This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft File: I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft (raw, json) Hash identifier: JOhvtGd7w9Q8te9HnybAhfUgqbn71Ob7HEVlMYpngiQ= Subject key identifier: A7:D2:2B:F8:62:34:9B:7C:73:95:D6:53:44:86:C1:36:AB:1C:29:7B Authority key identifier: 23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47 Certificate issuer: /CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47 Certificate serial: 019B3E6C485869F9CFCF6D5DE1B81EDB5799 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft Manifest number: 14B8 Signing time: Sun 21 Dec 2025 01:00:42 +0000 Manifest this update: Sun 21 Dec 2025 01:00:42 +0000 Manifest next update: Mon 22 Dec 2025 01:00:42 +0000 Files and hashes: 1: 0qZlk63Gwo6PVve3R8hoNJeSalk.roa (hash: 9K8bAvhRQIcuHPJMwOdonfj+LysEV1qKdWBg1zShX+0=) 2: 1aR-_v953E36WGgYgibzeTBiCDE.roa (hash: FoIR2LSFc6nQ5Kqt0WYRr1Y8u7rsf9kyNtd6rG0B9zM=) 3: 2S36hALNEuA4FHD_a934872Co8w.roa (hash: 7vbdkC8QrVhET/DTmD2itapsbG53efZ5NYts2gI1WdE=) 4: I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl (hash: koJro7pJYgV/0YEZ2d+Ppzgzhlf1i8os2X+sDE0jwFo=) 5: JiS1Tiph5HTmGNzZ0KtBUIEaf7A.roa (hash: Gom6zOjgSh5rBVSKZ2f6ZCcspQ3wfulcfmXimj0TCtQ=) 6: KtKxD1HbUkxdQbT12LynXd7iXTs.roa (hash: sI8vJTHX8+A6Ti8zSaEXzqBtKgPjjPc75g33e2ATpPA=) 7: Q9Q78d-jsiF5ILAqRcPi-38ptt8.roa (hash: YzBAYIWUa9/3ZSqBiY5Wy7QpsAq3KA1Xx1umoytO+nA=) 8: ZpGAbaG9iTc5mQjGkWx21egzJos.roa (hash: hVROdEr8DhK5izAOiu4sPZbk59hiOCePPc1b1fzj7Mc=) 9: aCwRSHVYBYpytuE1o9MjNgDXz9I.roa (hash: lR91pW0BeR+aoFpolYB6lJ9nl5KY3mWGfuxUgw4Zch4=) 10: hTDGmmn2FYXUzU7TBnMKhJwzgBA.roa (hash: 1eTmB0t+VZgY89Mes1TNlFqfs2UJeJff1ZjTxBLpw/g=) 11: jlKsVMX7wEteoIWfSN3Uc9eAuVQ.roa (hash: 5HOZUuYu7Rw+ksliSgplThO4PdfYnW2rqUfOLfK21mA=) 12: k8Tsh2igTKK0UWxKZTZKxjOauZg.roa (hash: 2YaWS9l2TW+UMAMDTk1uUSdz30uNtfJAEAiFghKc1/k=) 13: r5RDCZVrjcs26zN2wJ5oPZzWcrE.roa (hash: ABN+n8WXzNyvhNn0KAYr1OZE1UelVHRBMWhRAYF1K1Q=) 14: z1a3i0frazTQqXgXDMZwXIVumzA.roa (hash: 8QcYCFJ7DbfNpdlzOwLSm6hk+eQgt4rWp4xCUkBVN6Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:48:58:69:f9:cf:cf:6d:5d:e1:b8:1e:db:57:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47 Validity Not Before: Dec 21 01:00:42 2025 GMT Not After : Dec 22 01:00:42 2025 GMT Subject: CN=a7d22bf862349b7c7395d6534486c136ab1c297b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:37:b7:80:36:6d:94:a9:13:02:14:f5:c9:da: fc:2a:61:ad:74:6d:ec:cf:c5:39:08:28:93:85:55: c6:52:74:5f:59:83:49:23:04:c6:a0:73:aa:b0:3c: c3:2d:45:e9:86:32:66:08:3e:7f:77:ae:c7:e1:36: c7:b5:17:2d:15:3e:25:b5:0a:f6:ef:17:fd:0d:49: bc:28:73:69:47:72:2a:85:c7:c1:b9:f3:54:60:8c: 1a:5f:d9:61:51:e4:1d:4f:53:2a:8e:e6:be:7f:6c: 73:76:e3:05:56:4c:45:52:6e:86:a6:ec:e8:dd:2a: 2c:15:83:57:ec:ec:02:5c:90:ac:da:4d:b3:ba:ac: 14:b5:bd:99:52:50:1c:35:59:3e:a5:4e:5b:23:b9: 2b:3d:58:ea:81:23:78:f4:d2:a9:5e:7e:85:d4:8b: 24:dd:7d:3d:78:11:1c:ef:45:23:ad:8f:9c:3f:70: 