This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.mft File: Pznde9c8PhuifReNVcJvipbNtKk.mft (raw, json) Hash identifier: yLSAxr5Vi7ya3I/qNvoHgLeC0Ll6GhCwLEs1dpCePGA= Subject key identifier: 83:F3:EC:63:2D:20:D2:B1:AF:BC:DF:25:E1:AB:43:B9:DD:71:09:C4 Authority key identifier: 3F:39:DD:7B:D7:3C:3E:1B:A2:7D:17:8D:55:C2:6F:8A:96:CD:B4:A9 Certificate issuer: /CN=3f39dd7bd73c3e1ba27d178d55c26f8a96cdb4a9 Certificate serial: 019AF3F707FC3CE08D0649C94A672EAC1EF8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pznde9c8PhuifReNVcJvipbNtKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 14:00:44 +0000 Manifest this update: Sat 06 Dec 2025 14:00:44 +0000 Manifest next update: Sun 07 Dec 2025 14:00:44 +0000 Files and hashes: 1: Is-TnbCqT0sZMmHzE0DOERlyuyA.roa (hash: ZwxuieDg5KwfHUePylCdnkHIJ18zptrPuU4i92UJi24=) 2: Ng8LWoHpOFI_Feu0HqtCDWsTm2U.roa (hash: T0h4+Xqtg7Y1viZ/7IiB5TqFGqH+QZrG/sWcCxZLrOw=) 3: Pznde9c8PhuifReNVcJvipbNtKk.crl (hash: 0iKGyWI8hbm7kkLKPHjVgiiDGcLgkzo4/DIcZFbgIRg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.mft rsync://rpki.ripe.net/repository/DEFAULT/Pznde9c8PhuifReNVcJvipbNtKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:07:fc:3c:e0:8d:06:49:c9:4a:67:2e:ac:1e:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f39dd7bd73c3e1ba27d178d55c26f8a96cdb4a9 Validity Not Before: Dec 6 14:00:44 2025 GMT Not After : Dec 7 14:00:44 2025 GMT Subject: CN=83f3ec632d20d2b1afbcdf25e1ab43b9dd7109c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:7f:c2:40:ee:d4:a6:2f:91:fb:3f:8b:d2:90: 2a:55:2a:0b:8e:ba:68:a5:6c:15:fe:07:f6:0e:69: 09:8a:ff:53:60:f9:b3:49:6e:85:f2:66:06:ef:81: 50:d6:22:e4:53:5b:9f:c0:e0:93:3d:13:00:a8:d5: e2:c2:90:cd:8b:33:e3:f0:94:5c:c5:40:b0:e2:61: 12:ef:1f:be:a2:93:09:67:6a:ca:c9:44:a8:4c:c5: 4c:ef:ff:d9:0f:8f:7a:e3:db:bd:b1:71:85:a6:17: 86:d9:8d:5a:b3:f2:f2:11:6c:9a:cb:bb:e8:eb:f7: a4:64:1b:9a:51:3e:f2:76:92:82:5a:12:ce:51:2f: 89:59:c8:e0:bb:62:51:9e:b6:a7:c1:c7:c0:80:88: 2a:ee:b3:ae:c0:50:27:24:42:9c:66:56:09:f3:fd: e8:fc:25:20:ad:39:16:f3:74:dc:09:a4:62:0b:0b: b7:26:e8:0d:cf:f7:87:48:e4:01:39:66:61:cf:44: b9:61:37:2e:10:ec:d1:fa:c3:d9:6f:6e:d2:46:1a: 3a:b5:02:90:6b:09:b6:a7:59:f8:a3:be:c8:18:cb: 0d:f7:94:86:bf:dc:33:dd:3c:6f:e0:38:a9:4c:1f: 8c:c3:1f:92:20:fe:97:25:fd:c8:28:cd:c8:7c:68: 5d:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:F3:EC:63:2D:20:D2:B1:AF:BC:DF:25:E1:AB:43:B9:DD:71:09:C4 X509v3 Authority Key Identifier: keyid:3F:39:DD:7B:D7:3C:3E:1B:A2:7D:17:8D:55:C2:6F:8A:96:CD:B4:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pznde9c8PhuifReNVcJvipbNtKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:05:57:ce:24:1c:46:15:07:fb:87:de:ff:23:20:ec:19:d1: 51:1d:26:c1:3f:cd:0e:da:1b:f2:fd:0c:c9:8b:72:a9:60:d6: 0b:66:b8:5f:40:75:09:5f:0f:3c:2c:5b:f3:a3:68:63:1e:80: a5:e0:6a:c1:3a:20:6b:eb:cb:ba:5b:a9:a8:f2:93:51:1d:8d: 0c:76:60:8f:4b:30:ec:39:d5:03:e8:dd:83:7c:94:6f:d6:28: 00:03:48:9e:4d:fb:25:04:5e:81:01:db:e1:10:1c:67:39:32: 56:bb:45:a5:17:04:bf:b0:d0:32:79:b0:84:b6:87:3a:89:70: 30:33:fb:16:7c:23:ae:ec:4a:e0:2d:b0:c8:0f:61:18:9d:e5: cf:06:0f:0f:66:5a:c7:bb:c4:26:95:9a:f7:16:0a:25:b2:9e: a3:26:e9:03:db:5c:1e:bd:37:e1:71:fe:36:90:d1:d8:05:c9: 63:a6:7a:26:2f:87:ac:9b:55:4c:23:d4:b3:d0:84:ad:e4:b9: e0:8c:b2:2f:e3:79:9b:01:6e:45:39:ca:38:fd:ca:c7:dd:f4: 5d:77:cd:c6:91:6e:77:11:94:62:fb:76:3c:5c:5a:50:4a:ba: d1:7b:0d:08:f5:e6:5e:85:28:cf:76:99:a0:69:39:34:bc:9b: a2:5b:30:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz9wf8POCNBknJSmcurB74MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmMzlkZDdiZDczYzNlMWJhMjdkMTc4ZDU1YzI2ZjhhOTZj ZGI0YTkwHhcNMjUxMjA2MTQwMDQ0WhcNMjUxMjA3MTQwMDQ0WjAzMTEwLwYDVQQD Eyg4M2YzZWM2MzJkMjBkMmIxYWZiY2RmMjVlMWFiNDNiOWRkNzEwOWM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3/CQO7Upi+R+z+L0pAqVSoLjrpo pWwV/gf2DmkJiv9TYPmzSW6F8mYG74FQ1iLkU1ufwOCTPRMAqNXiwpDNizPj8JRc xUCw4mES7x++opMJZ2rKyUSoTMVM7//ZD49649u9sXGFpheG2Y1as/LyEWyay7vo 6/ekZBuaUT7ydpKCWhLOUS+JWcjgu2JRnranwcfAgIgq7rOuwFAnJEKcZlYJ8/3o /CUgrTkW83TcCaRiCwu3JugNz/eHSOQBOWZhz0S5YTcuEOzR+sPZb27SRho6tQKQ awm2p1n4o77IGMsN95SGv9wz3Txv4DipTB+Mwx+SIP6XJf3IKM3IfGhdqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIPz7GMtINKxr7zfJeGrQ7ndcQnEMB8GA1UdIwQY MBaAFD853XvXPD4bon0XjVXCb4qWzbSpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHpuZGU5YzhQaHVpZlJlTlZjSnZpcGJOdEtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi82MjFlZGQtMWI1YS00NmFjLWJhMTMt MDRmOWU2MTZhZjYwLzEvUHpuZGU5YzhQaHVpZlJlTlZjSnZpcGJOdEtrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi82MjFlZGQtMWI1YS00NmFjLWJhMTMtMDRmOWU2MTZhZjYw LzEvUHpuZGU5YzhQaHVpZlJlTlZjSnZpcGJOdEtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOAVXziQc RhUH+4fe/yMg7BnRUR0mwT/NDtob8v0MyYtyqWDWC2a4X0B1CV8PPCxb86NoYx6A peBqwToga+vLulupqPKTUR2NDHZgj0sw7DnVA+jdg3yUb9YoAANInk37JQRegQHb 4RAcZzkyVrtFpRcEv7DQMnmwhLaHOolwMDP7FnwjruxK4C2wyA9hGJ3lzwYPD2Za x7vEJpWa9xYKJbKeoybpA9tcHr034XH+NpDR2AXJY6Z6Ji+HrJtVTCPUs9CEreS5 4IyyL+N5mwFuRTnKOP3Kx930XXfNxpFudxGUYvt2PFxaUEq60XsNCPXmXoUoz3aZ oGk5NLybolsw8Q== -----END CERTIFICATE-----Generated at Sat Dec 6 16:44:02 2025 by rpki-client