This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/26e21e-db81-46c7-955a-77d315cc16aa/1/pj_zsazNggGkEWyYdXM5I0KJgB4.mft File: pj_zsazNggGkEWyYdXM5I0KJgB4.mft (raw, json) Hash identifier: pOY8MEnF9xWKNov4hxLJYYcQVGeMBuBA8SbJCieyR8w= Subject key identifier: B8:AD:12:9B:3D:F4:9A:23:75:FE:D6:65:C2:0E:69:7A:EC:00:A0:24 Authority key identifier: A6:3F:F3:B1:AC:CD:82:01:A4:11:6C:98:75:73:39:23:42:89:80:1E Certificate issuer: /CN=a63ff3b1accd8201a4116c98757339234289801e Certificate serial: 019B4136B4CA4DD0A76AD79F13F255B4E2FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pj_zsazNggGkEWyYdXM5I0KJgB4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/26e21e-db81-46c7-955a-77d315cc16aa/1/pj_zsazNggGkEWyYdXM5I0KJgB4.mft Manifest number: 0651 Signing time: Sun 21 Dec 2025 14:01:02 +0000 Manifest this update: Sun 21 Dec 2025 14:01:02 +0000 Manifest next update: Mon 22 Dec 2025 14:01:02 +0000 Files and hashes: 1: mbvBXE7Ze3cn1Ev3k2dL5On_YTs.roa (hash: YK3JNqfED7VqhxPOSKGy2n6p5fg+7MEO42BqGf+EejI=) 2: pj_zsazNggGkEWyYdXM5I0KJgB4.crl (hash: y13tlsukL+czoilQM62khC5PuYfAeF0F657umhVCfkI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/26e21e-db81-46c7-955a-77d315cc16aa/1/pj_zsazNggGkEWyYdXM5I0KJgB4.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/26e21e-db81-46c7-955a-77d315cc16aa/1/pj_zsazNggGkEWyYdXM5I0KJgB4.mft rsync://rpki.ripe.net/repository/DEFAULT/pj_zsazNggGkEWyYdXM5I0KJgB4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:36:b4:ca:4d:d0:a7:6a:d7:9f:13:f2:55:b4:e2:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a63ff3b1accd8201a4116c98757339234289801e Validity Not Before: Dec 21 14:01:02 2025 GMT Not After : Dec 22 14:01:02 2025 GMT Subject: CN=b8ad129b3df49a2375fed665c20e697aec00a024 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:4c:1f:44:97:0b:10:76:ed:8f:9c:16:33:e1: 54:f7:b1:24:c9:ca:ba:09:c2:23:1f:3a:ce:31:7d: c7:39:0e:21:f6:c8:61:de:11:d2:ea:bf:07:d3:c4: 10:ec:97:6c:56:ce:1c:85:ba:9d:be:56:1d:34:62: 47:51:38:e7:4d:e5:ef:01:d0:38:74:3c:21:62:ef: 51:b6:e8:09:f8:22:ee:cb:ae:68:7d:33:fe:6b:ba: 90:4d:44:7d:20:7d:e3:b6:bc:0e:8d:72:2b:6f:9f: be:c7:b4:9b:09:0b:31:98:01:d3:38:86:b8:4a:2b: 5b:2f:b1:72:a0:f2:86:17:1c:65:04:19:46:cc:a1: 30:27:41:10:63:3b:41:b9:64:02:fc:bd:40:de:a5: 87:b8:10:be:9b:ac:fe:a7:9e:1f:d0:56:73:05:c6: 83:b0:88:5d:c9:75:1c:43:8c:dd:37:80:1b:a2:69: c3:32:3f:43:2e:0a:13:77:2e:2a:06:99:78:8e:a6: 61:67:41:f9:b2:85:13:95:f8:1d:b9:75:cc:fc:a4: d6:f0:a3:47:fb:c1:64:b1:21:8b:fb:38:8d:2d:1f: 12:fa:80:47:61:02:65:b1:d3:7a:5a:29:7b:72:8a: 39:9a:bf:da:69:e0:1b:19:08:55:df:8a:d2:63:66: f0:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:AD:12:9B:3D:F4:9A:23:75:FE:D6:65:C2:0E:69:7A:EC:00:A0:24 X509v3 Authority Key Identifier: