This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft File: ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft (raw, json) Hash identifier: 0nSnEUlAo3J5a8IaCu/72oZDfC6yKVgcIhnhbtKWQcM= Subject key identifier: C7:D4:3D:16:86:2E:2A:39:56:94:EF:A5:31:6E:D3:D1:F9:F7:BD:AF Authority key identifier: 65:83:D3:22:EF:24:C8:71:98:B7:65:EA:1D:1C:42:C2:83:A7:F8:F6 Certificate issuer: /CN=6583d322ef24c87198b765ea1d1c42c283a7f8f6 Certificate serial: 019AF540E6BC30FC39492B4864B3DE7469F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft Manifest number: 10CB Signing time: Sat 06 Dec 2025 20:01:02 +0000 Manifest this update: Sat 06 Dec 2025 20:01:02 +0000 Manifest next update: Sun 07 Dec 2025 20:01:02 +0000 Files and hashes: 1: DkGvgDnbdtEHDMx7b64dzBjhPco.roa (hash: 8mB0OA1c8Mmrq7iJrmaJaIVGUwLhqVKrizBW/uXLsCE=) 2: ZYPTIu8kyHGYt2XqHRxCwoOn-PY.crl (hash: usg6DG/kIDarsIaCIRjTgSHlJgXcngghb89VvI/kxAc=) 3: ZiWYCsD1Dry724z5OmJJ8Oawr6w.roa (hash: pA+krdDNaZYU7n+P4r9c22BIzRTJGvLkmVz3LgTk2aU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.crl rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft rsync://rpki.ripe.net/repository/DEFAULT/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 20:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:e6:bc:30:fc:39:49:2b:48:64:b3:de:74:69:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6583d322ef24c87198b765ea1d1c42c283a7f8f6 Validity Not Before: Dec 6 20:01:02 2025 GMT Not After : Dec 7 20:01:02 2025 GMT Subject: CN=c7d43d16862e2a395694efa5316ed3d1f9f7bdaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ff:90:e9:f7:da:83:e8:4d:90:17:79:2e:27: 7f:86:55:37:43:12:a5:70:d8:f0:65:f1:c1:1e:5e: b3:3d:53:32:48:1a:9f:26:90:15:93:2d:03:52:70: bc:c2:8b:3d:90:6d:51:fc:f4:ca:ac:55:03:d9:62: cb:3e:bd:13:59:a8:7c:16:29:69:46:c7:f2:2d:10: 5c:8d:17:5d:a3:5d:5b:8a:db:6f:45:07:57:08:c0: 0c:6c:c2:48:e5:25:91:ad:3d:1d:d6:5c:01:a9:02: be:a3:0e:ec:f5:f7:e0:26:15:bb:68:bf:ec:49:66: 70:05:b2:9a:55:6a:ac:f7:fe:aa:5f:55:f3:0e:72: 63:f1:ff:06:5b:a2:a8:92:a3:b8:47:bb:e4:c2:95: 33:9c:ab:19:17:18:18:a2:b9:16:e1:7d:cb:b9:47: 16:63:f7:94:1a:c8:29:8c:56:c6:02:06:a2:f4:5e: 10:7c:f8:ea:c3:9d:98:5d:87:ba:fe:ce:c2:30:4c: 6a:71:f3:0b:bb:dd:6a:eb:5b:c0:38:71:ee:5f:b8: 45:6e:2d:3c:01:f3:57:e2:f2:56:ef:cb:a3:26:ff: 29:30:91:5b:5f:45:2d:76:59:1c:c8:fb:76:9c:f0: c8:fe:a2:92:da:54:1e:95:26:8b:9e:ce:14:db:4a: c7:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:D4:3D:16:86:2E:2A:39:56:94:EF:A5:31:6E:D3:D1:F9:F7:BD:AF X509v3 Authority Key Identifier: keyid:65:83:D3:22:EF:24:C8:71:98:B7:65:EA:1D:1C:42:C2:83:A7:F8:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:18:81:e7:de:4f:3d:ad:ea:d2:cd:17:25:b0:ad:d4:49:7a: 2c:c0:7d:1e:d7:9b:6d:cf:b8:43:a0:79:6c:d6:c9:6b:35:63: 75:39:13:10:0b:68:d6:8b:7e:48:51:a3:68:98:fc:77:bf:5c: 04:d0:04:af:59:ef:0d:9c:eb:33:0c:f6:3a:51:47:20:f4:71: 09:50:62:a0:5f:42:bb:65:07:07:a7:fc:2c:d8:5a:99:ce:c5: eb:51:2c:b7:f6:66:db:30:f4:15:67:4b:12:07:61:a3:70:94: 01:82:93:7d:92:55:e2:6e:71:9a:49:5a:2d:c9:02:cd:d9:cb: b9:f0:60:d5:6e:08:83:a0:ba:29:c3:34:39:e6:bb:1c:0c:50: 1c:b4:05:fd:33:20:00:be:43:cf:e3:ef:2b:c5:1d:bd:72:d1: 71:18:20:02:2d:09:7f:cf:6b:00:e0:fc:74:3a:fb:70:f5:7e: bb:31:f9:4a:d9:8d:f8:2f:2c:3c:8a:01:30:b2:ef:c2:2b:fa: e9:cc:aa:c3:69:1c:38:64:8b:23:8b:a8:3f:b1:4a:6e:43:3b: f8:f1:f9:6a:8f:af:3d:db:71:79:46:23:30:63:68:c1:e7:08: 29:9a:aa:5a:38:0b:cb:14:22:88:ed:a5:17:4b:8c:60:4a:12: 8d:88:a6:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QOa8MPw5SStIZLPedGn3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1ODNkMzIyZWYyNGM4NzE5OGI3NjVlYTFkMWM0MmMyODNh N2Y4ZjYwHhcNMjUxMjA2MjAwMTAyWhcNMjUxMjA3MjAwMTAyWjAzMTEwLwYDVQQD EyhjN2Q0M2QxNjg2MmUyYTM5NTY5NGVmYTUzMTZlZDNkMWY5ZjdiZGFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjv+Q6ffag+hNkBd5Lid/hlU3QxKl cNjwZfHBHl6zPVMySBqfJpAVky0DUnC8wos9kG1R/PTKrFUD2WLLPr0TWah8Filp RsfyLRBcjRddo11bittvRQdXCMAMbMJI5SWRrT0d1lwBqQK+ow7s9ffgJhW7aL/s SWZwBbKaVWqs9/6qX1XzDnJj8f8GW6KokqO4R7vkwpUznKsZFxgYorkW4X3LuUcW Y/eUGsgpjFbGAgai9F4QfPjqw52YXYe6/s7CMExqcfMLu91q61vAOHHuX7hFbi08 AfNX4vJW78ujJv8pMJFbX0UtdlkcyPt2nPDI/qKS2lQelSaLns4U20rHgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMfUPRaGLio5VpTvpTFu09H5972vMB8GA1UdIwQY MBaAFGWD0yLvJMhxmLdl6h0cQsKDp/j2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWllQVEl1OGt5SEdZdDJYcUhSeEN3b09uLVBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9mMDk3MWEtODg5MS00YjUzLTk0NGMt NWJlOWUxMTdkYmRhLzEvWllQVEl1OGt5SEdZdDJYcUhSeEN3b09uLVBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni9mMDk3MWEtODg5MS00YjUzLTk0NGMtNWJlOWUxMTdkYmRh LzEvWllQVEl1OGt5SEdZdDJYcUhSeEN3b09uLVBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFBiB595P Pa3q0s0XJbCt1El6LMB9Htebbc+4Q6B5bNbJazVjdTkTEAto1ot+SFGjaJj8d79c BNAEr1nvDZzrMwz2OlFHIPRxCVBioF9Cu2UHB6f8LNhamc7F61Est/Zm2zD0FWdL Egdho3CUAYKTfZJV4m5xmklaLckCzdnLufBg1W4Ig6C6KcM0Oea7HAxQHLQF/TMg AL5Dz+PvK8UdvXLRcRggAi0Jf89rAOD8dDr7cPV+uzH5StmN+C8sPIoBMLLvwiv6 6cyqw2kcOGSLI4uoP7FKbkM7+PH5ao+vPdtxeUYjMGNowecIKZqqWjgLyxQiiO2l F0uMYEoSjYimdg== -----END CERTIFICATE-----Generated at Sun Dec 7 03:42:26 2025 by rpki-client