This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.mft File: PZQks8jnL3RqWesZlFWqNkajpFc.mft (raw, json) Hash identifier: 5bVOB6X29YUZCoLyfY4cHkpuxjlIYmPuS+0ReLIBm+0= Subject key identifier: 16:A2:19:74:88:12:86:30:B3:90:46:8B:54:FE:06:46:51:36:87:0B Authority key identifier: 3D:94:24:B3:C8:E7:2F:74:6A:59:EB:19:94:55:AA:36:46:A3:A4:57 Certificate issuer: /CN=3d9424b3c8e72f746a59eb199455aa3646a3a457 Certificate serial: 019B50AA306E1909A9A7E8448D4E4BC637DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PZQks8jnL3RqWesZlFWqNkajpFc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.mft Manifest number: 1793 Signing time: Wed 24 Dec 2025 14:01:29 +0000 Manifest this update: Wed 24 Dec 2025 14:01:29 +0000 Manifest next update: Thu 25 Dec 2025 14:01:29 +0000 Files and hashes: 1: PZQks8jnL3RqWesZlFWqNkajpFc.crl (hash: TiUEfEJriXKxJQ71tKv2rj8xLPhRiq2N58zIPl9YkXk=) 2: QIZ7oB864tCgRt_o70Ipdd0FOK0.roa (hash: m8Sbl87AQlvrLt/hOAausP00tdMD076gdUCeqvLuA8c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.mft rsync://rpki.ripe.net/repository/DEFAULT/PZQks8jnL3RqWesZlFWqNkajpFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:aa:30:6e:19:09:a9:a7:e8:44:8d:4e:4b:c6:37:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d9424b3c8e72f746a59eb199455aa3646a3a457 Validity Not Before: Dec 24 14:01:29 2025 GMT Not After : Dec 25 14:01:29 2025 GMT Subject: CN=16a2197488128630b390468b54fe06465136870b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:38:31:f9:fd:0b:ff:d2:2c:d3:ed:04:e2:32: 84:46:d0:a1:16:62:12:19:07:8b:b6:41:38:75:b0: 4d:91:29:ba:2c:99:96:84:35:83:b3:e7:3f:34:a2: 7f:2f:00:e5:4a:32:bf:bd:b5:8d:13:e7:0a:5e:9d: b8:6e:1b:71:c7:92:b8:b4:85:5c:fe:fc:e4:02:47: cb:30:8d:39:be:d5:a7:7f:91:85:fe:ce:ab:99:86: 2f:6f:00:d6:e9:05:e1:e7:c8:a2:7d:48:57:90:4b: 8c:15:db:a4:12:ef:a2:e3:63:eb:c7:62:16:7d:d2: 84:42:bb:e8:51:e9:12:fc:86:71:eb:61:fa:93:f0: f4:61:e2:f4:94:06:28:50:c4:5c:f5:3a:18:f0:37: 05:32:e0:dc:7d:df:19:6e:57:c1:cd:64:ef:89:cb: 33:c4:cb:c6:94:df:b9:5f:9d:e0:91:1e:c7:27:f4: 73:a9:ec:cb:61:32:a9:8e:1e:85:68:86:06:77:85: 2b:c8:2d:91:6b:30:eb:d9:32:52:44:44:2e:5a:f4: 23:be:7e:a5:1f:3b:dd:5c:7d:d3:19:8d:24:8e:6f: ed:58:18:7f:cb:82:89:e8:5d:8d:c9:93:bf:f4:40: 51:3e:84:32:38:7c:5f:54:b2:eb:81:84:38:7e:7e: a9:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:A2:19:74:88:12:86:30:B3:90:46:8B:54:FE:06:46:51:36:87:0B X509v3 Authority Key Identifier: