This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/4bff72-ba5b-4528-8c42-7f6b9f1040fd/1/PZlE6PVlGxvS8KngBoZfOmuB62E.mft File: PZlE6PVlGxvS8KngBoZfOmuB62E.mft (raw, json) Hash identifier: ftVIa9MDVx6anH6HlCSOtiwp8GmajFSnQfvtvHN+frw= Subject key identifier: A6:6D:FB:12:BB:6F:EE:96:FB:9F:66:0D:8E:8C:1F:EA:5E:DB:95:EC Authority key identifier: 3D:99:44:E8:F5:65:1B:1B:D2:F0:A9:E0:06:86:5F:3A:6B:81:EB:61 Certificate issuer: /CN=3d9944e8f5651b1bd2f0a9e006865f3a6b81eb61 Certificate serial: 019AF50B462493EB736B3860212DE81C9126 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PZlE6PVlGxvS8KngBoZfOmuB62E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/4bff72-ba5b-4528-8c42-7f6b9f1040fd/1/PZlE6PVlGxvS8KngBoZfOmuB62E.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 19:02:27 +0000 Manifest this update: Sat 06 Dec 2025 19:02:27 +0000 Manifest next update: Sun 07 Dec 2025 19:02:27 +0000 Files and hashes: 1: PZlE6PVlGxvS8KngBoZfOmuB62E.crl (hash: 0sNdaQ2vFkFA0+7moiy0AFc2M3gXLoaS2tdtATBv1xo=) 2: tlchQmDxgjTRo1pLaspfZw12O3A.roa (hash: 6bDu460ilvbyFwMJbm1Vw+QewREO9nGYqnB3iYaAR4Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/4bff72-ba5b-4528-8c42-7f6b9f1040fd/1/PZlE6PVlGxvS8KngBoZfOmuB62E.crl rsync://rpki.ripe.net/repository/DEFAULT/04/4bff72-ba5b-4528-8c42-7f6b9f1040fd/1/PZlE6PVlGxvS8KngBoZfOmuB62E.mft rsync://rpki.ripe.net/repository/DEFAULT/PZlE6PVlGxvS8KngBoZfOmuB62E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:02:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:46:24:93:eb:73:6b:38:60:21:2d:e8:1c:91:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d9944e8f5651b1bd2f0a9e006865f3a6b81eb61 Validity Not Before: Dec 6 19:02:27 2025 GMT Not After : Dec 7 19:02:27 2025 GMT Subject: CN=a66dfb12bb6fee96fb9f660d8e8c1fea5edb95ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:40:25:cf:66:05:fd:bf:5b:88:65:e1:98:83: ee:dd:70:61:49:6b:2a:7f:a4:43:65:a2:94:9b:86: 0d:90:af:2d:fc:de:ce:8d:69:2e:65:0d:88:9d:80: a7:df:1a:18:3e:dc:68:25:d6:9e:c0:bb:d3:d7:56: bd:2e:ca:7d:3b:01:cb:97:1c:68:f9:c0:9a:d5:77: 54:6a:72:2f:ab:45:a8:17:dc:b9:20:a7:d2:2d:72: 29:1c:42:b5:72:8d:77:1d:31:a2:b8:ae:96:2b:f9: bd:36:68:dc:f7:94:bc:e9:0f:49:3c:a6:2b:be:65: 21:1d:74:54:7d:01:3d:c4:94:61:a2:11:7c:b8:3b: 8e:f3:4c:22:8b:4a:fb:08:8f:f3:14:63:96:ba:6f: f1:80:e8:a6:2c:b8:c3:0c:23:b2:f2:2e:8f:e9:54: 65:51:46:51:5f:02:12:41:9e:b4:89:1b:fb:c9:6e: 84:12:1e:a5:89:a1:ab:d5:de:28:ff:cb:96:c1:5c: fc:73:3c:f2:e8:a0:a1:33:02:6c:2a:b1:1e:f9:96: 8f:8e:5f:0a:e3:a5:8f:c1:09:79:53:5e:0c:bb:a4: 43:cc:61:0c:92:cb:6e:a5:a2:37:48:d6:15:2f:f5: d0:ce:af:5d:59:23:26:b0:d2:73:37:f9:ef:0f:d0: 8d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:6D:FB:12:BB:6F:EE:96:FB:9F:66:0D:8E:8C:1F:EA:5E:DB:95:EC X509v3 Authority Key Identifier: keyid:3D:99:44:E8:F5:65:1B:1B:D2:F0:A9:E0:06:86:5F:3A:6B:81:EB:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PZlE6PVlGxvS8KngBoZfOmuB62E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/4bff72-ba5b-4528-8c42-7f6b9f1040fd/1/PZlE6PVlGxvS8KngBoZfOmuB62E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/4bff72-ba5b-4528-8c42-7f6b9f1040fd/1/PZlE6PVlGxvS8KngBoZfOmuB62E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:bf:84:69:6c:47:9d:b5:65:7d:8f:ba:62:2a:fc:c1:5f:21: d0:69:90:b6:91:18:ac:61:fe:60:a3:d9:9f:4a:9e:cf:0c:a8: 5f:6d:ba:92:50:6f:f3:09:ae:df:63:7e:f6:08:d9:d2:9c:52: 55:0c:a2:fd:8a:e2:06:ae:9f:5d:3a:8d:c7:53:f0:54:86:7d: ee:7b:f7:04:6c:e0:7b:21:46:42:a5:ad:78:f3:98:2b:24:fb: 48:30:96:47:34:69:ff:a1:1b:55:f4:78:21:a6:39:24:38:e7: a8:16:a9:e8:3a:de:3d:e9:4a:58:86:ee:e7:72:9a:3b:93:fa: 4f:a4:23:52:9b:4e:6f:db:be:a4:60:78:b0:5c:b8:43:33:03: d3:07:40:a6:52:64:06:bc:05:02:33:68:0f:6d:d4:72:fa:a8: 3b:60:f9:36:73:b5:84:2d:19:c3:26:8f:69:d1:52:60:c0:49: ab:a8:73:b7:1c:a7:db:8e:38:96:fb:7e:00:83:7b:15:98:e8: 5e:64:2c:1c:58:fd:86:52:76:53:58:18:18:dc:6d:3b:a5:d0: 50:8e:69:6b:94:ee:56:13:ad:51:ea:c3:8c:35:fd:9f:58:30: 70:24:bb:01:42:c0:d7:24:9a:4f:72:b0:fa:c6:fa:65:75:70: e5:96:00:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1C0Ykk+tzazhgIS3oHJEmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkOTk0NGU4ZjU2NTFiMWJkMmYwYTllMDA2ODY1ZjNhNmI4 MWViNjEwHhcNMjUxMjA2MTkwMjI3WhcNMjUxMjA3MTkwMjI3WjAzMTEwLwYDVQQD EyhhNjZkZmIxMmJiNmZlZTk2ZmI5ZjY2MGQ4ZThjMWZlYTVlZGI5NWVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEAlz2YF/b9biGXhmIPu3XBhSWsq f6RDZaKUm4YNkK8t/N7OjWkuZQ2InYCn3xoYPtxoJdaewLvT11a9Lsp9OwHLlxxo +cCa1XdUanIvq0WoF9y5IKfSLXIpHEK1co13HTGiuK6WK/m9Nmjc95S86Q9JPKYr vmUhHXRUfQE9xJRhohF8uDuO80wii0r7CI/zFGOWum/xgOimLLjDDCOy8i6P6VRl UUZRXwISQZ60iRv7yW6EEh6liaGr1d4o/8uWwVz8czzy6KChMwJsKrEe+ZaPjl8K 46WPwQl5U14Mu6RDzGEMkstupaI3SNYVL/XQzq9dWSMmsNJzN/nvD9CNswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKZt+xK7b+6W+59mDY6MH+pe25XsMB8GA1UdIwQY MBaAFD2ZROj1ZRsb0vCp4AaGXzprgethMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFpsRTZQVmxHeHZTOEtuZ0JvWmZPbXVCNjJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC80YmZmNzItYmE1Yi00NTI4LThjNDIt N2Y2YjlmMTA0MGZkLzEvUFpsRTZQVmxHeHZTOEtuZ0JvWmZPbXVCNjJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC80YmZmNzItYmE1Yi00NTI4LThjNDItN2Y2YjlmMTA0MGZk LzEvUFpsRTZQVmxHeHZTOEtuZ0JvWmZPbXVCNjJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL7+EaWxH nbVlfY+6Yir8wV8h0GmQtpEYrGH+YKPZn0qezwyoX226klBv8wmu32N+9gjZ0pxS VQyi/YriBq6fXTqNx1PwVIZ97nv3BGzgeyFGQqWtePOYKyT7SDCWRzRp/6EbVfR4 IaY5JDjnqBap6DrePelKWIbu53KaO5P6T6QjUptOb9u+pGB4sFy4QzMD0wdAplJk BrwFAjNoD23UcvqoO2D5NnO1hC0ZwyaPadFSYMBJq6hztxyn2444lvt+AIN7FZjo XmQsHFj9hlJ2U1gYGNxtO6XQUI5pa5TuVhOtUerDjDX9n1gwcCS7AULA1ySaT3Kw +sb6ZXVw5ZYAiQ== -----END CERTIFICATE-----Generated at Sun Dec 7 03:44:58 2025 by rpki-client