This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.mft File: Pznde9c8PhuifReNVcJvipbNtKk.mft (raw, json) Hash identifier: tU6fSL56MjnmnxCChOixewzri3i55+aC0PN6FHXZ/bk= Subject key identifier: 7F:09:99:75:2E:3A:01:F4:94:7B:CC:D5:EF:71:38:A3:2B:35:86:68 Authority key identifier: 3F:39:DD:7B:D7:3C:3E:1B:A2:7D:17:8D:55:C2:6F:8A:96:CD:B4:A9 Certificate issuer: /CN=3f39dd7bd73c3e1ba27d178d55c26f8a96cdb4a9 Certificate serial: 019B4513F9D61A09CAB6853FD67A305AD1D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pznde9c8PhuifReNVcJvipbNtKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.mft Manifest number: 178F Signing time: Mon 22 Dec 2025 08:01:35 +0000 Manifest this update: Mon 22 Dec 2025 08:01:35 +0000 Manifest next update: Tue 23 Dec 2025 08:01:35 +0000 Files and hashes: 1: Is-TnbCqT0sZMmHzE0DOERlyuyA.roa (hash: ZwxuieDg5KwfHUePylCdnkHIJ18zptrPuU4i92UJi24=) 2: Ng8LWoHpOFI_Feu0HqtCDWsTm2U.roa (hash: T0h4+Xqtg7Y1viZ/7IiB5TqFGqH+QZrG/sWcCxZLrOw=) 3: Pznde9c8PhuifReNVcJvipbNtKk.crl (hash: 2e6SoBgBQUgf3a6U9wAj5X/vnj7xPd4jQnUR105CWDs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.mft rsync://rpki.ripe.net/repository/DEFAULT/Pznde9c8PhuifReNVcJvipbNtKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 08:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:13:f9:d6:1a:09:ca:b6:85:3f:d6:7a:30:5a:d1:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f39dd7bd73c3e1ba27d178d55c26f8a96cdb4a9 Validity Not Before: Dec 22 08:01:35 2025 GMT Not After : Dec 23 08:01:35 2025 GMT Subject: CN=7f0999752e3a01f4947bccd5ef7138a32b358668 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f9:de:a4:7e:36:31:58:15:2d:1c:ea:87:d6: 51:58:ea:9f:1a:5e:a6:02:f0:59:3c:0c:93:60:31: 67:b4:b3:34:4e:1f:4d:b9:8d:0a:15:68:3d:f5:cc: 07:ad:a1:0b:8c:28:6f:15:52:a0:95:7a:4f:26:4c: 86:ed:7b:2c:83:45:4c:e4:21:e7:9d:cc:58:a1:71: 69:d2:28:f8:bd:ee:b5:69:4d:9d:b1:60:e8:f9:02: 6c:b3:c8:ca:5d:7d:44:1b:64:99:1a:9d:14:88:29: 10:b4:b2:ed:82:45:10:74:4e:f8:6a:54:31:ee:51: 4e:22:7a:95:65:23:ae:10:ea:44:52:f5:93:0c:19: 75:99:4d:00:b3:9f:a8:8e:cb:2f:3b:6e:2d:c5:3d: 0a:5c:f5:46:be:67:e8:df:a7:1e:aa:4a:16:7a:a0: 25:12:1e:5b:4b:7c:af:a2:32:76:2c:39:28:23:2f: 76:b9:e2:e8:7c:96:4a:7b:54:75:11:f4:97:6b:6b: 63:6b:87:f6:7c:b7:01:27:68:b5:78:13:bd:67:30: e0:16:72:43:33:bf:0b:cc:38:6f:d0:e8:0a:28:b2: 1f:49:0c:20:c9:5b:5d:4f:c9:b5:49:31:d4:7f:e9: 5b:13:78:e7:ec:9e:cd:66:45:fd:06:be:07:0d:af: 05:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:09:99:75:2E:3A:01:F4:94:7B:CC:D5:EF:71:38:A3:2B:35:86:68 X509v3 Authority Key Identifier: keyid:3F:39:DD:7B:D7:3C:3E:1B:A2:7D:17:8D:55:C2:6F:8A:96:CD:B4:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pznde9c8PhuifReNVcJvipbNtKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:9c:1f:2c:99:15:1b:95:b5:e9:70:da:f1:5e:c4:bb:b4:19: 5b:f9:fc:64:8a:59:da:f0:fa:12:9e:72:a5:22:a8:8c:aa:3b: 22:1f:9c:eb:58:c7:dd:51:08:70:f9:4a:8b:aa:7b:44:a4:93: 89:a4:84:9e:81:1b:36:8b:b3:82:cf:ba:f1:c2:f2:98:5e:fe: eb:a1:4f:35:57:83:76:b4:18:f8:02:d1:90:d1:b3:2c:8a:d2: e9:00:50:4e:93:68:ff:17:e5:b3:5b:b6:0a:28:14:42:a4:ec: 9c:c3:78:c5:1a:31:75:0e:f6:4a:37:aa:59:2e:a7:b2:02:97: 69:05:02:ff:04:0c:0a:83:5e:e4:26:38:02:b4:76:34:3a:24: fb:59:d8:52:19:0d:9a:76:56:ce:3a:b5:86:ed:d6:0b:5b:f4: d5:0c:b6:d0:05:57:f2:cc:e7:9c:9f:a1:e7:99:34:5c:7f:46: 5b:d5:fa:38:f0:e6:01:03:21:21:42:bf:fc:91:c3:fd:19:6c: 4c:8d:fc:be:85:03:e3:13:31:03:e0:5a:1e:3e:8a:c3:d7:48: cb:ad:e6:b6:c6:74:be:85:d2:c2:d1:f0:15:fc:5e:31:90:34: 7d:4f:3b:be:4a:55:58:0d:4b:1a:e0:d8:9c:36:68:7a:67:5f: 05:7d:7f:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFE/nWGgnKtoU/1nowWtHWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmMzlkZDdiZDczYzNlMWJhMjdkMTc4ZDU1YzI2ZjhhOTZj ZGI0YTkwHhcNMjUxMjIyMDgwMTM1WhcNMjUxMjIzMDgwMTM1WjAzMTEwLwYDVQQD Eyg3ZjA5OTk3NTJlM2EwMWY0OTQ3YmNjZDVlZjcxMzhhMzJiMzU4NjY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvnepH42MVgVLRzqh9ZRWOqfGl6m AvBZPAyTYDFntLM0Th9NuY0KFWg99cwHraELjChvFVKglXpPJkyG7Xssg0VM5CHn ncxYoXFp0ij4ve61aU2dsWDo+QJss8jKXX1EG2SZGp0UiCkQtLLtgkUQdE74alQx 7lFOInqVZSOuEOpEUvWTDBl1mU0As5+ojssvO24txT0KXPVGvmfo36ceqkoWeqAl Eh5bS3yvojJ2LDkoIy92ueLofJZKe1R1EfSXa2tja4f2fLcBJ2i1eBO9ZzDgFnJD M78LzDhv0OgKKLIfSQwgyVtdT8m1STHUf+lbE3jn7J7NZkX9Br4HDa8FqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH8JmXUuOgH0lHvM1e9xOKMrNYZoMB8GA1UdIwQY MBaAFD853XvXPD4bon0XjVXCb4qWzbSpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHpuZGU5YzhQaHVpZlJlTlZjSnZpcGJOdEtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi82MjFlZGQtMWI1YS00NmFjLWJhMTMt MDRmOWU2MTZhZjYwLzEvUHpuZGU5YzhQaHVpZlJlTlZjSnZpcGJOdEtrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi82MjFlZGQtMWI1YS00NmFjLWJhMTMtMDRmOWU2MTZhZjYw LzEvUHpuZGU5YzhQaHVpZlJlTlZjSnZpcGJOdEtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIpwfLJkV G5W16XDa8V7Eu7QZW/n8ZIpZ2vD6Ep5ypSKojKo7Ih+c61jH3VEIcPlKi6p7RKST iaSEnoEbNouzgs+68cLymF7+66FPNVeDdrQY+ALRkNGzLIrS6QBQTpNo/xfls1u2 CigUQqTsnMN4xRoxdQ72SjeqWS6nsgKXaQUC/wQMCoNe5CY4ArR2NDok+1nYUhkN mnZWzjq1hu3WC1v01Qy20AVX8sznnJ+h55k0XH9GW9X6OPDmAQMhIUK//JHD/Rls TI38voUD4xMxA+BaHj6Kw9dIy63mtsZ0voXSwtHwFfxeMZA0fU87vkpVWA1LGuDY nDZoemdfBX1/vA== -----END CERTIFICATE-----Generated at Mon Dec 22 14:29:30 2025 by rpki-client