This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft File: ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft (raw, json) Hash identifier: Y79ZAQuXTBXx2Q/0DfjkJHL8fl1iriVzvjx/KIvrayM= Subject key identifier: BA:07:C4:EB:A2:63:37:63:7A:EB:59:92:ED:AE:C4:7B:EB:BA:8C:5A Authority key identifier: 65:83:D3:22:EF:24:C8:71:98:B7:65:EA:1D:1C:42:C2:83:A7:F8:F6 Certificate issuer: /CN=6583d322ef24c87198b765ea1d1c42c283a7f8f6 Certificate serial: 019B465D3DCF0FAF8F698B3AE1337D8A547E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft Manifest number: 10F5 Signing time: Mon 22 Dec 2025 14:01:14 +0000 Manifest this update: Mon 22 Dec 2025 14:01:14 +0000 Manifest next update: Tue 23 Dec 2025 14:01:14 +0000 Files and hashes: 1: DkGvgDnbdtEHDMx7b64dzBjhPco.roa (hash: 8mB0OA1c8Mmrq7iJrmaJaIVGUwLhqVKrizBW/uXLsCE=) 2: ZYPTIu8kyHGYt2XqHRxCwoOn-PY.crl (hash: WewKJwurEfpE1eJHIlKj6RxCyrhGSW803qd9/BjC7yc=) 3: ZiWYCsD1Dry724z5OmJJ8Oawr6w.roa (hash: pA+krdDNaZYU7n+P4r9c22BIzRTJGvLkmVz3LgTk2aU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.crl rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft rsync://rpki.ripe.net/repository/DEFAULT/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 14:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:5d:3d:cf:0f:af:8f:69:8b:3a:e1:33:7d:8a:54:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6583d322ef24c87198b765ea1d1c42c283a7f8f6 Validity Not Before: Dec 22 14:01:14 2025 GMT Not After : Dec 23 14:01:14 2025 GMT Subject: CN=ba07c4eba26337637aeb5992edaec47bebba8c5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:54:81:4d:ad:95:bb:89:e9:f2:a5:5f:97:2d: 56:1b:b4:05:76:c4:a0:b2:b2:8d:b5:2e:44:7e:99: e4:d2:07:a2:ad:4e:f1:9e:4c:76:1f:72:0d:ee:3f: 5c:df:67:65:6c:01:51:7e:4b:f3:3a:cf:bc:e0:9d: 7d:2a:75:9b:e8:ef:db:df:36:8c:93:c3:87:ec:20: c8:b3:30:b5:12:15:83:47:9b:6d:df:10:22:36:d0: 9a:21:b2:9a:74:a0:14:d1:2c:56:ba:ee:3d:cc:b2: f0:69:44:a6:24:1e:d4:25:d4:ec:78:32:69:7a:1f: c9:36:62:f2:3d:01:96:1c:34:1e:a5:3d:2f:08:4f: ca:e9:2a:a6:ab:36:a9:03:ee:2b:9a:f4:96:2d:51: d3:0a:d4:50:e0:83:d4:15:e7:03:ce:05:54:31:37: 39:f6:69:d8:a9:97:8c:b6:40:f8:bf:1b:d6:37:5e: 4c:8a:60:78:e4:d0:bb:b3:cc:76:c3:7f:c8:f2:24: 05:7c:2b:7c:26:04:61:c4:3f:47:ed:ed:78:6b:45: d4:75:7c:e3:14:37:5b:31:26:16:28:4b:c1:3f:d7: 04:44:c3:2b:d5:80:ab:99:98:98:8b:16:ce:e0:db: 7c:77:2e:4c:9c:b3:5c:92:3d:f9:88:2e:31:7d:41: 55:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:07:C4:EB:A2:63:37:63:7A:EB:59:92:ED:AE:C4:7B:EB:BA:8C:5A X509v3 Authority Key Identifier: keyid:65:83:D3:22:EF:24:C8:71:98:B7:65:EA:1D:1C:42:C2:83:A7:F8:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:0a:7a:3e:53:04:ee:51:e5:99:ea:1d:e8:4f:a4:ea:30:57: de:05:ae:9b:31:1e:ac:6b:88:c1:ec:ae:28:16:19:f1:8e:dd: 18:e4:66:7e:10:72:b2:17:dc:c9:37:06:8a:bd:5c:a3:39:ea: ef:6c:cd:38:85:ca:e8:a1:36:f9:4a:2f:fb:e3:5d:90:9f:17: ff:b1:0c:78:69:d1:53:f4:61:8e:3d:2a:e3:24:3f:82:4c:0f: cc:b5:9c:c6:de:41:5c:a2:bc:00:81:3d:90:8a:20:a6:85:a5: 89:30:cb:e8:b5:f5:b2:58:19:6d:51:e7:16:7c:0e:34:0c:c5: 04:78:e7:52:8e:ff:d0:54:0b:1f:b5:9a:5a:ff:1c:28:37:81: 5c:08:3b:40:21:78:83:fc:73:00:94:3f:fa:11:7f:62:6f:a9: 03:f2:d8:01:d8:d7:c1:ae:9c:da:6a:61:4f:cc:d1:4b:37:f5: 15:2f:df:bb:4c:93:c8:07:4f:f8:be:45:f1:4a:f0:c1:0c:0a: 1b:88:93:19:5a:f4:bc:5e:78:b8:bc:cc:ac:6c:57:d2:4d:4f: d9:60:8c:05:2b:e9:9d:d6:d5:e9:d3:c5:7e:e8:17:8c:ac:f2: b4:1b:e3:a1:0f:c3:3c:56:8f:34:e9:8b:46:ae:6d:3e:64:70: af:e8:55:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGXT3PD6+PaYs64TN9ilR+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1ODNkMzIyZWYyNGM4NzE5OGI3NjVlYTFkMWM0MmMyODNh N2Y4ZjYwHhcNMjUxMjIyMTQwMTE0WhcNMjUxMjIzMTQwMTE0WjAzMTEwLwYDVQQD EyhiYTA3YzRlYmEyNjMzNzYzN2FlYjU5OTJlZGFlYzQ3YmViYmE4YzVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/FSBTa2Vu4np8qVfly1WG7QFdsSg srKNtS5Efpnk0geirU7xnkx2H3IN7j9c32dlbAFRfkvzOs+84J19KnWb6O/b3zaM k8OH7CDIszC1EhWDR5tt3xAiNtCaIbKadKAU0SxWuu49zLLwaUSmJB7UJdTseDJp eh/JNmLyPQGWHDQepT0vCE/K6SqmqzapA+4rmvSWLVHTCtRQ4IPUFecDzgVUMTc5 9mnYqZeMtkD4vxvWN15MimB45NC7s8x2w3/I8iQFfCt8JgRhxD9H7e14a0XUdXzj FDdbMSYWKEvBP9cERMMr1YCrmZiYixbO4Nt8dy5MnLNckj35iC4xfUFVsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLoHxOuiYzdjeutZku2uxHvruoxaMB8GA1UdIwQY MBaAFGWD0yLvJMhxmLdl6h0cQsKDp/j2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWllQVEl1OGt5SEdZdDJYcUhSeEN3b09uLVBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9mMDk3MWEtODg5MS00YjUzLTk0NGMt NWJlOWUxMTdkYmRhLzEvWllQVEl1OGt5SEdZdDJYcUhSeEN3b09uLVBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni9mMDk3MWEtODg5MS00YjUzLTk0NGMtNWJlOWUxMTdkYmRh LzEvWllQVEl1OGt5SEdZdDJYcUhSeEN3b09uLVBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOAp6PlME 7lHlmeod6E+k6jBX3gWumzEerGuIweyuKBYZ8Y7dGORmfhByshfcyTcGir1coznq 72zNOIXK6KE2+Uov++NdkJ8X/7EMeGnRU/Rhjj0q4yQ/gkwPzLWcxt5BXKK8AIE9 kIogpoWliTDL6LX1slgZbVHnFnwONAzFBHjnUo7/0FQLH7WaWv8cKDeBXAg7QCF4 g/xzAJQ/+hF/Ym+pA/LYAdjXwa6c2mphT8zRSzf1FS/fu0yTyAdP+L5F8UrwwQwK G4iTGVr0vF54uLzMrGxX0k1P2WCMBSvpndbV6dPFfugXjKzytBvjoQ/DPFaPNOmL Rq5tPmRwr+hVFw== -----END CERTIFICATE-----Generated at Mon Dec 22 22:35:46 2025 by rpki-client