This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f5cc1e-a294-45c7-9d10-f1bc956858aa/1/pszH03YZ_dof84uT_s5gq9SYq4Q.mft File: pszH03YZ_dof84uT_s5gq9SYq4Q.mft (raw, json) Hash identifier: RY5FK6CbasTh0qPAHaurgqt2cjneXfmwgFPSyiVVsx8= Subject key identifier: E7:DE:83:32:41:B6:73:7C:34:61:0A:C5:78:55:E3:F4:42:15:6F:23 Authority key identifier: A6:CC:C7:D3:76:19:FD:DA:1F:F3:8B:93:FE:CE:60:AB:D4:98:AB:84 Certificate issuer: /CN=a6ccc7d37619fdda1ff38b93fece60abd498ab84 Certificate serial: 019B3A2241DAF238BD9EFB93B1E9DB71F88E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pszH03YZ_dof84uT_s5gq9SYq4Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f5cc1e-a294-45c7-9d10-f1bc956858aa/1/pszH03YZ_dof84uT_s5gq9SYq4Q.mft Manifest number: 7F Signing time: Sat 20 Dec 2025 05:01:22 +0000 Manifest this update: Sat 20 Dec 2025 05:01:22 +0000 Manifest next update: Sun 21 Dec 2025 05:01:22 +0000 Files and hashes: 1: FCK5h5gubPMhZ3Rsrd7Tj4OARZE.roa (hash: 7f8n8xrs8z+GOmfg9rEL/AINEMlWtSmtFpMtGEwaqcw=) 2: pszH03YZ_dof84uT_s5gq9SYq4Q.crl (hash: lOJ0qllY1r+M20+oUwQWahKJUipMtcTNu34FVJAX178=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/f5cc1e-a294-45c7-9d10-f1bc956858aa/1/pszH03YZ_dof84uT_s5gq9SYq4Q.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/f5cc1e-a294-45c7-9d10-f1bc956858aa/1/pszH03YZ_dof84uT_s5gq9SYq4Q.mft rsync://rpki.ripe.net/repository/DEFAULT/pszH03YZ_dof84uT_s5gq9SYq4Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:22:41:da:f2:38:bd:9e:fb:93:b1:e9:db:71:f8:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6ccc7d37619fdda1ff38b93fece60abd498ab84 Validity Not Before: Dec 20 05:01:22 2025 GMT Not After : Dec 21 05:01:22 2025 GMT Subject: CN=e7de833241b6737c34610ac57855e3f442156f23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ef:f9:a5:df:83:fc:f0:54:c3:09:b3:25:49: ce:1e:3d:cc:38:6e:bf:f5:5f:ba:6f:95:6b:68:0f: 7e:40:ad:48:16:2f:e9:2e:43:49:7b:0b:8e:93:dd: a6:47:ed:a1:f9:c1:0e:44:f5:5e:56:b6:0d:06:db: 27:32:c7:24:5e:b6:5e:2f:9b:30:dc:15:93:8b:80: 14:37:f0:65:95:26:69:cc:c7:75:13:c4:68:9f:b0: 8f:59:e0:1e:a0:e6:5a:ed:13:1e:e6:76:1d:93:67: 74:69:f7:17:1a:c9:87:18:88:c2:f6:cb:3a:05:00: 41:70:8e:7b:09:4d:59:30:f9:d0:37:72:79:e6:3f: ea:bd:e2:d6:e9:da:2d:4a:79:9f:03:bd:e2:c4:34: a0:2d:ae:e8:56:d3:bf:0c:8b:fd:4b:fd:f2:24:52: f7:fe:a6:94:d0:b5:94:e6:04:73:a8:2f:d1:b7:c0: 2d:25:ae:57:6a:84:6b:43:d5:89:08:76:b3:fe:33: 02:a5:84:77:1f:37:97:95:ba:93:b9:e1:8b:8e:2b: bf:04:47:c8:c5:5c:fe:49:90:ed:1b:24:31:8c:e6: c9:51:ee:b1:7b:da:ff:97:bf:ca:f8:75:e1:da:b4: 7f:4c:18:ff:2b:ac:0c:c8:fc:fa:a8:ca:e4:b3:1d: a8:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:DE:83:32:41:B6:73:7C:34:61:0A:C5:78:55:E3:F4:42:15:6F:23 X509v3 Authority Key Identifier: keyid:A6:CC:C7:D3:76:19:FD:DA:1F:F3:8B:93:FE:CE:60:AB:D4:98:AB:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pszH03YZ_dof84uT_s5gq9SYq4Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f5cc1e-a294-45c7-9d10-f1bc956858aa/1/pszH03YZ_dof84uT_s5gq9SYq4Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f5cc1e-a294-45c7-9d10-f1bc956858aa/1/pszH03YZ_dof84uT_s5gq9SYq4Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:a7:6a:94:d6:5e:56:b3:2c:26:bb:63:4c:d8:8c:2e:95:b8: 20:9f:24:21:a5:66:6a:74:23:f0:55:46:d3:df:76:c1:23:7b: 4d:3b:39:88:30:9f:a3:8a:90:4c:c7:10:1b:35:82:8a:94:c5: 79:86:ca:6f:e6:9f:fc:87:b7:80:e5:a0:25:07:e2:53:b9:c5: f4:c2:df:78:fb:7e:9e:24:8e:46:4e:d2:7a:4e:24:7c:bf:db: 4f:e0:61:37:75:f7:0c:49:44:2e:99:9b:c3:3b:3c:9b:d3:5b: e2:3a:98:12:a1:5b:41:f9:58:f0:c1:c5:ef:58:e2:b7:c4:43: da:ea:49:9a:d2:6d:2f:17:25:c1:13:5d:ab:39:2c:8a:a3:2f: 40:74:b2:92:3b:f9:a7:dc:ca:06:fc:72:53:d4:8e:12:ff:88: 07:c9:2b:2c:1a:f0:67:19:a3:fe:f2:78:47:76:1a:a2:29:7c: bf:90:be:3b:ab:3e:93:5d:0c:47:4c:92:91:20:cf:61:78:40: 64:58:74:8e:b9:b2:fe:a5:7f:cf:65:90:78:42:1b:80:83:0b: 79:03:8e:cd:7e:71:cf:9c:1b:7a:3e:f1:67:e1:af:ba:52:e6: 90:7b:6d:b6:ec:ef:b6:e5:ae:07:df:47:75:e7:53:22:33:c0: be:bd:6c:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6IkHa8ji9nvuTsenbcfiOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2Y2NjN2QzNzYxOWZkZGExZmYzOGI5M2ZlY2U2MGFiZDQ5 OGFiODQwHhcNMjUxMjIwMDUwMTIyWhcNMjUxMjIxMDUwMTIyWjAzMTEwLwYDVQQD EyhlN2RlODMzMjQxYjY3MzdjMzQ2MTBhYzU3ODU1ZTNmNDQyMTU2ZjIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArO/5pd+D/PBUwwmzJUnOHj3MOG6/ 9V+6b5VraA9+QK1IFi/pLkNJewuOk92mR+2h+cEORPVeVrYNBtsnMsckXrZeL5sw 3BWTi4AUN/BllSZpzMd1E8Ron7CPWeAeoOZa7RMe5nYdk2d0afcXGsmHGIjC9ss6 BQBBcI57CU1ZMPnQN3J55j/qveLW6dotSnmfA73ixDSgLa7oVtO/DIv9S/3yJFL3 /qaU0LWU5gRzqC/Rt8AtJa5XaoRrQ9WJCHaz/jMCpYR3HzeXlbqTueGLjiu/BEfI xVz+SZDtGyQxjObJUe6xe9r/l7/K+HXh2rR/TBj/K6wMyPz6qMrksx2oUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOfegzJBtnN8NGEKxXhV4/RCFW8jMB8GA1UdIwQY MBaAFKbMx9N2Gf3aH/OLk/7OYKvUmKuEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHN6SDAzWVpfZG9mODR1VF9zNWdxOVNZcTRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9mNWNjMWUtYTI5NC00NWM3LTlkMTAt ZjFiYzk1Njg1OGFhLzEvcHN6SDAzWVpfZG9mODR1VF9zNWdxOVNZcTRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC9mNWNjMWUtYTI5NC00NWM3LTlkMTAtZjFiYzk1Njg1OGFh LzEvcHN6SDAzWVpfZG9mODR1VF9zNWdxOVNZcTRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ6dqlNZe VrMsJrtjTNiMLpW4IJ8kIaVmanQj8FVG0992wSN7TTs5iDCfo4qQTMcQGzWCipTF eYbKb+af/Ie3gOWgJQfiU7nF9MLfePt+niSORk7Sek4kfL/bT+BhN3X3DElELpmb wzs8m9Nb4jqYEqFbQflY8MHF71jit8RD2upJmtJtLxclwRNdqzksiqMvQHSykjv5 p9zKBvxyU9SOEv+IB8krLBrwZxmj/vJ4R3Yaoil8v5C+O6s+k10MR0ySkSDPYXhA ZFh0jrmy/qV/z2WQeEIbgIMLeQOOzX5xz5wbej7xZ+GvulLmkHtttuzvtuWuB99H dedTIjPAvr1s/A== -----END CERTIFICATE-----Generated at Sat Dec 20 07:42:36 2025 by rpki-client