This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/26e21e-db81-46c7-955a-77d315cc16aa/1/pj_zsazNggGkEWyYdXM5I0KJgB4.mft File: pj_zsazNggGkEWyYdXM5I0KJgB4.mft (raw, json) Hash identifier: vHAcuEmYWgo58tmaQTeMqxFdCjIp287CZryfWZ5JCLs= Subject key identifier: A6:8D:EB:35:B1:0D:CC:27:AE:B8:B8:08:D8:83:4E:F4:17:E1:1B:01 Authority key identifier: A6:3F:F3:B1:AC:CD:82:01:A4:11:6C:98:75:73:39:23:42:89:80:1E Certificate issuer: /CN=a63ff3b1accd8201a4116c98757339234289801e Certificate serial: 019AF20990ED4D893FF09544C9B109185382 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pj_zsazNggGkEWyYdXM5I0KJgB4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/26e21e-db81-46c7-955a-77d315cc16aa/1/pj_zsazNggGkEWyYdXM5I0KJgB4.mft Manifest number: 0628 Signing time: Sat 06 Dec 2025 05:01:44 +0000 Manifest this update: Sat 06 Dec 2025 05:01:44 +0000 Manifest next update: Sun 07 Dec 2025 05:01:44 +0000 Files and hashes: 1: mbvBXE7Ze3cn1Ev3k2dL5On_YTs.roa (hash: YK3JNqfED7VqhxPOSKGy2n6p5fg+7MEO42BqGf+EejI=) 2: pj_zsazNggGkEWyYdXM5I0KJgB4.crl (hash: upkygNG/2YSuLyyotG8/8/bgVb92DRE/ViyD7evSW/0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/26e21e-db81-46c7-955a-77d315cc16aa/1/pj_zsazNggGkEWyYdXM5I0KJgB4.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/26e21e-db81-46c7-955a-77d315cc16aa/1/pj_zsazNggGkEWyYdXM5I0KJgB4.mft rsync://rpki.ripe.net/repository/DEFAULT/pj_zsazNggGkEWyYdXM5I0KJgB4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:90:ed:4d:89:3f:f0:95:44:c9:b1:09:18:53:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a63ff3b1accd8201a4116c98757339234289801e Validity Not Before: Dec 6 05:01:44 2025 GMT Not After : Dec 7 05:01:44 2025 GMT Subject: CN=a68deb35b10dcc27aeb8b808d8834ef417e11b01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f2:88:fa:c4:77:e3:b1:a9:1e:4b:95:86:6b: d6:de:26:d0:67:71:2e:2e:dc:bb:36:3d:91:ce:f1: e7:94:fe:58:5a:de:e0:de:41:07:84:e1:0d:25:7e: b7:e3:71:46:f5:1e:f9:72:8d:79:fe:b9:09:ca:be: 12:9c:77:d5:f9:4d:b4:dc:8c:d2:f8:55:af:5e:45: 40:48:db:11:80:3e:91:80:d8:84:a9:2e:59:1c:62: 05:72:8a:4e:a2:ec:98:44:7d:05:2f:60:ff:93:fb: 9a:19:4a:57:9a:75:82:5f:c8:50:1e:ac:78:29:4c: 9f:e9:93:aa:10:38:00:2d:c9:66:f6:4d:67:b7:3f: be:0c:35:d8:0e:7f:d6:ad:35:e8:04:8b:20:cc:d9: eb:56:6c:48:36:12:26:23:bc:d6:18:59:90:b4:ab: 9f:8b:fa:e7:de:4d:8c:4d:97:9f:41:d8:01:4f:2f: 11:94:b6:bb:54:85:4c:e3:90:af:ab:43:5a:f6:e3: 10:9c:fe:75:4d:05:1e:1f:c4:52:04:7c:c4:6a:82: 23:1f:3e:52:7a:78:4b:64:34:43:ea:5b:0e:3d:84: 67:e9:02:e9:d1:52:34:a5:6d:24:c9:30:ef:98:42: 00:75:ff:97:e1:8d:27:f6:07:fb:00:b9:96:c3:89: 6b:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:8D:EB:35:B1:0D:CC:27:AE:B8:B8:08:D8:83:4E:F4:17:E1:1B:01 X509v3 Authority Key Identifier: keyid:A6:3F:F3:B1:AC:CD:82:01:A4:11:6C:98:75:73:39:23:42:89:80:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pj_zsazNggGkEWyYdXM5I0KJgB4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/26e21e-db81-46c7-955a-77d315cc16aa/1/pj_zsazNggGkEWyYdXM5I0KJgB4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/26e21e-db81-46c7-955a-77d315cc16aa/1/pj_zsazNggGkEWyYdXM5I0KJgB4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:c2:6b:1c:17:34:f7:5e:e0:0d:6f:a5:01:e7:87:24:ac:d4: be:85:74:f8:74:42:40:d6:af:0f:dc:11:9a:ac:de:ca:2b:08: 63:af:ee:f1:e7:a3:d8:a2:50:94:3d:ce:a6:c1:ae:e4:e4:70: c2:ec:87:5c:1f:6b:d8:a4:de:c8:fe:3c:91:98:07:70:2d:70: 5b:16:3b:af:48:b1:21:ac:52:6f:3a:a4:d0:cf:b8:92:58:f1: 13:1e:51:f6:3b:7b:15:52:3d:c1:e9:bb:64:79:df:95:8d:51: fb:3e:de:ed:c2:cd:04:53:eb:62:6c:0a:c0:3f:50:30:b0:40: 9b:73:63:19:89:aa:e2:b1:8a:c7:7e:04:e7:2b:27:15:99:11: 0d:6f:58:0e:df:d2:d4:76:9d:de:fd:42:3f:d3:0a:39:5d:84: 50:69:32:25:e4:00:fa:d5:13:9b:14:2c:18:f1:ed:c9:a8:5d: 2d:84:c0:a7:74:29:66:8a:20:30:ba:37:2c:22:8f:10:e2:df: 4e:80:23:a6:73:48:3a:f3:3b:8c:f2:0e:29:b4:9d:eb:72:4f: c2:31:b9:be:da:f3:d3:29:54:3e:c4:3d:54:b6:af:cb:74:65: 8a:f5:82:e5:24:b3:22:81:37:40:b3:12:99:c9:19:ae:cd:56: ec:75:0c:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCZDtTYk/8JVEybEJGFOCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2M2ZmM2IxYWNjZDgyMDFhNDExNmM5ODc1NzMzOTIzNDI4 OTgwMWUwHhcNMjUxMjA2MDUwMTQ0WhcNMjUxMjA3MDUwMTQ0WjAzMTEwLwYDVQQD EyhhNjhkZWIzNWIxMGRjYzI3YWViOGI4MDhkODgzNGVmNDE3ZTExYjAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfKI+sR347GpHkuVhmvW3ibQZ3Eu Lty7Nj2RzvHnlP5YWt7g3kEHhOENJX6343FG9R75co15/rkJyr4SnHfV+U203IzS +FWvXkVASNsRgD6RgNiEqS5ZHGIFcopOouyYRH0FL2D/k/uaGUpXmnWCX8hQHqx4 KUyf6ZOqEDgALclm9k1ntz++DDXYDn/WrTXoBIsgzNnrVmxINhImI7zWGFmQtKuf i/rn3k2MTZefQdgBTy8RlLa7VIVM45Cvq0Na9uMQnP51TQUeH8RSBHzEaoIjHz5S enhLZDRD6lsOPYRn6QLp0VI0pW0kyTDvmEIAdf+X4Y0n9gf7ALmWw4lrEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKaN6zWxDcwnrri4CNiDTvQX4RsBMB8GA1UdIwQY MBaAFKY/87GszYIBpBFsmHVzOSNCiYAeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGpfenNhek5nZ0drRVd5WWRYTTVJMEtKZ0I0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8yNmUyMWUtZGI4MS00NmM3LTk1NWEt NzdkMzE1Y2MxNmFhLzEvcGpfenNhek5nZ0drRVd5WWRYTTVJMEtKZ0I0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC8yNmUyMWUtZGI4MS00NmM3LTk1NWEtNzdkMzE1Y2MxNmFh LzEvcGpfenNhek5nZ0drRVd5WWRYTTVJMEtKZ0I0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASMJrHBc0 917gDW+lAeeHJKzUvoV0+HRCQNavD9wRmqzeyisIY6/u8eej2KJQlD3OpsGu5ORw wuyHXB9r2KTeyP48kZgHcC1wWxY7r0ixIaxSbzqk0M+4kljxEx5R9jt7FVI9wem7 ZHnflY1R+z7e7cLNBFPrYmwKwD9QMLBAm3NjGYmq4rGKx34E5ysnFZkRDW9YDt/S 1Had3v1CP9MKOV2EUGkyJeQA+tUTmxQsGPHtyahdLYTAp3QpZoogMLo3LCKPEOLf ToAjpnNIOvM7jPIOKbSd63JPwjG5vtrz0ylUPsQ9VLavy3RlivWC5SSzIoE3QLMS mckZrs1W7HUM3A== -----END CERTIFICATE-----Generated at Sat Dec 6 08:20:56 2025 by rpki-client