This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f5cc1e-a294-45c7-9d10-f1bc956858aa/1/pszH03YZ_dof84uT_s5gq9SYq4Q.mft File: pszH03YZ_dof84uT_s5gq9SYq4Q.mft (raw, json) Hash identifier: xsl+Ter+RT5kVrMdFHetbJjpJcteLd+ZUshrimFU2ko= Subject key identifier: C9:61:EC:95:3E:FA:36:45:F7:30:84:FE:38:65:F2:6C:65:76:7C:F6 Authority key identifier: A6:CC:C7:D3:76:19:FD:DA:1F:F3:8B:93:FE:CE:60:AB:D4:98:AB:84 Certificate issuer: /CN=a6ccc7d37619fdda1ff38b93fece60abd498ab84 Certificate serial: 019AF0BF8C730D914A5FA501D91F54E83B75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pszH03YZ_dof84uT_s5gq9SYq4Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f5cc1e-a294-45c7-9d10-f1bc956858aa/1/pszH03YZ_dof84uT_s5gq9SYq4Q.mft Manifest number: 59 Signing time: Fri 05 Dec 2025 23:01:16 +0000 Manifest this update: Fri 05 Dec 2025 23:01:16 +0000 Manifest next update: Sat 06 Dec 2025 23:01:16 +0000 Files and hashes: 1: FCK5h5gubPMhZ3Rsrd7Tj4OARZE.roa (hash: 7f8n8xrs8z+GOmfg9rEL/AINEMlWtSmtFpMtGEwaqcw=) 2: pszH03YZ_dof84uT_s5gq9SYq4Q.crl (hash: 3N5qXbry83bh3resc1YScuOpt89Cdkxn8r787WSieM4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/f5cc1e-a294-45c7-9d10-f1bc956858aa/1/pszH03YZ_dof84uT_s5gq9SYq4Q.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/f5cc1e-a294-45c7-9d10-f1bc956858aa/1/pszH03YZ_dof84uT_s5gq9SYq4Q.mft rsync://rpki.ripe.net/repository/DEFAULT/pszH03YZ_dof84uT_s5gq9SYq4Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:8c:73:0d:91:4a:5f:a5:01:d9:1f:54:e8:3b:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6ccc7d37619fdda1ff38b93fece60abd498ab84 Validity Not Before: Dec 5 23:01:16 2025 GMT Not After : Dec 6 23:01:16 2025 GMT Subject: CN=c961ec953efa3645f73084fe3865f26c65767cf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:7b:df:16:6a:b3:62:eb:83:f9:6f:c3:9e:af: 5d:d8:f6:75:f2:f9:aa:b0:b9:e6:6c:5f:66:ad:19: e9:cb:76:d4:c4:85:11:25:18:fd:ab:c9:be:49:2b: 0b:c4:0a:9b:0c:d1:63:7a:6a:6f:3b:a4:61:0b:8a: bc:b2:bf:ca:e3:0d:fd:c6:f4:b7:b4:a6:bd:84:71: ea:4b:a3:98:09:bb:eb:8a:4d:3e:cd:0b:a3:73:9d: 31:48:d7:95:1a:8e:29:2a:89:1f:d4:95:e1:c1:9f: 4a:0c:30:37:95:53:7f:90:5c:e9:20:bb:f0:18:3d: bb:37:c7:69:b7:48:a4:7a:eb:b9:5c:94:57:43:c9: ae:f3:71:a2:ad:af:00:fd:60:52:15:4f:31:eb:b0: 44:9a:c1:f3:85:dd:82:43:df:d2:0d:a0:1a:fb:6c: 80:a0:e7:db:b5:dd:47:51:5c:7c:ca:d8:87:3d:e5: f8:ab:39:da:0c:bc:6c:e8:8a:bb:4d:99:c7:76:e1: b8:6d:b0:a0:ce:f8:fb:d5:7a:5f:d8:47:ca:8b:b8: ac:88:49:b6:91:44:c6:8f:83:57:74:90:68:a4:71: 22:77:52:e3:e9:f9:8c:69:b8:c2:af:5d:47:38:16: 04:a6:4d:2c:42:8e:09:46:4d:6e:06:8f:b8:c5:b5: c5:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:61:EC:95:3E:FA:36:45:F7:30:84:FE:38:65:F2:6C:65:76:7C:F6 X509v3 Authority Key Identifier: keyid:A6:CC:C7:D3:76:19:FD:DA:1F:F3:8B:93:FE:CE:60:AB:D4:98:AB:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pszH03YZ_dof84uT_s5gq9SYq4Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f5cc1e-a294-45c7-9d10-f1bc956858aa/1/pszH03YZ_dof84uT_s5gq9SYq4Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f5cc1e-a294-45c7-9d10-f1bc956858aa/1/pszH03YZ_dof84uT_s5gq9SYq4Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:51:95:e6:c5:9c:f6:be:7f:2b:66:e9:49:11:db:e7:0b:e7: a6:09:e7:99:43:2f:a7:ef:f1:78:aa:98:f2:25:b5:ae:4a:64: 90:9a:7f:2b:c0:db:6c:fd:ab:94:cf:54:96:af:28:f1:c5:be: d5:72:d6:75:69:79:2a:6e:00:4c:8e:68:c0:1d:81:dc:c8:e3: 2e:40:48:5c:1b:12:d3:6d:12:1f:d0:1d:46:ff:27:4e:df:90: fd:27:33:30:b8:36:46:d9:f0:52:06:55:73:f7:f4:c4:b0:3c: 5c:78:3d:e1:c9:a7:95:fb:49:0c:dc:c4:76:02:95:61:9a:1b: 2c:f2:c2:38:cc:31:ec:92:b8:06:76:1f:aa:11:2e:b0:2b:70: 0d:34:9a:77:8e:7a:af:c4:d4:72:ef:89:13:a1:a3:6f:5b:9a: 03:c7:a3:76:3f:92:67:5b:1a:a5:e3:2e:76:15:fb:ec:96:8d: 48:77:1c:32:f3:3a:66:91:e2:33:69:06:16:54:06:a8:42:02: c8:59:58:d8:33:df:2e:5f:7e:2c:7b:22:15:d2:76:53:67:69: e1:da:10:5e:9c:52:33:81:6b:7d:5a:27:ef:19:18:d4:54:c8: 6d:ad:a9:66:40:20:07:95:fd:37:3c:a8:60:cf:a9:f4:6e:3b: 95:0d:88:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv4xzDZFKX6UB2R9U6Dt1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2Y2NjN2QzNzYxOWZkZGExZmYzOGI5M2ZlY2U2MGFiZDQ5 OGFiODQwHhcNMjUxMjA1MjMwMTE2WhcNMjUxMjA2MjMwMTE2WjAzMTEwLwYDVQQD EyhjOTYxZWM5NTNlZmEzNjQ1ZjczMDg0ZmUzODY1ZjI2YzY1NzY3Y2Y2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1nvfFmqzYuuD+W/Dnq9d2PZ18vmq sLnmbF9mrRnpy3bUxIURJRj9q8m+SSsLxAqbDNFjempvO6RhC4q8sr/K4w39xvS3 tKa9hHHqS6OYCbvrik0+zQujc50xSNeVGo4pKokf1JXhwZ9KDDA3lVN/kFzpILvw GD27N8dpt0ikeuu5XJRXQ8mu83Gira8A/WBSFU8x67BEmsHzhd2CQ9/SDaAa+2yA oOfbtd1HUVx8ytiHPeX4qznaDLxs6Iq7TZnHduG4bbCgzvj71Xpf2EfKi7isiEm2 kUTGj4NXdJBopHEid1Lj6fmMabjCr11HOBYEpk0sQo4JRk1uBo+4xbXF1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMlh7JU++jZF9zCE/jhl8mxldnz2MB8GA1UdIwQY MBaAFKbMx9N2Gf3aH/OLk/7OYKvUmKuEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHN6SDAzWVpfZG9mODR1VF9zNWdxOVNZcTRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9mNWNjMWUtYTI5NC00NWM3LTlkMTAt ZjFiYzk1Njg1OGFhLzEvcHN6SDAzWVpfZG9mODR1VF9zNWdxOVNZcTRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC9mNWNjMWUtYTI5NC00NWM3LTlkMTAtZjFiYzk1Njg1OGFh LzEvcHN6SDAzWVpfZG9mODR1VF9zNWdxOVNZcTRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACFGV5sWc 9r5/K2bpSRHb5wvnpgnnmUMvp+/xeKqY8iW1rkpkkJp/K8DbbP2rlM9Ulq8o8cW+ 1XLWdWl5Km4ATI5owB2B3MjjLkBIXBsS020SH9AdRv8nTt+Q/SczMLg2RtnwUgZV c/f0xLA8XHg94cmnlftJDNzEdgKVYZobLPLCOMwx7JK4BnYfqhEusCtwDTSad456 r8TUcu+JE6Gjb1uaA8ejdj+SZ1sapeMudhX77JaNSHccMvM6ZpHiM2kGFlQGqEIC yFlY2DPfLl9+LHsiFdJ2U2dp4doQXpxSM4FrfVon7xkY1FTIba2pZkAgB5X9Nzyo YM+p9G47lQ2I9Q== -----END CERTIFICATE-----Generated at Sat Dec 6 07:41:40 2025 by rpki-client