keyid:3D:94:24:B3:C8:E7:2F:74:6A:59:EB:19:94:55:AA:36:46:A3:A4:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PZQks8jnL3RqWesZlFWqNkajpFc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:6b:5f:7d:b3:12:14:14:7b:17:71:6a:7f:46:ec:34:7b:79: f2:8a:58:cb:b1:4b:21:0d:a1:76:8d:13:a9:8e:0a:91:36:29: df:67:46:28:ae:4f:c4:a0:0e:f8:46:cd:52:ec:0a:b9:38:f2: 58:d8:bb:05:c4:12:4f:b0:22:32:66:92:44:f9:16:69:4d:05: 2c:85:00:ea:28:9b:99:ac:e4:4c:69:07:99:de:02:59:7c:45: 7c:5e:1b:1d:bc:5a:56:91:5f:98:c3:2b:5c:ea:4a:4d:93:37: d2:62:9c:7f:62:af:5e:24:61:59:30:54:a4:d2:aa:8c:d7:ae: a9:c3:d2:aa:ba:88:33:9d:01:c3:8a:cd:be:30:d3:f4:a9:ce: a5:15:56:9b:81:8d:11:f6:1e:fb:a2:23:80:e0:c7:1a:34:53: 29:07:e6:d0:37:d6:d4:ea:2e:2f:37:39:5f:db:6a:86:10:be: 6c:21:3f:f5:b5:20:db:6f:75:ba:06:28:67:43:de:77:f4:85: 34:7b:e4:0e:1a:23:bd:e5:d4:23:70:4e:d7:98:ce:18:03:51: 8e:88:73:3f:71:70:77:78:b8:de:ec:af:45:42:2f:d5:56:67: d0:b9:40:b9:dc:6f:83:7c:d9:d4:9f:c4:92:9d:56:b8:84:3c: 4c:a7:39:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQqjBuGQmpp+hEjU5LxjfcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkOTQyNGIzYzhlNzJmNzQ2YTU5ZWIxOTk0NTVhYTM2NDZh M2E0NTcwHhcNMjUxMjI0MTQwMTI5WhcNMjUxMjI1MTQwMTI5WjAzMTEwLwYDVQQD EygxNmEyMTk3NDg4MTI4NjMwYjM5MDQ2OGI1NGZlMDY0NjUxMzY4NzBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzgx+f0L/9Is0+0E4jKERtChFmIS GQeLtkE4dbBNkSm6LJmWhDWDs+c/NKJ/LwDlSjK/vbWNE+cKXp24bhtxx5K4tIVc /vzkAkfLMI05vtWnf5GF/s6rmYYvbwDW6QXh58iifUhXkEuMFdukEu+i42Prx2IW fdKEQrvoUekS/IZx62H6k/D0YeL0lAYoUMRc9ToY8DcFMuDcfd8ZblfBzWTvicsz xMvGlN+5X53gkR7HJ/RzqezLYTKpjh6FaIYGd4UryC2RazDr2TJSREQuWvQjvn6l HzvdXH3TGY0kjm/tWBh/y4KJ6F2NyZO/9EBRPoQyOHxfVLLrgYQ4fn6pewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBaiGXSIEoYws5BGi1T+BkZRNocLMB8GA1UdIwQY MBaAFD2UJLPI5y90alnrGZRVqjZGo6RXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFpRa3M4am5MM1JxV2VzWmxGV3FOa2FqcEZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9kZjI5NDctY2QwNS00NDA1LTk0OWEt NmE4MDMzZGNiZTFjLzEvUFpRa3M4am5MM1JxV2VzWmxGV3FOa2FqcEZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9kZjI5NDctY2QwNS00NDA1LTk0OWEtNmE4MDMzZGNiZTFj LzEvUFpRa3M4am5MM1JxV2VzWmxGV3FOa2FqcEZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAamtffbMS FBR7F3Fqf0bsNHt58opYy7FLIQ2hdo0TqY4KkTYp32dGKK5PxKAO+EbNUuwKuTjy WNi7BcQST7AiMmaSRPkWaU0FLIUA6iibmazkTGkHmd4CWXxFfF4bHbxaVpFfmMMr XOpKTZM30mKcf2KvXiRhWTBUpNKqjNeuqcPSqrqIM50Bw4rNvjDT9KnOpRVWm4GN EfYe+6IjgODHGjRTKQfm0DfW1OouLzc5X9tqhhC+bCE/9bUg2291ugYoZ0Ped/SF NHvkDhojveXUI3BO15jOGANRjohzP3Fwd3i43uyvRUIv1VZn0LlAudxvg3zZ1J/E kp1WuIQ8TKc5bA== -----END CERTIFICATE-----Generated at Wed Dec 24 16:42:55 2025 by rpki-client