This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/d7e660-6912-4380-ab4f-718b9c40fd25/1/zy7ueKAITYMd4aJQAYPhZIlRbM8.mft File: zy7ueKAITYMd4aJQAYPhZIlRbM8.mft (raw, json) Hash identifier: 0bm3jANm9VqDNfLEiHSshiQJ3aXqZ7U8YDBI4/YESzc= Subject key identifier: 71:54:9F:B9:C9:BC:BC:F9:48:1B:C4:EA:6F:82:6C:79:1D:B3:FE:E3 Authority key identifier: CF:2E:EE:78:A0:08:4D:83:1D:E1:A2:50:01:83:E1:64:89:51:6C:CF Certificate issuer: /CN=cf2eee78a0084d831de1a2500183e16489516ccf Certificate serial: 019AF31B87131490985B03C099A0A9CCDD72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zy7ueKAITYMd4aJQAYPhZIlRbM8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/d7e660-6912-4380-ab4f-718b9c40fd25/1/zy7ueKAITYMd4aJQAYPhZIlRbM8.mft Manifest number: 1066 Signing time: Sat 06 Dec 2025 10:00:58 +0000 Manifest this update: Sat 06 Dec 2025 10:00:58 +0000 Manifest next update: Sun 07 Dec 2025 10:00:58 +0000 Files and hashes: 1: DoG2UFHCOj7zOTIUPjjt5XZyaMI.roa (hash: o5jRgA59QPQWDTQLvIg+41ICmEKRDLb8Qb3vB5Fkcs4=) 2: zy7ueKAITYMd4aJQAYPhZIlRbM8.crl (hash: 8EYKiCnzLp43DUlXNxSOBvjOv2t510xCT2nveL8rqsg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/d7e660-6912-4380-ab4f-718b9c40fd25/1/zy7ueKAITYMd4aJQAYPhZIlRbM8.crl rsync://rpki.ripe.net/repository/DEFAULT/19/d7e660-6912-4380-ab4f-718b9c40fd25/1/zy7ueKAITYMd4aJQAYPhZIlRbM8.mft rsync://rpki.ripe.net/repository/DEFAULT/zy7ueKAITYMd4aJQAYPhZIlRbM8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:87:13:14:90:98:5b:03:c0:99:a0:a9:cc:dd:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf2eee78a0084d831de1a2500183e16489516ccf Validity Not Before: Dec 6 10:00:58 2025 GMT Not After : Dec 7 10:00:58 2025 GMT Subject: CN=71549fb9c9bcbcf9481bc4ea6f826c791db3fee3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:e0:55:97:ce:eb:0f:43:0f:5c:a8:f3:a0:54: 34:38:54:93:09:d7:80:ba:8e:f3:ff:4e:69:e0:54: 27:c3:74:89:34:93:c6:43:a5:35:79:50:26:52:12: f9:0d:e7:9f:d6:df:15:39:0b:f5:64:87:00:f9:8e: 32:ee:87:68:fa:fc:ba:2b:b7:3d:28:d9:1a:0e:e1: 21:de:b9:cf:96:83:de:4c:a1:00:ef:0b:80:3e:ad: a7:3d:bb:ff:22:eb:04:1a:12:03:62:31:b6:87:55: 6b:07:c8:40:a5:aa:6e:3f:61:1b:d5:d2:82:76:83: a8:3f:29:14:0a:e4:3c:53:af:f3:50:f8:a4:96:0d: ce:1e:7c:52:87:2e:8d:4d:72:84:c1:98:da:74:2f: 5d:4c:72:5e:e6:dc:49:4b:43:a3:17:93:c0:0e:02: 5d:fc:04:77:1f:b3:c1:89:f5:cb:77:48:38:c7:0e: 20:db:d7:ea:a7:22:04:ec:44:24:5b:e3:01:8e:3a: d9:24:90:0b:da:be:f7:1c:6a:ae:b9:fc:22:f4:8a: 25:28:51:f8:65:6d:e9:f3:48:b7:14:c6:5d:34:14: 22:11:6e:4a:29:ad:b4:4e:65:38:b3:76:95:4c:be: 35:45:ef:57:f3:37:5b:fa:d9:d8:3b:96:25:cc:40: 62:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:54:9F:B9:C9:BC:BC:F9:48:1B:C4:EA:6F:82:6C:79:1D:B3:FE:E3 X509v3 Authority Key Identifier: keyid:CF:2E:EE:78:A0:08:4D:83:1D:E1:A2:50:01:83:E1:64:89:51:6C:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zy7ueKAITYMd4aJQAYPhZIlRbM8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d7e660-6912-4380-ab4f-718b9c40fd25/1/zy7ueKAITYMd4aJQAYPhZIlRbM8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d7e660-6912-4380-ab4f-718b9c40fd25/1/zy7ueKAITYMd4aJQAYPhZIlRbM8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:d6:8f:58:f0:9d:7f:bd:f0:da:b1:4b:d8:b3:97:76:63:e1: 60:2e:3c:8d:c8:1b:f1:2c:13:8d:ad:5c:fb:6a:1c:57:38:1b: bd:3a:93:7c:80:08:26:bf:85:22:f8:19:1d:b5:be:33:43:28: 73:84:67:d4:de:3e:e1:33:83:53:75:a3:1c:2d:99:f5:f9:63: ea:9b:8d:f2:9c:ff:20:14:3e:91:7b:26:ae:4b:b5:7f:51:4f: fc:23:3b:91:55:5a:b9:cc:56:94:18:ac:7f:87:14:1a:bd:31: 38:e2:1a:f1:26:e1:b3:96:b2:7d:ce:01:2e:23:e5:9b:61:c5: 91:2e:39:25:a4:9a:b1:0e:be:3e:52:ad:bd:46:80:29:75:c3: 0d:67:44:74:4b:49:fa:c5:e4:9f:d3:7b:94:76:12:99:2d:bd: 81:77:be:43:dd:ea:e6:cd:7b:ea:ad:74:91:a4:a1:d1:da:88: 11:5e:43:69:df:0b:1f:6b:ac:cd:1f:b1:83:3f:75:07:0b:e2: 04:ce:b4:d9:3c:a8:7a:33:e9:0c:55:c4:fa:60:2a:6f:f8:46: c6:f6:9d:6c:48:18:3d:2f:ff:4a:19:43:4c:86:a3:53:0a:24: 1b:12:f8:64:d9:c6:35:a4:17:aa:b3:4a:47:c3:bf:2f:3d:ca: 4f:5b:3d:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG4cTFJCYWwPAmaCpzN1yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmMmVlZTc4YTAwODRkODMxZGUxYTI1MDAxODNlMTY0ODk1 MTZjY2YwHhcNMjUxMjA2MTAwMDU4WhcNMjUxMjA3MTAwMDU4WjAzMTEwLwYDVQQD Eyg3MTU0OWZiOWM5YmNiY2Y5NDgxYmM0ZWE2ZjgyNmM3OTFkYjNmZWUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzuBVl87rD0MPXKjzoFQ0OFSTCdeA uo7z/05p4FQnw3SJNJPGQ6U1eVAmUhL5Deef1t8VOQv1ZIcA+Y4y7odo+vy6K7c9 KNkaDuEh3rnPloPeTKEA7wuAPq2nPbv/IusEGhIDYjG2h1VrB8hApapuP2Eb1dKC doOoPykUCuQ8U6/zUPiklg3OHnxShy6NTXKEwZjadC9dTHJe5txJS0OjF5PADgJd /AR3H7PBifXLd0g4xw4g29fqpyIE7EQkW+MBjjrZJJAL2r73HGquufwi9IolKFH4 ZW3p80i3FMZdNBQiEW5KKa20TmU4s3aVTL41Re9X8zdb+tnYO5YlzEBiYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHFUn7nJvLz5SBvE6m+CbHkds/7jMB8GA1UdIwQY MBaAFM8u7nigCE2DHeGiUAGD4WSJUWzPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenk3dWVLQUlUWU1kNGFKUUFZUGhaSWxSYk04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9kN2U2NjAtNjkxMi00MzgwLWFiNGYt NzE4YjljNDBmZDI1LzEvenk3dWVLQUlUWU1kNGFKUUFZUGhaSWxSYk04Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9kN2U2NjAtNjkxMi00MzgwLWFiNGYtNzE4YjljNDBmZDI1 LzEvenk3dWVLQUlUWU1kNGFKUUFZUGhaSWxSYk04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYtaPWPCd f73w2rFL2LOXdmPhYC48jcgb8SwTja1c+2ocVzgbvTqTfIAIJr+FIvgZHbW+M0Mo c4Rn1N4+4TODU3WjHC2Z9flj6puN8pz/IBQ+kXsmrku1f1FP/CM7kVVaucxWlBis f4cUGr0xOOIa8Sbhs5ayfc4BLiPlm2HFkS45JaSasQ6+PlKtvUaAKXXDDWdEdEtJ +sXkn9N7lHYSmS29gXe+Q93q5s176q10kaSh0dqIEV5Dad8LH2uszR+xgz91Bwvi BM602TyoejPpDFXE+mAqb/hGxvadbEgYPS//ShlDTIajUwokGxL4ZNnGNaQXqrNK R8O/Lz3KT1s93g== -----END CERTIFICATE-----Generated at Sat Dec 6 14:34:37 2025 by rpki-client