17:50:a6:1d:0c:2c:bf:d8:1a:7b:17:c8:eb:54:aa: f2:24:fd:45:76:02:68:03:f3:1f:1b:45:b2:72:c8: aa:06:4a:07:ce:24:82:b2:44:c1:07:f6:b9:87:3f: 8e:04:d0:6c:11:07:df:f6:c4:1a:be:62:a9:06:58: e3:e2:7c:93:6d:d9:e2:3f:65:03:83:6f:14:f6:58: 52:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:D2:2B:F8:62:34:9B:7C:73:95:D6:53:44:86:C1:36:AB:1C:29:7B X509v3 Authority Key Identifier: keyid:23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:85:b3:e6:7a:97:67:6b:d2:75:71:bd:a1:d1:20:2d:2a:80: 7f:2e:8a:59:f2:58:b0:93:c2:58:f3:60:d4:c0:f5:9f:3a:ec: 46:62:08:ac:19:4f:df:82:b5:0e:93:1b:e5:dd:c0:24:6a:ed: 03:f4:c5:8b:8b:cd:78:8f:98:0a:0f:dc:47:35:a1:10:56:80: a0:f2:6a:de:ac:ed:76:92:19:60:f2:81:2a:1d:40:ed:e3:8d: f4:9d:97:db:45:be:78:66:b5:80:22:7b:f1:02:ef:c6:db:05: b6:95:36:d5:25:f7:69:af:3b:fb:59:d1:89:94:91:1f:21:7f: c2:da:f6:6a:1d:9f:20:6b:8a:72:cf:6a:2d:2b:22:a1:cc:52: 47:af:c6:3c:f2:90:1d:60:17:1e:3c:d3:2b:0a:30:ef:9e:7b: e3:c7:37:fe:43:68:44:4c:24:04:70:49:18:fe:17:cd:37:17: 04:0f:ef:31:72:f6:58:0b:9e:80:5c:76:2d:d5:59:a9:87:e1: bd:5e:67:b2:7e:d9:99:02:09:cf:a0:8d:94:1a:20:77:45:8a: b9:16:9f:b2:2e:97:89:51:67:38:bd:1b:67:06:a4:52:dc:1f: 6c:81:34:1e:d3:6e:99:fc:d9:b1:6d:9a:76:f0:15:4b:0b:48: ae:4c:28:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bEhYafnPz21d4bge21eZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzZTNkOTJiZmUxNjYxOWNhNTAwYzAzMjY3ZWZmYTlhYTdj YTBjNDcwHhcNMjUxMjIxMDEwMDQyWhcNMjUxMjIyMDEwMDQyWjAzMTEwLwYDVQQD EyhhN2QyMmJmODYyMzQ5YjdjNzM5NWQ2NTM0NDg2YzEzNmFiMWMyOTdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDe3gDZtlKkTAhT1ydr8KmGtdG3s z8U5CCiThVXGUnRfWYNJIwTGoHOqsDzDLUXphjJmCD5/d67H4TbHtRctFT4ltQr2 7xf9DUm8KHNpR3IqhcfBufNUYIwaX9lhUeQdT1Mqjua+f2xzduMFVkxFUm6Gpuzo 3SosFYNX7OwCXJCs2k2zuqwUtb2ZUlAcNVk+pU5bI7krPVjqgSN49NKpXn6F1Isk 3X09eBEc70UjrY+cP3AXUKYdDCy/2Bp7F8jrVKryJP1FdgJoA/MfG0WycsiqBkoH ziSCskTBB/a5hz+OBNBsEQff9sQavmKpBljj4nyTbdniP2UDg28U9lhSIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKfSK/hiNJt8c5XWU0SGwTarHCl7MB8GA1UdIwQY MBaAFCPj2Sv+FmGcpQDAMmfv+pqnygxHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSS1QWktfNFdZWnlsQU1BeVotXzZtcWZLREVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC85YzJjOTAtYzdkNC00OGI3LTliYWYt ZjFiZjBjMzNhOTA4LzEvSS1QWktfNFdZWnlsQU1BeVotXzZtcWZLREVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC85YzJjOTAtYzdkNC00OGI3LTliYWYtZjFiZjBjMzNhOTA4 LzEvSS1QWktfNFdZWnlsQU1BeVotXzZtcWZLREVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJIWz5nqX Z2vSdXG9odEgLSqAfy6KWfJYsJPCWPNg1MD1nzrsRmIIrBlP34K1DpMb5d3AJGrt A/TFi4vNeI+YCg/cRzWhEFaAoPJq3qztdpIZYPKBKh1A7eON9J2X20W+eGa1gCJ7 8QLvxtsFtpU21SX3aa87+1nRiZSRHyF/wtr2ah2fIGuKcs9qLSsiocxSR6/GPPKQ HWAXHjzTKwow755748c3/kNoREwkBHBJGP4XzTcXBA/vMXL2WAuegFx2LdVZqYfh vV5nsn7ZmQIJz6CNlBogd0WKuRafsi6XiVFnOL0bZwakUtwfbIE0HtNumfzZsW2a dvAVSwtIrkwoCA== -----END CERTIFICATE-----Generated at Sun Dec 21 04:23:02 2025 by rpki-client