keyid:A6:3F:F3:B1:AC:CD:82:01:A4:11:6C:98:75:73:39:23:42:89:80:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pj_zsazNggGkEWyYdXM5I0KJgB4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/26e21e-db81-46c7-955a-77d315cc16aa/1/pj_zsazNggGkEWyYdXM5I0KJgB4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/26e21e-db81-46c7-955a-77d315cc16aa/1/pj_zsazNggGkEWyYdXM5I0KJgB4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:3a:e5:fe:1d:78:91:9d:57:15:7b:6a:80:99:b0:06:61:1c: d4:54:83:8a:0e:93:c7:0b:8b:00:36:e3:4e:d9:45:c5:21:d8: 99:57:f8:9c:f2:21:2f:78:1b:a6:a6:24:86:cb:2f:74:e0:4b: c6:95:e4:55:d5:3d:b1:74:62:8f:67:bc:62:85:d7:ae:e1:92: 46:61:9f:d2:ff:4f:65:97:fa:b7:ab:63:ce:d6:1f:08:d1:53: 90:1f:b7:35:72:49:9e:6b:fa:14:66:a0:58:5a:cf:ee:7d:4d: a8:a7:24:22:2a:3d:1d:fa:fa:46:a5:06:d2:02:40:f3:65:48: 6b:7c:1a:e8:5f:5d:29:3c:04:69:1b:5e:68:e4:09:3d:9d:b7: 7c:db:b3:e5:bf:6c:6a:3b:1f:c8:dc:6c:01:15:99:6d:e1:c0: 12:78:25:f9:87:b2:83:d1:b7:8f:26:0e:2a:e4:48:bf:b6:92: be:86:b4:29:73:ec:13:7e:b6:48:c2:20:3d:0d:f4:64:58:77: 74:05:5a:8c:91:2e:30:29:52:72:bd:f3:06:e1:72:a6:fd:69: fe:ab:64:29:ce:52:74:aa:e3:d1:dd:50:f7:03:78:ac:f1:23: d4:81:14:85:2c:62:fe:6d:d5:ee:e8:65:f4:3c:6f:a7:23:43: 18:72:d0:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBNrTKTdCnatefE/JVtOL9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2M2ZmM2IxYWNjZDgyMDFhNDExNmM5ODc1NzMzOTIzNDI4 OTgwMWUwHhcNMjUxMjIxMTQwMTAyWhcNMjUxMjIyMTQwMTAyWjAzMTEwLwYDVQQD EyhiOGFkMTI5YjNkZjQ5YTIzNzVmZWQ2NjVjMjBlNjk3YWVjMDBhMDI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEwfRJcLEHbtj5wWM+FU97Ekycq6 CcIjHzrOMX3HOQ4h9shh3hHS6r8H08QQ7JdsVs4chbqdvlYdNGJHUTjnTeXvAdA4 dDwhYu9RtugJ+CLuy65ofTP+a7qQTUR9IH3jtrwOjXIrb5++x7SbCQsxmAHTOIa4 SitbL7FyoPKGFxxlBBlGzKEwJ0EQYztBuWQC/L1A3qWHuBC+m6z+p54f0FZzBcaD sIhdyXUcQ4zdN4AbomnDMj9DLgoTdy4qBpl4jqZhZ0H5soUTlfgduXXM/KTW8KNH +8FksSGL+ziNLR8S+oBHYQJlsdN6Wil7coo5mr/aaeAbGQhV34rSY2bwgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLitEps99Jojdf7WZcIOaXrsAKAkMB8GA1UdIwQY MBaAFKY/87GszYIBpBFsmHVzOSNCiYAeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGpfenNhek5nZ0drRVd5WWRYTTVJMEtKZ0I0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8yNmUyMWUtZGI4MS00NmM3LTk1NWEt NzdkMzE1Y2MxNmFhLzEvcGpfenNhek5nZ0drRVd5WWRYTTVJMEtKZ0I0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC8yNmUyMWUtZGI4MS00NmM3LTk1NWEtNzdkMzE1Y2MxNmFh LzEvcGpfenNhek5nZ0drRVd5WWRYTTVJMEtKZ0I0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnzrl/h14 kZ1XFXtqgJmwBmEc1FSDig6TxwuLADbjTtlFxSHYmVf4nPIhL3gbpqYkhssvdOBL xpXkVdU9sXRij2e8YoXXruGSRmGf0v9PZZf6t6tjztYfCNFTkB+3NXJJnmv6FGag WFrP7n1NqKckIio9Hfr6RqUG0gJA82VIa3wa6F9dKTwEaRteaOQJPZ23fNuz5b9s ajsfyNxsARWZbeHAEngl+Yeyg9G3jyYOKuRIv7aSvoa0KXPsE362SMIgPQ30ZFh3 dAVajJEuMClScr3zBuFypv1p/qtkKc5SdKrj0d1Q9wN4rPEj1IEUhSxi/m3V7uhl 9DxvpyNDGHLQQw== -----END CERTIFICATE-----Generated at Sun Dec 21 22:29:25 2025 by rpki-client