This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft File: pZrIMj67a-IPronQmMokE4-MkAU.mft (raw, json) Hash identifier: SPCW3h7xdw6RU9lviKl40dwQneaWWOWAOLa7/cBJemA= Subject key identifier: 65:0F:16:22:5C:E5:A8:87:11:2D:5D:07:92:98:26:4D:1B:AF:75:1A Authority key identifier: A5:9A:C8:32:3E:BB:6B:E2:0F:AE:89:D0:98:CA:24:13:8F:8C:90:05 Certificate issuer: /CN=a59ac8323ebb6be20fae89d098ca24138f8c9005 Certificate serial: 019B3BA2119795FCB7354FEDE8E4A817E39C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pZrIMj67a-IPronQmMokE4-MkAU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft Manifest number: 1787 Signing time: Sat 20 Dec 2025 12:00:35 +0000 Manifest this update: Sat 20 Dec 2025 12:00:35 +0000 Manifest next update: Sun 21 Dec 2025 12:00:35 +0000 Files and hashes: 1: W2MvJBZ0wxtLqJdYlYA_0d8K8JQ.roa (hash: FE4tThC8aEaRa276a1uqrtHjLbN4YSEI6M3SskM13qQ=) 2: haFD9cLDeKJLdXFJ_FlWsDWQa1Y.roa (hash: suCkhBPt7Sy5Urm3257mrhUG7HADlPxpmTzTdnyQTPQ=) 3: pZrIMj67a-IPronQmMokE4-MkAU.crl (hash: aS1ZSzkWXqG10Zx8lUipXLV/zfvB/YDrgJ3d3eLil4M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.crl rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft rsync://rpki.ripe.net/repository/DEFAULT/pZrIMj67a-IPronQmMokE4-MkAU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:11:97:95:fc:b7:35:4f:ed:e8:e4:a8:17:e3:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a59ac8323ebb6be20fae89d098ca24138f8c9005 Validity Not Before: Dec 20 12:00:35 2025 GMT Not After : Dec 21 12:00:35 2025 GMT Subject: CN=650f16225ce5a887112d5d079298264d1baf751a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:07:48:e7:fe:d6:8f:5a:37:7b:3a:5c:48:59: 4f:66:9c:da:13:69:c3:17:c9:15:53:ed:e7:50:f7: dd:ed:6b:2d:fd:2a:c6:0d:b8:be:39:1e:20:2a:3e: 14:44:bc:80:b8:60:df:eb:b1:84:80:d1:32:72:10: e6:24:d2:8f:45:55:d3:e0:5a:a4:3b:69:88:f8:10: 31:50:d1:13:81:b0:6f:4f:cb:52:67:c6:8e:a6:c4: 90:c5:35:60:0c:25:98:2b:1f:b4:23:a0:6e:29:9c: 15:17:72:18:99:b6:42:49:ab:7c:3e:b5:eb:2d:29: e3:af:cc:c1:be:2b:4f:75:dd:83:a3:7b:ff:36:6d: 59:f0:49:cb:40:ff:36:37:c3:13:ee:b4:10:8d:a8: f5:c0:7b:61:c7:de:15:a6:7d:18:f3:1d:4c:0f:e4: d4:69:c1:35:46:2d:22:ad:12:be:67:fc:3e:0f:18: 8a:30:12:63:f8:e2:37:b9:22:2f:3c:f1:a9:e1:c5: 0b:60:c1:90:bc:fd:b7:c1:fc:c9:96:f5:5c:62:11: 9f:85:b5:d8:64:d4:06:e2:89:a1:69:b5:a8:b9:a7: 44:8b:97:8b:b1:a0:e3:37:82:4b:23:be:93:be:2b: 2c:79:cb:4a:87:27:3c:96:9f:a3:b8:67:2b:6d:87: 2e:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:0F:16:22:5C:E5:A8:87:11:2D:5D:07:92:98:26:4D:1B:AF:75:1A X509v3 Authority Key Identifier: keyid:A5:9A:C8:32:3E:BB:6B:E2:0F:AE:89:D0:98:CA:24:13:8F:8C:90:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZrIMj67a-IPronQmMokE4-MkAU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:bc:88:7e:c9:6b:53:41:e6:ad:4e:23:9d:7c:04:79:e8:da: 59:8d:1f:e2:1b:46:b9:7c:8f:e0:e8:0d:f9:e9:c0:a6:c3:3e: 8c:a3:b5:5e:12:2d:67:63:3e:59:ab:5d:a1:b9:ee:27:64:f6: f5:a0:a3:af:ca:e8:f2:c8:ac:ec:27:32:ad:aa:71:8c:95:7b: a3:dd:1a:ad:7f:90:c5:de:80:11:c9:f7:86:27:dd:ce:7a:a5: 1b:a5:54:97:60:1a:06:7a:01:1a:e7:a3:f9:bb:7b:c2:f7:34: 3c:a8:f4:aa:ac:4c:66:3b:c9:5c:39:21:8a:83:ed:97:5e:c0: e3:0d:43:7e:58:0d:f3:b3:e8:47:0e:e9:e3:93:ec:5a:1f:83: 9e:50:23:a3:f4:ac:17:12:62:4d:41:92:f6:38:6c:f9:68:fa: 6a:6e:af:7b:dc:c3:e7:20:ba:6e:01:a2:c4:29:97:fa:01:8d: 79:a0:1b:95:dd:de:2a:cf:c5:0a:66:23:e9:15:6f:d7:1d:34: 0c:3c:df:14:eb:36:33:8c:ce:15:bf:2a:ed:a9:0e:5e:7b:90: f7:e9:02:32:bc:66:30:75:94:e8:ab:69:c8:73:76:de:54:19: 0f:a5:90:18:8e:8d:b5:af:8c:ff:fb:1d:bf:e7:c1:7f:b0:a5: ed:9c:60:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7ohGXlfy3NU/t6OSoF+OcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1OWFjODMyM2ViYjZiZTIwZmFlODlkMDk4Y2EyNDEzOGY4 YzkwMDUwHhcNMjUxMjIwMTIwMDM1WhcNMjUxMjIxMTIwMDM1WjAzMTEwLwYDVQQD Eyg2NTBmMTYyMjVjZTVhODg3MTEyZDVkMDc5Mjk4MjY0ZDFiYWY3NTFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2QdI5/7Wj1o3ezpcSFlPZpzaE2nD F8kVU+3nUPfd7Wst/SrGDbi+OR4gKj4URLyAuGDf67GEgNEychDmJNKPRVXT4Fqk O2mI+BAxUNETgbBvT8tSZ8aOpsSQxTVgDCWYKx+0I6BuKZwVF3IYmbZCSat8PrXr LSnjr8zBvitPdd2Do3v/Nm1Z8EnLQP82N8MT7rQQjaj1wHthx94Vpn0Y8x1MD+TU acE1Ri0irRK+Z/w+DxiKMBJj+OI3uSIvPPGp4cULYMGQvP23wfzJlvVcYhGfhbXY ZNQG4omhabWouadEi5eLsaDjN4JLI76TvissectKhyc8lp+juGcrbYcu3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGUPFiJc5aiHES1dB5KYJk0br3UaMB8GA1UdIwQY MBaAFKWayDI+u2viD66J0JjKJBOPjJAFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFpySU1qNjdhLUlQcm9uUW1Nb2tFNC1Na0FVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9hMDFmODItOTE5My00MTk5LTk1YTgt ODNhZTVkOWM4MzJmLzEvcFpySU1qNjdhLUlQcm9uUW1Nb2tFNC1Na0FVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9hMDFmODItOTE5My00MTk5LTk1YTgtODNhZTVkOWM4MzJm LzEvcFpySU1qNjdhLUlQcm9uUW1Nb2tFNC1Na0FVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJryIfslr U0HmrU4jnXwEeejaWY0f4htGuXyP4OgN+enApsM+jKO1XhItZ2M+WatdobnuJ2T2 9aCjr8ro8sis7CcyrapxjJV7o90arX+Qxd6AEcn3hifdznqlG6VUl2AaBnoBGuej +bt7wvc0PKj0qqxMZjvJXDkhioPtl17A4w1DflgN87PoRw7p45PsWh+DnlAjo/Ss FxJiTUGS9jhs+Wj6am6ve9zD5yC6bgGixCmX+gGNeaAbld3eKs/FCmYj6RVv1x00 DDzfFOs2M4zOFb8q7akOXnuQ9+kCMrxmMHWU6KtpyHN23lQZD6WQGI6Nta+M//sd v+fBf7Cl7ZxgSQ== -----END CERTIFICATE-----Generated at Sat Dec 20 19:00:31 2025 by rpki-client