This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.mft File: zYa4ziIkgqFPmxNGjOV-mZJoSWE.mft (raw, json) Hash identifier: owpUbZQ3gb8iPF4NDTNrUIgsy5xO+UagVYNuouZmvC4= Subject key identifier: 22:B8:92:52:4B:11:75:76:D1:5D:D6:D5:FC:C7:20:28:5F:CC:92:C3 Authority key identifier: CD:86:B8:CE:22:24:82:A1:4F:9B:13:46:8C:E5:7E:99:92:68:49:61 Certificate issuer: /CN=cd86b8ce222482a14f9b13468ce57e9992684961 Certificate serial: 019B10B85125FF16DEDC0B6024B50032F972 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zYa4ziIkgqFPmxNGjOV-mZJoSWE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.mft Manifest number: 0746 Signing time: Fri 12 Dec 2025 04:01:13 +0000 Manifest this update: Fri 12 Dec 2025 04:01:13 +0000 Manifest next update: Sat 13 Dec 2025 04:01:13 +0000 Files and hashes: 1: DQHOKV8IKLhzD_DKbK2yKJLy3qI.roa (hash: PB4sy0lCqmdf8gfZUrxsVqDoVfWeVXqM8PmI2EwyuMw=) 2: zYa4ziIkgqFPmxNGjOV-mZJoSWE.crl (hash: aRdsH7IQTMF0DZ0Borq9iFa7oeaLrsqLwWOxM3UJBHM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.mft rsync://rpki.ripe.net/repository/DEFAULT/zYa4ziIkgqFPmxNGjOV-mZJoSWE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 04:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:b8:51:25:ff:16:de:dc:0b:60:24:b5:00:32:f9:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd86b8ce222482a14f9b13468ce57e9992684961 Validity Not Before: Dec 12 04:01:13 2025 GMT Not After : Dec 13 04:01:13 2025 GMT Subject: CN=22b892524b117576d15dd6d5fcc720285fcc92c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:89:fa:10:58:ac:ca:54:a1:55:e5:26:bf:c3: a4:7f:58:86:8d:66:bf:c9:a3:a1:cd:b3:98:20:fc: fe:0f:44:37:0d:bd:b1:9a:40:17:7a:5c:39:c9:0a: 1e:34:3b:f8:a6:de:ef:14:59:f3:7e:b9:50:52:4c: c4:5e:26:a6:46:a6:7d:b7:3e:17:a6:6b:88:78:94: f9:c8:3d:60:85:5b:b7:ae:54:b4:34:fe:2e:1c:be: 89:3e:7e:57:34:cc:bc:4f:33:0e:b7:91:7b:71:a0: 45:f1:aa:08:2a:bf:cc:7d:f2:75:a8:2f:c3:4d:30: 39:a6:71:30:dd:09:58:16:9c:66:36:ee:18:53:80: 41:82:48:94:60:2a:2e:60:49:a6:c1:17:26:75:2f: 7e:50:2f:54:15:87:f0:8b:38:8a:18:dd:47:ea:a6: c1:b4:77:f4:2c:71:4a:1b:9c:d2:d5:c1:43:7e:23: 82:33:ca:b9:14:92:19:8a:e7:d4:ea:66:3b:7e:7d: 42:8d:90:6e:43:06:91:44:9b:34:0c:12:af:e4:22: 5e:cb:fe:45:24:10:bd:4b:25:36:90:2b:e3:31:b2: be:54:97:65:6a:d3:df:0b:eb:2f:74:39:87:c5:5e: 5d:87:ca:8b:80:6d:d5:77:8a:f4:0d:75:c5:b2:11: 4d:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:B8:92:52:4B:11:75:76:D1:5D:D6:D5:FC:C7:20:28:5F:CC:92:C3 X509v3 Authority Key Identifier: keyid:CD:86:B8:CE:22:24:82:A1:4F:9B:13:46:8C:E5:7E:99:92:68:49:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zYa4ziIkgqFPmxNGjOV-mZJoSWE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:86:78:12:d8:08:bb:56:d0:ac:3c:79:4d:6c:90:6b:be:02: b9:70:f3:61:f0:2f:b6:31:5d:5c:3b:49:91:1a:aa:6d:84:6f: e3:1e:07:20:6f:24:68:0b:e8:fc:8b:49:6d:16:bc:36:f7:93: fd:db:cf:8e:0e:f2:89:9c:c9:24:22:14:bf:c4:93:d5:dc:81: d0:df:0e:63:d3:cb:f6:60:23:85:d7:d0:af:98:6b:77:b3:13: cd:5c:1c:c5:4c:97:c8:40:dc:16:5b:26:a1:35:d1:46:6f:3c: 11:72:9f:fe:60:51:97:7f:50:01:c7:e9:11:f9:8e:33:a5:99: 88:b2:f4:16:b9:29:95:9b:3c:09:25:2c:5d:d7:3d:e9:89:42: cb:e0:4b:71:47:6f:07:e1:25:66:42:32:14:a5:f4:1a:bb:ab: 19:61:47:08:87:4b:58:2a:7a:4c:ad:a7:75:19:ac:0e:8f:7f: ed:cf:16:2a:19:c7:2b:87:1b:2f:bf:e9:85:15:58:19:29:8e: 8a:8d:13:0e:9a:27:d4:ac:1e:6d:12:94:41:51:65:65:9f:81: 3a:d9:d0:00:1d:2f:8a:c8:e4:5b:b1:15:1e:d0:0b:85:10:8d: a8:f3:a9:50:67:57:23:72:48:c4:06:08:3d:66:ea:e9:10:55: b0:8e:36:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQuFEl/xbe3AtgJLUAMvlyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkODZiOGNlMjIyNDgyYTE0ZjliMTM0NjhjZTU3ZTk5OTI2 ODQ5NjEwHhcNMjUxMjEyMDQwMTEzWhcNMjUxMjEzMDQwMTEzWjAzMTEwLwYDVQQD EygyMmI4OTI1MjRiMTE3NTc2ZDE1ZGQ2ZDVmY2M3MjAyODVmY2M5MmMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYn6EFisylShVeUmv8Okf1iGjWa/ yaOhzbOYIPz+D0Q3Db2xmkAXelw5yQoeNDv4pt7vFFnzfrlQUkzEXiamRqZ9tz4X pmuIeJT5yD1ghVu3rlS0NP4uHL6JPn5XNMy8TzMOt5F7caBF8aoIKr/MffJ1qC/D TTA5pnEw3QlYFpxmNu4YU4BBgkiUYCouYEmmwRcmdS9+UC9UFYfwiziKGN1H6qbB tHf0LHFKG5zS1cFDfiOCM8q5FJIZiufU6mY7fn1CjZBuQwaRRJs0DBKv5CJey/5F JBC9SyU2kCvjMbK+VJdlatPfC+svdDmHxV5dh8qLgG3Vd4r0DXXFshFNUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCK4klJLEXV20V3W1fzHIChfzJLDMB8GA1UdIwQY MBaAFM2GuM4iJIKhT5sTRozlfpmSaElhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvellhNHppSWtncUZQbXhOR2pPVi1tWkpvU1dFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC82MDgxMTQtYTk3YS00ODc3LTk0Yzct ZGMyZDU1NzUwM2VlLzEvellhNHppSWtncUZQbXhOR2pPVi1tWkpvU1dFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC82MDgxMTQtYTk3YS00ODc3LTk0YzctZGMyZDU1NzUwM2Vl LzEvellhNHppSWtncUZQbXhOR2pPVi1tWkpvU1dFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP4Z4EtgI u1bQrDx5TWyQa74CuXDzYfAvtjFdXDtJkRqqbYRv4x4HIG8kaAvo/ItJbRa8NveT /dvPjg7yiZzJJCIUv8ST1dyB0N8OY9PL9mAjhdfQr5hrd7MTzVwcxUyXyEDcFlsm oTXRRm88EXKf/mBRl39QAcfpEfmOM6WZiLL0FrkplZs8CSUsXdc96YlCy+BLcUdv B+ElZkIyFKX0GrurGWFHCIdLWCp6TK2ndRmsDo9/7c8WKhnHK4cbL7/phRVYGSmO io0TDpon1KwebRKUQVFlZZ+BOtnQAB0visjkW7EVHtALhRCNqPOpUGdXI3JIxAYI PWbq6RBVsI42aw== -----END CERTIFICATE-----Generated at Fri Dec 12 13:22:09 2025 by rpki-client