This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft File: pZrIMj67a-IPronQmMokE4-MkAU.mft (raw, json) Hash identifier: cBjXdoz+hZPY/3zRJKZsbEijByERTa3elliTryGUReI= Subject key identifier: 42:82:AC:41:1E:A7:EC:D3:4C:2E:53:24:71:D9:4F:0D:F8:17:C0:99 Authority key identifier: A5:9A:C8:32:3E:BB:6B:E2:0F:AE:89:D0:98:CA:24:13:8F:8C:90:05 Certificate issuer: /CN=a59ac8323ebb6be20fae89d098ca24138f8c9005 Certificate serial: 019AF23F73DF05BA881E582DAFB7AAA749CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pZrIMj67a-IPronQmMokE4-MkAU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 06:00:35 +0000 Manifest this update: Sat 06 Dec 2025 06:00:35 +0000 Manifest next update: Sun 07 Dec 2025 06:00:35 +0000 Files and hashes: 1: W2MvJBZ0wxtLqJdYlYA_0d8K8JQ.roa (hash: FE4tThC8aEaRa276a1uqrtHjLbN4YSEI6M3SskM13qQ=) 2: haFD9cLDeKJLdXFJ_FlWsDWQa1Y.roa (hash: suCkhBPt7Sy5Urm3257mrhUG7HADlPxpmTzTdnyQTPQ=) 3: pZrIMj67a-IPronQmMokE4-MkAU.crl (hash: 0LYNek7p8kxMgUfecANRNP773iyL7Y/t7hAI1/X6bDQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.crl rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft rsync://rpki.ripe.net/repository/DEFAULT/pZrIMj67a-IPronQmMokE4-MkAU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:73:df:05:ba:88:1e:58:2d:af:b7:aa:a7:49:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a59ac8323ebb6be20fae89d098ca24138f8c9005 Validity Not Before: Dec 6 06:00:35 2025 GMT Not After : Dec 7 06:00:35 2025 GMT Subject: CN=4282ac411ea7ecd34c2e532471d94f0df817c099 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:82:fc:a3:4b:d6:97:43:50:fa:5b:e3:3d:b5: 59:31:dc:7f:48:2f:04:ad:74:d0:bc:de:2e:8d:d2: e5:a1:25:e1:0e:94:f1:4c:4b:c9:03:31:cf:8b:c8: 57:9d:f8:89:b1:66:7c:1c:57:98:b9:1a:04:ca:de: 84:70:cb:36:9b:4b:06:ad:d0:f9:cb:5a:ac:c2:83: 2b:5f:98:d7:98:9c:d0:09:5f:d6:c0:ca:da:e0:ff: 9c:f9:0d:61:4a:8e:cd:d6:4d:71:08:82:2b:c6:ee: 7c:26:65:9f:72:e4:9b:73:4d:63:c5:f0:4b:24:aa: 21:12:d8:cd:5b:96:ca:a4:7c:46:56:7a:4d:b9:d4: 6a:e2:39:27:e8:bd:dc:76:26:54:28:9a:a8:0b:ef: b5:17:82:72:68:46:94:eb:e8:39:1f:01:e5:89:7f: 80:cd:db:ae:79:7e:15:b5:82:50:22:1f:26:d5:aa: 6c:e3:52:31:2c:46:8d:16:a2:1d:8d:c8:1f:6d:68: 41:92:c4:74:ad:25:7e:76:ef:48:f6:76:0e:fc:8e: c7:83:23:55:b3:e0:2d:c6:d9:ae:ef:98:b1:48:cd: 5d:db:94:6d:3a:80:01:e2:71:f9:94:16:17:50:98: 40:75:3b:60:0e:5b:5f:06:7c:88:34:8b:7a:68:9c: d9:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:82:AC:41:1E:A7:EC:D3:4C:2E:53:24:71:D9:4F:0D:F8:17:C0:99 X509v3 Authority Key Identifier: keyid:A5:9A:C8:32:3E:BB:6B:E2:0F:AE:89:D0:98:CA:24:13:8F:8C:90:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZrIMj67a-IPronQmMokE4-MkAU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:da:aa:7c:6d:01:8a:60:66:5d:c6:84:8e:ec:de:31:5c:5a: 37:79:44:f1:38:a2:9a:86:d7:5f:16:21:78:ef:43:b5:9c:ec: 32:17:95:59:18:c2:4e:6c:66:e5:3a:66:45:0e:41:d7:0c:01: 0a:31:1c:bc:da:71:39:70:aa:6f:56:41:6c:63:1c:af:bf:c9: 38:47:be:a8:ba:01:a1:d6:5a:0c:87:96:05:7e:6f:57:6f:c7: 34:3a:f7:91:bd:ef:78:d7:b6:b8:f9:f9:c6:dc:be:ac:02:14: ae:bf:48:57:10:7c:7e:5f:bf:31:8d:d4:83:df:cd:76:d7:33: a6:62:5b:15:31:03:46:96:bd:a0:09:14:e1:09:2a:9f:69:8e: bf:b1:bb:44:b0:59:a1:c3:97:aa:08:4a:a5:2f:40:c0:db:1b: 3a:f1:f4:18:b2:ec:ae:b0:a0:e3:0d:e8:70:f9:25:51:e6:41: c0:83:88:ac:97:0e:77:9f:8d:08:4a:f5:f4:22:0c:32:ee:b2: 83:9e:60:af:13:1f:1e:99:1b:23:49:e3:11:cd:ea:3a:18:a0: 4f:c4:3f:88:ab:3f:5b:50:71:19:8c:a7:a5:0d:85:8a:94:50: c8:9b:28:7b:23:7a:85:8e:52:09:3d:da:ed:fb:cd:e5:a5:d4: af:c8:c0:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP3PfBbqIHlgtr7eqp0nMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1OWFjODMyM2ViYjZiZTIwZmFlODlkMDk4Y2EyNDEzOGY4 YzkwMDUwHhcNMjUxMjA2MDYwMDM1WhcNMjUxMjA3MDYwMDM1WjAzMTEwLwYDVQQD Eyg0MjgyYWM0MTFlYTdlY2QzNGMyZTUzMjQ3MWQ5NGYwZGY4MTdjMDk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA34L8o0vWl0NQ+lvjPbVZMdx/SC8E rXTQvN4ujdLloSXhDpTxTEvJAzHPi8hXnfiJsWZ8HFeYuRoEyt6EcMs2m0sGrdD5 y1qswoMrX5jXmJzQCV/WwMra4P+c+Q1hSo7N1k1xCIIrxu58JmWfcuSbc01jxfBL JKohEtjNW5bKpHxGVnpNudRq4jkn6L3cdiZUKJqoC++1F4JyaEaU6+g5HwHliX+A zduueX4VtYJQIh8m1aps41IxLEaNFqIdjcgfbWhBksR0rSV+du9I9nYO/I7HgyNV s+Atxtmu75ixSM1d25RtOoAB4nH5lBYXUJhAdTtgDltfBnyINIt6aJzZgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEKCrEEep+zTTC5TJHHZTw34F8CZMB8GA1UdIwQY MBaAFKWayDI+u2viD66J0JjKJBOPjJAFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFpySU1qNjdhLUlQcm9uUW1Nb2tFNC1Na0FVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9hMDFmODItOTE5My00MTk5LTk1YTgt ODNhZTVkOWM4MzJmLzEvcFpySU1qNjdhLUlQcm9uUW1Nb2tFNC1Na0FVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9hMDFmODItOTE5My00MTk5LTk1YTgtODNhZTVkOWM4MzJm LzEvcFpySU1qNjdhLUlQcm9uUW1Nb2tFNC1Na0FVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALdqqfG0B imBmXcaEjuzeMVxaN3lE8TiimobXXxYheO9DtZzsMheVWRjCTmxm5TpmRQ5B1wwB CjEcvNpxOXCqb1ZBbGMcr7/JOEe+qLoBodZaDIeWBX5vV2/HNDr3kb3veNe2uPn5 xty+rAIUrr9IVxB8fl+/MY3Ug9/NdtczpmJbFTEDRpa9oAkU4Qkqn2mOv7G7RLBZ ocOXqghKpS9AwNsbOvH0GLLsrrCg4w3ocPklUeZBwIOIrJcOd5+NCEr19CIMMu6y g55grxMfHpkbI0njEc3qOhigT8Q/iKs/W1BxGYynpQ2FipRQyJsoeyN6hY5SCT3a 7fvN5aXUr8jADw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:21:59 2025 by rpki-client