This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.mft File: zybJGvCrJmijYBstlX3EzgAtWYY.mft (raw, json) Hash identifier: G+3N6Bh44lqNhF4bAGW5L8D9sOp/BjNX4JKzLNzTwc8= Subject key identifier: D8:E0:4D:A9:CF:85:B2:21:6A:4B:47:CE:53:42:E7:88:57:AF:6D:A2 Authority key identifier: CF:26:C9:1A:F0:AB:26:68:A3:60:1B:2D:95:7D:C4:CE:00:2D:59:86 Certificate issuer: /CN=cf26c91af0ab2668a3601b2d957dc4ce002d5986 Certificate serial: 019AF19B895E12C6FFD3335D044610618981 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zybJGvCrJmijYBstlX3EzgAtWYY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 03:01:33 +0000 Manifest this update: Sat 06 Dec 2025 03:01:33 +0000 Manifest next update: Sun 07 Dec 2025 03:01:33 +0000 Files and hashes: 1: JauXkuBrJ-Jj9T7iuekamPiA2KM.roa (hash: +JxWUzvZHawG/TTDHvvjcR4tNCgM0dBRjS+5hf64dGM=) 2: zybJGvCrJmijYBstlX3EzgAtWYY.crl (hash: M6YPaABoM4VBnFiGzWu1vatc9Q1kp/HosvHxQSVLj6A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.mft rsync://rpki.ripe.net/repository/DEFAULT/zybJGvCrJmijYBstlX3EzgAtWYY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:89:5e:12:c6:ff:d3:33:5d:04:46:10:61:89:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf26c91af0ab2668a3601b2d957dc4ce002d5986 Validity Not Before: Dec 6 03:01:33 2025 GMT Not After : Dec 7 03:01:33 2025 GMT Subject: CN=d8e04da9cf85b2216a4b47ce5342e78857af6da2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:36:50:13:7a:05:60:8b:2c:f6:a9:ad:36:37: 50:cd:b2:66:f6:94:25:5b:6d:5f:46:42:2b:86:0b: 78:19:57:f8:78:8b:15:91:f1:74:9e:b9:9c:f8:f1: e6:bb:44:9c:90:ab:e1:3f:5e:00:43:7c:6c:0d:b8: b8:74:44:82:3f:82:13:e3:8b:ec:85:f7:1a:62:41: 9c:68:f1:9e:62:8b:8e:54:56:db:e1:b9:2f:e6:24: 7a:30:72:ee:57:f7:bf:8e:d0:06:2c:a2:ed:f6:89: 6d:bd:ed:4a:dd:bf:c3:82:f6:b9:81:46:cf:d7:10: 6b:33:20:e7:cb:84:1f:69:b2:0c:be:3c:80:63:9e: 9d:d4:cb:26:24:72:61:6e:59:58:1a:7c:b4:55:45: af:7d:c5:67:a9:ea:2d:69:5d:7f:87:6b:d0:da:6e: e5:e7:97:fe:b0:f5:57:df:f2:0d:51:46:6d:27:a3: 70:37:3f:6b:76:27:40:01:1d:34:66:61:a7:99:b1: b0:22:c1:44:b8:c8:3d:bc:14:98:3b:ae:3a:1e:39: 85:be:ff:84:6b:a0:13:e6:cb:7b:be:0c:fd:01:60: 94:b2:85:3f:a1:bc:49:1b:91:c8:c0:7f:da:66:1f: 08:d4:0a:36:54:57:73:33:10:c6:4b:1f:25:ac:df: 3e:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:E0:4D:A9:CF:85:B2:21:6A:4B:47:CE:53:42:E7:88:57:AF:6D:A2 X509v3 Authority Key Identifier: keyid:CF:26:C9:1A:F0:AB:26:68:A3:60:1B:2D:95:7D:C4:CE:00:2D:59:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zybJGvCrJmijYBstlX3EzgAtWYY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:60:28:87:6d:c0:dc:cc:53:48:fe:cd:d6:0c:23:33:24:38: f9:06:0c:07:98:1b:2a:d4:1f:6a:32:57:1b:f1:41:82:ec:b5: 3c:76:e8:6a:9f:cd:ba:91:ee:d4:c6:13:0a:ec:79:92:b2:0e: aa:27:2e:f1:51:70:9b:db:ae:73:9a:14:b7:76:27:6c:1e:a1: 21:70:92:e4:64:b6:ca:ea:54:00:c8:79:68:47:0a:6c:04:e2: 12:4f:1c:9b:9a:d9:d5:53:b2:d4:b1:12:c9:1f:96:16:3b:d9: 3c:db:d7:61:7a:a6:25:19:d8:cc:8e:74:46:5c:7e:c4:73:06: ef:fc:4a:07:71:33:de:ba:65:ee:f7:1f:e1:44:03:96:be:20: fd:f6:8d:f3:8f:07:e3:a9:f0:74:a7:14:68:24:92:95:eb:ca: c9:5b:c4:17:79:19:77:77:4d:fc:64:21:20:33:46:51:47:16: db:3b:5b:6a:4b:2a:70:70:61:0a:88:03:ac:cf:be:a3:96:5e: 05:d5:bb:2c:ee:13:b3:0a:be:4b:c9:9f:50:5f:47:90:a6:f7: d0:d4:fb:a7:0b:ce:40:6a:46:3a:18:13:74:66:b1:28:b2:0d: 59:d0:a6:19:35:c2:41:23:6e:73:5c:0a:0c:a6:7b:10:23:50: 3e:48:9d:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm4leEsb/0zNdBEYQYYmBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmMjZjOTFhZjBhYjI2NjhhMzYwMWIyZDk1N2RjNGNlMDAy ZDU5ODYwHhcNMjUxMjA2MDMwMTMzWhcNMjUxMjA3MDMwMTMzWjAzMTEwLwYDVQQD EyhkOGUwNGRhOWNmODViMjIxNmE0YjQ3Y2U1MzQyZTc4ODU3YWY2ZGEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTZQE3oFYIss9qmtNjdQzbJm9pQl W21fRkIrhgt4GVf4eIsVkfF0nrmc+PHmu0SckKvhP14AQ3xsDbi4dESCP4IT44vs hfcaYkGcaPGeYouOVFbb4bkv5iR6MHLuV/e/jtAGLKLt9oltve1K3b/Dgva5gUbP 1xBrMyDny4QfabIMvjyAY56d1MsmJHJhbllYGny0VUWvfcVnqeotaV1/h2vQ2m7l 55f+sPVX3/INUUZtJ6NwNz9rdidAAR00ZmGnmbGwIsFEuMg9vBSYO646HjmFvv+E a6AT5st7vgz9AWCUsoU/obxJG5HIwH/aZh8I1Ao2VFdzMxDGSx8lrN8+owIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNjgTanPhbIhaktHzlNC54hXr22iMB8GA1UdIwQY MBaAFM8myRrwqyZoo2AbLZV9xM4ALVmGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenliSkd2Q3JKbWlqWUJzdGxYM0V6Z0F0V1lZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS83NmRkZDctMGFmMi00M2NlLTk4NTkt NmJjODM5NDY1NmI3LzEvenliSkd2Q3JKbWlqWUJzdGxYM0V6Z0F0V1lZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS83NmRkZDctMGFmMi00M2NlLTk4NTktNmJjODM5NDY1NmI3 LzEvenliSkd2Q3JKbWlqWUJzdGxYM0V6Z0F0V1lZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMWAoh23A 3MxTSP7N1gwjMyQ4+QYMB5gbKtQfajJXG/FBguy1PHboap/NupHu1MYTCux5krIO qicu8VFwm9uuc5oUt3YnbB6hIXCS5GS2yupUAMh5aEcKbATiEk8cm5rZ1VOy1LES yR+WFjvZPNvXYXqmJRnYzI50Rlx+xHMG7/xKB3Ez3rpl7vcf4UQDlr4g/faN848H 46nwdKcUaCSSlevKyVvEF3kZd3dN/GQhIDNGUUcW2ztbaksqcHBhCogDrM++o5Ze BdW7LO4Tswq+S8mfUF9HkKb30NT7pwvOQGpGOhgTdGaxKLINWdCmGTXCQSNuc1wK DKZ7ECNQPkidfQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:20:41 2025 by rpki-client