This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/zyddD-Y5mOobfTnlGPsyn3a-0WY.mft File: zyddD-Y5mOobfTnlGPsyn3a-0WY.mft (raw, json) Hash identifier: stxZd3WoIs9pOPnMD5d086gj/wGORFArT1QhL0WPezo= Subject key identifier: B8:39:0B:7F:83:62:64:46:70:DD:F4:82:DE:8F:0E:19:7E:C0:23:46 Authority key identifier: CF:27:5D:0F:E6:39:98:EA:1B:7D:39:E5:18:FB:32:9F:76:BE:D1:66 Certificate issuer: /CN=cf275d0fe63998ea1b7d39e518fb329f76bed166 Certificate serial: 019AF5409B75FAA29B7893ACB41F20DFAE55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zyddD-Y5mOobfTnlGPsyn3a-0WY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/zyddD-Y5mOobfTnlGPsyn3a-0WY.mft Manifest number: 0551 Signing time: Sat 06 Dec 2025 20:00:43 +0000 Manifest this update: Sat 06 Dec 2025 20:00:43 +0000 Manifest next update: Sun 07 Dec 2025 20:00:43 +0000 Files and hashes: 1: vk0CZ3RFiVMIPV6fJBbYIndo60g.roa (hash: nhR9r0G3s61c+Tu68ZLIyGOtCmlcHBQEXfCV7pOI8N4=) 2: zyddD-Y5mOobfTnlGPsyn3a-0WY.crl (hash: 4JDyQs6sDsM7sl43FJb8bzy93bKSypvJ8/OS+Qq2hL4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/zyddD-Y5mOobfTnlGPsyn3a-0WY.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/zyddD-Y5mOobfTnlGPsyn3a-0WY.mft rsync://rpki.ripe.net/repository/DEFAULT/zyddD-Y5mOobfTnlGPsyn3a-0WY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:9b:75:fa:a2:9b:78:93:ac:b4:1f:20:df:ae:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf275d0fe63998ea1b7d39e518fb329f76bed166 Validity Not Before: Dec 6 20:00:43 2025 GMT Not After : Dec 7 20:00:43 2025 GMT Subject: CN=b8390b7f8362644670ddf482de8f0e197ec02346 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:9c:0e:63:6c:42:f4:2e:1b:6c:32:f3:8a:8a: 74:8d:e7:87:88:f7:16:3d:27:4f:7f:d4:8b:40:53: b4:02:68:24:e9:a3:6b:42:f3:fe:8b:7e:67:d3:f2: e3:1e:f8:61:3c:a8:d9:67:d0:4e:9b:3d:13:f2:fb: f0:51:ae:9b:fa:2b:e4:04:1a:c4:43:10:0f:45:4d: 4a:48:60:77:65:54:e8:6d:84:29:77:03:d5:50:4a: f8:0a:bc:87:d6:bf:58:a3:e4:6a:98:8c:65:e7:51: 26:47:02:4a:b5:3a:aa:67:86:6a:85:e3:dc:55:83: 1a:dc:a1:e0:73:17:d4:da:99:a8:5b:8e:2e:ca:ac: 93:be:f2:1d:a0:93:92:c3:6e:5b:a5:29:42:6b:35: 34:0c:8b:83:ff:c7:60:73:e1:ee:f4:fb:0d:57:51: bd:4e:61:d3:97:22:e0:10:20:9c:ac:44:6d:99:1f: 31:c1:4b:81:0d:9e:ad:51:1b:da:05:71:0f:91:61: 2d:4b:1a:6c:fc:50:7a:4c:e7:56:eb:43:50:1a:99: 8f:5f:8e:8e:8e:85:13:fa:bf:f4:3a:26:2e:ab:c2: 62:6b:3d:78:11:fd:9b:ed:18:a5:02:14:98:b0:ed: 6e:29:8a:e4:52:52:d0:75:40:ad:e3:e1:fa:ad:2b: fb:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:39:0B:7F:83:62:64:46:70:DD:F4:82:DE:8F:0E:19:7E:C0:23:46 X509v3 Authority Key Identifier: keyid:CF:27:5D:0F:E6:39:98:EA:1B:7D:39:E5:18:FB:32:9F:76:BE:D1:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zyddD-Y5mOobfTnlGPsyn3a-0WY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/zyddD-Y5mOobfTnlGPsyn3a-0WY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/zyddD-Y5mOobfTnlGPsyn3a-0WY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:5c:a4:87:21:15:fd:5d:b5:50:52:8b:f5:01:24:06:f8:a5: bd:33:2b:02:fc:8d:bc:d9:74:ac:8f:fe:a4:7e:35:0b:98:60: 65:fb:c3:d4:58:35:02:5a:b6:ed:e5:b5:0e:a0:7f:06:db:e8: c8:d2:83:57:e3:d6:13:d3:cf:56:2a:42:6a:2e:9e:a6:d8:78: 93:be:6b:71:52:1d:d7:e9:01:ee:d2:ec:19:e3:aa:13:97:30: 24:86:da:76:7d:92:d0:56:e2:86:da:da:2c:04:fb:7b:78:5f: 0c:27:21:f7:67:65:8b:ac:ec:18:f7:73:39:5a:42:56:55:60: bc:74:6d:34:cd:79:bb:f3:df:ca:6a:94:3d:4f:86:e1:dc:fc: 95:36:39:92:ab:3f:2a:c7:0d:2e:ca:e7:7c:c4:34:3c:8e:40: 96:b1:d2:cb:0c:d6:45:46:93:f9:ed:31:72:4b:09:b0:13:21: 84:19:f7:16:fc:e8:8c:e5:f3:42:99:1b:71:07:74:a3:d1:78: 58:ca:3f:28:01:dc:11:fa:dd:a9:1f:82:30:81:a3:f8:1c:d4: 4f:f4:93:02:21:4b:c0:e2:e4:14:00:78:40:e5:fb:42:af:a1: 96:e2:9d:7c:3a:6e:48:0c:7e:2e:ac:d1:13:ff:cc:17:d2:6d: 89:83:41:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QJt1+qKbeJOstB8g365VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmMjc1ZDBmZTYzOTk4ZWExYjdkMzllNTE4ZmIzMjlmNzZi ZWQxNjYwHhcNMjUxMjA2MjAwMDQzWhcNMjUxMjA3MjAwMDQzWjAzMTEwLwYDVQQD EyhiODM5MGI3ZjgzNjI2NDQ2NzBkZGY0ODJkZThmMGUxOTdlYzAyMzQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5wOY2xC9C4bbDLziop0jeeHiPcW PSdPf9SLQFO0Amgk6aNrQvP+i35n0/LjHvhhPKjZZ9BOmz0T8vvwUa6b+ivkBBrE QxAPRU1KSGB3ZVTobYQpdwPVUEr4CryH1r9Yo+RqmIxl51EmRwJKtTqqZ4ZqhePc VYMa3KHgcxfU2pmoW44uyqyTvvIdoJOSw25bpSlCazU0DIuD/8dgc+Hu9PsNV1G9 TmHTlyLgECCcrERtmR8xwUuBDZ6tURvaBXEPkWEtSxps/FB6TOdW60NQGpmPX46O joUT+r/0OiYuq8Jiaz14Ef2b7RilAhSYsO1uKYrkUlLQdUCt4+H6rSv7KwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLg5C3+DYmRGcN30gt6PDhl+wCNGMB8GA1UdIwQY MBaAFM8nXQ/mOZjqG3055Rj7Mp92vtFmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenlkZEQtWTVtT29iZlRubEdQc3luM2EtMFdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9hNzg1MWMtYmI3OC00ZjI5LWExZDkt N2I5OTE4MjRiZDgzLzEvenlkZEQtWTVtT29iZlRubEdQc3luM2EtMFdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9hNzg1MWMtYmI3OC00ZjI5LWExZDktN2I5OTE4MjRiZDgz LzEvenlkZEQtWTVtT29iZlRubEdQc3luM2EtMFdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAClykhyEV /V21UFKL9QEkBvilvTMrAvyNvNl0rI/+pH41C5hgZfvD1Fg1Alq27eW1DqB/Btvo yNKDV+PWE9PPVipCai6epth4k75rcVId1+kB7tLsGeOqE5cwJIbadn2S0Fbihtra LAT7e3hfDCch92dli6zsGPdzOVpCVlVgvHRtNM15u/PfymqUPU+G4dz8lTY5kqs/ KscNLsrnfMQ0PI5AlrHSywzWRUaT+e0xcksJsBMhhBn3FvzojOXzQpkbcQd0o9F4 WMo/KAHcEfrdqR+CMIGj+BzUT/STAiFLwOLkFAB4QOX7Qq+hluKdfDpuSAx+LqzR E//MF9JtiYNB7w== -----END CERTIFICATE-----Generated at Sun Dec 7 00:33:43 2025 by rpki-client