This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/eb7037-deed-4a23-b3a4-0458c15cfd0b/1/PzTUjYQaUqQifUn6PvhbpavyIkg.mft File: PzTUjYQaUqQifUn6PvhbpavyIkg.mft (raw, json) Hash identifier: 5CdhJV4xsGRP6oDSUtdGOTOCleq6DsCIpQqFt2Rugl0= Subject key identifier: 1F:58:BC:D9:06:BA:90:89:40:1E:3C:ED:8A:8E:B0:BA:70:88:F8:01 Authority key identifier: 3F:34:D4:8D:84:1A:52:A4:22:7D:49:FA:3E:F8:5B:A5:AB:F2:22:48 Certificate issuer: /CN=3f34d48d841a52a4227d49fa3ef85ba5abf22248 Certificate serial: 019AF3526C07620AA337F3C8876A16F64AE5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PzTUjYQaUqQifUn6PvhbpavyIkg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/eb7037-deed-4a23-b3a4-0458c15cfd0b/1/PzTUjYQaUqQifUn6PvhbpavyIkg.mft Manifest number: 0678 Signing time: Sat 06 Dec 2025 11:00:56 +0000 Manifest this update: Sat 06 Dec 2025 11:00:56 +0000 Manifest next update: Sun 07 Dec 2025 11:00:56 +0000 Files and hashes: 1: 3AeTUsXDpEDl-IBh12u95RTXsxA.roa (hash: xYJhYHzSW71ucg3KnoWi7bZYFU9f0FjUJ5BTtmWX8vQ=) 2: PzTUjYQaUqQifUn6PvhbpavyIkg.crl (hash: 1W5w6H3r3Mkx/KKkPWJ3iQiXOx35lYa6pVVsGVvLp+8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/eb7037-deed-4a23-b3a4-0458c15cfd0b/1/PzTUjYQaUqQifUn6PvhbpavyIkg.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/eb7037-deed-4a23-b3a4-0458c15cfd0b/1/PzTUjYQaUqQifUn6PvhbpavyIkg.mft rsync://rpki.ripe.net/repository/DEFAULT/PzTUjYQaUqQifUn6PvhbpavyIkg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:6c:07:62:0a:a3:37:f3:c8:87:6a:16:f6:4a:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f34d48d841a52a4227d49fa3ef85ba5abf22248 Validity Not Before: Dec 6 11:00:56 2025 GMT Not After : Dec 7 11:00:56 2025 GMT Subject: CN=1f58bcd906ba9089401e3ced8a8eb0ba7088f801 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:7c:aa:e5:1c:a4:21:17:0c:a0:a2:df:d4:c1: c8:5b:33:65:b0:89:c9:91:d2:74:39:4a:0b:14:fc: 0b:b9:4a:1c:ae:89:e2:45:e7:13:73:1a:ea:f4:8a: c3:93:37:4d:56:ff:17:85:1b:b0:1e:e8:e8:19:6a: 08:61:4f:f6:b6:54:a6:88:9f:77:1e:3f:da:f1:85: d3:3d:2a:23:9e:69:79:d3:88:65:d1:3f:ed:fc:5f: 3e:41:17:0d:e7:4a:5f:66:0f:0a:93:5a:2f:dc:e1: ce:f9:7b:72:74:90:5b:33:89:2f:4c:26:c0:ba:9f: 6d:c1:20:8a:1e:ac:ee:b0:72:ca:ee:bb:a7:47:e7: e4:37:dc:f3:b2:80:72:c0:e4:53:02:3b:ea:17:1d: ec:07:29:4a:3f:31:0f:29:36:c6:72:42:5e:da:bf: 80:62:7f:dc:8c:73:2c:d6:74:ab:49:a6:19:b9:fd: 2d:74:eb:30:d7:25:bd:90:d8:4b:a1:89:14:1d:2d: 95:19:dc:d6:dd:a1:a1:7d:85:b6:ec:f4:9c:fd:10: ea:d6:6e:04:58:f9:30:4e:1d:ca:07:ab:37:9d:7e: 81:04:fb:ec:85:d2:9f:d3:18:4c:aa:08:24:52:20: d1:4a:1c:4b:25:d3:3d:55:7c:9d:d0:51:e2:a1:a0: 88:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:58:BC:D9:06:BA:90:89:40:1E:3C:ED:8A:8E:B0:BA:70:88:F8:01 X509v3 Authority Key Identifier: keyid:3F:34:D4:8D:84:1A:52:A4:22:7D:49:FA:3E:F8:5B:A5:AB:F2:22:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PzTUjYQaUqQifUn6PvhbpavyIkg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/eb7037-deed-4a23-b3a4-0458c15cfd0b/1/PzTUjYQaUqQifUn6PvhbpavyIkg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/eb7037-deed-4a23-b3a4-0458c15cfd0b/1/PzTUjYQaUqQifUn6PvhbpavyIkg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:30:e3:62:18:ef:4c:12:c9:21:36:2d:27:3d:af:83:eb:d4: 19:e0:06:bd:e3:c5:e5:6f:f2:fa:1a:fd:0f:46:fd:d3:26:25: 78:7a:f0:42:a8:81:7d:f9:d0:1b:be:d9:79:43:8b:83:12:1a: 5e:a3:fd:e5:ff:a9:e3:f4:3c:53:b2:00:52:99:f7:14:a6:8e: be:89:2e:ae:fc:b7:3e:ee:c4:aa:0f:55:ec:c6:8e:bb:0f:4a: 94:a2:35:69:e1:2f:db:18:4c:03:17:a6:9d:04:29:69:fa:ac: af:3a:7a:91:28:b1:cf:5a:1e:2c:61:d7:b3:90:d9:84:e3:e7: 71:52:a3:87:da:1e:fd:9a:ab:98:77:90:52:c9:77:5e:d1:ba: 7a:c6:42:e0:86:d9:38:20:b1:aa:e1:3b:93:2b:e1:f4:4a:16: 71:a4:c4:26:23:f5:76:14:51:9c:9c:c0:1e:74:ce:ee:a3:8f: 87:31:df:d0:20:8c:27:69:d3:0e:33:31:4f:08:23:9d:76:ba: 39:bb:56:3d:92:ba:d1:c8:32:68:70:6b:43:e5:1b:bd:07:64: 82:0b:5b:0e:07:c0:cd:4e:dc:b0:95:e8:ac:e1:d1:b0:36:96: e4:8c:63:4c:12:32:f8:98:5d:33:12:89:40:68:9c:e0:52:a1: 9a:7c:6e:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUmwHYgqjN/PIh2oW9krlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmMzRkNDhkODQxYTUyYTQyMjdkNDlmYTNlZjg1YmE1YWJm MjIyNDgwHhcNMjUxMjA2MTEwMDU2WhcNMjUxMjA3MTEwMDU2WjAzMTEwLwYDVQQD EygxZjU4YmNkOTA2YmE5MDg5NDAxZTNjZWQ4YThlYjBiYTcwODhmODAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXyq5RykIRcMoKLf1MHIWzNlsInJ kdJ0OUoLFPwLuUocroniRecTcxrq9IrDkzdNVv8XhRuwHujoGWoIYU/2tlSmiJ93 Hj/a8YXTPSojnml504hl0T/t/F8+QRcN50pfZg8Kk1ov3OHO+XtydJBbM4kvTCbA up9twSCKHqzusHLK7runR+fkN9zzsoBywORTAjvqFx3sBylKPzEPKTbGckJe2r+A Yn/cjHMs1nSrSaYZuf0tdOsw1yW9kNhLoYkUHS2VGdzW3aGhfYW27PSc/RDq1m4E WPkwTh3KB6s3nX6BBPvshdKf0xhMqggkUiDRShxLJdM9VXyd0FHioaCIzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB9YvNkGupCJQB487YqOsLpwiPgBMB8GA1UdIwQY MBaAFD801I2EGlKkIn1J+j74W6Wr8iJIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHpUVWpZUWFVcVFpZlVuNlB2aGJwYXZ5SWtnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9lYjcwMzctZGVlZC00YTIzLWIzYTQt MDQ1OGMxNWNmZDBiLzEvUHpUVWpZUWFVcVFpZlVuNlB2aGJwYXZ5SWtnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9lYjcwMzctZGVlZC00YTIzLWIzYTQtMDQ1OGMxNWNmZDBi LzEvUHpUVWpZUWFVcVFpZlVuNlB2aGJwYXZ5SWtnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlTDjYhjv TBLJITYtJz2vg+vUGeAGvePF5W/y+hr9D0b90yYleHrwQqiBffnQG77ZeUOLgxIa XqP95f+p4/Q8U7IAUpn3FKaOvokurvy3Pu7Eqg9V7MaOuw9KlKI1aeEv2xhMAxem nQQpafqsrzp6kSixz1oeLGHXs5DZhOPncVKjh9oe/ZqrmHeQUsl3XtG6esZC4IbZ OCCxquE7kyvh9EoWcaTEJiP1dhRRnJzAHnTO7qOPhzHf0CCMJ2nTDjMxTwgjnXa6 ObtWPZK60cgyaHBrQ+UbvQdkggtbDgfAzU7csJXorOHRsDaW5IxjTBIy+JhdMxKJ QGic4FKhmnxutA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:04:54 2025 by rpki-client