This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/4bff72-ba5b-4528-8c42-7f6b9f1040fd/1/PZlE6PVlGxvS8KngBoZfOmuB62E.mft File: PZlE6PVlGxvS8KngBoZfOmuB62E.mft (raw, json) Hash identifier: gPStpocaXkmjZrAeahlNHYpHs+qoqa992QAeRScmpWY= Subject key identifier: FC:02:78:FF:79:84:21:13:6D:CD:C9:EC:FA:41:2D:48:77:65:4C:AC Authority key identifier: 3D:99:44:E8:F5:65:1B:1B:D2:F0:A9:E0:06:86:5F:3A:6B:81:EB:61 Certificate issuer: /CN=3d9944e8f5651b1bd2f0a9e006865f3a6b81eb61 Certificate serial: 019B4627865C2AD73422BB30249F49F9DF75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PZlE6PVlGxvS8KngBoZfOmuB62E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/4bff72-ba5b-4528-8c42-7f6b9f1040fd/1/PZlE6PVlGxvS8KngBoZfOmuB62E.mft Manifest number: 178E Signing time: Mon 22 Dec 2025 13:02:33 +0000 Manifest this update: Mon 22 Dec 2025 13:02:33 +0000 Manifest next update: Tue 23 Dec 2025 13:02:33 +0000 Files and hashes: 1: PZlE6PVlGxvS8KngBoZfOmuB62E.crl (hash: qITo1VTXHeDYrGVqzlFeEe45rla6tyjYkxkInxFAp8g=) 2: tlchQmDxgjTRo1pLaspfZw12O3A.roa (hash: 6bDu460ilvbyFwMJbm1Vw+QewREO9nGYqnB3iYaAR4Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/4bff72-ba5b-4528-8c42-7f6b9f1040fd/1/PZlE6PVlGxvS8KngBoZfOmuB62E.crl rsync://rpki.ripe.net/repository/DEFAULT/04/4bff72-ba5b-4528-8c42-7f6b9f1040fd/1/PZlE6PVlGxvS8KngBoZfOmuB62E.mft rsync://rpki.ripe.net/repository/DEFAULT/PZlE6PVlGxvS8KngBoZfOmuB62E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 13:02:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:27:86:5c:2a:d7:34:22:bb:30:24:9f:49:f9:df:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d9944e8f5651b1bd2f0a9e006865f3a6b81eb61 Validity Not Before: Dec 22 13:02:33 2025 GMT Not After : Dec 23 13:02:33 2025 GMT Subject: CN=fc0278ff798421136dcdc9ecfa412d4877654cac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:11:e7:4c:c0:23:ff:6a:5a:1e:92:8e:4d:1f: 6b:b7:5c:81:06:16:a2:55:6f:d8:16:02:a0:a6:56: ec:35:e7:b0:5a:7f:af:1d:b2:94:51:c2:2e:d5:94: f8:0e:08:27:4d:de:c3:ab:53:55:13:a8:38:c7:fa: 76:e0:2c:4c:69:81:99:7d:81:eb:98:4d:2a:d4:3f: 49:f5:5f:71:ab:ac:3f:f8:ea:ca:57:a0:c4:84:4d: 9b:8a:f9:87:49:e3:4d:9d:43:48:e3:99:7a:f5:76: 47:8e:a8:c0:00:fd:31:85:ac:c8:02:a4:93:43:28: 5c:f9:4a:e3:72:8d:36:44:4e:06:46:07:1e:10:8c: 34:95:af:e5:3a:81:5c:66:68:c4:68:de:c1:96:93: f7:f3:ab:e4:a0:46:2d:17:f8:13:01:b1:ed:9d:d5: f0:ad:b9:7e:a9:4b:ce:2a:f0:ec:33:ac:a1:71:ec: 33:29:58:0a:0d:80:49:64:fa:48:0d:59:b9:b4:c8: 4d:2a:9d:05:8e:10:62:dd:32:96:b9:b9:8b:ec:8d: 53:fc:11:de:c5:ce:16:ee:35:85:aa:d2:7f:7c:88: 94:39:a2:14:fd:5b:26:71:ae:bd:00:31:b9:90:f7: 09:fa:bc:d2:95:fd:92:2d:00:37:01:d2:41:35:b7: 5e:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:02:78:FF:79:84:21:13:6D:CD:C9:EC:FA:41:2D:48:77:65:4C:AC X509v3 Authority Key Identifier: keyid:3D:99:44:E8:F5:65:1B:1B:D2:F0:A9:E0:06:86:5F:3A:6B:81:EB:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PZlE6PVlGxvS8KngBoZfOmuB62E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/4bff72-ba5b-4528-8c42-7f6b9f1040fd/1/PZlE6PVlGxvS8KngBoZfOmuB62E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/4bff72-ba5b-4528-8c42-7f6b9f1040fd/1/PZlE6PVlGxvS8KngBoZfOmuB62E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:46:90:fd:78:63:55:b0:b7:40:49:c0:04:87:52:bf:f4:57: b0:fa:67:32:13:1a:92:b5:95:70:9e:5b:a9:e4:a3:69:3a:f8: 61:17:0b:fb:18:3e:6f:ad:ae:69:35:8b:a0:b9:7a:53:9d:12: 87:7f:55:d6:7b:b3:08:56:3a:4a:26:fa:30:1c:9b:44:dd:77: bb:8f:15:7a:14:1d:f8:71:52:ad:98:b2:18:31:7d:d3:ae:c3: dc:f1:f8:81:46:01:1e:c9:09:63:ac:70:51:09:16:a7:cd:49: 68:ff:8c:c7:d7:24:41:ed:3d:e8:59:3a:91:d1:da:84:2a:c2: 34:94:20:81:18:f8:40:e0:4c:ac:87:be:72:23:38:c4:ec:89: 0f:6e:f5:9e:64:c8:a6:a2:b1:39:1c:09:e1:bb:5c:3f:b2:db: 0c:f5:fc:7a:e1:11:e6:46:dd:33:78:86:f0:43:2b:0d:88:23: 64:24:92:9f:97:d8:61:ef:a0:27:22:68:ed:39:87:6b:91:4e: c5:4a:87:1c:85:06:46:01:18:1f:5e:92:f9:23:73:cf:e9:e6: 5b:87:50:68:26:d0:f0:3b:f6:fa:d3:c2:28:6f:c2:db:d1:fe: c7:3b:72:e6:30:d9:d4:49:d6:d5:24:67:d6:54:49:30:4f:50: 73:cb:f8:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGJ4ZcKtc0IrswJJ9J+d91MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkOTk0NGU4ZjU2NTFiMWJkMmYwYTllMDA2ODY1ZjNhNmI4 MWViNjEwHhcNMjUxMjIyMTMwMjMzWhcNMjUxMjIzMTMwMjMzWjAzMTEwLwYDVQQD EyhmYzAyNzhmZjc5ODQyMTEzNmRjZGM5ZWNmYTQxMmQ0ODc3NjU0Y2FjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxHnTMAj/2paHpKOTR9rt1yBBhai VW/YFgKgplbsNeewWn+vHbKUUcIu1ZT4DggnTd7Dq1NVE6g4x/p24CxMaYGZfYHr mE0q1D9J9V9xq6w/+OrKV6DEhE2bivmHSeNNnUNI45l69XZHjqjAAP0xhazIAqST Qyhc+Urjco02RE4GRgceEIw0la/lOoFcZmjEaN7BlpP386vkoEYtF/gTAbHtndXw rbl+qUvOKvDsM6yhcewzKVgKDYBJZPpIDVm5tMhNKp0FjhBi3TKWubmL7I1T/BHe xc4W7jWFqtJ/fIiUOaIU/Vsmca69ADG5kPcJ+rzSlf2SLQA3AdJBNbdeOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPwCeP95hCETbc3J7PpBLUh3ZUysMB8GA1UdIwQY MBaAFD2ZROj1ZRsb0vCp4AaGXzprgethMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFpsRTZQVmxHeHZTOEtuZ0JvWmZPbXVCNjJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC80YmZmNzItYmE1Yi00NTI4LThjNDIt N2Y2YjlmMTA0MGZkLzEvUFpsRTZQVmxHeHZTOEtuZ0JvWmZPbXVCNjJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC80YmZmNzItYmE1Yi00NTI4LThjNDItN2Y2YjlmMTA0MGZk LzEvUFpsRTZQVmxHeHZTOEtuZ0JvWmZPbXVCNjJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoEaQ/Xhj VbC3QEnABIdSv/RXsPpnMhMakrWVcJ5bqeSjaTr4YRcL+xg+b62uaTWLoLl6U50S h39V1nuzCFY6Sib6MBybRN13u48VehQd+HFSrZiyGDF9067D3PH4gUYBHskJY6xw UQkWp81JaP+Mx9ckQe096Fk6kdHahCrCNJQggRj4QOBMrIe+ciM4xOyJD271nmTI pqKxORwJ4btcP7LbDPX8euER5kbdM3iG8EMrDYgjZCSSn5fYYe+gJyJo7TmHa5FO xUqHHIUGRgEYH16S+SNzz+nmW4dQaCbQ8Dv2+tPCKG/C29H+xzty5jDZ1EnW1SRn 1lRJME9Qc8v41w== -----END CERTIFICATE-----Generated at Mon Dec 22 17:31:10 2025 by rpki-client