This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft File: pCzz6j9GGa3XsfheXbx2jNPRdC0.mft (raw, json) Hash identifier: h0H9LIKCFAVpEwxHecJMhihvGrlccop9bsA+072OEoA= Subject key identifier: 1C:9E:B4:2B:7D:A6:34:1F:A2:EF:DE:4C:2B:FA:BB:54:01:DA:71:0C Authority key identifier: A4:2C:F3:EA:3F:46:19:AD:D7:B1:F8:5E:5D:BC:76:8C:D3:D1:74:2D Certificate issuer: /CN=a42cf3ea3f4619add7b1f85e5dbc768cd3d1742d Certificate serial: 019AF276EA258000EB279E7257E646F43EC3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pCzz6j9GGa3XsfheXbx2jNPRdC0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 07:01:10 +0000 Manifest this update: Sat 06 Dec 2025 07:01:10 +0000 Manifest next update: Sun 07 Dec 2025 07:01:10 +0000 Files and hashes: 1: SNV_1VpgwAmnXneSKWb5jRq8ToE.roa (hash: WATnXIVshclXFF3TBwoPfH1QR7+uJEv7hk540ZBWOkc=) 2: lVzggsEuwHNUmwDhZ4XQcolHpDk.roa (hash: eA/BupKOc3qojEoZ8E13TwJIMViSsM3/KaYEEgTR1Jc=) 3: pCzz6j9GGa3XsfheXbx2jNPRdC0.crl (hash: hYW5gNvrE79AILFH/urgdg2EyPZeTy2czkqMPwmY3yc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft rsync://rpki.ripe.net/repository/DEFAULT/pCzz6j9GGa3XsfheXbx2jNPRdC0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:ea:25:80:00:eb:27:9e:72:57:e6:46:f4:3e:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a42cf3ea3f4619add7b1f85e5dbc768cd3d1742d Validity Not Before: Dec 6 07:01:10 2025 GMT Not After : Dec 7 07:01:10 2025 GMT Subject: CN=1c9eb42b7da6341fa2efde4c2bfabb5401da710c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ba:41:9e:a8:f3:a6:63:a8:87:07:9c:a6:fc: ab:e6:97:07:38:10:a6:52:b3:1c:92:cf:32:7a:47: 37:7f:ec:3b:1e:e1:3f:72:ec:1f:fb:3c:48:a2:e9: 36:57:9d:d7:c9:75:df:79:72:9d:0d:e3:d6:f1:28: d1:f9:7d:24:b5:60:b5:fa:cf:f1:1c:22:19:b4:f9: 24:b0:f4:7e:c3:4c:da:56:27:82:c8:39:0f:80:d0: f4:30:7b:83:25:96:5a:70:53:23:b1:b8:59:a5:c7: 85:86:71:e8:8a:ec:32:5b:da:0b:ad:47:16:19:d6: 82:08:a9:95:cd:c1:6d:c6:f2:a7:ca:94:5b:05:db: c2:c6:c8:2d:0a:60:c5:5a:2b:90:63:ec:f9:e4:54: 38:2c:00:e0:af:1a:88:65:22:d4:83:ac:72:35:51: e0:56:8e:e3:02:21:01:33:1c:3d:29:26:bb:b3:48: ee:f3:ac:95:aa:ee:52:33:83:ef:b3:3b:d5:cd:19: 67:82:d5:16:c1:d9:83:5b:92:fb:c1:34:f5:65:07: a1:9a:33:dd:50:6d:f7:e1:d8:56:ba:36:94:7d:37: 6f:56:ad:b9:33:2c:a4:9e:63:47:18:9f:f2:e6:89: 34:c3:f9:51:fb:6a:8d:77:b3:e0:56:b8:e2:11:13: f9:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:9E:B4:2B:7D:A6:34:1F:A2:EF:DE:4C:2B:FA:BB:54:01:DA:71:0C X509v3 Authority Key Identifier: keyid:A4:2C:F3:EA:3F:46:19:AD:D7:B1:F8:5E:5D:BC:76:8C:D3:D1:74:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pCzz6j9GGa3XsfheXbx2jNPRdC0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:34:c1:da:5f:bf:c1:9f:3c:51:79:4b:ba:1c:3d:c7:be:8c: 5f:6c:9f:16:4a:39:4d:24:d0:f8:dc:46:06:58:3d:cc:f3:15: 17:ca:b5:a2:0d:df:93:73:5c:92:e9:41:67:06:4f:2c:49:2e: a2:9b:e6:c3:30:04:28:68:8e:e4:57:f9:f6:0a:17:bc:f2:e9: bf:e3:68:f6:a0:ea:12:ee:c6:ed:27:6a:7e:52:01:83:68:96: 1f:06:bd:0e:b7:7d:f5:8c:ae:56:a0:da:ca:94:ff:b5:2c:a0: aa:d2:c5:0e:a1:1a:23:df:75:f5:e6:7b:9e:ca:56:8b:ec:96: d4:74:2f:e1:94:ad:ac:bc:d0:a9:25:09:6c:af:40:23:4f:94: 56:4f:48:10:7d:f2:d9:84:b2:7d:77:5d:b6:fd:3b:21:61:ca: 70:f0:ce:f6:30:cb:83:0c:d7:4d:09:81:be:77:b3:d4:4a:de: 8c:e1:1c:ce:fb:94:d2:d7:4d:aa:03:c6:f0:63:e0:25:02:b4: c4:d1:19:ab:71:b4:b4:72:ab:eb:03:ac:4c:6d:b1:6f:7c:14: ec:a1:b7:32:22:a9:38:ef:17:4a:c7:ea:c1:31:89:d2:fb:bd: eb:37:68:6a:64:41:a4:f7:8a:cc:ac:07:3c:37:54:5d:18:d2: 27:8e:cd:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryduolgADrJ55yV+ZG9D7DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0MmNmM2VhM2Y0NjE5YWRkN2IxZjg1ZTVkYmM3NjhjZDNk MTc0MmQwHhcNMjUxMjA2MDcwMTEwWhcNMjUxMjA3MDcwMTEwWjAzMTEwLwYDVQQD EygxYzllYjQyYjdkYTYzNDFmYTJlZmRlNGMyYmZhYmI1NDAxZGE3MTBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLpBnqjzpmOohwecpvyr5pcHOBCm UrMcks8yekc3f+w7HuE/cuwf+zxIouk2V53XyXXfeXKdDePW8SjR+X0ktWC1+s/x HCIZtPkksPR+w0zaVieCyDkPgND0MHuDJZZacFMjsbhZpceFhnHoiuwyW9oLrUcW GdaCCKmVzcFtxvKnypRbBdvCxsgtCmDFWiuQY+z55FQ4LADgrxqIZSLUg6xyNVHg Vo7jAiEBMxw9KSa7s0ju86yVqu5SM4PvszvVzRlngtUWwdmDW5L7wTT1ZQehmjPd UG334dhWujaUfTdvVq25MyyknmNHGJ/y5ok0w/lR+2qNd7PgVrjiERP58wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFByetCt9pjQfou/eTCv6u1QB2nEMMB8GA1UdIwQY MBaAFKQs8+o/Rhmt17H4Xl28dozT0XQtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEN6ejZqOUdHYTNYc2ZoZVhieDJqTlBSZEMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC81NzI2OWItMGY3MC00NmNmLWJjZTIt Yzc3NzUxNTlmYzgyLzEvcEN6ejZqOUdHYTNYc2ZoZVhieDJqTlBSZEMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC81NzI2OWItMGY3MC00NmNmLWJjZTItYzc3NzUxNTlmYzgy LzEvcEN6ejZqOUdHYTNYc2ZoZVhieDJqTlBSZEMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkjTB2l+/ wZ88UXlLuhw9x76MX2yfFko5TSTQ+NxGBlg9zPMVF8q1og3fk3NckulBZwZPLEku opvmwzAEKGiO5Ff59goXvPLpv+No9qDqEu7G7SdqflIBg2iWHwa9Drd99YyuVqDa ypT/tSygqtLFDqEaI9919eZ7nspWi+yW1HQv4ZStrLzQqSUJbK9AI0+UVk9IEH3y 2YSyfXddtv07IWHKcPDO9jDLgwzXTQmBvnez1ErejOEczvuU0tdNqgPG8GPgJQK0 xNEZq3G0tHKr6wOsTG2xb3wU7KG3MiKpOO8XSsfqwTGJ0vu96zdoamRBpPeKzKwH PDdUXRjSJ47NFw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:53:33 2025 by rpki-client