This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/ac5fdf-5b66-4850-963a-f9b73b3e3eee/1/PZijti1aux3K9oriP1Me6CJA8gM.mft File: PZijti1aux3K9oriP1Me6CJA8gM.mft (raw, json) Hash identifier: k/0WDJE1Hfg+0N77rdMpGKzyB9hzPBRWyveqgsfoe8s= Subject key identifier: 65:02:A1:DA:F5:18:B7:F4:71:8A:99:3A:1C:60:8D:45:DF:12:D3:30 Authority key identifier: 3D:98:A3:B6:2D:5A:BB:1D:CA:F6:8A:E2:3F:53:1E:E8:22:40:F2:03 Certificate issuer: /CN=3d98a3b62d5abb1dcaf68ae23f531ee82240f203 Certificate serial: 019B51BC7B83D9882D17D66B23E62EA04EA2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PZijti1aux3K9oriP1Me6CJA8gM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/ac5fdf-5b66-4850-963a-f9b73b3e3eee/1/PZijti1aux3K9oriP1Me6CJA8gM.mft Manifest number: 1082 Signing time: Wed 24 Dec 2025 19:01:05 +0000 Manifest this update: Wed 24 Dec 2025 19:01:05 +0000 Manifest next update: Thu 25 Dec 2025 19:01:05 +0000 Files and hashes: 1: K5-cWJf7kTmzFiV3mE-MumP7Txo.roa (hash: d5nxq53iT7Tr8Pdp2k4UnWi9qs3VVT6d+if6Hmi6IVQ=) 2: PZijti1aux3K9oriP1Me6CJA8gM.crl (hash: UPVV+PdFVctrTXsnBeX5gaWwD2Hj+aEHqDHxH/wjtd8=) 3: _TX8C92dziQpbg1kfvVVdJSGVvw.roa (hash: M6n2mPn45LSDUrpQyadpeXypeAt/8VqRu1J7jMmEfG8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/ac5fdf-5b66-4850-963a-f9b73b3e3eee/1/PZijti1aux3K9oriP1Me6CJA8gM.crl rsync://rpki.ripe.net/repository/DEFAULT/61/ac5fdf-5b66-4850-963a-f9b73b3e3eee/1/PZijti1aux3K9oriP1Me6CJA8gM.mft rsync://rpki.ripe.net/repository/DEFAULT/PZijti1aux3K9oriP1Me6CJA8gM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:bc:7b:83:d9:88:2d:17:d6:6b:23:e6:2e:a0:4e:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d98a3b62d5abb1dcaf68ae23f531ee82240f203 Validity Not Before: Dec 24 19:01:05 2025 GMT Not After : Dec 25 19:01:05 2025 GMT Subject: CN=6502a1daf518b7f4718a993a1c608d45df12d330 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:3c:6e:6e:18:90:ea:14:06:74:3d:ea:01:6e: b5:38:ce:a8:df:11:cf:ab:48:95:16:19:e5:8a:01: f7:ab:8a:67:0e:c6:d1:c2:ba:40:2f:d4:96:ce:a7: 0e:f7:c1:55:83:6d:9b:1d:03:b7:d3:0a:44:b6:50: 12:81:71:68:56:e3:a7:ea:b2:05:da:64:e3:49:57: 79:9d:9d:91:ca:48:60:cd:43:d5:5c:86:53:e3:0e: 6f:39:03:76:02:ee:6c:71:4e:42:4b:fe:b1:d3:79: dd:78:f0:f5:b0:f0:5e:93:0e:55:2b:38:4b:1e:28: fc:39:bc:61:7c:e6:92:da:24:c4:36:0c:ce:20:15: 89:c5:5e:15:66:18:ba:08:e4:af:12:1e:8a:3c:2b: eb:6c:fe:70:3a:9f:c6:e5:e7:5c:fd:48:59:01:ad: 30:fe:36:20:2f:63:69:a8:af:18:2b:93:27:03:58: 6f:67:1b:13:01:ac:88:96:ee:ca:1d:53:84:26:4d: d7:74:6a:ae:67:95:d0:cc:43:df:73:8e:3a:2b:1b: 4d:c8:8b:27:30:03:89:4e:61:3f:f2:d0:12:7e:ec: ad:0b:f9:fb:bc:ca:7c:c1:79:84:fe:a7:ae:f5:bf: 98:db:ff:3e:4e:7a:c0:77:f0:d6:c0:f4:07:75:8a: 5c:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:02:A1:DA:F5:18:B7:F4:71:8A:99:3A:1C:60:8D:45:DF:12:D3:30 X509v3 Authority Key Identifier: keyid:3D:98:A3:B6:2D:5A:BB:1D:CA:F6:8A:E2:3F:53:1E:E8:22:40:F2:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PZijti1aux3K9oriP1Me6CJA8gM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ac5fdf-5b66-4850-963a-f9b73b3e3eee/1/PZijti1aux3K9oriP1Me6CJA8gM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ac5fdf-5b66-4850-963a-f9b73b3e3eee/1/PZijti1aux3K9oriP1Me6CJA8gM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:65:6c:1d:e7:78:6d:20:8d:02:7e:b4:e0:74:35:11:8c:71: cc:60:ef:b5:8f:45:d7:a1:14:fe:20:02:9c:7a:bb:50:ab:ba: 7f:ab:f8:c7:6c:86:fd:16:3b:41:e7:78:79:fe:62:0b:08:f3: 92:dc:af:8b:32:99:b2:7b:8f:8d:80:c9:d7:ea:65:7f:90:06: 5c:dc:92:df:ab:85:64:e6:ed:c2:22:17:de:ba:03:51:54:52: 16:da:6f:05:f0:29:9d:a5:76:f9:d2:72:84:f8:9e:56:4b:bf: 2f:91:fb:c5:19:ca:1a:ed:68:94:fe:c4:a9:7a:ed:39:40:00: 4c:58:11:cc:25:02:06:66:25:4f:54:2d:4e:9c:71:34:b6:d5: e3:df:99:9a:e6:f0:ab:d1:4c:15:39:7a:d7:11:6c:88:c6:e9: 5d:bd:93:70:40:62:23:9f:39:bf:51:d5:d9:76:75:e0:ad:a7: 0a:89:0e:c8:99:a4:f9:8b:fb:57:50:e6:be:a1:3f:68:40:bb: af:3d:74:26:29:ea:42:fe:ef:a5:fb:8e:c7:40:0e:83:65:73: 57:c1:bb:fc:c1:d2:22:65:58:92:b4:26:a2:60:0e:70:a0:8f: 33:11:30:58:20:7f:28:f5:b1:17:38:57:3c:44:1c:1a:14:ac: a6:cd:5e:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRvHuD2YgtF9ZrI+YuoE6iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkOThhM2I2MmQ1YWJiMWRjYWY2OGFlMjNmNTMxZWU4MjI0 MGYyMDMwHhcNMjUxMjI0MTkwMTA1WhcNMjUxMjI1MTkwMTA1WjAzMTEwLwYDVQQD Eyg2NTAyYTFkYWY1MThiN2Y0NzE4YTk5M2ExYzYwOGQ0NWRmMTJkMzMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDxubhiQ6hQGdD3qAW61OM6o3xHP q0iVFhnligH3q4pnDsbRwrpAL9SWzqcO98FVg22bHQO30wpEtlASgXFoVuOn6rIF 2mTjSVd5nZ2RykhgzUPVXIZT4w5vOQN2Au5scU5CS/6x03ndePD1sPBekw5VKzhL Hij8ObxhfOaS2iTENgzOIBWJxV4VZhi6COSvEh6KPCvrbP5wOp/G5edc/UhZAa0w /jYgL2NpqK8YK5MnA1hvZxsTAayIlu7KHVOEJk3XdGquZ5XQzEPfc446KxtNyIsn MAOJTmE/8tASfuytC/n7vMp8wXmE/qeu9b+Y2/8+TnrAd/DWwPQHdYpccQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGUCodr1GLf0cYqZOhxgjUXfEtMwMB8GA1UdIwQY MBaAFD2Yo7YtWrsdyvaK4j9THugiQPIDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFppanRpMWF1eDNLOW9yaVAxTWU2Q0pBOGdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9hYzVmZGYtNWI2Ni00ODUwLTk2M2Et ZjliNzNiM2UzZWVlLzEvUFppanRpMWF1eDNLOW9yaVAxTWU2Q0pBOGdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9hYzVmZGYtNWI2Ni00ODUwLTk2M2EtZjliNzNiM2UzZWVl LzEvUFppanRpMWF1eDNLOW9yaVAxTWU2Q0pBOGdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiGVsHed4 bSCNAn604HQ1EYxxzGDvtY9F16EU/iACnHq7UKu6f6v4x2yG/RY7Qed4ef5iCwjz ktyvizKZsnuPjYDJ1+plf5AGXNyS36uFZObtwiIX3roDUVRSFtpvBfApnaV2+dJy hPieVku/L5H7xRnKGu1olP7EqXrtOUAATFgRzCUCBmYlT1QtTpxxNLbV49+Zmubw q9FMFTl61xFsiMbpXb2TcEBiI585v1HV2XZ14K2nCokOyJmk+Yv7V1DmvqE/aEC7 rz10JinqQv7vpfuOx0AOg2VzV8G7/MHSImVYkrQmomAOcKCPMxEwWCB/KPWxFzhX PEQcGhSsps1emA== -----END CERTIFICATE-----Generated at Thu Dec 25 03:33:59 2025 by rpki-client