This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.mft File: Pzv1EXdLbh1wa7Jyez0xJXdakS8.mft (raw, json) Hash identifier: Hf8zZ3avWYazmHKUkp/8xloX64h7nYtla5ZETB3f6ew= Subject key identifier: B5:E7:3D:4B:73:F0:AE:87:1B:7F:D3:BA:76:66:A5:8D:5F:3A:4C:8B Authority key identifier: 3F:3B:F5:11:77:4B:6E:1D:70:6B:B2:72:7B:3D:31:25:77:5A:91:2F Certificate issuer: /CN=3f3bf511774b6e1d706bb2727b3d3125775a912f Certificate serial: 019AF2766E77167F14FDB647649DF9EC2B71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pzv1EXdLbh1wa7Jyez0xJXdakS8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.mft Manifest number: 1318 Signing time: Sat 06 Dec 2025 07:00:39 +0000 Manifest this update: Sat 06 Dec 2025 07:00:39 +0000 Manifest next update: Sun 07 Dec 2025 07:00:39 +0000 Files and hashes: 1: NI2TKci7WqCqy8kg5iraylXHZzQ.roa (hash: FBDYKoklGjXkJ0zMlLJAVAFso/2nr98wz98/NBCBllg=) 2: Pzv1EXdLbh1wa7Jyez0xJXdakS8.crl (hash: tTEsj3hNJl4srT+DD1j+ShvMvOapdNROFAZIEMntrY0=) 3: mvLDmuyuUuZFiCTIw_g9i8uNgFg.roa (hash: GZj+Xi5SIMQUMGweRfOhuKIks60lK9TTGOmmhsaxut8=) 4: zURslIPoCzmuF9cVBs91SF_jfZs.roa (hash: PBlZSBkxr5D+YnPFObnzHQvndsM2zZG1fAG0x5+wRk4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.mft rsync://rpki.ripe.net/repository/DEFAULT/Pzv1EXdLbh1wa7Jyez0xJXdakS8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 07:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:6e:77:16:7f:14:fd:b6:47:64:9d:f9:ec:2b:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f3bf511774b6e1d706bb2727b3d3125775a912f Validity Not Before: Dec 6 07:00:39 2025 GMT Not After : Dec 7 07:00:39 2025 GMT Subject: CN=b5e73d4b73f0ae871b7fd3ba7666a58d5f3a4c8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f2:70:f4:03:76:e7:05:8e:c4:70:77:55:a9: 22:63:8e:48:0c:a5:fd:3d:07:ad:d2:57:e9:79:f0: 22:a1:86:47:99:00:c0:f0:ed:a2:9b:c6:16:46:8e: 7f:6b:9f:6e:7d:7a:ea:ad:a5:7e:2c:b3:f9:05:e6: 6c:60:17:97:72:b8:a0:8b:2e:c9:47:56:5d:06:70: 19:fc:90:70:ab:9c:c3:6e:c3:a2:bc:54:8f:5d:84: b9:e5:50:1d:06:96:db:fa:9c:81:b0:8d:9b:26:1f: 51:9f:79:d5:37:d6:61:bc:fc:4e:a4:a9:2a:d6:42: 95:86:dc:f5:21:49:21:29:1b:7e:e1:2a:88:80:ef: 94:c2:a3:64:74:8a:50:fe:a1:1d:59:f5:8e:40:b4: db:f5:b2:d1:1a:e5:ee:c1:98:72:cb:0a:d4:6d:e7: 3f:3f:c1:d6:6e:6b:dc:b7:27:5f:0c:32:7e:c2:79: 13:38:ea:7f:ee:54:ff:42:7b:9e:a0:bd:84:0f:2d: f7:2b:24:ff:6e:ae:ca:66:46:22:52:e1:88:4e:74: 9b:1b:a3:49:0b:5f:66:25:f1:1b:66:64:35:fb:e2: 72:c4:91:5d:0e:1c:ee:d0:b9:4f:b8:a7:01:2f:e6: 77:43:03:0b:88:67:b9:a1:cd:c9:e3:b4:9b:7a:f0: 37:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:E7:3D:4B:73:F0:AE:87:1B:7F:D3:BA:76:66:A5:8D:5F:3A:4C:8B X509v3 Authority Key Identifier: keyid:3F:3B:F5:11:77:4B:6E:1D:70:6B:B2:72:7B:3D:31:25:77:5A:91:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pzv1EXdLbh1wa7Jyez0xJXdakS8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:a8:28:c0:00:8d:d0:48:fc:c9:56:6e:28:59:14:46:d8:fc: 41:83:eb:b3:ea:86:fc:89:bf:c3:7a:25:d3:59:7f:69:25:34: 2d:d7:dc:96:74:4b:f2:d9:3f:06:21:e0:23:73:78:a1:0c:1f: ec:d6:b9:a6:cb:04:1e:fa:86:ee:a4:49:e2:df:b5:f9:c5:d0: 39:fb:ad:61:f5:43:72:3b:ba:e5:c5:8f:4b:6b:bf:65:64:50: 11:ef:d0:6e:0f:38:7d:df:aa:2c:8e:df:66:2b:37:9a:b8:c6: 5d:09:5f:d8:6c:21:7b:81:0e:a2:83:22:32:10:74:2c:73:42: 7c:70:ce:3b:75:c7:74:d9:18:f0:dd:85:aa:d0:21:97:a0:fd: 46:91:19:e3:1f:f8:d5:b8:a0:46:02:0c:27:bf:5a:e8:a4:52: d3:8c:11:38:b9:49:c1:97:cf:a9:83:1e:19:90:e8:29:d7:c2: 08:1c:46:fe:11:26:32:01:d4:90:72:12:6b:21:dc:9c:3f:1b: 73:42:65:86:fa:ea:da:e3:19:39:0a:16:f4:f4:72:de:f1:71: 1c:32:5e:45:b2:56:25:0b:fc:4d:d3:e2:53:af:19:d9:1c:d8: 0f:ce:3b:f5:54:6c:22:3e:8f:2d:02:40:eb:06:2a:8a:0d:24: b8:a7:1d:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydm53Fn8U/bZHZJ357CtxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmM2JmNTExNzc0YjZlMWQ3MDZiYjI3MjdiM2QzMTI1Nzc1 YTkxMmYwHhcNMjUxMjA2MDcwMDM5WhcNMjUxMjA3MDcwMDM5WjAzMTEwLwYDVQQD EyhiNWU3M2Q0YjczZjBhZTg3MWI3ZmQzYmE3NjY2YTU4ZDVmM2E0YzhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPJw9AN25wWOxHB3VakiY45IDKX9 PQet0lfpefAioYZHmQDA8O2im8YWRo5/a59ufXrqraV+LLP5BeZsYBeXcrigiy7J R1ZdBnAZ/JBwq5zDbsOivFSPXYS55VAdBpbb+pyBsI2bJh9Rn3nVN9ZhvPxOpKkq 1kKVhtz1IUkhKRt+4SqIgO+UwqNkdIpQ/qEdWfWOQLTb9bLRGuXuwZhyywrUbec/ P8HWbmvctydfDDJ+wnkTOOp/7lT/QnueoL2EDy33KyT/bq7KZkYiUuGITnSbG6NJ C19mJfEbZmQ1++JyxJFdDhzu0LlPuKcBL+Z3QwMLiGe5oc3J47SbevA3kQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLXnPUtz8K6HG3/TunZmpY1fOkyLMB8GA1UdIwQY MBaAFD879RF3S24dcGuycns9MSV3WpEvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHp2MUVYZExiaDF3YTdKeWV6MHhKWGRha1M4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9mNTU3NTctNTk2NS00MjcwLWJlYWIt YTBkNmRiZmFjNmViLzEvUHp2MUVYZExiaDF3YTdKeWV6MHhKWGRha1M4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS9mNTU3NTctNTk2NS00MjcwLWJlYWItYTBkNmRiZmFjNmVi LzEvUHp2MUVYZExiaDF3YTdKeWV6MHhKWGRha1M4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWqgowACN 0Ej8yVZuKFkURtj8QYPrs+qG/Im/w3ol01l/aSU0LdfclnRL8tk/BiHgI3N4oQwf 7Na5pssEHvqG7qRJ4t+1+cXQOfutYfVDcju65cWPS2u/ZWRQEe/Qbg84fd+qLI7f Zis3mrjGXQlf2Gwhe4EOooMiMhB0LHNCfHDOO3XHdNkY8N2FqtAhl6D9RpEZ4x/4 1bigRgIMJ79a6KRS04wROLlJwZfPqYMeGZDoKdfCCBxG/hEmMgHUkHISayHcnD8b c0Jlhvrq2uMZOQoW9PRy3vFxHDJeRbJWJQv8TdPiU68Z2RzYD8479VRsIj6PLQJA 6wYqig0kuKcdNw== -----END CERTIFICATE-----Generated at Sat Dec 6 15:56:06 2025 by rpki-client