This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/afa9af-fe5e-4023-ac0f-76d267a2489d/1/pzfikBac_OajOKZrykXP5jXRVEY.mft File: pzfikBac_OajOKZrykXP5jXRVEY.mft (raw, json) Hash identifier: 7k7f3Bw+24lVyQYUw5sbFmSf2GulDbRjjNpldgo55cg= Subject key identifier: C3:34:B0:3B:A2:88:90:7D:55:81:BF:C1:DD:EF:AD:E1:4C:51:D5:1C Authority key identifier: A7:37:E2:90:16:9C:FC:E6:A3:38:A6:6B:CA:45:CF:E6:35:D1:54:46 Certificate issuer: /CN=a737e290169cfce6a338a66bca45cfe635d15446 Certificate serial: 019AF19BA315923F0AA40B980CA3362E27DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pzfikBac_OajOKZrykXP5jXRVEY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/afa9af-fe5e-4023-ac0f-76d267a2489d/1/pzfikBac_OajOKZrykXP5jXRVEY.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 03:01:40 +0000 Manifest this update: Sat 06 Dec 2025 03:01:40 +0000 Manifest next update: Sun 07 Dec 2025 03:01:40 +0000 Files and hashes: 1: pzfikBac_OajOKZrykXP5jXRVEY.crl (hash: eV0ubbGRNP7MANwlhi6VVqUQJq3mpUcCp4Leng3HGuo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/afa9af-fe5e-4023-ac0f-76d267a2489d/1/pzfikBac_OajOKZrykXP5jXRVEY.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/afa9af-fe5e-4023-ac0f-76d267a2489d/1/pzfikBac_OajOKZrykXP5jXRVEY.mft rsync://rpki.ripe.net/repository/DEFAULT/pzfikBac_OajOKZrykXP5jXRVEY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:a3:15:92:3f:0a:a4:0b:98:0c:a3:36:2e:27:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a737e290169cfce6a338a66bca45cfe635d15446 Validity Not Before: Dec 6 03:01:40 2025 GMT Not After : Dec 7 03:01:40 2025 GMT Subject: CN=c334b03ba288907d5581bfc1ddefade14c51d51c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:02:30:83:0c:bb:8b:9c:22:e0:2b:43:b3:d4: 65:b5:02:67:4a:ce:72:ab:90:46:46:00:08:1d:62: 7f:b3:fd:74:59:bf:90:7c:c4:c9:e4:ab:ad:d6:04: 96:b8:ed:14:8d:bf:17:fe:28:37:ef:22:95:34:66: f1:09:61:ab:f4:2a:24:67:6b:29:34:03:6c:64:27: 77:dd:80:5c:07:8b:3d:9d:5e:c3:52:46:54:2f:88: 4c:40:2a:63:1e:6e:f7:d5:94:f6:1b:3a:a0:c5:b5: fc:a3:75:e7:05:0d:ff:97:45:67:24:d4:f3:cd:e1: 77:cc:a4:07:a4:e2:94:4e:95:19:96:00:e6:77:e1: 15:8f:ff:26:4b:7f:e7:27:b4:2f:8f:3f:ae:7d:e6: 83:81:4c:b8:01:90:b3:be:25:2c:30:28:d0:eb:c6: a4:0e:89:1a:35:03:96:93:47:69:f8:04:19:de:cc: 94:35:31:7d:21:c9:54:5d:7e:9f:4e:47:0e:d6:30: b5:25:00:bb:57:20:e7:78:f1:be:27:d6:d8:4c:a0: fa:a3:28:d6:8a:0a:ce:41:5e:88:5b:45:a8:e1:90: 22:c1:51:78:8d:c1:a7:22:35:f1:fe:92:23:47:14: b7:6c:ae:47:4b:12:9c:f2:1f:2d:32:31:0c:43:5f: f8:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:34:B0:3B:A2:88:90:7D:55:81:BF:C1:DD:EF:AD:E1:4C:51:D5:1C X509v3 Authority Key Identifier: keyid:A7:37:E2:90:16:9C:FC:E6:A3:38:A6:6B:CA:45:CF:E6:35:D1:54:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pzfikBac_OajOKZrykXP5jXRVEY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/afa9af-fe5e-4023-ac0f-76d267a2489d/1/pzfikBac_OajOKZrykXP5jXRVEY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/afa9af-fe5e-4023-ac0f-76d267a2489d/1/pzfikBac_OajOKZrykXP5jXRVEY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:40:20:63:82:30:66:e7:d6:dc:f1:ab:f3:e8:a0:ba:dd:bb: cf:bc:e7:ba:13:65:7d:d3:6a:9c:2f:13:64:04:36:7d:69:46: 16:97:23:be:da:0c:7a:87:17:b8:21:2f:cd:b8:13:d4:22:f0: 11:b5:67:53:16:b8:1c:50:35:fc:a8:4d:9f:e3:50:6d:09:65: b5:6d:f8:03:59:0f:f1:af:cc:29:f4:50:4a:62:c1:a6:d9:17: 95:73:09:c6:30:7c:6e:c0:c8:ee:67:60:cf:3a:d2:20:f1:2f: 23:22:c2:bf:2b:0c:7d:fd:2a:0a:e9:a5:26:e5:ed:92:81:41: 0b:7f:51:53:3e:f2:41:76:8c:88:93:fd:f7:7d:f0:84:23:0a: ec:ee:9b:6c:9d:96:df:2d:21:61:6c:a0:a5:11:40:5a:de:f6: 6e:c9:14:dc:85:c7:9d:21:22:3f:96:79:6a:6e:bd:91:3a:39: 42:8a:dc:0b:90:64:87:ec:43:81:84:cd:ec:31:3f:ec:cb:75: 86:c0:20:76:e5:26:68:97:db:64:65:75:ad:a7:13:56:65:0e: 07:ab:cb:58:71:95:7c:95:fd:08:76:ab:b5:20:38:d1:fd:50: 15:5c:b0:51:2a:bb:df:fa:72:b1:6f:e5:36:26:e5:80:0f:cd: 46:d1:2c:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm6MVkj8KpAuYDKM2LifeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3MzdlMjkwMTY5Y2ZjZTZhMzM4YTY2YmNhNDVjZmU2MzVk MTU0NDYwHhcNMjUxMjA2MDMwMTQwWhcNMjUxMjA3MDMwMTQwWjAzMTEwLwYDVQQD EyhjMzM0YjAzYmEyODg5MDdkNTU4MWJmYzFkZGVmYWRlMTRjNTFkNTFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2QIwgwy7i5wi4CtDs9RltQJnSs5y q5BGRgAIHWJ/s/10Wb+QfMTJ5Kut1gSWuO0Ujb8X/ig37yKVNGbxCWGr9CokZ2sp NANsZCd33YBcB4s9nV7DUkZUL4hMQCpjHm731ZT2GzqgxbX8o3XnBQ3/l0VnJNTz zeF3zKQHpOKUTpUZlgDmd+EVj/8mS3/nJ7Qvjz+ufeaDgUy4AZCzviUsMCjQ68ak DokaNQOWk0dp+AQZ3syUNTF9IclUXX6fTkcO1jC1JQC7VyDnePG+J9bYTKD6oyjW igrOQV6IW0Wo4ZAiwVF4jcGnIjXx/pIjRxS3bK5HSxKc8h8tMjEMQ1/4XwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMM0sDuiiJB9VYG/wd3vreFMUdUcMB8GA1UdIwQY MBaAFKc34pAWnPzmozima8pFz+Y10VRGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHpmaWtCYWNfT2FqT0tacnlrWFA1alhSVkVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9hZmE5YWYtZmU1ZS00MDIzLWFjMGYt NzZkMjY3YTI0ODlkLzEvcHpmaWtCYWNfT2FqT0tacnlrWFA1alhSVkVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9hZmE5YWYtZmU1ZS00MDIzLWFjMGYtNzZkMjY3YTI0ODlk LzEvcHpmaWtCYWNfT2FqT0tacnlrWFA1alhSVkVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdUAgY4Iw ZufW3PGr8+igut27z7znuhNlfdNqnC8TZAQ2fWlGFpcjvtoMeocXuCEvzbgT1CLw EbVnUxa4HFA1/KhNn+NQbQlltW34A1kP8a/MKfRQSmLBptkXlXMJxjB8bsDI7mdg zzrSIPEvIyLCvysMff0qCumlJuXtkoFBC39RUz7yQXaMiJP9933whCMK7O6bbJ2W 3y0hYWygpRFAWt72bskU3IXHnSEiP5Z5am69kTo5QorcC5Bkh+xDgYTN7DE/7Mt1 hsAgduUmaJfbZGV1racTVmUOB6vLWHGVfJX9CHartSA40f1QFVywUSq73/pysW/l NiblgA/NRtEs8A== -----END CERTIFICATE-----Generated at Sat Dec 6 07:12:16 2025 by rpki-client