This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/dd672f-5336-4f35-b3ef-ae91ab342be1/1/pZyqKnNoBpiyyeGmyWQadPPOdug.mft File: pZyqKnNoBpiyyeGmyWQadPPOdug.mft (raw, json) Hash identifier: gNUAsOyskdUwggA9s0wecVHNNPbdSQUMtSY8fUIJLr0= Subject key identifier: 08:CD:D5:67:AD:1A:ED:0A:25:7F:B5:68:E8:DE:65:A6:08:41:64:7C Authority key identifier: A5:9C:AA:2A:73:68:06:98:B2:C9:E1:A6:C9:64:1A:74:F3:CE:76:E8 Certificate issuer: /CN=a59caa2a73680698b2c9e1a6c9641a74f3ce76e8 Certificate serial: 019B5F0A06314543A6750EED41E5B4E051EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pZyqKnNoBpiyyeGmyWQadPPOdug.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/dd672f-5336-4f35-b3ef-ae91ab342be1/1/pZyqKnNoBpiyyeGmyWQadPPOdug.mft Manifest number: 0C2F Signing time: Sat 27 Dec 2025 09:00:51 +0000 Manifest this update: Sat 27 Dec 2025 09:00:51 +0000 Manifest next update: Sun 28 Dec 2025 09:00:51 +0000 Files and hashes: 1: _c_c0M25UwpZ7eHBk4pzeagMlVQ.roa (hash: 8jqy4hlWYt18GsvMo6F88//T4bDxnnNcBAAfWfrvPK8=) 2: pZyqKnNoBpiyyeGmyWQadPPOdug.crl (hash: YGjr3aWrFcQwel/sgHyx2uNmtGhb0+VDkT7gInHCav8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/dd672f-5336-4f35-b3ef-ae91ab342be1/1/pZyqKnNoBpiyyeGmyWQadPPOdug.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/dd672f-5336-4f35-b3ef-ae91ab342be1/1/pZyqKnNoBpiyyeGmyWQadPPOdug.mft rsync://rpki.ripe.net/repository/DEFAULT/pZyqKnNoBpiyyeGmyWQadPPOdug.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5f:0a:06:31:45:43:a6:75:0e:ed:41:e5:b4:e0:51:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a59caa2a73680698b2c9e1a6c9641a74f3ce76e8 Validity Not Before: Dec 27 09:00:51 2025 GMT Not After : Dec 28 09:00:51 2025 GMT Subject: CN=08cdd567ad1aed0a257fb568e8de65a60841647c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:24:06:4c:98:a9:d1:cd:69:a6:fe:58:c6:22: 78:93:ab:7a:84:50:5e:fe:6f:03:19:04:e2:14:ef: 49:b7:7c:4a:04:a9:3d:9e:91:4b:24:8c:9c:a3:cc: e6:11:68:d2:eb:4a:93:ea:10:3f:12:51:f0:20:d4: 1a:ff:ab:29:4a:fa:d5:f5:7a:88:f9:3b:27:30:dd: a5:b4:e9:ca:1c:6b:71:3f:84:c1:0a:c6:58:c8:06: 01:59:62:34:e6:42:64:43:05:d2:8f:d1:f9:23:a8: fd:dc:5b:a5:dd:53:88:35:c4:13:41:19:0d:f1:98: df:99:4d:d7:c3:c2:36:e9:a8:f7:99:e2:9c:09:82: 12:be:97:ae:2c:2d:82:1b:a7:4c:96:d5:f2:29:56: 75:90:3b:fa:6f:f5:86:ae:a5:e9:75:82:f7:a7:e2: ef:cf:75:92:c0:53:bd:29:3b:8d:e3:8c:e9:75:03: d9:5c:ee:63:8a:e9:b9:a7:e5:0b:5a:c6:f8:40:0a: 57:e4:aa:9e:21:d6:c1:0a:45:ec:4c:48:7f:1a:e3: ff:c6:96:02:00:80:1b:08:cd:10:dc:71:eb:ea:7f: 99:68:9c:4b:dd:87:f9:e8:11:b1:f7:9b:7d:32:20: 4e:d3:0f:ad:28:b6:65:3e:e7:57:d3:f1:ed:70:f8: 5f:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:CD:D5:67:AD:1A:ED:0A:25:7F:B5:68:E8:DE:65:A6:08:41:64:7C X509v3 Authority Key Identifier: keyid:A5:9C:AA:2A:73:68:06:98:B2:C9:E1:A6:C9:64:1A:74:F3:CE:76:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZyqKnNoBpiyyeGmyWQadPPOdug.