This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/2119ab-2f0a-451e-b3fa-98db4d5cdb33/1/pxJZNzLf_jheZ26QVodyMGza63I.mft File: pxJZNzLf_jheZ26QVodyMGza63I.mft (raw, json) Hash identifier: n0i5PoYG47xA6lsEAxJvAWNQEcjCbihzkgxSuWGO78Y= Subject key identifier: D2:39:AF:4C:71:A1:CB:D4:5F:31:31:C0:9B:B7:6B:85:1F:37:D3:71 Authority key identifier: A7:12:59:37:32:DF:FE:38:5E:67:6E:90:56:87:72:30:6C:DA:EB:72 Certificate issuer: /CN=a712593732dffe385e676e90568772306cdaeb72 Certificate serial: 019AF20930662B56D81CCD2D3982A4333323 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxJZNzLf_jheZ26QVodyMGza63I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/2119ab-2f0a-451e-b3fa-98db4d5cdb33/1/pxJZNzLf_jheZ26QVodyMGza63I.mft Manifest number: 13B6 Signing time: Sat 06 Dec 2025 05:01:19 +0000 Manifest this update: Sat 06 Dec 2025 05:01:19 +0000 Manifest next update: Sun 07 Dec 2025 05:01:19 +0000 Files and hashes: 1: oMRtMf47yIPyY9ZdrVPhNi3G3eo.roa (hash: 4EnKsD8A0kDOzresfp2Oy03JKmata0Bf/rsbX3H3xdM=) 2: pxJZNzLf_jheZ26QVodyMGza63I.crl (hash: z/E6NizTojyQiWaGL2LtaAx55J8mYAZQhVngx2+GHfY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/2119ab-2f0a-451e-b3fa-98db4d5cdb33/1/pxJZNzLf_jheZ26QVodyMGza63I.crl rsync://rpki.ripe.net/repository/DEFAULT/81/2119ab-2f0a-451e-b3fa-98db4d5cdb33/1/pxJZNzLf_jheZ26QVodyMGza63I.mft rsync://rpki.ripe.net/repository/DEFAULT/pxJZNzLf_jheZ26QVodyMGza63I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:30:66:2b:56:d8:1c:cd:2d:39:82:a4:33:33:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a712593732dffe385e676e90568772306cdaeb72 Validity Not Before: Dec 6 05:01:19 2025 GMT Not After : Dec 7 05:01:19 2025 GMT Subject: CN=d239af4c71a1cbd45f3131c09bb76b851f37d371 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ab:70:13:17:eb:5e:c2:a7:0b:cf:0c:ca:49: bd:1b:5d:d1:9a:6e:3d:6c:0d:ec:f3:93:37:94:ef: aa:85:7f:45:92:2b:2e:fe:50:52:4a:fd:10:18:9b: 2e:71:7d:b8:15:89:4f:f5:04:c1:af:3d:1b:27:b6: ff:f5:92:f4:5c:46:d2:ce:9c:cd:1e:3b:0e:d7:d0: ec:64:ef:ce:14:b8:f7:0c:4f:3e:ba:1b:d9:85:48: 2c:73:11:43:c4:ff:e9:c1:56:1e:df:85:c9:4c:c1: 9d:4d:1f:83:de:bf:51:1c:79:25:04:df:f8:3c:21: 3e:d5:43:61:66:1f:24:37:b7:32:be:fc:73:45:64: a2:68:95:8f:d4:88:17:c2:8c:ec:af:cc:86:21:d0: 97:4f:d3:fd:ab:a1:2a:3d:54:71:39:6d:29:b7:40: 76:f2:a4:f7:10:7f:3c:3f:92:75:5e:04:22:b0:89: 65:05:93:29:e2:cc:19:fe:50:83:ed:98:a3:b4:e3: b8:1f:34:13:7a:1e:3d:24:2e:f8:6a:ed:45:44:f0: cf:c2:55:b7:31:79:17:67:75:39:88:0a:62:3d:20: 44:b5:a7:37:a0:95:72:20:0c:db:31:57:02:8e:54: ea:fc:e8:dd:06:8a:09:29:e7:4f:b8:ee:fc:1f:9d: 99:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:39:AF:4C:71:A1:CB:D4:5F:31:31:C0:9B:B7:6B:85:1F:37:D3:71 X509v3 Authority Key Identifier: keyid:A7:12:59:37:32:DF:FE:38:5E:67:6E:90:56:87:72:30:6C:DA:EB:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxJZNzLf_jheZ26QVodyMGza63I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/2119ab-2f0a-451e-b3fa-98db4d5cdb33/1/pxJZNzLf_jheZ26QVodyMGza63I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/2119ab-2f0a-451e-b3fa-98db4d5cdb33/1/pxJZNzLf_jheZ26QVodyMGza63I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:a2:b5:52:da:11:f8:aa:bc:10:c5:45:5f:a7:3a:30:06:85: e2:a2:5e:76:f5:0a:4b:84:ca:c5:47:72:f6:95:21:9d:c5:60: 11:16:7a:f0:2d:f4:c7:fc:43:7b:c9:a2:1e:dd:de:b5:3a:fa: 71:b3:0d:81:18:c7:dd:da:af:d2:d9:93:62:ad:1c:16:15:e9: 7f:9f:7d:2f:fe:e3:85:88:15:02:be:8b:6f:02:1b:3f:62:d9: 9a:8e:20:3c:60:7c:db:0a:79:ff:1f:1d:60:c2:f1:62:69:40: ab:36:e3:bf:2d:66:b1:4f:e8:10:3f:b3:85:f6:21:dc:77:6b: 3f:b4:8b:55:14:66:07:e7:dd:bf:81:c0:fa:16:8c:5d:c6:81: c2:b3:1d:f4:a9:29:21:80:bd:72:bf:2d:e3:48:15:b4:d7:8d: 8d:52:e5:0a:3f:28:a1:88:e6:01:3e:d4:2e:ca:84:fe:96:f6: 13:63:4c:1d:41:00:d2:8b:73:13:49:02:c3:5e:0b:b3:33:28: d4:c7:e3:71:53:b1:80:b8:ed:87:00:40:d7:5f:4c:a7:c2:17: b6:a3:5f:26:56:b7:22:38:03:c2:2b:4d:2f:92:fd:4e:cf:e6: 59:a6:b1:45:a8:9d:82:3d:b3:57:be:5a:38:b1:e7:5d:63:f9: 61:d9:bb:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCTBmK1bYHM0tOYKkMzMjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3MTI1OTM3MzJkZmZlMzg1ZTY3NmU5MDU2ODc3MjMwNmNk YWViNzIwHhcNMjUxMjA2MDUwMTE5WhcNMjUxMjA3MDUwMTE5WjAzMTEwLwYDVQQD EyhkMjM5YWY0YzcxYTFjYmQ0NWYzMTMxYzA5YmI3NmI4NTFmMzdkMzcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKtwExfrXsKnC88Mykm9G13Rmm49 bA3s85M3lO+qhX9Fkisu/lBSSv0QGJsucX24FYlP9QTBrz0bJ7b/9ZL0XEbSzpzN HjsO19DsZO/OFLj3DE8+uhvZhUgscxFDxP/pwVYe34XJTMGdTR+D3r9RHHklBN/4 PCE+1UNhZh8kN7cyvvxzRWSiaJWP1IgXwozsr8yGIdCXT9P9q6EqPVRxOW0pt0B2 8qT3EH88P5J1XgQisIllBZMp4swZ/lCD7ZijtOO4HzQTeh49JC74au1FRPDPwlW3 MXkXZ3U5iApiPSBEtac3oJVyIAzbMVcCjlTq/OjdBooJKedPuO78H52ZiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNI5r0xxocvUXzExwJu3a4UfN9NxMB8GA1UdIwQY MBaAFKcSWTcy3/44XmdukFaHcjBs2utyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHhKWk56TGZfamhlWjI2UVZvZHlNR3phNjNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8yMTE5YWItMmYwYS00NTFlLWIzZmEt OThkYjRkNWNkYjMzLzEvcHhKWk56TGZfamhlWjI2UVZvZHlNR3phNjNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS8yMTE5YWItMmYwYS00NTFlLWIzZmEtOThkYjRkNWNkYjMz LzEvcHhKWk56TGZfamhlWjI2UVZvZHlNR3phNjNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkaK1UtoR +Kq8EMVFX6c6MAaF4qJedvUKS4TKxUdy9pUhncVgERZ68C30x/xDe8miHt3etTr6 cbMNgRjH3dqv0tmTYq0cFhXpf599L/7jhYgVAr6LbwIbP2LZmo4gPGB82wp5/x8d YMLxYmlAqzbjvy1msU/oED+zhfYh3HdrP7SLVRRmB+fdv4HA+haMXcaBwrMd9Kkp IYC9cr8t40gVtNeNjVLlCj8ooYjmAT7ULsqE/pb2E2NMHUEA0otzE0kCw14LszMo 1MfjcVOxgLjthwBA119Mp8IXtqNfJla3IjgDwitNL5L9Ts/mWaaxRaidgj2zV75a OLHnXWP5Ydm7EQ== -----END CERTIFICATE-----Generated at Sat Dec 6 06:58:18 2025 by rpki-client