This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/e83bb9-a5c2-4774-9ebb-ae327dbe45c9/1/PZ--FcPNteA0NeJM9i8W-2xiOWw.mft File: PZ--FcPNteA0NeJM9i8W-2xiOWw.mft (raw, json) Hash identifier: GNpT1pCgQlRNlFQOqi4eFAM2ZtbuqNRupLIQulgj+6A= Subject key identifier: 88:DC:09:ED:4F:4B:B8:EA:6D:36:E7:3D:9A:E8:06:08:84:4E:92:43 Authority key identifier: 3D:9F:BE:15:C3:CD:B5:E0:34:35:E2:4C:F6:2F:16:FB:6C:62:39:6C Certificate issuer: /CN=3d9fbe15c3cdb5e03435e24cf62f16fb6c62396c Certificate serial: 019AF653F7E2B3B0A17CA1D56FDFA85E4DCB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PZ--FcPNteA0NeJM9i8W-2xiOWw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/e83bb9-a5c2-4774-9ebb-ae327dbe45c9/1/PZ--FcPNteA0NeJM9i8W-2xiOWw.mft Manifest number: 1764 Signing time: Sun 07 Dec 2025 01:01:29 +0000 Manifest this update: Sun 07 Dec 2025 01:01:29 +0000 Manifest next update: Mon 08 Dec 2025 01:01:29 +0000 Files and hashes: 1: Du4r0IcScgI4YpWJ-9I9INdoB6g.roa (hash: 5uHGYRf/yqBocoz7nK2AWJUng6JU07jGh7qJ3ZcIHek=) 2: PZ--FcPNteA0NeJM9i8W-2xiOWw.crl (hash: RACG6NZISJHEj6NcCkCaCR3u/h79Brt0VD1dYqnqxh0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/e83bb9-a5c2-4774-9ebb-ae327dbe45c9/1/PZ--FcPNteA0NeJM9i8W-2xiOWw.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/e83bb9-a5c2-4774-9ebb-ae327dbe45c9/1/PZ--FcPNteA0NeJM9i8W-2xiOWw.mft rsync://rpki.ripe.net/repository/DEFAULT/PZ--FcPNteA0NeJM9i8W-2xiOWw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 01:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:53:f7:e2:b3:b0:a1:7c:a1:d5:6f:df:a8:5e:4d:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d9fbe15c3cdb5e03435e24cf62f16fb6c62396c Validity Not Before: Dec 7 01:01:29 2025 GMT Not After : Dec 8 01:01:29 2025 GMT Subject: CN=88dc09ed4f4bb8ea6d36e73d9ae80608844e9243 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:96:fa:25:0c:28:aa:8d:76:02:98:e6:84:58: df:c3:dd:c4:92:f4:52:a2:bb:2d:da:aa:ec:ad:a9: d7:30:3f:cc:37:10:74:6b:05:28:0a:92:3b:a8:e1: 81:6c:88:7b:8f:a5:3b:e3:47:ef:ae:c2:74:f2:c8: 8d:7d:17:db:13:ab:1f:ca:aa:65:cb:08:41:7a:68: 99:40:39:83:d5:86:9c:ba:84:b0:07:f7:7f:c6:19: d7:19:d3:18:1e:17:0c:64:92:6d:64:91:e4:20:7c: 20:27:64:9d:7c:82:33:71:e4:2b:5f:e7:e6:a3:2e: e1:75:b3:72:7b:14:30:e5:72:b0:75:cd:e0:98:f1: a0:cd:fa:59:fd:21:3c:93:52:a6:6f:a1:b4:81:94: 35:28:df:cf:c1:95:3c:5f:07:8c:19:21:a7:bf:8b: 30:f7:0c:ec:8b:ed:77:39:bf:6c:e4:4c:66:f2:59: 59:52:27:0d:67:7d:64:7f:9f:f4:e8:c9:bb:a0:c3: 02:de:d7:dd:fe:43:cc:f8:28:9d:79:b6:fa:af:49: 4a:0c:fe:c2:75:b0:33:c4:c3:de:3a:57:f9:43:60: aa:bf:17:14:36:ca:b9:95:00:4e:79:30:31:10:23: 8f:a9:e6:f2:d8:61:e4:f6:ae:7a:e9:b7:74:79:1d: ef:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:DC:09:ED:4F:4B:B8:EA:6D:36:E7:3D:9A:E8:06:08:84:4E:92:43 X509v3 Authority Key Identifier: keyid:3D:9F:BE:15:C3:CD:B5:E0:34:35:E2:4C:F6:2F:16:FB:6C:62:39:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PZ--FcPNteA0NeJM9i8W-2xiOWw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e83bb9-a5c2-4774-9ebb-ae327dbe45c9/1/PZ--FcPNteA0NeJM9i8W-2xiOWw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e83bb9-a5c2-4774-9ebb-ae327dbe45c9/1/PZ--FcPNteA0NeJM9i8W-2xiOWw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:5a:0b:1d:a9:00:4f:6d:4d:30:e9:71:b8:56:7f:f2:84:b2: bc:00:a7:8a:3c:40:70:46:21:fd:ad:62:fa:ea:e9:b4:8c:0c: e7:d6:9f:24:d6:a2:90:88:3c:c5:63:84:73:d5:1a:46:e1:ec: ca:f2:dd:2c:e1:6c:9c:20:f2:c4:88:6c:79:bc:39:6f:99:39: 22:b1:e9:be:9d:c0:b6:04:f3:a8:2f:e9:74:2f:62:a6:e3:7d: d0:7b:a1:12:ba:c2:68:71:d3:9d:a2:51:91:f0:d9:31:50:91: df:19:06:49:6f:e7:b1:a8:27:ae:e0:e8:7e:df:be:f4:ca:3e: 03:06:28:c7:1a:40:25:c3:d1:8d:4d:69:2b:71:d4:15:7c:7e: eb:69:25:d6:9f:0f:a8:0d:ab:4e:97:7c:2c:9e:6a:5a:e8:f8: 6b:d7:2a:09:6c:24:16:a4:3e:e6:f4:bb:43:2d:57:8d:57:6f: 66:0d:df:07:fe:8e:6f:ac:86:1e:b2:3e:e3:34:bb:58:a1:d6: 72:72:9b:e5:2d:11:92:9b:7f:f2:68:4b:71:d6:7f:05:aa:fb: 73:f3:bd:48:70:43:ba:58:a9:18:08:f4:fe:d0:f1:58:e8:39: 9b:50:ac:c5:8d:56:16:02:a5:08:f2:9c:d5:3d:e5:42:ba:5f: 88:a5:11:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2U/fis7ChfKHVb9+oXk3LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkOWZiZTE1YzNjZGI1ZTAzNDM1ZTI0Y2Y2MmYxNmZiNmM2 MjM5NmMwHhcNMjUxMjA3MDEwMTI5WhcNMjUxMjA4MDEwMTI5WjAzMTEwLwYDVQQD Eyg4OGRjMDllZDRmNGJiOGVhNmQzNmU3M2Q5YWU4MDYwODg0NGU5MjQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJb6JQwoqo12ApjmhFjfw93EkvRS orst2qrsranXMD/MNxB0awUoCpI7qOGBbIh7j6U740fvrsJ08siNfRfbE6sfyqpl ywhBemiZQDmD1YacuoSwB/d/xhnXGdMYHhcMZJJtZJHkIHwgJ2SdfIIzceQrX+fm oy7hdbNyexQw5XKwdc3gmPGgzfpZ/SE8k1Kmb6G0gZQ1KN/PwZU8XweMGSGnv4sw 9wzsi+13Ob9s5Exm8llZUicNZ31kf5/06Mm7oMMC3tfd/kPM+Cidebb6r0lKDP7C dbAzxMPeOlf5Q2CqvxcUNsq5lQBOeTAxECOPqeby2GHk9q566bd0eR3vKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIjcCe1PS7jqbTbnPZroBgiETpJDMB8GA1UdIwQY MBaAFD2fvhXDzbXgNDXiTPYvFvtsYjlsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFotLUZjUE50ZUEwTmVKTTlpOFctMnhpT1d3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9lODNiYjktYTVjMi00Nzc0LTllYmIt YWUzMjdkYmU0NWM5LzEvUFotLUZjUE50ZUEwTmVKTTlpOFctMnhpT1d3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9lODNiYjktYTVjMi00Nzc0LTllYmItYWUzMjdkYmU0NWM5 LzEvUFotLUZjUE50ZUEwTmVKTTlpOFctMnhpT1d3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI1oLHakA T21NMOlxuFZ/8oSyvACnijxAcEYh/a1i+urptIwM59afJNaikIg8xWOEc9UaRuHs yvLdLOFsnCDyxIhsebw5b5k5IrHpvp3AtgTzqC/pdC9ipuN90HuhErrCaHHTnaJR kfDZMVCR3xkGSW/nsagnruDoft++9Mo+AwYoxxpAJcPRjU1pK3HUFXx+62kl1p8P qA2rTpd8LJ5qWuj4a9cqCWwkFqQ+5vS7Qy1XjVdvZg3fB/6Ob6yGHrI+4zS7WKHW cnKb5S0Rkpt/8mhLcdZ/Bar7c/O9SHBDulipGAj0/tDxWOg5m1CsxY1WFgKlCPKc 1T3lQrpfiKURYA== -----END CERTIFICATE-----Generated at Sun Dec 7 09:43:40 2025 by rpki-client