This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/074982-db01-4747-9d12-ff72e4fa93a5/1/PXZ9X-fvPyKL3b3loOXBgAb3VAg.mft File: PXZ9X-fvPyKL3b3loOXBgAb3VAg.mft (raw, json) Hash identifier: eEgqoZL4XSTNuxvKYV1Ksqr9lzQKRli/UBcG1dM9D8g= Subject key identifier: 1F:C6:0A:B4:0A:21:D0:FF:AE:54:B5:5C:A7:48:66:C7:B7:C5:FE:F2 Authority key identifier: 3D:76:7D:5F:E7:EF:3F:22:8B:DD:BD:E5:A0:E5:C1:80:06:F7:54:08 Certificate issuer: /CN=3d767d5fe7ef3f228bddbde5a0e5c18006f75408 Certificate serial: 019AF240101B12D7E3B1CD4DE82094CEADF4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PXZ9X-fvPyKL3b3loOXBgAb3VAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/074982-db01-4747-9d12-ff72e4fa93a5/1/PXZ9X-fvPyKL3b3loOXBgAb3VAg.mft Manifest number: 0FE8 Signing time: Sat 06 Dec 2025 06:01:15 +0000 Manifest this update: Sat 06 Dec 2025 06:01:15 +0000 Manifest next update: Sun 07 Dec 2025 06:01:15 +0000 Files and hashes: 1: J60Pw4hyKKjQhqi1eSTzFtauoi0.roa (hash: Pts66hPVy/S0JFZfVc88DLunALgdL+k1upaL/I3M97g=) 2: PXZ9X-fvPyKL3b3loOXBgAb3VAg.crl (hash: GyXWsJGP/B54Bcq4ygkvUBvU6TtDI9563f1UwY3RvdQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/074982-db01-4747-9d12-ff72e4fa93a5/1/PXZ9X-fvPyKL3b3loOXBgAb3VAg.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/074982-db01-4747-9d12-ff72e4fa93a5/1/PXZ9X-fvPyKL3b3loOXBgAb3VAg.mft rsync://rpki.ripe.net/repository/DEFAULT/PXZ9X-fvPyKL3b3loOXBgAb3VAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:10:1b:12:d7:e3:b1:cd:4d:e8:20:94:ce:ad:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d767d5fe7ef3f228bddbde5a0e5c18006f75408 Validity Not Before: Dec 6 06:01:15 2025 GMT Not After : Dec 7 06:01:15 2025 GMT Subject: CN=1fc60ab40a21d0ffae54b55ca74866c7b7c5fef2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:cf:4e:ce:bb:46:fa:28:2a:52:52:77:bf:cf: 10:73:d1:d7:13:b0:70:71:04:8b:bb:86:42:ac:e2: 9a:7e:12:a4:0f:b3:1a:fd:9a:9c:87:10:42:90:cf: e7:4f:90:33:c3:53:d3:bf:5c:9b:27:3c:f7:70:06: c0:e8:ee:7a:d7:17:dc:73:1c:9b:46:d8:7d:42:ec: 86:91:b8:5b:b4:ce:8c:32:a0:e2:89:cc:0d:d9:30: 03:49:f4:43:64:d7:b0:46:71:f7:e1:b2:a3:f3:90: f9:12:c8:65:a0:5e:a3:5f:e0:a8:60:09:2b:7d:2f: c6:d9:0d:30:45:8f:b5:f3:94:f1:08:40:2f:d4:76: 5d:0f:89:29:e5:6c:29:fd:4e:4b:79:89:df:0c:23: ae:77:ce:3a:fb:8f:84:3e:d8:e2:6b:db:54:c9:6d: cd:2e:9b:68:4f:19:84:d0:fa:6c:7a:4f:30:81:43: b9:22:39:88:01:70:e8:1b:ce:af:b7:4d:4d:51:67: bf:9c:01:84:0e:89:6f:37:af:6c:79:db:7c:b9:c8: 09:bc:f3:a4:b8:ac:1c:4c:21:35:6a:6a:ae:04:14: 41:15:9a:9f:56:33:47:b4:5b:1c:0d:b8:14:1c:cb: d1:07:55:52:33:96:40:66:aa:4f:dc:31:a0:e2:a7: 79:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:C6:0A:B4:0A:21:D0:FF:AE:54:B5:5C:A7:48:66:C7:B7:C5:FE:F2 X509v3 Authority Key Identifier: keyid:3D:76:7D:5F:E7:EF:3F:22:8B:DD:BD:E5:A0:E5:C1:80:06:F7:54:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PXZ9X-fvPyKL3b3loOXBgAb3VAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/074982-db01-4747-9d12-ff72e4fa93a5/1/PXZ9X-fvPyKL3b3loOXBgAb3VAg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/074982-db01-4747-9d12-ff72e4fa93a5/1/PXZ9X-fvPyKL3b3loOXBgAb3VAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:d5:5d:4a:c8:15:8b:64:9d:95:1e:32:32:51:9c:ae:65:99: 58:28:63:af:64:bc:06:96:15:70:d1:9f:61:59:b5:96:b8:56: 0e:c9:0e:61:1c:60:f9:60:15:03:bc:ee:ba:b2:a6:24:75:45: 74:f2:5b:ce:e7:8a:77:f1:c2:8e:32:b9:ea:8a:a2:de:c2:07: 18:ff:40:47:54:3c:41:8a:fc:ce:3e:e3:4c:05:c9:dc:f4:3a: 9c:a8:0a:90:a1:68:de:8a:d4:1d:b2:01:05:1d:cb:cf:27:b2: 91:f4:f1:b1:bf:c2:b1:bf:f1:1a:a3:12:55:28:3c:32:0c:24: e0:24:f3:6e:dd:ac:23:e1:f2:35:bd:f3:12:54:17:0e:fc:ab: c5:79:2c:37:5e:81:9e:36:8f:03:7c:21:11:de:03:b0:aa:97: c7:b1:c7:90:9e:fc:20:41:49:f5:81:40:3c:37:05:b5:be:07: 15:f6:77:ac:67:06:cc:dc:b6:80:b9:9d:56:24:de:a0:5d:c8: 03:4e:c5:e5:21:f2:22:ec:7c:68:0a:63:e8:1c:f2:aa:19:7d: 4b:fd:bc:1a:a5:76:27:62:9d:f3:fc:16:72:ba:54:d7:92:f4: 0d:ea:e7:ba:b0:34:b3:f4:63:00:e0:c5:ce:5b:72:08:9b:1f: ed:80:79:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQBAbEtfjsc1N6CCUzq30MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkNzY3ZDVmZTdlZjNmMjI4YmRkYmRlNWEwZTVjMTgwMDZm NzU0MDgwHhcNMjUxMjA2MDYwMTE1WhcNMjUxMjA3MDYwMTE1WjAzMTEwLwYDVQQD EygxZmM2MGFiNDBhMjFkMGZmYWU1NGI1NWNhNzQ4NjZjN2I3YzVmZWYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAus9OzrtG+igqUlJ3v88Qc9HXE7Bw cQSLu4ZCrOKafhKkD7Ma/ZqchxBCkM/nT5Azw1PTv1ybJzz3cAbA6O561xfccxyb Rth9QuyGkbhbtM6MMqDiicwN2TADSfRDZNewRnH34bKj85D5EshloF6jX+CoYAkr fS/G2Q0wRY+185TxCEAv1HZdD4kp5Wwp/U5LeYnfDCOud846+4+EPtjia9tUyW3N LptoTxmE0Ppsek8wgUO5IjmIAXDoG86vt01NUWe/nAGEDolvN69sedt8ucgJvPOk uKwcTCE1amquBBRBFZqfVjNHtFscDbgUHMvRB1VSM5ZAZqpP3DGg4qd5yQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB/GCrQKIdD/rlS1XKdIZse3xf7yMB8GA1UdIwQY MBaAFD12fV/n7z8ii9295aDlwYAG91QIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFhaOVgtZnZQeUtMM2IzbG9PWEJnQWIzVkFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS8wNzQ5ODItZGIwMS00NzQ3LTlkMTIt ZmY3MmU0ZmE5M2E1LzEvUFhaOVgtZnZQeUtMM2IzbG9PWEJnQWIzVkFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS8wNzQ5ODItZGIwMS00NzQ3LTlkMTItZmY3MmU0ZmE5M2E1 LzEvUFhaOVgtZnZQeUtMM2IzbG9PWEJnQWIzVkFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt9VdSsgV i2SdlR4yMlGcrmWZWChjr2S8BpYVcNGfYVm1lrhWDskOYRxg+WAVA7zuurKmJHVF dPJbzueKd/HCjjK56oqi3sIHGP9AR1Q8QYr8zj7jTAXJ3PQ6nKgKkKFo3orUHbIB BR3LzyeykfTxsb/Csb/xGqMSVSg8Mgwk4CTzbt2sI+HyNb3zElQXDvyrxXksN16B njaPA3whEd4DsKqXx7HHkJ78IEFJ9YFAPDcFtb4HFfZ3rGcGzNy2gLmdViTeoF3I A07F5SHyIux8aApj6Bzyqhl9S/28GqV2J2Kd8/wWcrpU15L0DernurA0s/RjAODF zltyCJsf7YB5sQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:47:47 2025 by rpki-client