:26:80:42 X509v3 Authority Key Identifier: keyid:CF:2F:CC:0C:4B:F5:4D:5E:9C:B7:FA:1B:B1:FE:1A:9D:94:61:03:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zy_MDEv1TV6ct_obsf4anZRhA5A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/773600-838f-414c-ac0c-d87019512716/1/zy_MDEv1TV6ct_obsf4anZRhA5A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/773600-838f-414c-ac0c-d87019512716/1/zy_MDEv1TV6ct_obsf4anZRhA5A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:81:51:50:88:bd:9b:8e:84:f5:23:ca:65:1c:6c:b6:23:0f: b1:3a:aa:cf:0e:68:4e:87:10:4f:96:74:d5:14:da:88:5a:66: 28:c6:35:62:1f:51:1d:d8:9d:d5:f4:4f:11:41:83:63:b7:36: 78:91:76:e8:51:a5:1f:1d:5a:95:4c:d3:14:99:bd:4d:e8:0e: b8:46:1b:52:f3:b0:37:ae:39:b7:b4:0e:d8:00:71:78:3a:69: 09:f9:c2:e8:11:98:ed:cd:ed:4a:cb:67:f1:4b:a2:c7:b4:73: be:9b:db:e4:9f:5f:93:4e:1e:ac:47:81:c6:a2:6f:ff:c7:88: ce:ca:a1:46:42:3e:b9:1a:29:45:70:79:a2:39:67:33:e1:f5: 6a:aa:54:6c:f2:b3:d0:b4:eb:2a:38:9a:57:f3:44:42:38:72: 29:7c:27:e4:a5:22:81:ee:fa:e2:10:96:a1:e0:d7:07:a5:b8: 1a:89:bf:5e:59:6e:19:7f:72:1f:ab:ea:66:bc:1c:29:04:d5: 73:c3:d7:fb:8f:11:17:0b:c0:27:71:6b:e9:d3:ea:43:c7:c5: 30:c0:af:8d:8c:cc:c2:f8:a1:d4:64:d3:5f:3e:f7:58:29:06: 5d:34:d4:26:93:7f:2f:85:ca:80:c3:7f:2a:99:90:7a:51:84: f4:e4:6d:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6xvQ4Oenstln4Tt7Z/WMaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmMmZjYzBjNGJmNTRkNWU5Y2I3ZmExYmIxZmUxYTlkOTQ2 MTAzOTAwHhcNMjUxMjIwMDgwMTE1WhcNMjUxMjIxMDgwMTE1WjAzMTEwLwYDVQQD EygwOGQ2N2QxMjBhMmQzNzcyOTNhOTU2ZmRlMThmNTc1ZTQ2MjY4MDQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvroJbWMy0yKlNG2QOQwKyLmqr+3P kQHezuX53SNzoceTQCM7dIy7sLE2dMnqLlb9TmikoDSYPa/GA2APanGVIj77SG+B m8BrQ6XHx0RPCej2Kc7khOrqdF4BdoQwClD0un5AxFD/POrsdyWgjZBqc3kPaYJ+ 5yZJaKkacHAQzKuGMD1Tlzoc43JjTBOARleedOlUy7ipkDCrdiZIAdi7lVLzcQuA gwbV1nXga3tf2N3owiCkbpsVL7vBhq1Ny6yISfvq3LdLvBoDhfN/2b9oKsw1yqge Stj0rqyIJUstBQdjzXggYNDsPw84Ij2UnmNLWdVdqcGISOCJ2j9huatl/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAjWfRIKLTdyk6lW/eGPV15GJoBCMB8GA1UdIwQY MBaAFM8vzAxL9U1enLf6G7H+Gp2UYQOQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenlfTURFdjFUVjZjdF9vYnNmNGFuWlJoQTVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy83NzM2MDAtODM4Zi00MTRjLWFjMGMt ZDg3MDE5NTEyNzE2LzEvenlfTURFdjFUVjZjdF9vYnNmNGFuWlJoQTVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy83NzM2MDAtODM4Zi00MTRjLWFjMGMtZDg3MDE5NTEyNzE2 LzEvenlfTURFdjFUVjZjdF9vYnNmNGFuWlJoQTVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADoFRUIi9 m46E9SPKZRxstiMPsTqqzw5oTocQT5Z01RTaiFpmKMY1Yh9RHdid1fRPEUGDY7c2 eJF26FGlHx1alUzTFJm9TegOuEYbUvOwN645t7QO2ABxeDppCfnC6BGY7c3tSstn 8Uuix7Rzvpvb5J9fk04erEeBxqJv/8eIzsqhRkI+uRopRXB5ojlnM+H1aqpUbPKz 0LTrKjiaV/NEQjhyKXwn5KUige764hCWoeDXB6W4Gom/XlluGX9yH6vqZrwcKQTV c8PX+48RFwvAJ3Fr6dPqQ8fFMMCvjYzMwvih1GTTXz73WCkGXTTUJpN/L4XKgMN/ KpmQelGE9ORtBQ== -----END CERTIFICATE-----Generated at Sat Dec 20 12:32:40 2025 by rpki-client