This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/cf0072-10d7-4759-80f6-4296937c9d94/1/pcznkWx6-mSVMqe4KaRZ1u5eNrw.mft File: pcznkWx6-mSVMqe4KaRZ1u5eNrw.mft (raw, json) Hash identifier: D83yQWkKIhzVjHudK/poE5EZGo7/ZixvmNBvL2NaebU= Subject key identifier: 5B:DF:02:42:F8:23:85:FE:6E:91:BB:19:7E:C0:89:F8:4F:AC:E5:FC Authority key identifier: A5:CC:E7:91:6C:7A:FA:64:95:32:A7:B8:29:A4:59:D6:EE:5E:36:BC Certificate issuer: /CN=a5cce7916c7afa649532a7b829a459d6ee5e36bc Certificate serial: 019AF68A9410C54B45CEC4B038699C149CD7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcznkWx6-mSVMqe4KaRZ1u5eNrw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/cf0072-10d7-4759-80f6-4296937c9d94/1/pcznkWx6-mSVMqe4KaRZ1u5eNrw.mft Manifest number: 1764 Signing time: Sun 07 Dec 2025 02:01:08 +0000 Manifest this update: Sun 07 Dec 2025 02:01:08 +0000 Manifest next update: Mon 08 Dec 2025 02:01:08 +0000 Files and hashes: 1: LfvParklu0gxciTOgFZh-BpaZYE.roa (hash: fxMbCosgtYcMMEyUONm7A6ez+akqjsDq1R4iKueGkms=) 2: pcznkWx6-mSVMqe4KaRZ1u5eNrw.crl (hash: t3jvmwdafCiR/Z366gp68l/oGo9JYZ9hwlcivxp0BnI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/cf0072-10d7-4759-80f6-4296937c9d94/1/pcznkWx6-mSVMqe4KaRZ1u5eNrw.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/cf0072-10d7-4759-80f6-4296937c9d94/1/pcznkWx6-mSVMqe4KaRZ1u5eNrw.mft rsync://rpki.ripe.net/repository/DEFAULT/pcznkWx6-mSVMqe4KaRZ1u5eNrw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:8a:94:10:c5:4b:45:ce:c4:b0:38:69:9c:14:9c:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5cce7916c7afa649532a7b829a459d6ee5e36bc Validity Not Before: Dec 7 02:01:08 2025 GMT Not After : Dec 8 02:01:08 2025 GMT Subject: CN=5bdf0242f82385fe6e91bb197ec089f84face5fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:18:e8:21:6c:43:13:79:8a:76:fd:0f:9c:43: ff:98:44:6e:1a:0a:d3:cc:a8:76:40:93:2e:eb:07: 4f:6d:7c:cd:89:4c:9c:07:2b:8c:6c:b7:91:82:6c: b9:b9:94:d8:ec:83:3d:9d:33:98:ab:ed:b0:1f:0c: ca:d8:54:1a:12:9a:2e:7c:8e:7e:63:c9:97:4f:4c: 60:a8:8f:37:f6:54:16:f3:5b:85:4f:18:b3:0c:c3: 3b:83:68:9d:a0:ab:d7:49:56:34:e3:29:1b:7e:a0: ef:c1:99:f4:3e:47:b9:d8:3f:96:cf:2a:a3:6c:44: fc:c2:f2:48:70:76:8b:a1:35:ac:dc:f0:62:13:fb: 40:2c:96:20:e4:c4:01:98:bb:82:c4:04:b7:7c:3a: 73:20:66:9a:20:5b:57:47:64:46:88:e8:50:ec:7d: 6c:2b:5b:b4:39:a3:fa:df:85:4f:40:7e:c5:e7:b3: 4b:ef:77:e5:ec:97:f9:a0:eb:21:64:1a:12:32:67: e8:57:6c:37:93:9f:ad:19:d2:c5:58:9f:0b:ee:66: 7d:67:d4:f8:2a:22:91:90:da:a9:77:de:7a:a8:0f: b8:8d:25:f7:70:67:22:7d:d6:aa:fc:17:8a:36:c5: 08:f7:36:fe:d4:4a:46:05:18:9b:d9:e3:6b:c8:42: 1a:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:DF:02:42:F8:23:85:FE:6E:91:BB:19:7E:C0:89:F8:4F:AC:E5:FC X509v3 Authority Key Identifier: keyid:A5:CC:E7:91:6C:7A:FA:64:95:32:A7:B8:29:A4:59:D6:EE:5E:36:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcznkWx6-mSVMqe4KaRZ1u5eNrw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/cf0072-10d7-4759-80f6-4296937c9d94/1/pcznkWx6-mSVMqe4KaRZ1u5eNrw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/cf0072-10d7-4759-80f6-4296937c9d94/1/pcznkWx6-mSVMqe4KaRZ1u5eNrw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:3f:98:94:ad:da:5a:59:77:0a:ff:1e:1f:f2:36:e4:a7:13: 08:c3:b8:a6:43:82:a0:94:75:8f:a9:1e:ba:b1:55:1a:d0:38: b0:d0:36:8f:08:7c:bb:34:75:2c:ab:fd:61:b6:4d:a2:6a:30: c1:7e:1e:dd:3f:45:7d:d3:36:71:b7:d4:3c:c8:3c:86:8b:7d: b7:4b:2e:05:1b:a1:63:09:f4:94:bf:4d:83:68:cf:72:42:2e: 12:9b:41:0a:26:36:51:9d:e1:f6:b0:f7:76:77:3e:db:29:1e: 8d:26:d9:5f:aa:5a:3b:16:65:8f:ab:f2:59:1e:a3:1e:44:50: 8f:a7:06:18:20:12:7a:b9:a6:05:3f:c0:a0:27:10:cf:05:3e: 48:7a:48:28:56:ca:5f:bb:60:fc:3c:ce:01:d2:21:29:d0:94: 6a:0e:9b:4a:0d:47:2d:28:74:b4:0c:a7:6b:42:98:f6:00:ca: 02:3a:db:40:b3:5b:90:c1:ad:9c:6e:4c:a2:e4:29:83:2a:50: 9e:c8:f7:4f:12:75:3c:60:b9:80:ad:d8:80:fd:ab:17:71:0c: 63:1f:d5:5e:74:53:e4:21:60:6c:df:ff:be:c9:2b:b9:a0:36: 95:31:38:7d:fc:93:d8:9b:83:80:c3:32:a2:be:ec:e4:52:b2: 33:3d:53:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2ipQQxUtFzsSwOGmcFJzXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1Y2NlNzkxNmM3YWZhNjQ5NTMyYTdiODI5YTQ1OWQ2ZWU1 ZTM2YmMwHhcNMjUxMjA3MDIwMTA4WhcNMjUxMjA4MDIwMTA4WjAzMTEwLwYDVQQD Eyg1YmRmMDI0MmY4MjM4NWZlNmU5MWJiMTk3ZWMwODlmODRmYWNlNWZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxjoIWxDE3mKdv0PnEP/mERuGgrT zKh2QJMu6wdPbXzNiUycByuMbLeRgmy5uZTY7IM9nTOYq+2wHwzK2FQaEpoufI5+ Y8mXT0xgqI839lQW81uFTxizDMM7g2idoKvXSVY04ykbfqDvwZn0Pke52D+Wzyqj bET8wvJIcHaLoTWs3PBiE/tALJYg5MQBmLuCxAS3fDpzIGaaIFtXR2RGiOhQ7H1s K1u0OaP634VPQH7F57NL73fl7Jf5oOshZBoSMmfoV2w3k5+tGdLFWJ8L7mZ9Z9T4 KiKRkNqpd956qA+4jSX3cGcifdaq/BeKNsUI9zb+1EpGBRib2eNryEIaHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFvfAkL4I4X+bpG7GX7AifhPrOX8MB8GA1UdIwQY MBaAFKXM55FsevpklTKnuCmkWdbuXja8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGN6bmtXeDYtbVNWTXFlNEthUloxdTVlTnJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9jZjAwNzItMTBkNy00NzU5LTgwZjYt NDI5NjkzN2M5ZDk0LzEvcGN6bmtXeDYtbVNWTXFlNEthUloxdTVlTnJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS9jZjAwNzItMTBkNy00NzU5LTgwZjYtNDI5NjkzN2M5ZDk0 LzEvcGN6bmtXeDYtbVNWTXFlNEthUloxdTVlTnJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIz+YlK3a Wll3Cv8eH/I25KcTCMO4pkOCoJR1j6keurFVGtA4sNA2jwh8uzR1LKv9YbZNomow wX4e3T9FfdM2cbfUPMg8hot9t0suBRuhYwn0lL9Ng2jPckIuEptBCiY2UZ3h9rD3 dnc+2ykejSbZX6paOxZlj6vyWR6jHkRQj6cGGCASermmBT/AoCcQzwU+SHpIKFbK X7tg/DzOAdIhKdCUag6bSg1HLSh0tAyna0KY9gDKAjrbQLNbkMGtnG5MouQpgypQ nsj3TxJ1PGC5gK3YgP2rF3EMYx/VXnRT5CFgbN//vskruaA2lTE4ffyT2JuDgMMy or7s5FKyMz1T1Q== -----END CERTIFICATE-----Generated at Sun Dec 7 03:45:10 2025 by rpki-client