This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft File: I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft (raw, json) Hash identifier: 4P56kYhbwlnrpteHu2LdFtzAgnikXTThmMzkMjK7smY= Subject key identifier: E8:0B:12:55:D6:2D:C8:8E:93:84:F2:54:BE:45:36:EE:84:64:3E:3F Authority key identifier: 23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47 Certificate issuer: /CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47 Certificate serial: 019AF12CCA14EEB7322B2B248E1CAAEAA18F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft Manifest number: 1490 Signing time: Sat 06 Dec 2025 01:00:35 +0000 Manifest this update: Sat 06 Dec 2025 01:00:35 +0000 Manifest next update: Sun 07 Dec 2025 01:00:35 +0000 Files and hashes: 1: 0qZlk63Gwo6PVve3R8hoNJeSalk.roa (hash: 9K8bAvhRQIcuHPJMwOdonfj+LysEV1qKdWBg1zShX+0=) 2: 1aR-_v953E36WGgYgibzeTBiCDE.roa (hash: FoIR2LSFc6nQ5Kqt0WYRr1Y8u7rsf9kyNtd6rG0B9zM=) 3: 2S36hALNEuA4FHD_a934872Co8w.roa (hash: 7vbdkC8QrVhET/DTmD2itapsbG53efZ5NYts2gI1WdE=) 4: I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl (hash: IjWBSaf4TjVofSYthZX+3dKW7fkFfEcGUysUO7gH5CI=) 5: JiS1Tiph5HTmGNzZ0KtBUIEaf7A.roa (hash: Gom6zOjgSh5rBVSKZ2f6ZCcspQ3wfulcfmXimj0TCtQ=) 6: KtKxD1HbUkxdQbT12LynXd7iXTs.roa (hash: sI8vJTHX8+A6Ti8zSaEXzqBtKgPjjPc75g33e2ATpPA=) 7: Q9Q78d-jsiF5ILAqRcPi-38ptt8.roa (hash: YzBAYIWUa9/3ZSqBiY5Wy7QpsAq3KA1Xx1umoytO+nA=) 8: ZpGAbaG9iTc5mQjGkWx21egzJos.roa (hash: hVROdEr8DhK5izAOiu4sPZbk59hiOCePPc1b1fzj7Mc=) 9: aCwRSHVYBYpytuE1o9MjNgDXz9I.roa (hash: lR91pW0BeR+aoFpolYB6lJ9nl5KY3mWGfuxUgw4Zch4=) 10: hTDGmmn2FYXUzU7TBnMKhJwzgBA.roa (hash: 1eTmB0t+VZgY89Mes1TNlFqfs2UJeJff1ZjTxBLpw/g=) 11: jlKsVMX7wEteoIWfSN3Uc9eAuVQ.roa (hash: 5HOZUuYu7Rw+ksliSgplThO4PdfYnW2rqUfOLfK21mA=) 12: k8Tsh2igTKK0UWxKZTZKxjOauZg.roa (hash: 2YaWS9l2TW+UMAMDTk1uUSdz30uNtfJAEAiFghKc1/k=) 13: r5RDCZVrjcs26zN2wJ5oPZzWcrE.roa (hash: ABN+n8WXzNyvhNn0KAYr1OZE1UelVHRBMWhRAYF1K1Q=) 14: z1a3i0frazTQqXgXDMZwXIVumzA.roa (hash: 8QcYCFJ7DbfNpdlzOwLSm6hk+eQgt4rWp4xCUkBVN6Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:ca:14:ee:b7:32:2b:2b:24:8e:1c:aa:ea:a1:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47 Validity Not Before: Dec 6 01:00:35 2025 GMT Not After : Dec 7 01:00:35 2025 GMT Subject: CN=e80b1255d62dc88e9384f254be4536ee84643e3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:1e:df:92:26:2d:5a:85:12:d5:b4:f7:ca:b2: 15:62:40:90:54:0d:c2:ff:94:39:d2:6e:7b:10:1d: c6:22:20:3a:e1:f9:16:10:d5:45:b5:01:5d:bb:82: 0a:6c:47:59:0a:1e:3e:eb:29:32:1b:a9:c3:c0:44: 99:2c:ab:ab:ec:0c:7c:f5:9f:53:59:9e:a0:9c:94: 2e:77:bb:7e:71:e3:9e:95:2b:4e:f7:65:c4:4b:4e: 6e:01:a3:ef:85:8b:73:34:e2:a3:1a:7d:c6:f5:48: cc:37:e1:6a:29:da:72:40:cd:25:75:98:4b:b8:a4: eb:5c:95:72:bd:1f:c1:bc:54:21:07:49:33:a2:c0: b2:59:e4:2f:bc:42:f2:77:b0:9a:b7:e4:a8:90:7a: fd:57:c9:76:8c:25:a4:b1:e0:75:c2:40:02:f1:ea: cb:2e:5d:44:92:96:e8:85:95:80:28:77:a4:5e:4a: 