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/dd672f-5336-4f35-b3ef-ae91ab342be1/1/pZyqKnNoBpiyyeGmyWQadPPOdug.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/dd672f-5336-4f35-b3ef-ae91ab342be1/1/pZyqKnNoBpiyyeGmyWQadPPOdug.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:22:00:55:41:d4:75:a3:dc:82:04:cb:97:76:75:92:ac:b5: 98:7f:1c:c9:c1:cb:0d:ac:7d:37:d5:78:60:4e:85:2b:4c:d2: 58:df:f8:0f:10:63:da:cd:3e:39:b0:f7:bc:39:f0:a4:19:91: 8c:ed:6a:22:ff:7d:d1:4a:70:1f:16:aa:57:e3:cd:06:42:10: 5a:14:8e:64:7d:4e:2b:64:34:27:f4:ea:07:d6:58:df:78:0a: 00:50:c5:bc:88:f8:1b:77:00:ff:dd:ca:43:f0:2c:8a:f3:a5: 2b:44:22:db:cd:4f:e9:4d:1c:b3:89:bb:f4:52:a4:7d:25:cf: b7:f6:c5:6b:d6:23:af:d8:1a:cb:be:16:58:b7:0c:7e:43:6f: 67:9b:a4:2d:ee:25:a8:14:bb:0f:06:dd:88:3b:a5:4c:cb:27: 21:2b:e7:23:2a:2c:37:cd:b9:9c:66:fb:38:e6:2f:e2:08:1b: cd:97:0f:d9:77:97:c7:33:cc:99:de:0f:60:c9:c1:e7:f6:8f: 43:5b:64:6c:87:d0:b3:a7:a9:80:97:05:3f:dd:73:49:2e:74: 9f:92:b2:ab:25:69:af:b6:43:25:d1:38:e1:d4:24:4c:02:29: 47:ab:31:c1:80:13:df:3e:ad:bf:83:8f:98:14:04:09:55:4f: 30:29:87:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtfCgYxRUOmdQ7tQeW04FHvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1OWNhYTJhNzM2ODA2OThiMmM5ZTFhNmM5NjQxYTc0ZjNj ZTc2ZTgwHhcNMjUxMjI3MDkwMDUxWhcNMjUxMjI4MDkwMDUxWjAzMTEwLwYDVQQD EygwOGNkZDU2N2FkMWFlZDBhMjU3ZmI1NjhlOGRlNjVhNjA4NDE2NDdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApiQGTJip0c1ppv5YxiJ4k6t6hFBe /m8DGQTiFO9Jt3xKBKk9npFLJIyco8zmEWjS60qT6hA/ElHwINQa/6spSvrV9XqI +TsnMN2ltOnKHGtxP4TBCsZYyAYBWWI05kJkQwXSj9H5I6j93Ful3VOINcQTQRkN 8ZjfmU3Xw8I26aj3meKcCYISvpeuLC2CG6dMltXyKVZ1kDv6b/WGrqXpdYL3p+Lv z3WSwFO9KTuN44zpdQPZXO5jium5p+ULWsb4QApX5KqeIdbBCkXsTEh/GuP/xpYC AIAbCM0Q3HHr6n+ZaJxL3Yf56BGx95t9MiBO0w+tKLZlPudX0/HtcPhfXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAjN1WetGu0KJX+1aOjeZaYIQWR8MB8GA1UdIwQY MBaAFKWcqipzaAaYssnhpslkGnTzznboMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFp5cUtuTm9CcGl5eWVHbXlXUWFkUFBPZHVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9kZDY3MmYtNTMzNi00ZjM1LWIzZWYt YWU5MWFiMzQyYmUxLzEvcFp5cUtuTm9CcGl5eWVHbXlXUWFkUFBPZHVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9kZDY3MmYtNTMzNi00ZjM1LWIzZWYtYWU5MWFiMzQyYmUx LzEvcFp5cUtuTm9CcGl5eWVHbXlXUWFkUFBPZHVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACyIAVUHU daPcggTLl3Z1kqy1mH8cycHLDax9N9V4YE6FK0zSWN/4DxBj2s0+ObD3vDnwpBmR jO1qIv990UpwHxaqV+PNBkIQWhSOZH1OK2Q0J/TqB9ZY33gKAFDFvIj4G3cA/93K Q/AsivOlK0Qi281P6U0cs4m79FKkfSXPt/bFa9Yjr9gay74WWLcMfkNvZ5ukLe4l qBS7DwbdiDulTMsnISvnIyosN825nGb7OOYv4ggbzZcP2XeXxzPMmd4PYMnB5/aP Q1tkbIfQs6epgJcFP91zSS50n5KyqyVpr7ZDJdE44dQkTAIpR6sxwYAT3z6tv4OP mBQECVVPMCmHlw== -----END CERTIFICATE-----Generated at Sat Dec 27 17:49:53 2025 by rpki-client