This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.mft File: PzfJSpbEj8-EEo6EeukCDWvGYwQ.mft (raw, json) Hash identifier: n8YNZw6vtyWYQ9SnXq95tiZnGfgoZwQqK7UzkP5bfJg= Subject key identifier: 04:20:D1:61:11:B5:EB:5B:C1:C3:EA:1D:1C:F9:C8:C4:8F:18:E9:75 Authority key identifier: 3F:37:C9:4A:96:C4:8F:CF:84:12:8E:84:7A:E9:02:0D:6B:C6:63:04 Certificate issuer: /CN=3f37c94a96c48fcf84128e847ae9020d6bc66304 Certificate serial: 019AF276A079E2E67115186CC06830695B4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PzfJSpbEj8-EEo6EeukCDWvGYwQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.mft Manifest number: 1201 Signing time: Sat 06 Dec 2025 07:00:51 +0000 Manifest this update: Sat 06 Dec 2025 07:00:51 +0000 Manifest next update: Sun 07 Dec 2025 07:00:51 +0000 Files and hashes: 1: PzfJSpbEj8-EEo6EeukCDWvGYwQ.crl (hash: 5nvuLnATcxMMVMBuWY69aFaMLtVsGjsPHd47Rmgu1Es=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.crl rsync://rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.mft rsync://rpki.ripe.net/repository/DEFAULT/PzfJSpbEj8-EEo6EeukCDWvGYwQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:a0:79:e2:e6:71:15:18:6c:c0:68:30:69:5b:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f37c94a96c48fcf84128e847ae9020d6bc66304 Validity Not Before: Dec 6 07:00:51 2025 GMT Not After : Dec 7 07:00:51 2025 GMT Subject: CN=0420d16111b5eb5bc1c3ea1d1cf9c8c48f18e975 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:ac:f8:a0:63:fb:43:36:44:e5:be:38:12:78: 88:a4:ba:7d:30:9f:77:4a:46:a6:35:5b:9a:0b:89: 66:eb:3b:41:dc:54:43:91:21:e7:0d:1f:97:f5:5f: 33:41:d6:0c:f9:c8:d1:1c:01:03:00:ce:72:e8:56: 98:6b:bd:e2:56:dd:23:1c:ed:c2:62:a5:35:6d:3d: 56:01:35:19:ff:3b:9c:7c:47:7a:22:75:33:5c:32: f6:56:3b:21:0c:a5:75:29:0f:5d:cb:b1:ed:5b:4d: 3b:1c:a5:0b:4b:9d:07:88:f1:be:50:f2:f5:95:b5: c9:8a:95:e5:4b:be:3c:e0:90:9a:db:83:15:2b:14: 52:bc:43:9f:92:eb:e1:cb:86:5f:5b:1a:25:6a:f7: 41:42:9a:31:ba:e2:c6:ce:e7:69:b5:03:4c:cf:1f: 43:22:11:55:a6:34:9b:40:5e:f6:fd:f1:27:46:bf: 76:f3:52:b1:5c:05:b7:d2:63:6c:ba:67:b7:ab:72: 83:65:63:5d:98:19:38:14:b0:6d:64:37:66:c7:5b: b5:6a:60:cc:63:9b:be:97:c8:2f:42:23:f3:9f:1e: a9:ba:2a:c0:54:fc:1e:c8:04:03:2b:8b:b9:51:a9: 76:8b:64:5a:e3:83:e9:7f:13:f1:24:a1:28:4d:19: 0e:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:20:D1:61:11:B5:EB:5B:C1:C3:EA:1D:1C:F9:C8:C4:8F:18:E9:75 X509v3 Authority Key Identifier: keyid:3F:37:C9:4A:96:C4:8F:CF:84:12:8E:84:7A:E9:02:0D:6B:C6:63:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PzfJSpbEj8-EEo6EeukCDWvGYwQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:b0:5c:91:cb:d5:7e:47:a9:bd:d5:e0:e4:fd:7f:d2:73:0d: b3:0d:2e:c9:62:e7:a0:f1:db:e2:9d:83:07:3e:5e:86:40:2b: b4:92:c1:43:37:af:6d:b5:80:fd:83:25:c1:8a:72:ef:c1:32: d0:c8:2a:f4:b0:ff:2e:0e:b9:17:9c:fb:c6:61:db:f2:14:6c: 04:a8:4c:4c:21:a7:9a:61:7b:74:97:2e:aa:6c:a1:c2:4d:26: a8:78:45:e5:ec:09:92:c5:f9:ad:15:f4:0f:19:16:c5:f4:60: 82:c0:b9:b6:29:2b:09:ee:2c:fb:63:68:5d:2e:ff:fe:5a:0d: ab:62:cd:ca:06:44:f1:c6:cb:11:9b:81:a5:8a:81:0a:78:9f: 8d:66:87:84:d6:18:02:85:f6:4d:a0:96:52:f8:c2:21:41:60: 09:ae:9b:f1:aa:91:8f:52:5d:03:03:52:96:35:d6:2e:33:5f: 65:70:c0:7b:66:52:db:e3:2e:7f:20:26:3c:fa:86:91:19:29: ff:c1:b9:74:2c:ae:6c:d5:35:85:ab:f1:74:a9:29:9e:d5:db: 11:a9:c5:26:c3:34:ca:f7:8f:6b:0a:0c:3e:f8:42:53:80:5b: 72:67:25:2f:3b:10:89:2c:f8:f3:11:c6:af:03:4e:ee:01:a3: 7b:61:53:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydqB54uZxFRhswGgwaVtOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmMzdjOTRhOTZjNDhmY2Y4NDEyOGU4NDdhZTkwMjBkNmJj NjYzMDQwHhcNMjUxMjA2MDcwMDUxWhcNMjUxMjA3MDcwMDUxWjAzMTEwLwYDVQQD EygwNDIwZDE2MTExYjVlYjViYzFjM2VhMWQxY2Y5YzhjNDhmMThlOTc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2az4oGP7QzZE5b44EniIpLp9MJ93 SkamNVuaC4lm6ztB3FRDkSHnDR+X9V8zQdYM+cjRHAEDAM5y6FaYa73iVt0jHO3C YqU1bT1WATUZ/zucfEd6InUzXDL2VjshDKV1KQ9dy7HtW007HKULS50HiPG+UPL1 lbXJipXlS7484JCa24MVKxRSvEOfkuvhy4ZfWxolavdBQpoxuuLGzudptQNMzx9D IhFVpjSbQF72/fEnRr9281KxXAW30mNsume3q3KDZWNdmBk4FLBtZDdmx1u1amDM Y5u+l8gvQiPznx6puirAVPweyAQDK4u5Ual2i2Ra44PpfxPxJKEoTRkOOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAQg0WERtetbwcPqHRz5yMSPGOl1MB8GA1UdIwQY MBaAFD83yUqWxI/PhBKOhHrpAg1rxmMEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHpmSlNwYkVqOC1FRW82RWV1a0NEV3ZHWXdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8zNWE5YmMtYjE0Mi00NDVmLTgxZTct ZWY5OTBjNThiNDhiLzEvUHpmSlNwYkVqOC1FRW82RWV1a0NEV3ZHWXdRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS8zNWE5YmMtYjE0Mi00NDVmLTgxZTctZWY5OTBjNThiNDhi LzEvUHpmSlNwYkVqOC1FRW82RWV1a0NEV3ZHWXdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAILBckcvV fkepvdXg5P1/0nMNsw0uyWLnoPHb4p2DBz5ehkArtJLBQzevbbWA/YMlwYpy78Ey 0Mgq9LD/Lg65F5z7xmHb8hRsBKhMTCGnmmF7dJcuqmyhwk0mqHhF5ewJksX5rRX0 DxkWxfRggsC5tikrCe4s+2NoXS7//loNq2LNygZE8cbLEZuBpYqBCnifjWaHhNYY AoX2TaCWUvjCIUFgCa6b8aqRj1JdAwNSljXWLjNfZXDAe2ZS2+MufyAmPPqGkRkp /8G5dCyubNU1havxdKkpntXbEanFJsM0yvePawoMPvhCU4BbcmclLzsQiSz48xHG rwNO7gGje2FTcQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:29:33 2025 by rpki-client