80:0c:5a:b9:48:82:5d:c1:b8:1f:81:bf:8c:1a:f4: 18:a1:6a:de:6d:bc:8a:18:b1:af:88:01:c4:74:64: 13:98:60:ed:cf:8e:3c:be:e0:50:35:ef:09:ee:96: ad:48:09:b3:6b:ac:ca:2d:69:a8:85:91:bd:e5:2f: cc:d6:ee:75:07:51:e9:70:21:38:28:ef:bd:14:f9: 98:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:0B:12:55:D6:2D:C8:8E:93:84:F2:54:BE:45:36:EE:84:64:3E:3F X509v3 Authority Key Identifier: keyid:23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:ce:62:e2:e4:32:04:f3:c7:fe:55:f8:85:ef:34:05:47:87: 23:b4:bd:c7:a3:af:54:47:53:4b:d3:b1:c0:1f:63:7f:b8:1e: 57:4c:13:9a:f0:49:6f:60:82:be:96:97:41:d3:c3:90:b6:fd: ba:b1:95:62:91:69:7d:2b:f3:81:cd:7d:15:18:03:29:6b:46: 13:be:45:01:2d:a7:93:4c:14:62:a3:6b:45:20:88:0d:c2:d1: b4:87:66:5d:b4:f2:38:6a:28:1d:ba:a9:54:6a:96:f4:10:ae: 22:2d:b8:fc:54:90:95:eb:b3:1a:73:af:57:7d:71:2c:fa:46: 80:8d:03:1f:f9:75:35:fc:45:35:09:ee:f8:84:dc:25:c2:ac: 60:53:f5:cd:38:6e:12:b6:79:48:02:6c:8c:d8:9f:7d:62:01: 3f:4e:13:60:c0:28:8d:ec:f7:bc:79:06:08:01:39:70:ad:ea: 1a:92:c6:a9:6f:6d:95:c2:6d:38:c4:a4:d7:b3:99:e7:2f:50: 7a:a6:28:a4:16:b3:2d:0b:e7:28:0c:95:3c:3c:2c:76:5b:fa: ad:ab:e4:bb:2c:31:8b:ac:99:4a:e4:ce:bf:9c:e2:18:1e:5d: de:1b:1a:6f:30:a2:7b:32:1e:da:72:4e:68:6a:50:c8:f0:67: ed:37:ef:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLMoU7rcyKyskjhyq6qGPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzZTNkOTJiZmUxNjYxOWNhNTAwYzAzMjY3ZWZmYTlhYTdj YTBjNDcwHhcNMjUxMjA2MDEwMDM1WhcNMjUxMjA3MDEwMDM1WjAzMTEwLwYDVQQD EyhlODBiMTI1NWQ2MmRjODhlOTM4NGYyNTRiZTQ1MzZlZTg0NjQzZTNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyx7fkiYtWoUS1bT3yrIVYkCQVA3C /5Q50m57EB3GIiA64fkWENVFtQFdu4IKbEdZCh4+6ykyG6nDwESZLKur7Ax89Z9T WZ6gnJQud7t+ceOelStO92XES05uAaPvhYtzNOKjGn3G9UjMN+FqKdpyQM0ldZhL uKTrXJVyvR/BvFQhB0kzosCyWeQvvELyd7Cat+SokHr9V8l2jCWkseB1wkAC8erL Ll1EkpbohZWAKHekXkqADFq5SIJdwbgfgb+MGvQYoWrebbyKGLGviAHEdGQTmGDt z448vuBQNe8J7patSAmza6zKLWmohZG95S/M1u51B1HpcCE4KO+9FPmYnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOgLElXWLciOk4TyVL5FNu6EZD4/MB8GA1UdIwQY MBaAFCPj2Sv+FmGcpQDAMmfv+pqnygxHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSS1QWktfNFdZWnlsQU1BeVotXzZtcWZLREVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC85YzJjOTAtYzdkNC00OGI3LTliYWYt ZjFiZjBjMzNhOTA4LzEvSS1QWktfNFdZWnlsQU1BeVotXzZtcWZLREVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC85YzJjOTAtYzdkNC00OGI3LTliYWYtZjFiZjBjMzNhOTA4 LzEvSS1QWktfNFdZWnlsQU1BeVotXzZtcWZLREVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhc5i4uQy BPPH/lX4he80BUeHI7S9x6OvVEdTS9OxwB9jf7geV0wTmvBJb2CCvpaXQdPDkLb9 urGVYpFpfSvzgc19FRgDKWtGE75FAS2nk0wUYqNrRSCIDcLRtIdmXbTyOGooHbqp VGqW9BCuIi24/FSQleuzGnOvV31xLPpGgI0DH/l1NfxFNQnu+ITcJcKsYFP1zThu ErZ5SAJsjNiffWIBP04TYMAojez3vHkGCAE5cK3qGpLGqW9tlcJtOMSk17OZ5y9Q eqYopBazLQvnKAyVPDwsdlv6ravkuywxi6yZSuTOv5ziGB5d3hsabzCiezIe2nJO aGpQyPBn7TfvLg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:19:54 2025 by rpki-client