This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/773600-838f-414c-ac0c-d87019512716/1/zy_MDEv1TV6ct_obsf4anZRhA5A.mft File: zy_MDEv1TV6ct_obsf4anZRhA5A.mft (raw, json) Hash identifier: tZhyn81F8W/8GDpOY68mGbC/gD0fFecSpvxL99uyoeE= Subject key identifier: A6:56:F8:12:80:AF:BC:BB:1B:3C:60:67:FB:84:65:55:34:3F:67:79 Authority key identifier: CF:2F:CC:0C:4B:F5:4D:5E:9C:B7:FA:1B:B1:FE:1A:9D:94:61:03:90 Certificate issuer: /CN=cf2fcc0c4bf54d5e9cb7fa1bb1fe1a9d94610390 Certificate serial: 019B330D51020FE7A56FE759ABAAB87E42B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zy_MDEv1TV6ct_obsf4anZRhA5A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/773600-838f-414c-ac0c-d87019512716/1/zy_MDEv1TV6ct_obsf4anZRhA5A.mft Manifest number: 0B Signing time: Thu 18 Dec 2025 20:01:09 +0000 Manifest this update: Thu 18 Dec 2025 20:01:09 +0000 Manifest next update: Fri 19 Dec 2025 20:01:09 +0000 Files and hashes: 1: c4C-s30CLt36AVb_NSs3ZWVTOhg.roa (hash: ltB4d7MLn89isK4ntD6dJU2QKunUcvt6Owh/MdSGgBg=) 2: zy_MDEv1TV6ct_obsf4anZRhA5A.crl (hash: R7SX7Br1wap5pHnzl2lJdfnb8C2T76fUtSMnd7DfcLM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/773600-838f-414c-ac0c-d87019512716/1/zy_MDEv1TV6ct_obsf4anZRhA5A.crl rsync://rpki.ripe.net/repository/DEFAULT/37/773600-838f-414c-ac0c-d87019512716/1/zy_MDEv1TV6ct_obsf4anZRhA5A.mft rsync://rpki.ripe.net/repository/DEFAULT/zy_MDEv1TV6ct_obsf4anZRhA5A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:0d:51:02:0f:e7:a5:6f:e7:59:ab:aa:b8:7e:42:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf2fcc0c4bf54d5e9cb7fa1bb1fe1a9d94610390 Validity Not Before: Dec 18 20:01:09 2025 GMT Not After : Dec 19 20:01:09 2025 GMT Subject: CN=a656f81280afbcbb1b3c6067fb846555343f6779 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:46:e0:cf:60:c4:53:07:e5:b7:15:ee:10:70: 75:68:c2:69:20:10:57:76:7a:0b:ed:95:06:23:c0: 39:5e:5c:58:18:f1:af:07:b7:af:1a:a5:04:36:35: df:3f:88:37:62:1d:e8:d0:ce:6c:c6:86:e2:6c:f6: 32:c1:dd:ad:3b:b1:b4:05:29:75:ec:1f:3f:a4:89: 36:1e:2c:fd:07:e5:fd:a2:7a:7a:50:92:dd:7f:cd: a7:78:ba:77:6f:5e:04:72:75:6b:40:20:90:cb:9f: b2:0c:c7:b1:7e:1a:20:23:67:ad:5d:3d:3d:79:66: 5c:2e:ad:80:dd:66:78:26:d6:61:75:71:38:92:da: 22:27:6f:21:76:b3:ea:d5:57:18:93:eb:6b:4f:f0: bf:2e:48:11:c8:c0:5e:38:35:ab:59:91:8e:3a:55: 23:44:36:b2:12:77:e8:3e:b5:a7:8c:09:57:26:84: 44:12:9a:1e:c9:d3:41:b0:92:2a:0d:8a:95:b0:09: ea:d8:0e:c0:7c:9b:a4:ac:0f:d5:53:88:4f:1e:20: 8b:e1:d8:60:39:a8:c6:ef:34:87:59:a5:bf:57:66: cb:3b:7b:98:6d:35:72:51:c1:59:07:fc:cf:f1:63: 19:1f:cc:6f:ee:5d:92:76:29:69:da:d5:ca:15:57: 82:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:56:F8:12:80:AF:BC:BB:1B:3C:60:67:FB:84:65:55:34:3F:67:79 X509v3 Authority Key Identifier: keyid:CF:2F:CC:0C:4B:F5:4D:5E:9C:B7:FA:1B:B1:FE:1A:9D:94:61:03:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zy_MDEv1TV6ct_obsf4anZRhA5A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/773600-838f-414c-ac0c-d87019512716/1/zy_MDEv1TV6ct_obsf4anZRhA5A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/773600-838f-414c-ac0c-d87019512716/1/zy_MDEv1TV6ct_obsf4anZRhA5A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:4c:af:45:e0:21:bb:e0:fe:ea:3d:88:b9:b3:cf:c2:35:89: 68:76:63:9f:e6:d0:46:a4:82:e2:46:9b:a0:2f:b0:e5:3b:6c: ef:8f:f3:32:8f:60:11:88:83:62:26:90:ee:c9:61:1b:2a:94: 7e:24:46:ac:03:4c:9c:31:f7:db:57:bd:19:79:d2:c9:5b:3f: ae:a1:b3:27:b6:e6:b8:5b:bd:ae:59:2c:28:3e:27:5d:7a:e6: 53:b0:66:25:bb:7a:73:7c:86:8c:80:11:b5:51:26:e9:43:56: 57:11:17:fd:9d:e5:a3:d0:af:a3:a3:86:9e:ab:22:fd:e1:b9: 33:6c:fb:86:fc:12:8c:d2:57:22:54:9f:5a:d4:d2:8a:30:4c: 3a:6f:7f:d7:e5:da:8d:ab:d3:22:dc:f0:06:1d:53:da:86:3b: 2f:03:27:5a:b4:fd:4c:1c:d7:1f:31:0f:c2:c7:bc:82:4a:a4: 8f:79:a6:23:af:05:17:7a:0b:23:7a:6e:d0:82:a0:2d:7d:7f: 1a:37:76:d7:94:29:0a:8b:ed:3b:14:93:0e:eb:ab:2c:67:59: 4a:6c:1e:6b:b6:c4:1f:55:56:b3:4d:de:db:b2:c2:c6:67:8b: ec:ce:4f:1d:a6:f1:ca:fa:84:3d:bc:3f:e2:44:a0:a0:8e:0a: 44:ea:9d:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszDVECD+elb+dZq6q4fkK0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmMmZjYzBjNGJmNTRkNWU5Y2I3ZmExYmIxZmUxYTlkOTQ2 MTAzOTAwHhcNMjUxMjE4MjAwMTA5WhcNMjUxMjE5MjAwMTA5WjAzMTEwLwYDVQQD EyhhNjU2ZjgxMjgwYWZiY2JiMWIzYzYwNjdmYjg0NjU1NTM0M2Y2Nzc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUbgz2DEUwfltxXuEHB1aMJpIBBX dnoL7ZUGI8A5XlxYGPGvB7evGqUENjXfP4g3Yh3o0M5sxobibPYywd2tO7G0BSl1 7B8/pIk2Hiz9B+X9onp6UJLdf82neLp3b14EcnVrQCCQy5+yDMexfhogI2etXT09 eWZcLq2A3WZ4JtZhdXE4ktoiJ28hdrPq1VcYk+trT/C/LkgRyMBeODWrWZGOOlUj RDayEnfoPrWnjAlXJoREEpoeydNBsJIqDYqVsAnq2A7AfJukrA/VU4hPHiCL4dhg OajG7zSHWaW/V2bLO3uYbTVyUcFZB/zP8WMZH8xv7l2Sdilp2tXKFVeCdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKZW+BKAr7y7GzxgZ/uEZVU0P2d5MB8GA1UdIwQY MBaAFM8vzAxL9U1enLf6G7H+Gp2UYQOQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenlfTURFdjFUVjZjdF9vYnNmNGFuWlJoQTVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy83NzM2MDAtODM4Zi00MTRjLWFjMGMt ZDg3MDE5NTEyNzE2LzEvenlfTURFdjFUVjZjdF9vYnNmNGFuWlJoQTVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy83NzM2MDAtODM4Zi00MTRjLWFjMGMtZDg3MDE5NTEyNzE2 LzEvenlfTURFdjFUVjZjdF9vYnNmNGFuWlJoQTVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADUyvReAh u+D+6j2IubPPwjWJaHZjn+bQRqSC4kaboC+w5Tts74/zMo9gEYiDYiaQ7slhGyqU fiRGrANMnDH321e9GXnSyVs/rqGzJ7bmuFu9rlksKD4nXXrmU7BmJbt6c3yGjIAR tVEm6UNWVxEX/Z3lo9Cvo6OGnqsi/eG5M2z7hvwSjNJXIlSfWtTSijBMOm9/1+Xa javTItzwBh1T2oY7LwMnWrT9TBzXHzEPwse8gkqkj3mmI68FF3oLI3pu0IKgLX1/ Gjd215QpCovtOxSTDuurLGdZSmwea7bEH1VWs03e27LCxmeL7M5PHabxyvqEPbw/ 4kSgoI4KROqdgg== -----END CERTIFICATE-----Generated at Fri Dec 19 03:15:01 2025 by rpki-client