This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/ab57bd-cfed-441f-a437-438e84c7107d/1/pZp4qFEvkJzm1HMlLwTPGenmiio.mft File: pZp4qFEvkJzm1HMlLwTPGenmiio.mft (raw, json) Hash identifier: lyUOJu3Lxh9vhK1c2XrTDon1JPyoF0Bkr6QwU++APHM= Subject key identifier: 3A:D5:F2:29:BC:27:CA:51:A9:2F:D3:99:36:FB:D7:60:E7:59:C9:A4 Authority key identifier: A5:9A:78:A8:51:2F:90:9C:E6:D4:73:25:2F:04:CF:19:E9:E6:8A:2A Certificate issuer: /CN=a59a78a8512f909ce6d473252f04cf19e9e68a2a Certificate serial: 019B4814E632970E88AF70E4FAC2238CDBB6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pZp4qFEvkJzm1HMlLwTPGenmiio.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/ab57bd-cfed-441f-a437-438e84c7107d/1/pZp4qFEvkJzm1HMlLwTPGenmiio.mft Manifest number: 0E19 Signing time: Mon 22 Dec 2025 22:01:27 +0000 Manifest this update: Mon 22 Dec 2025 22:01:27 +0000 Manifest next update: Tue 23 Dec 2025 22:01:27 +0000 Files and hashes: 1: RuFROxCqzeIbzpx-h2zhu4XG73k.roa (hash: mYt7O5vyisef0XC7lwr4ZHkct165sZT5ZjyUS4XqL/8=) 2: pZp4qFEvkJzm1HMlLwTPGenmiio.crl (hash: R6r2Q6yBVYqJpjWc5Q8dNlnnfn9KmTjE+aNVUw34+nE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/ab57bd-cfed-441f-a437-438e84c7107d/1/pZp4qFEvkJzm1HMlLwTPGenmiio.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/ab57bd-cfed-441f-a437-438e84c7107d/1/pZp4qFEvkJzm1HMlLwTPGenmiio.mft rsync://rpki.ripe.net/repository/DEFAULT/pZp4qFEvkJzm1HMlLwTPGenmiio.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 22:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:14:e6:32:97:0e:88:af:70:e4:fa:c2:23:8c:db:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a59a78a8512f909ce6d473252f04cf19e9e68a2a Validity Not Before: Dec 22 22:01:27 2025 GMT Not After : Dec 23 22:01:27 2025 GMT Subject: CN=3ad5f229bc27ca51a92fd39936fbd760e759c9a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:20:4c:86:27:c8:49:5f:cc:98:4a:07:17:8b: bd:3b:39:16:5e:1f:4c:05:88:7a:f8:f1:19:05:d0: 77:9e:eb:05:dc:c0:d3:44:02:30:c4:3e:63:d8:e4: cc:34:c0:90:55:b9:24:4f:1a:b9:8b:75:26:8c:ff: a2:52:0b:f4:5d:6d:15:62:41:3f:79:3a:60:64:4e: ee:ef:08:25:cd:ef:23:fd:0c:24:3e:83:be:20:da: c1:2b:b6:3f:7c:b4:b3:73:34:b4:81:7b:38:10:59: 56:b6:b7:5c:59:71:58:5f:09:a4:ec:f8:18:e8:21: 79:1c:17:f9:a2:10:32:01:5c:74:3c:47:81:1a:d0: 8d:91:77:f7:1f:19:4f:3b:2a:17:95:97:42:11:d4: 36:11:b1:71:e2:f7:ab:14:01:f4:42:11:02:28:13: af:b2:0d:91:b5:06:56:05:e6:96:b9:d9:fe:19:46: ee:ce:37:c6:48:d7:ee:91:34:24:6a:ad:6b:d1:0a: 61:27:ce:cf:b8:26:94:1a:53:88:00:48:47:7d:64: e5:de:f1:c7:bb:c6:21:13:e9:88:6d:76:71:ac:cd: 3c:d6:42:bd:5b:21:6f:ed:2c:21:bd:05:ca:8f:1b: 3c:94:54:fe:86:52:02:47:e3:d5:71:c2:66:ef:f9: 6e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:D5:F2:29:BC:27:CA:51:A9:2F:D3:99:36:FB:D7:60:E7:59:C9:A4 X509v3 Authority Key Identifier: keyid:A5:9A:78:A8:51:2F:90:9C:E6:D4:73:25:2F:04:CF:19:E9:E6:8A:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZp4qFEvkJzm1HMlLwTPGenmiio.