This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/ac5fdf-5b66-4850-963a-f9b73b3e3eee/1/PZijti1aux3K9oriP1Me6CJA8gM.mft File: PZijti1aux3K9oriP1Me6CJA8gM.mft (raw, json) Hash identifier: dmxkdsMvnaYD9Rr0KdaAwTJY2yD12PooGtVSfXc+Xoo= Subject key identifier: 5E:DF:15:3E:64:0F:3D:B3:5E:1F:8F:C3:D8:8F:E1:DE:4A:7C:7D:C9 Authority key identifier: 3D:98:A3:B6:2D:5A:BB:1D:CA:F6:8A:E2:3F:53:1E:E8:22:40:F2:03 Certificate issuer: /CN=3d98a3b62d5abb1dcaf68ae23f531ee82240f203 Certificate serial: 019AF12D03247E82F34CDBBB3BA027AEE595 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PZijti1aux3K9oriP1Me6CJA8gM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/ac5fdf-5b66-4850-963a-f9b73b3e3eee/1/PZijti1aux3K9oriP1Me6CJA8gM.mft Manifest number: 1050 Signing time: Sat 06 Dec 2025 01:00:50 +0000 Manifest this update: Sat 06 Dec 2025 01:00:50 +0000 Manifest next update: Sun 07 Dec 2025 01:00:50 +0000 Files and hashes: 1: K5-cWJf7kTmzFiV3mE-MumP7Txo.roa (hash: d5nxq53iT7Tr8Pdp2k4UnWi9qs3VVT6d+if6Hmi6IVQ=) 2: PZijti1aux3K9oriP1Me6CJA8gM.crl (hash: pYHDes+g+z0HpO+B5ebqFoT51EtuKnRTTMBySMMYjC8=) 3: _TX8C92dziQpbg1kfvVVdJSGVvw.roa (hash: M6n2mPn45LSDUrpQyadpeXypeAt/8VqRu1J7jMmEfG8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/ac5fdf-5b66-4850-963a-f9b73b3e3eee/1/PZijti1aux3K9oriP1Me6CJA8gM.crl rsync://rpki.ripe.net/repository/DEFAULT/61/ac5fdf-5b66-4850-963a-f9b73b3e3eee/1/PZijti1aux3K9oriP1Me6CJA8gM.mft rsync://rpki.ripe.net/repository/DEFAULT/PZijti1aux3K9oriP1Me6CJA8gM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:03:24:7e:82:f3:4c:db:bb:3b:a0:27:ae:e5:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d98a3b62d5abb1dcaf68ae23f531ee82240f203 Validity Not Before: Dec 6 01:00:50 2025 GMT Not After : Dec 7 01:00:50 2025 GMT Subject: CN=5edf153e640f3db35e1f8fc3d88fe1de4a7c7dc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:6a:27:42:7b:7a:0a:97:75:9c:70:f5:27:14: ab:87:19:75:99:a6:0d:6e:96:87:04:06:57:f3:22: 5f:51:66:44:a2:03:5d:f2:e9:5d:34:9e:e6:8b:25: 1c:d5:ff:e0:3a:aa:4f:eb:54:bb:c8:5b:93:a7:5f: d9:3e:fe:7a:5d:36:78:46:a5:af:75:9f:aa:fd:68: b9:a3:16:fa:bb:54:9a:5a:06:8f:fe:d0:3c:c1:1c: 1a:ab:cd:99:90:19:8e:87:da:bc:d4:cd:e9:d1:31: 33:af:0b:7b:be:97:aa:6d:dc:c1:bd:e4:2f:da:93: 1d:39:e5:05:63:1d:85:fc:d9:c7:8c:cb:76:d3:9f: 12:53:5d:a6:65:39:c7:64:e6:7e:15:6d:c8:bf:c9: a6:9e:71:c0:2c:d0:1d:bb:66:13:0e:63:11:de:14: ac:5a:8b:14:24:e1:fa:c0:27:d8:fc:48:7c:ff:cb: 89:c7:73:56:45:11:61:b2:c0:fa:85:22:9d:36:31: 82:61:45:35:64:d6:43:eb:9f:fa:db:3e:a7:38:6a: bc:40:5f:6f:35:9c:a5:0a:67:3d:29:74:a9:b0:32: f8:94:a0:32:9f:10:ae:a0:bd:5b:5a:7a:cd:23:98: 30:6d:d0:ba:6f:53:df:5e:0e:34:09:7f:9e:96:f9: e3:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:DF:15:3E:64:0F:3D:B3:5E:1F:8F:C3:D8:8F:E1:DE:4A:7C:7D:C9 X509v3 Authority Key Identifier: keyid:3D:98:A3:B6:2D:5A:BB:1D:CA:F6:8A:E2:3F:53:1E:E8:22:40:F2:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PZijti1aux3K9oriP1Me6CJA8gM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ac5fdf-5b66-4850-963a-f9b73b3e3eee/1/PZijti1aux3K9oriP1Me6CJA8gM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ac5fdf-5b66-4850-963a-f9b73b3e3eee/1/PZijti1aux3K9oriP1Me6CJA8gM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d2:eb:20:ec:2c:9f:f9:96:0e:23:ab:2a:f9:36:85:20:c8:67: 84:72:b8:fa:66:f7:24:17:b7:c8:2b:e6:ee:a6:d5:ce:2b:42: b0:ab:e0:81:e7:80:4c:64:39:b7:aa:40:bd:13:05:8b:b2:ac: 18:06:cf:2c:31:8a:0e:5b:cf:46:08:95:22:d0:8b:6a:94:6c: 50:46:87:94:78:17:bc:cb:24:33:e5:65:91:cb:1e:b5:cd:e4: b0:d4:e7:e7:b9:51:d3:c0:0d:ef:3b:21:e8:df:4f:92:58:1a: d3:20:91:65:15:75:21:83:6d:e0:bd:3d:df:7d:cb:77:7b:ed: c8:8c:b9:1d:c0:e6:f0:93:77:7d:97:f8:02:01:e4:92:1b:e0: 51:9b:37:7c:ae:51:75:7b:eb:7e:c5:e5:99:80:8c:8e:cd:d1: d1:5c:14:b7:02:31:26:76:50:6c:02:bd:bf:1b:6a:b2:2e:eb: 61:5a:db:9d:99:2f:97:6c:87:39:f3:a2:b0:6f:04:33:2b:8e: 52:ca:b3:07:b0:87:13:18:f4:d7:c2:ee:91:2f:bd:17:c6:99: 4d:2e:d2:18:7d:a9:87:32:af:31:06:ee:9d:cb:6c:ee:f6:fa: 61:5a:ca:24:3e:de:81:7d:2c:49:1f:5b:db:1b:c6:d7:d4:28: bb:8a:24:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLQMkfoLzTNu7O6AnruWVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkOThhM2I2MmQ1YWJiMWRjYWY2OGFlMjNmNTMxZWU4MjI0 MGYyMDMwHhcNMjUxMjA2MDEwMDUwWhcNMjUxMjA3MDEwMDUwWjAzMTEwLwYDVQQD Eyg1ZWRmMTUzZTY0MGYzZGIzNWUxZjhmYzNkODhmZTFkZTRhN2M3ZGM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWonQnt6Cpd1nHD1JxSrhxl1maYN bpaHBAZX8yJfUWZEogNd8uldNJ7miyUc1f/gOqpP61S7yFuTp1/ZPv56XTZ4RqWv dZ+q/Wi5oxb6u1SaWgaP/tA8wRwaq82ZkBmOh9q81M3p0TEzrwt7vpeqbdzBveQv 2pMdOeUFYx2F/NnHjMt2058SU12mZTnHZOZ+FW3Iv8mmnnHALNAdu2YTDmMR3hSs WosUJOH6wCfY/Eh8/8uJx3NWRRFhssD6hSKdNjGCYUU1ZNZD65/62z6nOGq8QF9v NZylCmc9KXSpsDL4lKAynxCuoL1bWnrNI5gwbdC6b1PfXg40CX+elvnjFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF7fFT5kDz2zXh+Pw9iP4d5KfH3JMB8GA1UdIwQY MBaAFD2Yo7YtWrsdyvaK4j9THugiQPIDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFppanRpMWF1eDNLOW9yaVAxTWU2Q0pBOGdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9hYzVmZGYtNWI2Ni00ODUwLTk2M2Et ZjliNzNiM2UzZWVlLzEvUFppanRpMWF1eDNLOW9yaVAxTWU2Q0pBOGdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9hYzVmZGYtNWI2Ni00ODUwLTk2M2EtZjliNzNiM2UzZWVl LzEvUFppanRpMWF1eDNLOW9yaVAxTWU2Q0pBOGdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0usg7Cyf +ZYOI6sq+TaFIMhnhHK4+mb3JBe3yCvm7qbVzitCsKvggeeATGQ5t6pAvRMFi7Ks GAbPLDGKDlvPRgiVItCLapRsUEaHlHgXvMskM+Vlkcsetc3ksNTn57lR08AN7zsh 6N9Pklga0yCRZRV1IYNt4L09333Ld3vtyIy5HcDm8JN3fZf4AgHkkhvgUZs3fK5R dXvrfsXlmYCMjs3R0VwUtwIxJnZQbAK9vxtqsi7rYVrbnZkvl2yHOfOisG8EMyuO UsqzB7CHExj018LukS+9F8aZTS7SGH2phzKvMQbuncts7vb6YVrKJD7egX0sSR9b 2xvG19Qou4ok8A== -----END CERTIFICATE-----Generated at Sat Dec 6 09:15:39 2025 by rpki-client