This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft File: pCzz6j9GGa3XsfheXbx2jNPRdC0.mft (raw, json) Hash identifier: vxgdVUJFYH7jje6LGFFCYH6UfB8pBaHT2jDbsWRkhyA= Subject key identifier: CA:36:EA:EB:F3:35:66:7A:64:5A:4E:25:EE:23:70:4A:7D:7E:F0:2B Authority key identifier: A4:2C:F3:EA:3F:46:19:AD:D7:B1:F8:5E:5D:BC:76:8C:D3:D1:74:2D Certificate issuer: /CN=a42cf3ea3f4619add7b1f85e5dbc768cd3d1742d Certificate serial: 019B3DC7C66401FCFACE3E5297865A265BFA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pCzz6j9GGa3XsfheXbx2jNPRdC0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 22:01:01 +0000 Manifest this update: Sat 20 Dec 2025 22:01:01 +0000 Manifest next update: Sun 21 Dec 2025 22:01:01 +0000 Files and hashes: 1: SNV_1VpgwAmnXneSKWb5jRq8ToE.roa (hash: WATnXIVshclXFF3TBwoPfH1QR7+uJEv7hk540ZBWOkc=) 2: lVzggsEuwHNUmwDhZ4XQcolHpDk.roa (hash: eA/BupKOc3qojEoZ8E13TwJIMViSsM3/KaYEEgTR1Jc=) 3: pCzz6j9GGa3XsfheXbx2jNPRdC0.crl (hash: gDHgpDNqSKjd6DCCbrCzarOZ0TOhqSFoP2PJ3DVsYpY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft rsync://rpki.ripe.net/repository/DEFAULT/pCzz6j9GGa3XsfheXbx2jNPRdC0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:c6:64:01:fc:fa:ce:3e:52:97:86:5a:26:5b:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a42cf3ea3f4619add7b1f85e5dbc768cd3d1742d Validity Not Before: Dec 20 22:01:01 2025 GMT Not After : Dec 21 22:01:01 2025 GMT Subject: CN=ca36eaebf335667a645a4e25ee23704a7d7ef02b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:b0:4d:84:11:d5:22:fd:b8:38:06:84:24:59: 4e:34:d8:25:ed:5a:d6:4e:e1:0c:da:34:53:15:b5: 77:68:c2:d0:fc:24:03:77:c8:61:2e:08:96:b3:a1: 47:78:ae:2f:2c:be:2e:ee:2a:c4:bc:3b:61:d2:e7: eb:99:16:83:00:dd:8a:3e:de:91:a0:8d:57:61:79: b3:65:7f:0d:94:ca:93:11:3b:6a:eb:d2:03:96:b8: 6c:53:f9:bf:96:9c:87:4e:2f:68:32:1e:35:60:1a: 7a:ef:8b:a9:59:3c:21:81:f2:f5:3c:83:b0:ae:d6: 5c:37:29:fe:10:d1:09:c7:e6:4e:38:b7:7c:4a:53: 0d:0e:a0:67:ec:0d:ed:1d:ce:e6:17:f9:ad:34:b5: cd:9d:ef:08:13:e3:30:a0:5a:5b:5f:c8:f7:f7:8a: 62:d9:2d:7d:d0:46:88:f9:10:57:6a:18:ab:8d:29: 38:f5:0e:ad:41:a8:fc:98:dd:46:c4:ba:39:17:d7: 34:67:59:95:6a:69:76:38:ca:f4:b0:e8:2c:d6:6e: f2:7d:98:15:c2:d5:11:03:90:38:88:8b:e1:85:eb: 22:2a:b6:3e:c0:35:82:e2:76:75:fd:89:9d:31:ff: 24:f4:b4:42:1a:81:37:6a:99:9f:61:a2:05:dd:16: c5:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:36:EA:EB:F3:35:66:7A:64:5A:4E:25:EE:23:70:4A:7D:7E:F0:2B X509v3 Authority Key Identifier: keyid:A4:2C:F3:EA:3F:46:19:AD:D7:B1:F8:5E:5D:BC:76:8C:D3:D1:74:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pCzz6j9GGa3XsfheXbx2jNPRdC0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:0d:6c:14:d1:7a:3a:05:33:1f:56:81:f1:86:7f:36:00:12: bc:f0:36:d6:38:5b:32:b5:1b:55:54:15:9d:58:bb:1d:15:1c: a4:ca:57:07:7c:7a:4e:97:1f:e8:7a:ae:c8:2e:7e:be:be:df: 4f:15:e7:bc:8b:10:da:41:89:b4:8e:82:4f:11:ef:ea:5d:f1: 37:e2:eb:14:cb:ce:c6:08:bd:0a:f3:dd:0d:8d:62:73:c0:a7: 45:59:50:56:69:db:31:97:b4:e7:f1:68:91:18:e8:60:81:9d: b4:f2:ae:0b:ba:00:05:7a:e5:f7:b2:86:e7:3f:15:15:8f:7f: ef:0c:1b:3a:3f:46:36:8b:8e:51:30:dd:e5:3b:9a:a9:09:79: 1b:c6:12:dc:9f:ac:ff:3b:85:0c:54:90:ab:bf:10:04:46:9b: 93:92:54:6a:cd:2c:27:be:a3:09:ae:fe:87:16:22:ea:ca:7e: 0d:2a:10:30:4b:8c:d6:ef:a8:06:3a:bb:4c:65:bf:14:2a:eb: e4:8d:cc:21:68:94:2e:0a:2d:61:9c:f7:11:a2:05:ff:23:23: 15:aa:c8:0a:8a:98:6a:18:61:a8:21:f1:e8:ea:72:cf:82:d0: a3:33:fb:cb:8c:50:b2:52:61:c3:d0:0c:1b:3b:fd:e2:8c:b1: 3a:ce:3e:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x8ZkAfz6zj5Sl4ZaJlv6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0MmNmM2VhM2Y0NjE5YWRkN2IxZjg1ZTVkYmM3NjhjZDNk MTc0MmQwHhcNMjUxMjIwMjIwMTAxWhcNMjUxMjIxMjIwMTAxWjAzMTEwLwYDVQQD EyhjYTM2ZWFlYmYzMzU2NjdhNjQ1YTRlMjVlZTIzNzA0YTdkN2VmMDJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7BNhBHVIv24OAaEJFlONNgl7VrW TuEM2jRTFbV3aMLQ/CQDd8hhLgiWs6FHeK4vLL4u7irEvDth0ufrmRaDAN2KPt6R oI1XYXmzZX8NlMqTETtq69IDlrhsU/m/lpyHTi9oMh41YBp674upWTwhgfL1PIOw rtZcNyn+ENEJx+ZOOLd8SlMNDqBn7A3tHc7mF/mtNLXNne8IE+MwoFpbX8j394pi 2S190EaI+RBXahirjSk49Q6tQaj8mN1GxLo5F9c0Z1mVaml2OMr0sOgs1m7yfZgV wtURA5A4iIvhhesiKrY+wDWC4nZ1/YmdMf8k9LRCGoE3apmfYaIF3RbF3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMo26uvzNWZ6ZFpOJe4jcEp9fvArMB8GA1UdIwQY MBaAFKQs8+o/Rhmt17H4Xl28dozT0XQtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEN6ejZqOUdHYTNYc2ZoZVhieDJqTlBSZEMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC81NzI2OWItMGY3MC00NmNmLWJjZTIt Yzc3NzUxNTlmYzgyLzEvcEN6ejZqOUdHYTNYc2ZoZVhieDJqTlBSZEMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC81NzI2OWItMGY3MC00NmNmLWJjZTItYzc3NzUxNTlmYzgy LzEvcEN6ejZqOUdHYTNYc2ZoZVhieDJqTlBSZEMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeg1sFNF6 OgUzH1aB8YZ/NgASvPA21jhbMrUbVVQVnVi7HRUcpMpXB3x6Tpcf6HquyC5+vr7f TxXnvIsQ2kGJtI6CTxHv6l3xN+LrFMvOxgi9CvPdDY1ic8CnRVlQVmnbMZe05/Fo kRjoYIGdtPKuC7oABXrl97KG5z8VFY9/7wwbOj9GNouOUTDd5TuaqQl5G8YS3J+s /zuFDFSQq78QBEabk5JUas0sJ76jCa7+hxYi6sp+DSoQMEuM1u+oBjq7TGW/FCrr 5I3MIWiULgotYZz3EaIF/yMjFarICoqYahhhqCHx6Opyz4LQozP7y4xQslJhw9AM Gzv94oyxOs4+aQ== -----END CERTIFICATE-----Generated at Sun Dec 21 02:26:57 2025 by rpki-client