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ab57bd-cfed-441f-a437-438e84c7107d/1/pZp4qFEvkJzm1HMlLwTPGenmiio.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ab57bd-cfed-441f-a437-438e84c7107d/1/pZp4qFEvkJzm1HMlLwTPGenmiio.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:ff:05:8b:e1:c7:89:a5:94:f5:83:de:5d:0c:31:3d:6d:6e: 3d:bc:51:16:9a:bd:99:75:a2:27:d3:b4:0d:1c:33:83:eb:13: 35:b6:7f:c2:8e:e6:3b:99:66:6d:8f:69:9d:97:4c:f6:a3:5d: 33:30:ce:e0:ec:7b:38:95:bf:0c:fa:0c:a9:a7:82:ee:d9:b9: 6b:e7:9b:72:03:ea:e6:84:19:f1:27:a4:9d:f4:82:7e:65:d6: 38:55:ab:4a:ca:86:d4:29:7c:8a:65:a5:83:ff:d4:e7:2b:d9: 8e:35:0c:7b:9b:3c:ce:07:aa:95:b2:ef:bf:42:27:68:0f:d6: fa:af:14:af:93:66:7d:aa:97:d4:93:d9:b5:a3:60:7a:47:9d: d4:7e:df:06:44:ac:40:86:35:da:52:e2:53:75:28:10:8b:7a: ab:d3:b0:83:fa:49:24:c2:bc:32:6d:ac:0b:c3:29:51:e2:db: 3f:a1:eb:07:71:90:27:4c:d7:16:2a:0e:da:8b:d9:76:d1:d7: aa:35:d3:22:bc:78:fa:19:57:82:7e:e6:5a:49:60:52:86:eb: 75:ce:6c:fa:03:18:42:ed:ea:95:79:9a:41:9d:02:76:0f:0d: 53:fb:1d:67:3f:1e:fa:e5:01:30:0b:ef:14:3f:09:bf:cf:1e: 46:e9:17:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIFOYylw6Ir3Dk+sIjjNu2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1OWE3OGE4NTEyZjkwOWNlNmQ0NzMyNTJmMDRjZjE5ZTll NjhhMmEwHhcNMjUxMjIyMjIwMTI3WhcNMjUxMjIzMjIwMTI3WjAzMTEwLwYDVQQD EygzYWQ1ZjIyOWJjMjdjYTUxYTkyZmQzOTkzNmZiZDc2MGU3NTljOWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiBMhifISV/MmEoHF4u9OzkWXh9M BYh6+PEZBdB3nusF3MDTRAIwxD5j2OTMNMCQVbkkTxq5i3UmjP+iUgv0XW0VYkE/ eTpgZE7u7wglze8j/QwkPoO+INrBK7Y/fLSzczS0gXs4EFlWtrdcWXFYXwmk7PgY 6CF5HBf5ohAyAVx0PEeBGtCNkXf3HxlPOyoXlZdCEdQ2EbFx4verFAH0QhECKBOv sg2RtQZWBeaWudn+GUbuzjfGSNfukTQkaq1r0QphJ87PuCaUGlOIAEhHfWTl3vHH u8YhE+mIbXZxrM081kK9WyFv7SwhvQXKjxs8lFT+hlICR+PVccJm7/luTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDrV8im8J8pRqS/TmTb712DnWcmkMB8GA1UdIwQY MBaAFKWaeKhRL5Cc5tRzJS8Ezxnp5ooqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFpwNHFGRXZrSnptMUhNbEx3VFBHZW5taWlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9hYjU3YmQtY2ZlZC00NDFmLWE0Mzct NDM4ZTg0YzcxMDdkLzEvcFpwNHFGRXZrSnptMUhNbEx3VFBHZW5taWlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi9hYjU3YmQtY2ZlZC00NDFmLWE0MzctNDM4ZTg0YzcxMDdk LzEvcFpwNHFGRXZrSnptMUhNbEx3VFBHZW5taWlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUv8Fi+HH iaWU9YPeXQwxPW1uPbxRFpq9mXWiJ9O0DRwzg+sTNbZ/wo7mO5lmbY9pnZdM9qNd MzDO4Ox7OJW/DPoMqaeC7tm5a+ebcgPq5oQZ8SeknfSCfmXWOFWrSsqG1Cl8imWl g//U5yvZjjUMe5s8zgeqlbLvv0InaA/W+q8Ur5NmfaqX1JPZtaNgeked1H7fBkSs QIY12lLiU3UoEIt6q9Owg/pJJMK8Mm2sC8MpUeLbP6HrB3GQJ0zXFioO2ovZdtHX qjXTIrx4+hlXgn7mWklgUobrdc5s+gMYQu3qlXmaQZ0Cdg8NU/sdZz8e+uUBMAvv FD8Jv88eRukXvw== -----END CERTIFICATE-----Generated at Tue Dec 23 03:51:29 2025 by rpki-client