This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/cf0072-10d7-4759-80f6-4296937c9d94/1/pcznkWx6-mSVMqe4KaRZ1u5eNrw.mft File: pcznkWx6-mSVMqe4KaRZ1u5eNrw.mft (raw, json) Hash identifier: NhYCfau/yeHhPTeMk8aEDX10GQ/UeDAOJvMZQRGoS/k= Subject key identifier: D1:4D:13:8D:A4:D5:C3:13:8F:08:0B:63:C5:AD:A5:B5:6B:D9:74:06 Authority key identifier: A5:CC:E7:91:6C:7A:FA:64:95:32:A7:B8:29:A4:59:D6:EE:5E:36:BC Certificate issuer: /CN=a5cce7916c7afa649532a7b829a459d6ee5e36bc Certificate serial: 019B5CE4E81CFF07D2985680982DDC9213E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcznkWx6-mSVMqe4KaRZ1u5eNrw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/cf0072-10d7-4759-80f6-4296937c9d94/1/pcznkWx6-mSVMqe4KaRZ1u5eNrw.mft Manifest number: 1799 Signing time: Fri 26 Dec 2025 23:01:04 +0000 Manifest this update: Fri 26 Dec 2025 23:01:04 +0000 Manifest next update: Sat 27 Dec 2025 23:01:04 +0000 Files and hashes: 1: LfvParklu0gxciTOgFZh-BpaZYE.roa (hash: fxMbCosgtYcMMEyUONm7A6ez+akqjsDq1R4iKueGkms=) 2: pcznkWx6-mSVMqe4KaRZ1u5eNrw.crl (hash: SbRY159cuoS9SvlCm+8ODioa2yW3jlXyNfFOTyqZrVg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/cf0072-10d7-4759-80f6-4296937c9d94/1/pcznkWx6-mSVMqe4KaRZ1u5eNrw.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/cf0072-10d7-4759-80f6-4296937c9d94/1/pcznkWx6-mSVMqe4KaRZ1u5eNrw.mft rsync://rpki.ripe.net/repository/DEFAULT/pcznkWx6-mSVMqe4KaRZ1u5eNrw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5c:e4:e8:1c:ff:07:d2:98:56:80:98:2d:dc:92:13:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5cce7916c7afa649532a7b829a459d6ee5e36bc Validity Not Before: Dec 26 23:01:04 2025 GMT Not After : Dec 27 23:01:04 2025 GMT Subject: CN=d14d138da4d5c3138f080b63c5ada5b56bd97406 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:d7:5e:91:b5:24:33:70:e9:b0:c4:21:6e:17: 64:cd:42:9e:bb:ab:72:c2:ea:22:bd:39:1e:f3:4e: 7f:63:79:ee:4f:35:12:f1:37:c4:0f:90:bf:e3:be: fb:d3:ea:ae:93:db:31:de:f7:95:78:d8:55:60:54: f6:19:5b:cb:ce:6e:3d:3d:22:f0:9f:43:31:8d:f8: d9:67:3d:02:da:d2:5c:f8:63:77:da:58:bb:9a:e0: a0:de:61:48:67:42:f7:ae:f3:b0:c5:15:20:fc:8c: 73:84:da:77:da:e6:78:aa:ad:0f:1a:4b:f8:9b:23: 05:64:6e:34:51:a3:5e:2b:0c:17:e0:08:b8:4c:0e: cd:d6:96:3c:69:bb:b7:dc:84:57:68:11:4b:a6:ca: d1:b4:b3:34:d6:6f:e1:1f:3b:dc:ea:f4:26:69:20: d8:75:73:b7:bd:07:06:72:ac:c2:6a:00:f1:84:a1: 8f:b6:c5:47:6e:08:31:fd:6d:41:4d:c2:89:f1:21: ba:1f:55:c5:c3:79:bb:73:f5:41:ca:98:78:96:09: 03:f1:03:14:a4:11:67:3c:06:fb:27:24:d1:12:00: f8:66:e2:fb:8e:94:68:77:38:ca:cf:8c:5f:68:55: 6c:98:e2:6e:44:d5:bf:e7:0b:4b:1f:a1:15:c4:b6: 53:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:4D:13:8D:A4:D5:C3:13:8F:08:0B:63:C5:AD:A5:B5:6B:D9:74:06 X509v3 Authority Key Identifier: keyid:A5:CC:E7:91:6C:7A:FA:64:95:32:A7:B8:29:A4:59:D6:EE:5E:36:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcznkWx6-mSVMqe4KaRZ1u5eNrw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/cf0072-10d7-4759-80f6-4296937c9d94/1/pcznkWx6-mSVMqe4KaRZ1u5eNrw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/cf0072-10d7-4759-80f6-4296937c9d94/1/pcznkWx6-mSVMqe4KaRZ1u5eNrw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:4d:4e:3b:26:4b:96:34:eb:ca:22:86:10:b7:c6:da:69:81: 64:8e:26:d9:0f:27:99:d0:4f:4f:1a:ab:90:9e:05:ee:75:8d: 1c:69:bd:65:58:bd:bf:71:03:a3:82:fb:70:0e:be:22:59:cb: d3:fd:98:0b:15:78:17:f2:49:5b:a7:d3:2c:e8:e4:84:ef:ab: 8a:b1:3e:9d:75:4f:45:87:5b:d1:11:c3:b5:f9:04:13:60:91: 7f:69:ac:b9:c3:2d:e2:28:f6:d6:2f:43:6e:12:3c:7f:da:55: 53:13:3d:b8:9d:e1:6c:dc:75:30:b4:d9:8b:8a:0e:ac:38:7e: 2b:e1:af:2f:75:06:c9:db:7b:2d:0a:8d:f2:a8:85:1e:e5:61: db:93:5b:3f:59:37:ed:5e:70:04:7a:49:1a:1b:30:0b:f5:56: 59:57:d1:10:b7:fe:0e:d8:89:f9:f0:d9:33:e7:e9:de:b1:e5: a1:c2:b7:3e:14:f7:dd:7e:fd:52:15:01:8a:26:36:5a:48:18: 93:5d:7a:d3:88:4f:fe:67:a8:cc:82:73:8e:c9:45:ff:36:d8: dc:4c:a3:59:01:62:35:7b:de:58:86:0c:24:01:76:e0:d8:54: 39:c3:d6:6b:b6:e2:30:eb:c7:a6:5c:ff:16:a3:dc:e0:5c:85: 79:04:c8:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtc5Ogc/wfSmFaAmC3ckhPlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1Y2NlNzkxNmM3YWZhNjQ5NTMyYTdiODI5YTQ1OWQ2ZWU1 ZTM2YmMwHhcNMjUxMjI2MjMwMTA0WhcNMjUxMjI3MjMwMTA0WjAzMTEwLwYDVQQD EyhkMTRkMTM4ZGE0ZDVjMzEzOGYwODBiNjNjNWFkYTViNTZiZDk3NDA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1NdekbUkM3DpsMQhbhdkzUKeu6ty wuoivTke805/Y3nuTzUS8TfED5C/47770+quk9sx3veVeNhVYFT2GVvLzm49PSLw n0MxjfjZZz0C2tJc+GN32li7muCg3mFIZ0L3rvOwxRUg/IxzhNp32uZ4qq0PGkv4 myMFZG40UaNeKwwX4Ai4TA7N1pY8abu33IRXaBFLpsrRtLM01m/hHzvc6vQmaSDY dXO3vQcGcqzCagDxhKGPtsVHbggx/W1BTcKJ8SG6H1XFw3m7c/VByph4lgkD8QMU pBFnPAb7JyTREgD4ZuL7jpRodzjKz4xfaFVsmOJuRNW/5wtLH6EVxLZTiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNFNE42k1cMTjwgLY8WtpbVr2XQGMB8GA1UdIwQY MBaAFKXM55FsevpklTKnuCmkWdbuXja8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGN6bmtXeDYtbVNWTXFlNEthUloxdTVlTnJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9jZjAwNzItMTBkNy00NzU5LTgwZjYt NDI5NjkzN2M5ZDk0LzEvcGN6bmtXeDYtbVNWTXFlNEthUloxdTVlTnJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS9jZjAwNzItMTBkNy00NzU5LTgwZjYtNDI5NjkzN2M5ZDk0 LzEvcGN6bmtXeDYtbVNWTXFlNEthUloxdTVlTnJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoE1OOyZL ljTryiKGELfG2mmBZI4m2Q8nmdBPTxqrkJ4F7nWNHGm9ZVi9v3EDo4L7cA6+IlnL 0/2YCxV4F/JJW6fTLOjkhO+rirE+nXVPRYdb0RHDtfkEE2CRf2msucMt4ij21i9D bhI8f9pVUxM9uJ3hbNx1MLTZi4oOrDh+K+GvL3UGydt7LQqN8qiFHuVh25NbP1k3 7V5wBHpJGhswC/VWWVfRELf+DtiJ+fDZM+fp3rHlocK3PhT33X79UhUBiiY2WkgY k11604hP/meozIJzjslF/zbY3EyjWQFiNXveWIYMJAF24NhUOcPWa7biMOvHplz/ FqPc4FyFeQTIwQ== -----END CERTIFICATE-----Generated at Sat Dec 27 02:34:43 2025 by rpki-client