This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/e83bb9-a5c2-4774-9ebb-ae327dbe45c9/1/PZ--FcPNteA0NeJM9i8W-2xiOWw.mft File: PZ--FcPNteA0NeJM9i8W-2xiOWw.mft (raw, json) Hash identifier: wv4ziRsWJKIIPuhYNgQbKTEPOtvSsRyHGEjOGNBhN54= Subject key identifier: 11:71:BF:06:71:56:0F:3B:E8:ED:97:84:71:53:F5:D1:EF:0E:A0:FE Authority key identifier: 3D:9F:BE:15:C3:CD:B5:E0:34:35:E2:4C:F6:2F:16:FB:6C:62:39:6C Certificate issuer: /CN=3d9fbe15c3cdb5e03435e24cf62f16fb6c62396c Certificate serial: 019B43928DF70614CA86559DA4E802281DF1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PZ--FcPNteA0NeJM9i8W-2xiOWw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/e83bb9-a5c2-4774-9ebb-ae327dbe45c9/1/PZ--FcPNteA0NeJM9i8W-2xiOWw.mft Manifest number: 178C Signing time: Mon 22 Dec 2025 01:00:36 +0000 Manifest this update: Mon 22 Dec 2025 01:00:36 +0000 Manifest next update: Tue 23 Dec 2025 01:00:36 +0000 Files and hashes: 1: Du4r0IcScgI4YpWJ-9I9INdoB6g.roa (hash: 5uHGYRf/yqBocoz7nK2AWJUng6JU07jGh7qJ3ZcIHek=) 2: PZ--FcPNteA0NeJM9i8W-2xiOWw.crl (hash: ZJz/UvXmPb/FTPJSufwoiHppcTITFNoCmDuNkVtCwtM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/e83bb9-a5c2-4774-9ebb-ae327dbe45c9/1/PZ--FcPNteA0NeJM9i8W-2xiOWw.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/e83bb9-a5c2-4774-9ebb-ae327dbe45c9/1/PZ--FcPNteA0NeJM9i8W-2xiOWw.mft rsync://rpki.ripe.net/repository/DEFAULT/PZ--FcPNteA0NeJM9i8W-2xiOWw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:92:8d:f7:06:14:ca:86:55:9d:a4:e8:02:28:1d:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d9fbe15c3cdb5e03435e24cf62f16fb6c62396c Validity Not Before: Dec 22 01:00:36 2025 GMT Not After : Dec 23 01:00:36 2025 GMT Subject: CN=1171bf0671560f3be8ed97847153f5d1ef0ea0fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:20:76:15:c4:87:d6:f1:a8:4a:54:cd:bd:7a: 70:92:72:2d:01:1a:b5:ba:5c:4e:b2:9e:7d:93:0d: b4:57:57:51:c7:5e:ac:ec:8e:ab:9e:7e:1c:ec:67: 3d:26:e4:a9:0c:12:66:47:4a:a1:03:0d:ff:38:e5: e6:52:3b:c2:38:4c:ad:b8:f4:74:21:d7:ad:6f:fd: 06:e6:b2:11:f9:9a:66:6a:27:cc:2d:ea:68:84:79: 85:6c:2a:d2:7b:ba:8a:03:b1:eb:41:57:b8:f0:cb: e8:b5:ca:98:7c:6d:55:54:48:f9:b6:bb:88:d7:f2: 05:2d:57:98:a7:54:ce:e8:42:09:76:1b:60:f0:56: 2d:53:46:8f:30:93:b6:1a:70:92:e6:ef:78:19:ce: fb:96:05:f8:d4:be:72:54:c6:42:b4:da:83:94:fc: 12:f3:2c:59:b7:57:8e:42:de:ff:3a:2b:d2:b6:1d: 91:31:62:4d:8f:46:95:ef:4d:0f:42:53:02:9d:2d: b0:dd:21:98:33:98:d5:c1:27:b2:c3:21:a3:c8:9e: 23:38:42:c5:70:f7:1b:37:72:83:13:38:be:bc:ff: 7b:e5:20:a5:e3:12:8a:70:7b:5b:5f:d4:8a:59:8c: 64:0d:b8:b5:fb:95:59:47:1a:61:e8:b6:c0:e0:cc: 14:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:71:BF:06:71:56:0F:3B:E8:ED:97:84:71:53:F5:D1:EF:0E:A0:FE X509v3 Authority Key Identifier: keyid:3D:9F:BE:15:C3:CD:B5:E0:34:35:E2:4C:F6:2F:16:FB:6C:62:39:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PZ--FcPNteA0NeJM9i8W-2xiOWw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e83bb9-a5c2-4774-9ebb-ae327dbe45c9/1/PZ--FcPNteA0NeJM9i8W-2xiOWw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e83bb9-a5c2-4774-9ebb-ae327dbe45c9/1/PZ--FcPNteA0NeJM9i8W-2xiOWw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:79:45:97:b5:5c:8a:65:b9:df:5d:fa:61:1d:c0:04:8c:92: 78:5d:76:06:76:d2:08:5b:e3:69:80:a1:12:aa:d7:41:0a:a1: fe:16:00:93:7f:b1:88:e8:88:17:70:37:d2:3f:92:a3:db:3a: fc:fd:21:6b:26:79:19:7d:eb:46:18:d3:19:8f:7f:95:ef:14: 7f:7c:31:5f:53:b8:94:56:b7:fa:8d:4d:dc:7f:aa:e1:5d:a6: a9:c5:11:01:3d:1c:7a:3b:96:f2:e4:16:ec:f9:5f:c1:a0:32: c0:85:9a:df:79:01:c9:94:32:ff:de:08:19:3b:46:98:a0:aa: 13:d3:fb:49:da:b6:87:e9:97:48:6f:f4:9f:e7:cb:0a:fb:a5: 23:e0:bd:71:3f:de:cc:7f:47:16:98:dc:c7:7c:ca:25:2c:2b: 16:26:e5:60:48:4f:ed:09:fa:40:dc:43:ec:ab:58:cf:85:d5: 57:b2:4d:25:2d:48:28:8d:08:82:54:72:46:cd:ad:f8:7a:88: 99:33:e5:c4:b5:a1:ff:2e:88:f1:a1:e4:3b:0d:b1:f9:20:6f: 4a:81:c6:9a:f3:2b:12:ff:87:30:98:b0:22:ed:18:ec:7e:18: 4e:36:71:64:eb:08:1f:08:91:f9:39:47:2a:c1:77:1d:eb:2d: 89:8f:3c:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDko33BhTKhlWdpOgCKB3xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkOWZiZTE1YzNjZGI1ZTAzNDM1ZTI0Y2Y2MmYxNmZiNmM2 MjM5NmMwHhcNMjUxMjIyMDEwMDM2WhcNMjUxMjIzMDEwMDM2WjAzMTEwLwYDVQQD EygxMTcxYmYwNjcxNTYwZjNiZThlZDk3ODQ3MTUzZjVkMWVmMGVhMGZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSB2FcSH1vGoSlTNvXpwknItARq1 ulxOsp59kw20V1dRx16s7I6rnn4c7Gc9JuSpDBJmR0qhAw3/OOXmUjvCOEytuPR0 Idetb/0G5rIR+ZpmaifMLepohHmFbCrSe7qKA7HrQVe48MvotcqYfG1VVEj5truI 1/IFLVeYp1TO6EIJdhtg8FYtU0aPMJO2GnCS5u94Gc77lgX41L5yVMZCtNqDlPwS 8yxZt1eOQt7/OivSth2RMWJNj0aV700PQlMCnS2w3SGYM5jVwSeywyGjyJ4jOELF cPcbN3KDEzi+vP975SCl4xKKcHtbX9SKWYxkDbi1+5VZRxph6LbA4MwUvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBFxvwZxVg876O2XhHFT9dHvDqD+MB8GA1UdIwQY MBaAFD2fvhXDzbXgNDXiTPYvFvtsYjlsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFotLUZjUE50ZUEwTmVKTTlpOFctMnhpT1d3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9lODNiYjktYTVjMi00Nzc0LTllYmIt YWUzMjdkYmU0NWM5LzEvUFotLUZjUE50ZUEwTmVKTTlpOFctMnhpT1d3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9lODNiYjktYTVjMi00Nzc0LTllYmItYWUzMjdkYmU0NWM5 LzEvUFotLUZjUE50ZUEwTmVKTTlpOFctMnhpT1d3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUnlFl7Vc imW53136YR3ABIySeF12BnbSCFvjaYChEqrXQQqh/hYAk3+xiOiIF3A30j+So9s6 /P0hayZ5GX3rRhjTGY9/le8Uf3wxX1O4lFa3+o1N3H+q4V2mqcURAT0cejuW8uQW 7PlfwaAywIWa33kByZQy/94IGTtGmKCqE9P7Sdq2h+mXSG/0n+fLCvulI+C9cT/e zH9HFpjcx3zKJSwrFiblYEhP7Qn6QNxD7KtYz4XVV7JNJS1IKI0IglRyRs2t+HqI mTPlxLWh/y6I8aHkOw2x+SBvSoHGmvMrEv+HMJiwIu0Y7H4YTjZxZOsIHwiR+TlH KsF3HestiY88rQ== -----END CERTIFICATE-----Generated at Mon Dec 22 03:57:34 2025 by rpki-client