This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft File: Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft (raw, json) Hash identifier: AjVHo9FoXN/WuMmPmu0AFlKV2xXSn6mr/18YaHRL8Xc= Subject key identifier: CC:E6:38:1F:8C:FD:B1:9A:8A:11:86:2F:45:26:BB:A9:62:85:E5:1B Authority key identifier: 3F:3F:55:4B:80:28:1D:EA:2A:30:03:18:AA:AD:6D:2D:97:F1:CE:44 Certificate issuer: /CN=3f3f554b80281dea2a300318aaad6d2d97f1ce44 Certificate serial: 019B3EDAC06A6F145DBA5638CD64F388178E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft Manifest number: 06BB Signing time: Sun 21 Dec 2025 03:01:22 +0000 Manifest this update: Sun 21 Dec 2025 03:01:22 +0000 Manifest next update: Mon 22 Dec 2025 03:01:22 +0000 Files and hashes: 1: 2hYDKWQBkYm2pRG5fppJvMZY24E.roa (hash: MQ/dfxNlDnDDkfXYYr3j5Kix2lXs+X/K3X/wwN6AEdM=) 2: Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.crl (hash: 8w5MVrA9bSdSIYYA3a3E8a4XlkXkOslx0PeorL9lNww=) 3: jCGGbslP38BuOy2f_eS54xc-hWg.roa (hash: rfVT0PEc4ZDXhhwqi4mRItGvqKV42ncM8sTUj9MUtx0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 03:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:c0:6a:6f:14:5d:ba:56:38:cd:64:f3:88:17:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f3f554b80281dea2a300318aaad6d2d97f1ce44 Validity Not Before: Dec 21 03:01:22 2025 GMT Not After : Dec 22 03:01:22 2025 GMT Subject: CN=cce6381f8cfdb19a8a11862f4526bba96285e51b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:8f:01:0b:af:53:69:1c:d1:a2:a1:0c:40:25: d0:33:90:8a:e1:55:cc:1d:0f:86:bd:a6:7f:59:3e: bb:02:60:7a:bb:a8:3e:5b:5c:dc:86:d6:95:d7:88: e9:1a:59:1a:16:40:97:13:b1:67:f8:66:03:54:c5: 48:a0:13:ed:f5:32:fd:bc:bb:ad:fd:c9:e6:ab:5f: 32:af:d9:6b:e1:89:dd:a5:3c:22:4d:f5:13:98:fa: 79:84:4d:52:30:ca:4b:e5:f0:53:84:01:4f:a5:27: f2:93:59:08:bc:8c:a0:7e:b3:0c:87:1d:66:e2:0f: c5:7e:b2:a7:68:d4:26:c4:38:bd:ba:1b:c1:b3:b2: f1:2b:7e:7a:74:e7:61:17:57:a0:b4:ac:04:ae:b7: e5:54:35:dc:01:29:09:ce:8c:46:1b:3f:72:2f:4e: 04:5a:5b:23:25:3d:3b:b3:7d:22:71:72:a8:9d:55: db:44:78:24:42:4d:d5:3a:d4:aa:86:1c:47:b3:7a: 41:d7:b9:a6:da:cf:bf:71:33:e9:8b:c8:a0:0a:ac: 8e:ae:6a:71:72:4f:12:38:b8:5f:9c:2b:f0:a0:86: 7f:96:02:64:4b:13:b9:e0:c5:7e:61:0f:f4:37:0d: 3e:5e:8e:4b:3e:79:63:88:7a:92:c6:6f:4a:08:67: 0b:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:E6:38:1F:8C:FD:B1:9A:8A:11:86:2F:45:26:BB:A9:62:85:E5:1B X509v3 Authority Key Identifier: keyid:3F:3F:55:4B:80:28:1D:EA:2A:30:03:18:AA:AD:6D:2D:97:F1:CE:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:30:79:6f:04:ba:60:4f:f4:a6:14:56:f2:34:e8:88:e6:db: bd:66:ea:cb:fd:d0:43:7a:3e:98:69:ee:1b:8f:f1:66:4f:2d: 84:96:31:d2:34:28:a7:ae:60:ae:cc:b3:e2:9b:d4:4f:fe:17: ee:7c:49:83:27:0b:21:3a:94:6d:fe:56:aa:58:30:20:a5:8f: c5:f3:80:01:e4:cb:bc:52:8e:93:06:e8:5d:f1:f8:b0:a9:2c: f9:68:32:3d:59:80:c0:46:22:4b:37:bb:75:0d:f4:a2:10:eb: a3:45:f8:90:11:e3:40:f4:22:c1:07:21:cd:20:36:35:cc:04: 68:ea:15:e4:c5:3a:66:11:a1:68:56:d4:b6:b8:7a:b8:76:d2: c1:27:f7:02:02:03:79:70:32:73:4c:fa:ad:bf:62:fd:69:24: 75:9e:6b:b2:ca:f3:45:c1:fb:14:28:e2:64:86:7b:cb:1e:68: 11:cd:75:92:dd:4f:35:0b:1b:66:62:d7:ff:6d:c0:9f:c8:e3: 05:15:2a:98:b6:b4:d9:c3:6f:48:8a:8f:bb:38:8b:5c:f6:9e: 4a:b5:10:1c:a2:92:67:07:c8:d9:6f:f1:8e:c9:0d:e6:7f:3e: 7a:90:59:f7:34:f0:2a:51:2a:a0:f7:d5:d8:c1:3d:58:09:dd: 99:05:b9:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2sBqbxRdulY4zWTziBeOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmM2Y1NTRiODAyODFkZWEyYTMwMDMxOGFhYWQ2ZDJkOTdm MWNlNDQwHhcNMjUxMjIxMDMwMTIyWhcNMjUxMjIyMDMwMTIyWjAzMTEwLwYDVQQD EyhjY2U2MzgxZjhjZmRiMTlhOGExMTg2MmY0NTI2YmJhOTYyODVlNTFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1I8BC69TaRzRoqEMQCXQM5CK4VXM HQ+GvaZ/WT67AmB6u6g+W1zchtaV14jpGlkaFkCXE7Fn+GYDVMVIoBPt9TL9vLut /cnmq18yr9lr4YndpTwiTfUTmPp5hE1SMMpL5fBThAFPpSfyk1kIvIygfrMMhx1m 4g/FfrKnaNQmxDi9uhvBs7LxK356dOdhF1egtKwErrflVDXcASkJzoxGGz9yL04E WlsjJT07s30icXKonVXbRHgkQk3VOtSqhhxHs3pB17mm2s+/cTPpi8igCqyOrmpx ck8SOLhfnCvwoIZ/lgJkSxO54MV+YQ/0Nw0+Xo5LPnljiHqSxm9KCGcLywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMzmOB+M/bGaihGGL0Umu6liheUbMB8GA1UdIwQY MBaAFD8/VUuAKB3qKjADGKqtbS2X8c5EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHo5VlM0QW9IZW9xTUFNWXFxMXRMWmZ4emtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy83OGQ1MjgtN2NkZi00NGMwLWFjZGQt ZjUzM2I4ZGY4MGE5LzEvUHo5VlM0QW9IZW9xTUFNWXFxMXRMWmZ4emtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy83OGQ1MjgtN2NkZi00NGMwLWFjZGQtZjUzM2I4ZGY4MGE5 LzEvUHo5VlM0QW9IZW9xTUFNWXFxMXRMWmZ4emtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFzB5bwS6 YE/0phRW8jToiObbvWbqy/3QQ3o+mGnuG4/xZk8thJYx0jQop65grsyz4pvUT/4X 7nxJgycLITqUbf5WqlgwIKWPxfOAAeTLvFKOkwboXfH4sKks+WgyPVmAwEYiSze7 dQ30ohDro0X4kBHjQPQiwQchzSA2NcwEaOoV5MU6ZhGhaFbUtrh6uHbSwSf3AgID eXAyc0z6rb9i/WkkdZ5rssrzRcH7FCjiZIZ7yx5oEc11kt1PNQsbZmLX/23An8jj BRUqmLa02cNvSIqPuziLXPaeSrUQHKKSZwfI2W/xjskN5n8+epBZ9zTwKlEqoPfV 2ME9WAndmQW5vA== -----END CERTIFICATE-----Generated at Sun Dec 21 12:28:53 2025 by rpki-client