This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft File: ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft (raw, json) Hash identifier: GwraEkA2hzKjP3TfrlHjaAhynD7znTvkqSx81gfJJgs= Subject key identifier: D5:C0:8D:B2:D8:1E:F4:03:01:3B:E0:4C:1A:60:23:58:FC:33:19:00 Authority key identifier: 65:83:D3:22:EF:24:C8:71:98:B7:65:EA:1D:1C:42:C2:83:A7:F8:F6 Certificate issuer: /CN=6583d322ef24c87198b765ea1d1c42c283a7f8f6 Certificate serial: 019B34FBCA77BD292FEA6DA1FCD352939CFD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft Manifest number: 10EC Signing time: Fri 19 Dec 2025 05:01:15 +0000 Manifest this update: Fri 19 Dec 2025 05:01:15 +0000 Manifest next update: Sat 20 Dec 2025 05:01:15 +0000 Files and hashes: 1: DkGvgDnbdtEHDMx7b64dzBjhPco.roa (hash: 8mB0OA1c8Mmrq7iJrmaJaIVGUwLhqVKrizBW/uXLsCE=) 2: ZYPTIu8kyHGYt2XqHRxCwoOn-PY.crl (hash: Wmi0g5ApOZEJZkUWBwqPbKmfEZGXLct7cpMCBNQVZl0=) 3: ZiWYCsD1Dry724z5OmJJ8Oawr6w.roa (hash: pA+krdDNaZYU7n+P4r9c22BIzRTJGvLkmVz3LgTk2aU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.crl rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft rsync://rpki.ripe.net/repository/DEFAULT/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 05:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:fb:ca:77:bd:29:2f:ea:6d:a1:fc:d3:52:93:9c:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6583d322ef24c87198b765ea1d1c42c283a7f8f6 Validity Not Before: Dec 19 05:01:15 2025 GMT Not After : Dec 20 05:01:15 2025 GMT Subject: CN=d5c08db2d81ef403013be04c1a602358fc331900 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:95:13:26:de:42:48:82:3c:03:5e:00:f8:a7: 65:b9:56:54:5c:c8:76:9c:a9:7a:2b:74:8c:40:41: f1:48:26:0e:c5:70:12:18:e1:c8:01:0a:b9:e0:47: 80:af:d8:37:95:16:b5:ab:d7:81:2d:1f:af:2d:cf: 0b:4e:23:18:c8:f5:77:eb:f0:fc:ee:9a:53:26:e3: 0c:34:c4:e8:93:0c:ce:fc:2c:ce:55:8d:de:02:15: 43:ba:7e:87:aa:19:ef:62:84:d2:47:fc:21:5b:b9: 34:a1:de:0f:9f:1a:e6:68:18:a0:54:f7:92:91:c7: c9:ad:95:c7:c1:ea:b9:b9:5a:01:ef:fa:e9:fb:23: ec:83:d4:ae:55:4d:d9:ce:fb:1f:fc:e8:b7:a8:08: 2c:90:09:bb:a9:1d:b2:b2:0f:ce:0d:86:f9:7e:e1: 61:a8:93:17:45:1b:0d:54:55:bd:9a:1f:8b:8c:57: d1:11:fb:b4:ab:24:27:63:c4:4f:f8:d2:e4:4c:56: c8:fe:56:ff:11:8e:d6:40:71:01:03:b7:4d:7b:75: b2:2e:af:c9:26:92:40:d8:ff:84:d9:10:96:3d:9e: 89:bc:1f:94:b4:4b:65:29:bb:ca:4c:a7:c1:61:15: 04:9b:06:71:0f:c1:71:fe:9f:96:fb:3a:d6:15:4f: d8:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:C0:8D:B2:D8:1E:F4:03:01:3B:E0:4C:1A:60:23:58:FC:33:19:00 X509v3 Authority Key Identifier: keyid:65:83:D3:22:EF:24:C8:71:98:B7:65:EA:1D:1C:42:C2:83:A7:F8:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:8a:1b:ba:31:30:41:59:0a:90:ba:97:c9:9a:eb:0a:7b:43: a9:e0:5e:55:1b:7f:64:a7:7b:bc:7f:77:a8:5d:93:d5:88:47: 7f:30:71:17:03:ad:d8:4d:1e:d2:4d:0d:d9:58:ca:fd:f5:83: c6:1c:c0:55:95:73:64:d4:3c:2a:81:92:31:2c:df:48:f0:3a: a1:8f:99:1b:08:69:4f:77:cf:78:10:78:e4:a1:f3:92:47:3b: 92:99:62:09:8a:c7:07:55:f9:16:92:b3:d4:55:2f:93:d1:80: f1:e7:82:8e:76:ea:62:fd:ab:32:15:c3:03:34:8c:b7:25:39: 7a:9c:03:5d:99:fd:4b:e4:0f:04:3d:57:55:4c:15:1d:68:77: ca:c1:26:b5:7e:17:09:ac:a7:50:b4:33:9a:a9:0c:2c:ff:22: 61:00:4b:a9:88:40:94:67:f4:01:4a:dc:e3:09:a3:9a:4f:b2: a2:43:94:f8:4d:59:fb:e5:36:85:cc:b3:fe:09:4c:89:16:68: 71:f5:94:c6:69:3c:8c:19:7e:03:03:f5:a9:31:31:4f:7c:89: c7:2c:53:60:1a:1c:7a:d9:01:a0:5f:00:37:a3:74:bd:0b:4d: ba:87:18:41:78:ca:7d:52:47:b1:97:9f:7b:28:a7:9a:ba:d2: 53:74:e3:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0+8p3vSkv6m2h/NNSk5z9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1ODNkMzIyZWYyNGM4NzE5OGI3NjVlYTFkMWM0MmMyODNh N2Y4ZjYwHhcNMjUxMjE5MDUwMTE1WhcNMjUxMjIwMDUwMTE1WjAzMTEwLwYDVQQD EyhkNWMwOGRiMmQ4MWVmNDAzMDEzYmUwNGMxYTYwMjM1OGZjMzMxOTAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA35UTJt5CSII8A14A+KdluVZUXMh2 nKl6K3SMQEHxSCYOxXASGOHIAQq54EeAr9g3lRa1q9eBLR+vLc8LTiMYyPV36/D8 7ppTJuMMNMTokwzO/CzOVY3eAhVDun6HqhnvYoTSR/whW7k0od4PnxrmaBigVPeS kcfJrZXHweq5uVoB7/rp+yPsg9SuVU3Zzvsf/Oi3qAgskAm7qR2ysg/ODYb5fuFh qJMXRRsNVFW9mh+LjFfREfu0qyQnY8RP+NLkTFbI/lb/EY7WQHEBA7dNe3WyLq/J JpJA2P+E2RCWPZ6JvB+UtEtlKbvKTKfBYRUEmwZxD8Fx/p+W+zrWFU/YrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNXAjbLYHvQDATvgTBpgI1j8MxkAMB8GA1UdIwQY MBaAFGWD0yLvJMhxmLdl6h0cQsKDp/j2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWllQVEl1OGt5SEdZdDJYcUhSeEN3b09uLVBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9mMDk3MWEtODg5MS00YjUzLTk0NGMt NWJlOWUxMTdkYmRhLzEvWllQVEl1OGt5SEdZdDJYcUhSeEN3b09uLVBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni9mMDk3MWEtODg5MS00YjUzLTk0NGMtNWJlOWUxMTdkYmRh LzEvWllQVEl1OGt5SEdZdDJYcUhSeEN3b09uLVBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKYobujEw QVkKkLqXyZrrCntDqeBeVRt/ZKd7vH93qF2T1YhHfzBxFwOt2E0e0k0N2VjK/fWD xhzAVZVzZNQ8KoGSMSzfSPA6oY+ZGwhpT3fPeBB45KHzkkc7kpliCYrHB1X5FpKz 1FUvk9GA8eeCjnbqYv2rMhXDAzSMtyU5epwDXZn9S+QPBD1XVUwVHWh3ysEmtX4X CaynULQzmqkMLP8iYQBLqYhAlGf0AUrc4wmjmk+yokOU+E1Z++U2hcyz/glMiRZo cfWUxmk8jBl+AwP1qTExT3yJxyxTYBocetkBoF8AN6N0vQtNuocYQXjKfVJHsZef eyinmrrSU3TjyA== -----END CERTIFICATE-----Generated at Fri Dec 19 11:38:22 2025 by rpki-client