This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/073b19-0839-43ac-8b5b-08ced92c9770/1/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.mft File: pzO9ER_Yy3b0iDu7y_2lnbZu0t4.mft (raw, json) Hash identifier: +5a5Hs3gyD+34PAtcP1oNR2RWmWZ8NuRjbNN3YbmWBc= Subject key identifier: 0A:CB:D7:39:CD:A0:2C:F0:44:B6:B7:84:2D:9F:26:F6:6A:96:A8:47 Authority key identifier: A7:33:BD:11:1F:D8:CB:76:F4:88:3B:BB:CB:FD:A5:9D:B6:6E:D2:DE Certificate issuer: /CN=a733bd111fd8cb76f4883bbbcbfda59db66ed2de Certificate serial: 019B631E0B226F702EF40883B3EDD442BA2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/073b19-0839-43ac-8b5b-08ced92c9770/1/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.mft Manifest number: 0D76 Signing time: Sun 28 Dec 2025 04:01:11 +0000 Manifest this update: Sun 28 Dec 2025 04:01:11 +0000 Manifest next update: Mon 29 Dec 2025 04:01:11 +0000 Files and hashes: 1: CyEvz68_PuSD2VXrrDfN85-80B0.roa (hash: iumx0jfFgEFRTvhq+tByJZI5kHgTeLx3n+N6ZSqFUeI=) 2: pzO9ER_Yy3b0iDu7y_2lnbZu0t4.crl (hash: ilj3Z3kjcdffx7sqYuc9gZuhOexEQ3UBJ+27KhCk43M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/073b19-0839-43ac-8b5b-08ced92c9770/1/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/073b19-0839-43ac-8b5b-08ced92c9770/1/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.mft rsync://rpki.ripe.net/repository/DEFAULT/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:63:1e:0b:22:6f:70:2e:f4:08:83:b3:ed:d4:42:ba:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a733bd111fd8cb76f4883bbbcbfda59db66ed2de Validity Not Before: Dec 28 04:01:11 2025 GMT Not After : Dec 29 04:01:11 2025 GMT Subject: CN=0acbd739cda02cf044b6b7842d9f26f66a96a847 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:48:45:98:cd:18:9e:c4:f4:b9:06:38:7a:b8: 30:e9:6b:aa:f8:78:12:90:97:dc:57:31:d2:59:8c: f7:08:d2:a4:04:ae:64:a1:be:6d:7e:49:fe:83:b0: 5a:d6:db:cb:17:d7:87:64:33:90:cd:2b:0f:05:c8: 05:d3:8a:fb:d0:69:3d:f1:3e:78:48:8a:53:9a:0b: 77:6f:e4:55:ec:5c:b0:cb:3e:34:31:2b:4d:dc:4b: b6:5b:b6:03:6d:e5:3c:e4:d3:11:e2:e7:da:13:00: 16:54:df:fc:5b:b0:76:25:fa:13:56:f2:43:b1:8a: 76:3e:2b:d5:67:e8:31:a9:07:73:d0:d8:9d:96:4f: 25:6c:27:f9:d6:a9:31:41:f1:65:75:b5:7b:11:6c: 85:61:da:52:03:ad:77:f5:1b:06:7a:75:f1:27:c4: bf:cb:bf:ed:15:35:c0:bf:25:33:5f:99:52:05:de: 00:8c:f4:72:01:5a:64:0c:1d:e7:30:19:46:bd:29: e1:6f:d7:18:e1:54:28:18:19:69:d6:3d:a4:cf:a3: 32:eb:00:65:72:93:28:80:69:b7:09:82:ec:6e:b3: 37:3c:79:1d:87:d0:d7:66:e2:e0:ae:50:a2:26:2e: 72:be:22:4d:30:d5:91:f9:86:a2:b1:16:42:de:76: a4:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:CB:D7:39:CD:A0:2C:F0:44:B6:B7:84:2D:9F:26:F6:6A:96:A8:47 X509v3 Authority Key Identifier: keyid:A7:33:BD:11:1F:D8:CB:76:F4:88:3B:BB:CB:FD:A5:9D:B6:6E:D2:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/073b19-0839-43ac-8b5b-08ced92c9770/1/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/073b19-0839-43ac-8b5b-08ced92c9770/1/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:79:2e:e9:4a:38:e0:e2:8b:23:8b:11:b2:a5:26:92:e2:dd: f4:d1:36:e4:27:11:f2:87:95:67:3f:7c:4a:72:78:c0:db:2e: bf:2f:fb:69:83:b8:77:fc:0e:86:83:4a:f5:03:eb:a9:9c:86: ff:9b:69:29:19:a6:71:81:cb:e8:a7:93:1b:15:04:9c:cc:69: 88:9b:2e:b2:79:04:47:d7:1a:3d:5f:95:5b:40:51:45:b0:9e: b1:d8:c4:7e:35:34:76:6c:30:24:cc:0c:f8:05:29:16:63:7b: ce:8d:5f:cf:b5:38:f3:88:57:88:c6:43:a0:a6:ae:d9:3a:40: 1b:aa:93:8b:59:3d:6b:7d:5d:f2:31:b9:07:2f:66:c5:05:b7: da:a0:f6:ca:84:e8:ac:76:29:d7:91:13:c5:2c:60:8f:c5:49: 23:9e:d9:35:c7:9b:fe:25:5b:a8:d2:0c:9c:ef:2d:3b:cf:e2: 99:aa:a0:b1:12:13:20:88:3f:c6:ab:8a:6e:d4:5f:93:a9:31: 6a:40:de:81:e1:ea:08:f0:c4:01:a1:be:a0:99:60:3a:61:7b: e3:69:98:25:89:d5:45:8d:d5:ef:a2:d7:87:5b:31:23:4d:48: 5b:e2:5b:c7:a6:13:0f:43:7f:d2:ec:a9:e4:59:31:2e:9d:22: 2c:76:61:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtjHgsib3Au9AiDs+3UQrovMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3MzNiZDExMWZkOGNiNzZmNDg4M2JiYmNiZmRhNTlkYjY2 ZWQyZGUwHhcNMjUxMjI4MDQwMTExWhcNMjUxMjI5MDQwMTExWjAzMTEwLwYDVQQD EygwYWNiZDczOWNkYTAyY2YwNDRiNmI3ODQyZDlmMjZmNjZhOTZhODQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA60hFmM0YnsT0uQY4ergw6Wuq+HgS kJfcVzHSWYz3CNKkBK5kob5tfkn+g7Ba1tvLF9eHZDOQzSsPBcgF04r70Gk98T54 SIpTmgt3b+RV7Fywyz40MStN3Eu2W7YDbeU85NMR4ufaEwAWVN/8W7B2JfoTVvJD sYp2PivVZ+gxqQdz0Nidlk8lbCf51qkxQfFldbV7EWyFYdpSA6139RsGenXxJ8S/ y7/tFTXAvyUzX5lSBd4AjPRyAVpkDB3nMBlGvSnhb9cY4VQoGBlp1j2kz6My6wBl cpMogGm3CYLsbrM3PHkdh9DXZuLgrlCiJi5yviJNMNWR+YaisRZC3nakdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFArL1znNoCzwRLa3hC2fJvZqlqhHMB8GA1UdIwQY MBaAFKczvREf2Mt29Ig7u8v9pZ22btLeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHpPOUVSX1l5M2IwaUR1N3lfMmxuYlp1MHQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8wNzNiMTktMDgzOS00M2FjLThiNWIt MDhjZWQ5MmM5NzcwLzEvcHpPOUVSX1l5M2IwaUR1N3lfMmxuYlp1MHQ0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi8wNzNiMTktMDgzOS00M2FjLThiNWItMDhjZWQ5MmM5Nzcw LzEvcHpPOUVSX1l5M2IwaUR1N3lfMmxuYlp1MHQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYnku6Uo4 4OKLI4sRsqUmkuLd9NE25CcR8oeVZz98SnJ4wNsuvy/7aYO4d/wOhoNK9QPrqZyG /5tpKRmmcYHL6KeTGxUEnMxpiJsusnkER9caPV+VW0BRRbCesdjEfjU0dmwwJMwM +AUpFmN7zo1fz7U484hXiMZDoKau2TpAG6qTi1k9a31d8jG5By9mxQW32qD2yoTo rHYp15ETxSxgj8VJI57ZNceb/iVbqNIMnO8tO8/imaqgsRITIIg/xquKbtRfk6kx akDegeHqCPDEAaG+oJlgOmF742mYJYnVRY3V76LXh1sxI01IW+Jbx6YTD0N/0uyp 5FkxLp0iLHZh1A== -----END CERTIFICATE-----Generated at Sun Dec 28 07:32:48 2025 by rpki-client