This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.mft File: PZQks8jnL3RqWesZlFWqNkajpFc.mft (raw, json) Hash identifier: Vc7sHRLbwye4XHSVMhvOw1s5Wp2ppROhgdy21mdH810= Subject key identifier: 49:34:B6:F3:CA:EF:05:72:B4:29:11:62:E0:28:82:C7:F8:0D:85:80 Authority key identifier: 3D:94:24:B3:C8:E7:2F:74:6A:59:EB:19:94:55:AA:36:46:A3:A4:57 Certificate issuer: /CN=3d9424b3c8e72f746a59eb199455aa3646a3a457 Certificate serial: 019AF20952081CA6911E9DE8D4AE691790AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PZQks8jnL3RqWesZlFWqNkajpFc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 05:01:28 +0000 Manifest this update: Sat 06 Dec 2025 05:01:28 +0000 Manifest next update: Sun 07 Dec 2025 05:01:28 +0000 Files and hashes: 1: PZQks8jnL3RqWesZlFWqNkajpFc.crl (hash: YezkeZ50NKHYhpfrj6I92Cq9bR67D9LxdjyCO1/ZMyU=) 2: QIZ7oB864tCgRt_o70Ipdd0FOK0.roa (hash: m8Sbl87AQlvrLt/hOAausP00tdMD076gdUCeqvLuA8c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.mft rsync://rpki.ripe.net/repository/DEFAULT/PZQks8jnL3RqWesZlFWqNkajpFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:52:08:1c:a6:91:1e:9d:e8:d4:ae:69:17:90:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d9424b3c8e72f746a59eb199455aa3646a3a457 Validity Not Before: Dec 6 05:01:28 2025 GMT Not After : Dec 7 05:01:28 2025 GMT Subject: CN=4934b6f3caef0572b4291162e02882c7f80d8580 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ac:0f:24:92:13:c9:52:58:f0:9d:dc:b5:12: 50:4b:c5:bb:5f:4c:45:63:42:44:2e:52:b9:22:d8: 7e:c8:c3:5e:bf:07:ce:b0:a9:45:ad:24:8a:00:05: 00:61:2f:8b:1c:6d:f7:77:58:85:02:87:ac:5f:31: 71:f6:ed:a9:e2:5c:96:4e:74:3d:e4:87:7e:e0:13: 8c:ed:52:0d:73:0c:1d:43:28:78:50:5d:6c:33:17: 47:bb:48:a4:9d:91:28:4f:f6:26:e4:16:a7:aa:28: df:d6:fe:1c:0f:45:35:e6:f2:94:70:49:d1:8b:71: de:e5:be:ed:eb:13:5a:92:55:71:bf:98:c1:6e:df: e0:99:80:ba:cf:d9:48:fb:3f:50:31:5e:a7:33:12: 13:5a:b8:c3:2e:f9:c0:76:53:a6:57:a0:d5:b2:22: 99:6d:cf:0e:40:b3:e1:74:44:8a:15:15:25:50:a1: 6a:2c:ea:7f:08:e9:ae:7b:bb:b9:6f:c6:45:08:05: 3d:29:d2:19:f0:ac:eb:91:a9:08:74:66:ec:fc:41: 69:e3:d8:6d:1d:51:5d:a2:4f:80:75:80:30:a2:0e: b8:96:da:3d:41:48:5e:dd:dd:f4:99:a3:8f:d9:4d: 6d:da:8d:f4:ca:3f:60:52:51:a6:8c:be:e5:95:04: cc:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:34:B6:F3:CA:EF:05:72:B4:29:11:62:E0:28:82:C7:F8:0D:85:80 X509v3 Authority Key Identifier: keyid:3D:94:24:B3:C8:E7:2F:74:6A:59:EB:19:94:55:AA:36:46:A3:A4:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PZQks8jnL3RqWesZlFWqNkajpFc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:a4:bd:ec:45:02:74:1e:c3:81:45:bd:dd:d4:26:bd:30:ae: 