This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.mft File: znys-nNc7q_dKiFMCe5yRpQlJQ4.mft (raw, json) Hash identifier: fADj/p/CzGmAcFk2p86Cgxw59OgbOrecdH5lkfcztWE= Subject key identifier: 75:A7:6C:C3:D0:8B:96:42:85:71:B4:E3:C3:84:7C:0C:F5:47:49:25 Authority key identifier: CE:7C:AC:FA:73:5C:EE:AF:DD:2A:21:4C:09:EE:72:46:94:25:25:0E Certificate issuer: /CN=ce7cacfa735ceeafdd2a214c09ee72469425250e Certificate serial: 019AF19A944206653A4DDFD7F5A6C9C713F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/znys-nNc7q_dKiFMCe5yRpQlJQ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.mft Manifest number: 07A8 Signing time: Sat 06 Dec 2025 03:00:30 +0000 Manifest this update: Sat 06 Dec 2025 03:00:30 +0000 Manifest next update: Sun 07 Dec 2025 03:00:30 +0000 Files and hashes: 1: 0KTmbSRfcRK8-n1qcmKR418DNUs.roa (hash: P50v6XitnoLdzzBD57fVGVtkTs/as999tNUAveVrHNg=) 2: SBa7BiJFT-mIs1J1piv1ATsLy8Y.roa (hash: IPgzHNDHbety+MkOooZgTafgMRF/usWyWiKxf6WdA3E=) 3: dd3Agc5TCDHtIQ62hjbQNZkWxY4.roa (hash: yPBeMJO0RoRNX6fs06ij/fwJ13bpNgiBqfocAHDtu4U=) 4: znys-nNc7q_dKiFMCe5yRpQlJQ4.crl (hash: V3YtjZL9l6EcAQQ6oAPfmbNnbCGl+fgST8JwNL9kyEM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.crl rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.mft rsync://rpki.ripe.net/repository/DEFAULT/znys-nNc7q_dKiFMCe5yRpQlJQ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:94:42:06:65:3a:4d:df:d7:f5:a6:c9:c7:13:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce7cacfa735ceeafdd2a214c09ee72469425250e Validity Not Before: Dec 6 03:00:30 2025 GMT Not After : Dec 7 03:00:30 2025 GMT Subject: CN=75a76cc3d08b96428571b4e3c3847c0cf5474925 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:7b:93:f8:5c:87:42:f7:54:c7:5d:d2:bb:bd: 79:11:49:c4:ad:a9:51:a7:1d:c7:36:98:a2:5c:2b: 92:8d:85:62:f7:71:b7:26:a3:b3:b8:d2:bd:61:1b: 16:f7:32:ee:59:a0:c7:8d:90:11:f6:5f:cd:c2:6d: 5d:6c:87:cc:47:38:7c:c6:fc:79:70:c4:73:92:c7: d5:f3:1b:c0:4f:55:0d:0b:ca:64:33:65:09:ff:17: 82:cf:36:49:b9:1c:fd:d7:3c:4a:25:7f:88:a5:a6: a9:49:fd:64:a1:6a:1d:52:9b:f0:8c:fe:74:d6:5d: 70:84:1c:d6:32:d9:cc:3a:cc:53:5b:34:ae:10:dc: ef:af:02:e6:c4:6d:99:ab:33:5e:cc:af:29:33:02: 60:be:32:c0:13:aa:fa:91:e2:c8:09:a1:f9:13:d4: 84:fc:f2:ba:0d:6d:01:c1:91:43:0b:70:e0:ad:f6: 0b:f2:36:37:e8:5b:25:64:7e:d8:9a:3e:8f:a2:89: 74:db:ab:f5:fa:49:eb:b0:c6:cd:dd:e6:4f:55:4e: 73:aa:59:0e:0f:6b:d7:de:4f:6d:a2:68:4d:12:5a: f0:16:db:df:19:08:c1:0a:a6:a7:c3:63:6f:97:4b: 5f:d8:5f:eb:a0:26:f6:74:b0:b6:00:8d:8e:df:9f: e7:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:A7:6C:C3:D0:8B:96:42:85:71:B4:E3:C3:84:7C:0C:F5:47:49:25 X509v3 Authority Key Identifier: keyid:CE:7C:AC:FA:73:5C:EE:AF:DD:2A:21:4C:09:EE:72:46:94:25:25:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znys-nNc7q_dKiFMCe5yRpQlJQ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:b5:fc:6c:4f:68:41:7e:0d:09:38:ee:f4:5f:58:0b:86:24: b9:4b:cb:f9:da:8f:6c:da:db:95:ec:c3:a6:e8:ac:ce:cd:75: 47:8d:94:12:7e:12:78:bf:cd:ee:62:e4:52:a7:5b:81:f0:a6: 17:fd:d9:ae:b3:06:63:4e:1e:ad:be:2a:69:10:49:f0:ed:cf: 5b:cd:10:01:bc:12:93:13:66:d5:28:61:4c:fd:1a:01:09:ca: e6:c4:51:9f:9a:30:2f:25:39:b5:87:ea:12:a3:70:03:c5:c9: 04:8b:2e:d0:de:01:69:97:ff:53:25:44:c5:87:79:a5:90:b2: 5d:07:6b:59:b5:36:9d:0b:e9:d8:b8:9a:50:1c:12:02:1b:f2: b4:be:70:33:87:2c:56:91:ad:93:4d:bf:71:24:ef:e7:b2:71: 1d:b9:55:3e:60:73:cd:35:cc:80:4f:b1:ad:14:31:8d:ba:b1: 22:85:88:b4:2d:29:de:d1:f6:07:45:5b:d2:21:01:5a:3f:1b: 97:15:17:a7:6c:79:5e:c4:e5:28:4f:53:31:f1:50:c3:f0:07: 44:b4:be:b3:41:98:e0:30:7e:eb:d7:96:e2:87:ef:8b:18:54: 87:c1:81:66:ab:32:a4:63:79:a4:5d:be:bb:4e:55:72:12:02: 3e:8d:9d:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmpRCBmU6Td/X9abJxxPxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlN2NhY2ZhNzM1Y2VlYWZkZDJhMjE0YzA5ZWU3MjQ2OTQy NTI1MGUwHhcNMjUxMjA2MDMwMDMwWhcNMjUxMjA3MDMwMDMwWjAzMTEwLwYDVQQD Eyg3NWE3NmNjM2QwOGI5NjQyODU3MWI0ZTNjMzg0N2MwY2Y1NDc0OTI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA33uT+FyHQvdUx13Su715EUnEralR px3HNpiiXCuSjYVi93G3JqOzuNK9YRsW9zLuWaDHjZAR9l/Nwm1dbIfMRzh8xvx5 cMRzksfV8xvAT1UNC8pkM2UJ/xeCzzZJuRz91zxKJX+IpaapSf1koWodUpvwjP50 1l1whBzWMtnMOsxTWzSuENzvrwLmxG2ZqzNezK8pMwJgvjLAE6r6keLICaH5E9SE /PK6DW0BwZFDC3DgrfYL8jY36FslZH7Ymj6Pool026v1+knrsMbN3eZPVU5zqlkO D2vX3k9tomhNElrwFtvfGQjBCqanw2Nvl0tf2F/roCb2dLC2AI2O35/nEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHWnbMPQi5ZChXG048OEfAz1R0klMB8GA1UdIwQY MBaAFM58rPpzXO6v3SohTAnuckaUJSUOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvem55cy1uTmM3cV9kS2lGTUNlNXlScFFsSlE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9hNjM2ZWQtZDIwZi00ODAyLTkyODYt Yjg0ZWRhMmU4NDZhLzEvem55cy1uTmM3cV9kS2lGTUNlNXlScFFsSlE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9hNjM2ZWQtZDIwZi00ODAyLTkyODYtYjg0ZWRhMmU4NDZh LzEvem55cy1uTmM3cV9kS2lGTUNlNXlScFFsSlE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhrX8bE9o QX4NCTju9F9YC4YkuUvL+dqPbNrblezDpuiszs11R42UEn4SeL/N7mLkUqdbgfCm F/3ZrrMGY04erb4qaRBJ8O3PW80QAbwSkxNm1ShhTP0aAQnK5sRRn5owLyU5tYfq EqNwA8XJBIsu0N4BaZf/UyVExYd5pZCyXQdrWbU2nQvp2LiaUBwSAhvytL5wM4cs VpGtk02/cSTv57JxHblVPmBzzTXMgE+xrRQxjbqxIoWItC0p3tH2B0Vb0iEBWj8b lxUXp2x5XsTlKE9TMfFQw/AHRLS+s0GY4DB+69eW4ofvixhUh8GBZqsypGN5pF2+ u05VchICPo2dvw== -----END CERTIFICATE-----Generated at Sat Dec 6 13:26:31 2025 by rpki-client