This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/pxzA1YsWrbv3-lwv28Nln5xzx7o.mft File: pxzA1YsWrbv3-lwv28Nln5xzx7o.mft (raw, json) Hash identifier: 6GI0fB6o4VAhlUNdds6lqgMoPlb7YdGaB+XUoXXShks= Subject key identifier: 27:A8:89:7F:1E:7F:01:C1:F6:38:98:46:5C:D1:5D:ED:7F:BD:80:41 Authority key identifier: A7:1C:C0:D5:8B:16:AD:BB:F7:FA:5C:2F:DB:C3:65:9F:9C:73:C7:BA Certificate issuer: /CN=a71cc0d58b16adbbf7fa5c2fdbc3659f9c73c7ba Certificate serial: 019AF3C0252AE0D529354172835F3EF086D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxzA1YsWrbv3-lwv28Nln5xzx7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/pxzA1YsWrbv3-lwv28Nln5xzx7o.mft Manifest number: 1539 Signing time: Sat 06 Dec 2025 13:00:47 +0000 Manifest this update: Sat 06 Dec 2025 13:00:47 +0000 Manifest next update: Sun 07 Dec 2025 13:00:47 +0000 Files and hashes: 1: 3nrrtsZJ-IpATR6f6X0fXP8P3Ds.roa (hash: dHLYJp8vBdcpEI62KQkymjAsJXGywGpijB0UQKFJ6p4=) 2: b3rpvlrUc4F3iSwCht-ScFiNdQU.roa (hash: IxL38OMcTHb5h0kfUl/vgqGG9zstz9MS/9BQOovbMEE=) 3: o-IAHNtlfJTe0lrMjkAn3EfKWfQ.roa (hash: 4yZoP16QAdZ03Ygf8PchIKIjGuMurg8hghXjeARQmNw=) 4: pxzA1YsWrbv3-lwv28Nln5xzx7o.crl (hash: Mbm1R7bsqnq3BAAequKufff/QMAd6Z0q0rDrta67C3o=) 5: z9pY0mNZw1275Un36HrGri4KO4o.roa (hash: YWMIyf15z9zL0EObbho/vFT6JF3XUpar4rPteqovYLo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/pxzA1YsWrbv3-lwv28Nln5xzx7o.crl rsync://rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/pxzA1YsWrbv3-lwv28Nln5xzx7o.mft rsync://rpki.ripe.net/repository/DEFAULT/pxzA1YsWrbv3-lwv28Nln5xzx7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:25:2a:e0:d5:29:35:41:72:83:5f:3e:f0:86:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a71cc0d58b16adbbf7fa5c2fdbc3659f9c73c7ba Validity Not Before: Dec 6 13:00:47 2025 GMT Not After : Dec 7 13:00:47 2025 GMT Subject: CN=27a8897f1e7f01c1f63898465cd15ded7fbd8041 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:1f:ac:c2:56:2e:28:41:c0:03:4b:34:c4:1d: 1c:f1:91:f9:b4:af:37:65:de:0e:38:1a:03:85:ad: f5:53:39:27:16:d1:7e:d6:96:37:00:5e:68:11:07: a4:ce:97:25:cd:ec:e9:e4:89:b7:5d:3e:6a:bd:f7: 25:a6:dd:71:bd:e4:83:4d:48:a0:df:58:e0:d5:33: 96:85:dc:5e:a6:28:9d:98:cd:8d:1b:0c:53:13:84: 31:24:36:8c:ef:36:2c:03:ff:1b:04:7d:58:a2:68: 77:91:07:c3:1b:0c:92:b4:8e:49:9c:f6:74:b1:e5: 1c:2f:62:9c:b7:81:bf:44:b4:80:67:d4:e1:2d:0a: 1a:1a:82:50:6f:7e:55:c7:b9:83:fc:9c:dc:dd:3d: 96:fd:ed:5a:94:41:44:67:1c:59:43:1e:90:c7:f3: 55:27:3e:0c:1a:a9:c7:dd:04:3e:31:4b:5e:4f:91: ba:74:40:4e:57:54:d0:96:ab:85:bc:af:0a:cd:f0: de:a9:db:da:43:2b:19:e0:b1:f7:91:37:68:05:b4: 2c:e5:34:f6:10:4d:a9:4f:77:c4:98:7b:08:31:56: e4:04:f5:59:c5:4e:37:6c:11:ee:0a:af:c7:4b:f0: 76:a2:55:4d:6c:f5:4b:36:c9:04:e1:be:5b:28:4c: 72:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:A8:89:7F:1E:7F:01:C1:F6:38:98:46:5C:D1:5D:ED:7F:BD:80:41 X509v3 Authority