This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/073b19-0839-43ac-8b5b-08ced92c9770/1/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.mft File: pzO9ER_Yy3b0iDu7y_2lnbZu0t4.mft (raw, json) Hash identifier: /pDwLDz1zcvCb1dUBr7WlR9mgiM6iXrWUkcpffPC7TI= Subject key identifier: EE:E9:25:07:43:4D:DF:27:09:2C:2A:CF:36:04:52:AA:6F:B3:E6:24 Authority key identifier: A7:33:BD:11:1F:D8:CB:76:F4:88:3B:BB:CB:FD:A5:9D:B6:6E:D2:DE Certificate issuer: /CN=a733bd111fd8cb76f4883bbbcbfda59db66ed2de Certificate serial: 019B70A21515984A6FF6E788C114FD241076 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/073b19-0839-43ac-8b5b-08ced92c9770/1/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.mft Manifest number: 0D7D Signing time: Tue 30 Dec 2025 19:00:28 +0000 Manifest this update: Tue 30 Dec 2025 19:00:28 +0000 Manifest next update: Wed 31 Dec 2025 19:00:28 +0000 Files and hashes: 1: CyEvz68_PuSD2VXrrDfN85-80B0.roa (hash: iumx0jfFgEFRTvhq+tByJZI5kHgTeLx3n+N6ZSqFUeI=) 2: pzO9ER_Yy3b0iDu7y_2lnbZu0t4.crl (hash: Fd/IbqMzh26ljyFtfZbuEQ+U3tzNHu8pQNjrfRCAXpA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/073b19-0839-43ac-8b5b-08ced92c9770/1/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/073b19-0839-43ac-8b5b-08ced92c9770/1/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.mft rsync://rpki.ripe.net/repository/DEFAULT/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 19:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:70:a2:15:15:98:4a:6f:f6:e7:88:c1:14:fd:24:10:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a733bd111fd8cb76f4883bbbcbfda59db66ed2de Validity Not Before: Dec 30 19:00:28 2025 GMT Not After : Dec 31 19:00:28 2025 GMT Subject: CN=eee92507434ddf27092c2acf360452aa6fb3e624 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:8a:90:92:b8:3e:70:13:d1:58:21:1c:a5:d3: 17:59:73:9d:82:7c:4c:95:c6:33:ce:f7:3d:db:23: 4f:e5:66:34:ad:35:5a:eb:03:9a:2b:06:b6:a1:3c: ed:42:14:4e:30:05:d5:ce:82:08:d9:1f:2e:11:bb: 5e:da:07:23:58:98:89:36:05:36:a5:eb:64:3c:75: 17:58:0e:23:9a:f3:1b:76:2c:fd:c4:49:f4:2b:d5: 93:b7:2d:db:22:b9:75:6f:69:52:59:ec:02:56:b4: ff:f8:cb:7d:e3:cb:40:90:d4:2a:a4:2a:65:3d:84: 78:47:4c:2e:64:0d:41:71:f8:47:b8:ee:2c:dc:93: 09:9a:98:37:87:6d:23:a3:1a:4d:2d:ff:dd:93:63: fc:52:52:be:ba:32:44:e2:d4:4d:1a:df:21:67:6f: 2a:b2:86:54:93:ac:06:78:60:82:eb:64:8a:bc:00: f7:8d:0e:c1:4d:85:f3:85:2b:0b:61:8e:04:e7:dd: bd:c5:07:fe:06:ea:ed:23:ed:28:ac:1b:90:a7:f6: 91:16:18:13:24:2a:7b:9c:70:5e:b8:a3:2f:b2:0b: d0:0b:09:a9:b7:61:83:d9:f5:30:a0:64:d9:57:9a: 8f:7a:99:00:bb:57:83:77:96:2c:b6:47:13:24:0b: f5:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:E9:25:07:43:4D:DF:27:09:2C:2A:CF:36:04:52:AA:6F:B3:E6:24 X509v3 Authority Key Identifier: keyid:A7:33:BD:11:1F:D8:CB:76:F4:88:3B:BB:CB:FD:A5:9D:B6:6E:D2:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/073b19-0839-43ac-8b5b-08ced92c9770/1/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/073b19-0839-43ac-8b5b-08ced92c9770/1/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:9f:18:f7:6a:34:87:fa:4f:03:55:31:a3:4c:6d:80:45:b5: 5d:3c:ab:bf:de:4a:e6:7d:29:da:95:c4:3f:f8:5f:ca:bf:68: 9d:81:3d:4e:6c:4b:fd:1a:e9:1d:14:0f:c1:9a:36:b9:f1:5e: 29:6c:b3:f7:7c:e2:0e:e9:a3:6c:40:64:3e:e7:59:37:9a:30: 8e:10:fb:43:f1:2b:1b:0e:4d:0f:76:3a:26:85:ad:f9:7b:87: 95:98:f0:a2:10:c2:69:cc:df:3e:4a:6d:b4:62:97:20:40:ae: bf:4c:7b:10:dc:6c:28:84:f2:a6:50:cb:32:a1:d2:bc:59:23: 90:ac:88:1c:6c:38:cd:05:41:62:4d:09:1a:2b:dc:c3:b9:93: 7d:6d:3c:23:5f:38:78:a5:4b:08:06:17:f8:58:e6:dd:96:76: 3b:a4:dc:71:6f:f5:cd:42:e9:11:78:bc:01:b1:79:6d:7b:27: d5:2e:2e:f9:d5:dc:13:2a:79:b3:44:d8:35:fa:ec:38:04:f6: b4:be:31:13:a9:23:11:93:b7:b3:c9:f9:87:d5:80:25:64:7a: bc:a9:33:c6:dc:4c:3b:02:3d:fe:3b:cf:d4:59:9f:10:04:9e: 37:98:f3:9e:d7:3c:f1:9b:7d:f6:20:3b:a1:96:20:7c:05:10: 31:b7:1f:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtwohUVmEpv9ueIwRT9JBB2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3MzNiZDExMWZkOGNiNzZmNDg4M2JiYmNiZmRhNTlkYjY2 ZWQyZGUwHhcNMjUxMjMwMTkwMDI4WhcNMjUxMjMxMTkwMDI4WjAzMTEwLwYDVQQD EyhlZWU5MjUwNzQzNGRkZjI3MDkyYzJhY2YzNjA0NTJhYTZmYjNlNjI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIqQkrg+cBPRWCEcpdMXWXOdgnxM lcYzzvc92yNP5WY0rTVa6wOaKwa2oTztQhROMAXVzoII2R8uEbte2gcjWJiJNgU2 petkPHUXWA4jmvMbdiz9xEn0K9WTty3bIrl1b2lSWewCVrT/+Mt948tAkNQqpCpl PYR4R0wuZA1BcfhHuO4s3JMJmpg3h20joxpNLf/dk2P8UlK+ujJE4tRNGt8hZ28q soZUk6wGeGCC62SKvAD3jQ7BTYXzhSsLYY4E5929xQf+BurtI+0orBuQp/aRFhgT JCp7nHBeuKMvsgvQCwmpt2GD2fUwoGTZV5qPepkAu1eDd5YstkcTJAv1NQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO7pJQdDTd8nCSwqzzYEUqpvs+YkMB8GA1UdIwQY MBaAFKczvREf2Mt29Ig7u8v9pZ22btLeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHpPOUVSX1l5M2IwaUR1N3lfMmxuYlp1MHQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8wNzNiMTktMDgzOS00M2FjLThiNWIt MDhjZWQ5MmM5NzcwLzEvcHpPOUVSX1l5M2IwaUR1N3lfMmxuYlp1MHQ0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi8wNzNiMTktMDgzOS00M2FjLThiNWItMDhjZWQ5MmM5Nzcw LzEvcHpPOUVSX1l5M2IwaUR1N3lfMmxuYlp1MHQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI58Y92o0 h/pPA1Uxo0xtgEW1XTyrv95K5n0p2pXEP/hfyr9onYE9TmxL/RrpHRQPwZo2ufFe KWyz93ziDumjbEBkPudZN5owjhD7Q/ErGw5ND3Y6JoWt+XuHlZjwohDCaczfPkpt tGKXIECuv0x7ENxsKITyplDLMqHSvFkjkKyIHGw4zQVBYk0JGivcw7mTfW08I184 eKVLCAYX+Fjm3ZZ2O6TccW/1zULpEXi8AbF5bXsn1S4u+dXcEyp5s0TYNfrsOAT2 tL4xE6kjEZO3s8n5h9WAJWR6vKkzxtxMOwI9/jvP1FmfEASeN5jzntc88Zt99iA7 oZYgfAUQMbcfIQ== -----END CERTIFICATE-----Generated at Wed Dec 31 03:43:38 2025 by rpki-client