This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/75439d-fb06-4b63-84a3-8bd3c6c704dc/1/pkzfoBYCORcDN7pgk0ugbkW4zRE.mft File: pkzfoBYCORcDN7pgk0ugbkW4zRE.mft (raw, json) Hash identifier: ThcnXorw5inn0w5V2su+Zq3vW3G2LB600/Fnz5XDEGo= Subject key identifier: C9:EF:A4:5B:9A:6D:F6:61:6A:C6:4E:11:EC:60:AB:F5:0F:25:C4:81 Authority key identifier: A6:4C:DF:A0:16:02:39:17:03:37:BA:60:93:4B:A0:6E:45:B8:CD:11 Certificate issuer: /CN=a64cdfa0160239170337ba60934ba06e45b8cd11 Certificate serial: 019AF2AD7D42A6167B6653665D7786690A81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pkzfoBYCORcDN7pgk0ugbkW4zRE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/75439d-fb06-4b63-84a3-8bd3c6c704dc/1/pkzfoBYCORcDN7pgk0ugbkW4zRE.mft Manifest number: 168C Signing time: Sat 06 Dec 2025 08:00:47 +0000 Manifest this update: Sat 06 Dec 2025 08:00:47 +0000 Manifest next update: Sun 07 Dec 2025 08:00:47 +0000 Files and hashes: 1: ZSYjjoE3tBto8BluSqunJgk7oHQ.roa (hash: iHTHcMwi7ntDSxANO5civkuDptItJ8z7l7j08RXxzHg=) 2: pkzfoBYCORcDN7pgk0ugbkW4zRE.crl (hash: 8P0rI9WBAERWzty68+DCYrMsX3CXHPLB8p/gCtpk9sI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/75439d-fb06-4b63-84a3-8bd3c6c704dc/1/pkzfoBYCORcDN7pgk0ugbkW4zRE.crl rsync://rpki.ripe.net/repository/DEFAULT/84/75439d-fb06-4b63-84a3-8bd3c6c704dc/1/pkzfoBYCORcDN7pgk0ugbkW4zRE.mft rsync://rpki.ripe.net/repository/DEFAULT/pkzfoBYCORcDN7pgk0ugbkW4zRE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:7d:42:a6:16:7b:66:53:66:5d:77:86:69:0a:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a64cdfa0160239170337ba60934ba06e45b8cd11 Validity Not Before: Dec 6 08:00:47 2025 GMT Not After : Dec 7 08:00:47 2025 GMT Subject: CN=c9efa45b9a6df6616ac64e11ec60abf50f25c481 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:4d:92:6c:27:41:24:23:15:50:53:b9:01:36: 25:c6:59:54:4b:0e:da:1e:25:38:fc:a7:24:e5:fb: e8:f9:c1:23:df:da:07:8b:8a:98:75:30:f9:19:fa: d5:1d:73:73:20:07:4a:94:dd:a0:9a:34:a0:bb:ba: 18:80:5f:4c:53:7d:87:21:b9:b1:1f:c9:7a:2d:80: d1:e6:be:0b:54:5b:60:93:be:94:e1:f4:1d:e9:78: 4f:de:dc:11:11:58:ca:15:73:ac:44:19:98:fa:3d: ac:03:df:16:c7:cb:ea:de:99:bb:9e:7c:3e:60:01: 50:5f:3d:74:27:b0:9f:5f:c3:85:3e:b6:9a:c2:60: 9a:71:4c:b3:b9:f2:75:c0:57:90:6c:3b:5a:59:c3: 6c:9a:12:d3:f6:32:67:72:c8:44:0a:40:ea:1c:b0: ee:89:41:1d:43:fe:a4:7a:7e:dc:4e:b3:70:19:6c: 01:22:43:36:1e:ce:2e:22:d4:cc:d6:3f:7c:b6:27: cf:4c:92:77:96:42:e7:3d:cf:2a:ff:5d:e0:ee:61: 80:41:0b:c1:bf:24:33:c6:b6:b3:c3:c6:93:a4:19: 6a:8e:19:a2:f9:c8:10:cb:11:b9:5a:8b:5d:ca:08: 86:6f:07:02:00:24:9a:d6:95:62:f9:a5:ae:44:9c: fe:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:EF:A4:5B:9A:6D:F6:61:6A:C6:4E:11:EC:60:AB:F5:0F:25:C4:81 X509v3 Authority Key Identifier: keyid:A6:4C:DF:A0:16:02:39:17:03:37:BA:60:93:4B:A0:6E:45:B8:CD:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pkzfoBYCORcDN7pgk0ugbkW4zRE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/75439d-fb06-4b63-84a3-8bd3c6c704dc/1/pkzfoBYCORcDN7pgk0ugbkW4zRE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/75439d-fb06-4b63-84a3-8bd3c6c704dc/1/pkzfoBYCORcDN7pgk0ugbkW4zRE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:6d:65:fe:05:cc:2c:01:db:51:9d:60:6a:a6:e1:c9:bb:ad: 87:4b:ee:c4:4e:f0:68:c6:57:f2:de:40:ae:7d:af:86:d8:04: 8a:c4:f9:49:cf:d9:8e:e7:be:ff:c6:f1:c5:75:d7:70:b4:15: d6:d0:df:40:1b:84:66:4a:d8:7c:67:00:c1:6a:a5:b6:52:dc: d7:9f:d4:73:fa:8a:2f:34:ef:1d:8d:cf:b0:20:c8:0e:20:c1: 4c:6d:9b:d8:70:ad:ad:57:1a:92:64:0c:8f:40:bf:f9:ad:28: 4f:31:5d:9b:03:f2:eb:c1:7c:5b:34:be:c7:be:4d:89:da:89: 92:b4:31:a3:5e:38:d4:29:6d:bc:da:ea:53:fd:a8:e2:89:1b: df:a0:aa:60:0a:1e:c0:5b:18:ab:93:81:a1:cc:9c:8f:ae:f7: 2a:43:98:00:d1:c1:33:3f:9a:41:a8:a5:f8:e3:b8:ed:55:32: 04:c8:8c:ac:e9:05:5e:17:7a:15:5a:e8:e7:44:cf:94:ec:f3: c5:d5:4c:b3:66:22:0f:d4:1f:10:7a:d9:50:65:ea:53:a4:27: 0e:86:bd:43:02:cc:79:0e:b5:b5:8a:cb:5c:88:fb:b0:99:76: 73:34:77:a5:fa:e5:a4:08:4a:0c:5a:6e:a7:47:e8:6b:d0:9a: f2:e7:e5:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrX1CphZ7ZlNmXXeGaQqBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2NGNkZmEwMTYwMjM5MTcwMzM3YmE2MDkzNGJhMDZlNDVi OGNkMTEwHhcNMjUxMjA2MDgwMDQ3WhcNMjUxMjA3MDgwMDQ3WjAzMTEwLwYDVQQD EyhjOWVmYTQ1YjlhNmRmNjYxNmFjNjRlMTFlYzYwYWJmNTBmMjVjNDgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyU2SbCdBJCMVUFO5ATYlxllUSw7a HiU4/Kck5fvo+cEj39oHi4qYdTD5GfrVHXNzIAdKlN2gmjSgu7oYgF9MU32HIbmx H8l6LYDR5r4LVFtgk76U4fQd6XhP3twREVjKFXOsRBmY+j2sA98Wx8vq3pm7nnw+ YAFQXz10J7CfX8OFPraawmCacUyzufJ1wFeQbDtaWcNsmhLT9jJncshECkDqHLDu iUEdQ/6ken7cTrNwGWwBIkM2Hs4uItTM1j98tifPTJJ3lkLnPc8q/13g7mGAQQvB vyQzxrazw8aTpBlqjhmi+cgQyxG5WotdygiGbwcCACSa1pVi+aWuRJz+DwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMnvpFuabfZhasZOEexgq/UPJcSBMB8GA1UdIwQY MBaAFKZM36AWAjkXAze6YJNLoG5FuM0RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGt6Zm9CWUNPUmNETjdwZ2swdWdia1c0elJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC83NTQzOWQtZmIwNi00YjYzLTg0YTMt OGJkM2M2YzcwNGRjLzEvcGt6Zm9CWUNPUmNETjdwZ2swdWdia1c0elJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC83NTQzOWQtZmIwNi00YjYzLTg0YTMtOGJkM2M2YzcwNGRj LzEvcGt6Zm9CWUNPUmNETjdwZ2swdWdia1c0elJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjW1l/gXM LAHbUZ1gaqbhybuth0vuxE7waMZX8t5Arn2vhtgEisT5Sc/Zjue+/8bxxXXXcLQV 1tDfQBuEZkrYfGcAwWqltlLc15/Uc/qKLzTvHY3PsCDIDiDBTG2b2HCtrVcakmQM j0C/+a0oTzFdmwPy68F8WzS+x75NidqJkrQxo1441CltvNrqU/2o4okb36CqYAoe wFsYq5OBocycj673KkOYANHBMz+aQail+OO47VUyBMiMrOkFXhd6FVro50TPlOzz xdVMs2YiD9QfEHrZUGXqU6QnDoa9QwLMeQ61tYrLXIj7sJl2czR3pfrlpAhKDFpu p0foa9Ca8uflhQ== -----END CERTIFICATE-----Generated at Sat Dec 6 15:33:38 2025 by rpki-client