Key Identifier: keyid:A7:1C:C0:D5:8B:16:AD:BB:F7:FA:5C:2F:DB:C3:65:9F:9C:73:C7:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxzA1YsWrbv3-lwv28Nln5xzx7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/pxzA1YsWrbv3-lwv28Nln5xzx7o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/pxzA1YsWrbv3-lwv28Nln5xzx7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d2:d8:60:1f:6a:4b:3a:c6:1a:75:31:ed:d1:d6:9b:61:ec:30: 5c:7b:97:e9:ba:2f:87:c6:55:8a:f6:29:8b:36:d3:cf:1a:3e: 93:d5:ec:f1:29:c6:4a:56:34:52:48:27:07:77:05:d9:1f:14: d1:51:ca:6b:d3:69:30:2f:2c:ea:10:9d:f0:b3:13:be:2c:d8: f3:bd:60:a7:a4:60:62:00:35:11:b7:28:9a:68:ba:ac:0e:68: 3f:41:f1:c7:7a:7f:c0:e4:19:9b:b2:d0:79:9e:00:11:ca:67: 8a:79:2e:2f:e7:63:96:c0:32:38:f1:21:bb:a6:c6:fd:c3:e5: 91:72:4c:1a:eb:82:37:99:31:69:d6:f6:d9:62:e0:f2:a0:60: f7:18:62:ea:0d:87:6b:09:34:be:1c:09:93:81:5c:bb:03:de: 7c:9b:8a:a0:30:29:d2:64:ea:5c:fb:fe:17:8d:75:1d:dd:cd: 4b:4e:d5:f0:b8:cd:e5:ac:b1:44:71:62:c7:fe:b2:25:0c:9c: 89:79:39:f2:4f:e9:a5:b4:52:8c:4a:de:aa:f7:ae:f9:d9:3b: 2a:bd:d1:78:3b:07:96:d0:2c:8c:a8:99:56:37:52:9a:ff:57: 8c:e3:44:af:bc:08:2a:ea:15:d9:fe:27:ba:c2:b7:60:b4:98: 9a:f6:ad:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwCUq4NUpNUFyg18+8IbXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3MWNjMGQ1OGIxNmFkYmJmN2ZhNWMyZmRiYzM2NTlmOWM3 M2M3YmEwHhcNMjUxMjA2MTMwMDQ3WhcNMjUxMjA3MTMwMDQ3WjAzMTEwLwYDVQQD EygyN2E4ODk3ZjFlN2YwMWMxZjYzODk4NDY1Y2QxNWRlZDdmYmQ4MDQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuh+swlYuKEHAA0s0xB0c8ZH5tK83 Zd4OOBoDha31UzknFtF+1pY3AF5oEQekzpclzezp5Im3XT5qvfclpt1xveSDTUig 31jg1TOWhdxepiidmM2NGwxTE4QxJDaM7zYsA/8bBH1Yomh3kQfDGwyStI5JnPZ0 seUcL2Kct4G/RLSAZ9ThLQoaGoJQb35Vx7mD/Jzc3T2W/e1alEFEZxxZQx6Qx/NV Jz4MGqnH3QQ+MUteT5G6dEBOV1TQlquFvK8KzfDeqdvaQysZ4LH3kTdoBbQs5TT2 EE2pT3fEmHsIMVbkBPVZxU43bBHuCq/HS/B2olVNbPVLNskE4b5bKExyJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCeoiX8efwHB9jiYRlzRXe1/vYBBMB8GA1UdIwQY MBaAFKccwNWLFq279/pcL9vDZZ+cc8e6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHh6QTFZc1dyYnYzLWx3djI4TmxuNXh6eDdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS81ZjVhNjAtOTAyNi00YjY2LWJhYWEt ZGU2NDBkMDEyMDY1LzEvcHh6QTFZc1dyYnYzLWx3djI4TmxuNXh6eDdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS81ZjVhNjAtOTAyNi00YjY2LWJhYWEtZGU2NDBkMDEyMDY1 LzEvcHh6QTFZc1dyYnYzLWx3djI4TmxuNXh6eDdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0thgH2pL OsYadTHt0dabYewwXHuX6bovh8ZVivYpizbTzxo+k9Xs8SnGSlY0UkgnB3cF2R8U 0VHKa9NpMC8s6hCd8LMTvizY871gp6RgYgA1Ebcommi6rA5oP0Hxx3p/wOQZm7LQ eZ4AEcpninkuL+djlsAyOPEhu6bG/cPlkXJMGuuCN5kxadb22WLg8qBg9xhi6g2H awk0vhwJk4FcuwPefJuKoDAp0mTqXPv+F411Hd3NS07V8LjN5ayxRHFix/6yJQyc iXk58k/ppbRSjEreqveu+dk7Kr3ReDsHltAsjKiZVjdSmv9XjONEr7wIKuoV2f4n usK3YLSYmvatJQ== -----END CERTIFICATE-----Generated at Sat Dec 6 22:08:19 2025 by rpki-client