31:7f:a7:75:05:91:6f:2a:43:3f:b5:cc:fc:5a:46:39:ee:82: d2:a7:dd:6f:e6:a6:da:84:ab:0e:ec:07:d9:c9:7f:80:d1:0a: 90:34:0a:c3:53:71:3e:28:a0:71:37:b8:b2:59:35:1e:83:38: f1:a0:5a:51:62:cc:65:78:e8:b2:63:3d:a5:ee:bd:02:ab:18: f3:0a:4d:ba:a1:68:58:b4:90:78:7b:7f:14:e2:94:a9:68:98: 29:bd:d0:1e:9c:a8:93:aa:e3:70:50:c5:1c:d9:5a:06:2f:70: 48:30:fb:5b:8b:c5:3a:5d:a1:81:ce:b5:8b:53:06:34:b5:05: c2:f6:b2:b0:f2:a6:0b:f2:6a:3b:84:b0:90:60:42:14:fc:21: 8a:a5:54:85:fb:dd:30:7c:2e:9c:54:cc:43:7e:04:5c:a7:25: a8:c7:8c:1c:f1:ee:01:a1:d2:58:4b:01:63:80:21:23:4e:10: 1d:11:4c:c4:08:57:52:df:93:c3:9e:cc:e5:4b:6c:95:30:5c: ae:ce:4e:66:1a:f3:71:41:62:ef:21:6b:4b:fa:4b:d3:ad:09: a6:d3:75:8c:dd:ce:bf:24:90:b5:d4:46:bc:21:7b:ca:d8:10: 0b:a3:ae:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCVIIHKaRHp3o1K5pF5CrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkOTQyNGIzYzhlNzJmNzQ2YTU5ZWIxOTk0NTVhYTM2NDZh M2E0NTcwHhcNMjUxMjA2MDUwMTI4WhcNMjUxMjA3MDUwMTI4WjAzMTEwLwYDVQQD Eyg0OTM0YjZmM2NhZWYwNTcyYjQyOTExNjJlMDI4ODJjN2Y4MGQ4NTgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqwPJJITyVJY8J3ctRJQS8W7X0xF Y0JELlK5Ith+yMNevwfOsKlFrSSKAAUAYS+LHG33d1iFAoesXzFx9u2p4lyWTnQ9 5Id+4BOM7VINcwwdQyh4UF1sMxdHu0iknZEoT/Ym5Banqijf1v4cD0U15vKUcEnR i3He5b7t6xNaklVxv5jBbt/gmYC6z9lI+z9QMV6nMxITWrjDLvnAdlOmV6DVsiKZ bc8OQLPhdESKFRUlUKFqLOp/COmue7u5b8ZFCAU9KdIZ8KzrkakIdGbs/EFp49ht HVFdok+AdYAwog64lto9QUhe3d30maOP2U1t2o30yj9gUlGmjL7llQTMzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEk0tvPK7wVytCkRYuAogsf4DYWAMB8GA1UdIwQY MBaAFD2UJLPI5y90alnrGZRVqjZGo6RXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFpRa3M4am5MM1JxV2VzWmxGV3FOa2FqcEZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9kZjI5NDctY2QwNS00NDA1LTk0OWEt NmE4MDMzZGNiZTFjLzEvUFpRa3M4am5MM1JxV2VzWmxGV3FOa2FqcEZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9kZjI5NDctY2QwNS00NDA1LTk0OWEtNmE4MDMzZGNiZTFj LzEvUFpRa3M4am5MM1JxV2VzWmxGV3FOa2FqcEZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATaS97EUC dB7DgUW93dQmvTCuMX+ndQWRbypDP7XM/FpGOe6C0qfdb+am2oSrDuwH2cl/gNEK kDQKw1NxPiigcTe4slk1HoM48aBaUWLMZXjosmM9pe69AqsY8wpNuqFoWLSQeHt/ FOKUqWiYKb3QHpyok6rjcFDFHNlaBi9wSDD7W4vFOl2hgc61i1MGNLUFwvaysPKm C/JqO4SwkGBCFPwhiqVUhfvdMHwunFTMQ34EXKclqMeMHPHuAaHSWEsBY4AhI04Q HRFMxAhXUt+Tw57M5UtslTBcrs5OZhrzcUFi7yFrS/pL060JptN1jN3OvySQtdRG vCF7ytgQC6OuUA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:12:33 2025 by rpki-client