This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.mft File: pZ2kqGONvdb6Q8J9OsbsjZrMh4o.mft (raw, json) Hash identifier: WGN5TveZgEwu4AxAnyK6DN8Q0FdHPkmfcnUAP7Fcgws= Subject key identifier: 67:C1:2C:44:C5:B1:7E:8C:8A:B2:9E:11:CE:F9:E9:55:EE:C9:E1:24 Authority key identifier: A5:9D:A4:A8:63:8D:BD:D6:FA:43:C2:7D:3A:C6:EC:8D:9A:CC:87:8A Certificate issuer: /CN=a59da4a8638dbdd6fa43c27d3ac6ec8d9acc878a Certificate serial: 019B1BE061C9A0EDFD9C1126394BB619A68B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.mft Manifest number: 0A59 Signing time: Sun 14 Dec 2025 08:00:48 +0000 Manifest this update: Sun 14 Dec 2025 08:00:48 +0000 Manifest next update: Mon 15 Dec 2025 08:00:48 +0000 Files and hashes: 1: HEFFTvFDeW6D2zdX6lHRPyk7Ea4.roa (hash: IVFC13YcAYnwyOjaJYcCEYaHPK701G8dlJpbO9aBcgU=) 2: pZ2kqGONvdb6Q8J9OsbsjZrMh4o.crl (hash: VvdCjkt83GSnmGeeLLb/n55MnSP1TpPxDRkVmVBSDZQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.crl rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.mft rsync://rpki.ripe.net/repository/DEFAULT/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:e0:61:c9:a0:ed:fd:9c:11:26:39:4b:b6:19:a6:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a59da4a8638dbdd6fa43c27d3ac6ec8d9acc878a Validity Not Before: Dec 14 08:00:48 2025 GMT Not After : Dec 15 08:00:48 2025 GMT Subject: CN=67c12c44c5b17e8c8ab29e11cef9e955eec9e124 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:82:b8:0f:07:2d:df:25:3c:6e:76:d2:a8:3d: fd:8a:02:c7:61:14:e8:0e:c3:7e:cf:7e:9f:a5:a3: cf:ae:99:b3:ee:5f:f8:0a:05:2c:0a:5a:53:5e:5c: 63:fb:18:fc:90:af:bd:50:19:ef:60:79:b6:db:b1: 7a:46:7f:96:1e:55:62:c4:af:af:0d:e5:06:b6:98: 58:6d:c2:76:83:ff:93:37:45:f1:7d:ad:3c:6a:94: 8e:f3:73:01:cd:97:68:35:b1:99:b0:16:96:1f:c8: 03:06:45:9f:2a:63:15:02:af:a0:60:db:59:c5:f1: c3:aa:4d:17:33:d8:9f:0a:47:9c:67:d0:21:ed:86: 60:47:bf:56:6d:d5:bd:9f:30:75:c8:50:f7:cb:c1: 5b:7c:2a:17:49:69:22:60:54:ba:24:72:30:74:3f: c3:37:8f:2d:20:8e:3f:23:b1:61:40:3e:81:bb:04: 9d:eb:d4:fa:d2:2a:9f:62:9f:e2:db:13:21:4c:32: a0:d1:b4:c4:fc:7a:7e:29:c5:79:e3:e7:da:ce:dc: af:58:35:cb:76:4c:28:4c:a4:d0:42:9a:50:74:24: b5:9d:be:dd:07:c3:2a:9d:8b:04:12:b0:a1:b9:47: e0:ac:95:62:a0:f8:08:4b:15:79:a4:78:ee:96:67: d9:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:C1:2C:44:C5:B1:7E:8C:8A:B2:9E:11:CE:F9:E9:55:EE:C9:E1:24 X509v3 Authority Key Identifier: keyid:A5:9D:A4:A8:63:8D:BD:D6:FA:43:C2:7D:3A:C6:EC:8D:9A:CC:87:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:5a:69:e9:12:13:3c:8f:ce:bc:af:b6:f4:47:05:2b:a6:17: e8:85:6e:ce:8e:94:c6:49:1c:2b:d3:27:4b:e9:8a:66:47:5b: 5f:36:67:c5:24:ed:e0:02:9f:7a:c1:16:6c:a4:bd:bd:df:25: 24:f3:af:52:32:e3:17:0f:05:17:26:13:bb:7b:37:3e:ac:8f: d7:63:59:47:9a:2a:f5:55:42:9a:35:bd:f6:1f:b3:68:0c:94: b4:cf:76:c1:09:7e:41:78:a0:64:f1:77:6c:b9:42:1a:62:fd: 87:42:d3:e9:8a:ed:7b:9e:f1:a4:28:e4:5e:78:83:4f:c3:fe: ad:83:ee:29:d4:39:96:b7:b4:65:be:75:c5:9a:0f:a1:d6:35: 97:14:15:5e:c8:70:ee:7d:75:93:b2:06:db:d0:6b:9a:cf:dd: 85:3a:33:41:fd:2f:46:18:4a:f5:f1:6c:89:77:b7:0b:35:f1: f1:a9:12:6f:09:1c:81:4d:24:5a:12:d4:de:7e:91:cf:8f:51: b9:ae:72:d2:d8:24:ec:7d:87:f6:44:de:84:d9:63:cb:6b:5d: 4b:e6:cc:50:45:5d:86:5d:b3:0a:a7:29:c3:d0:a3:2e:9e:1b: e1:21:a5:44:06:ed:45:08:45:88:7d:a8:a1:a3:f2:9e:a1:29: a3:bd:87:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsb4GHJoO39nBEmOUu2GaaLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1OWRhNGE4NjM4ZGJkZDZmYTQzYzI3ZDNhYzZlYzhkOWFj Yzg3OGEwHhcNMjUxMjE0MDgwMDQ4WhcNMjUxMjE1MDgwMDQ4WjAzMTEwLwYDVQQD Eyg2N2MxMmM0NGM1YjE3ZThjOGFiMjllMTFjZWY5ZTk1NWVlYzllMTI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4K4Dwct3yU8bnbSqD39igLHYRTo DsN+z36fpaPPrpmz7l/4CgUsClpTXlxj+xj8kK+9UBnvYHm227F6Rn+WHlVixK+v DeUGtphYbcJ2g/+TN0Xxfa08apSO83MBzZdoNbGZsBaWH8gDBkWfKmMVAq+gYNtZ xfHDqk0XM9ifCkecZ9Ah7YZgR79WbdW9nzB1yFD3y8FbfCoXSWkiYFS6JHIwdD/D N48tII4/I7FhQD6BuwSd69T60iqfYp/i2xMhTDKg0bTE/Hp+KcV54+faztyvWDXL dkwoTKTQQppQdCS1nb7dB8MqnYsEErChuUfgrJVioPgISxV5pHjulmfZgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGfBLETFsX6MirKeEc756VXuyeEkMB8GA1UdIwQY MBaAFKWdpKhjjb3W+kPCfTrG7I2azIeKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFoya3FHT052ZGI2UThKOU9zYnNqWnJNaDRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9hZTY3NTEtMTc4ZC00MWUxLWFlYzIt MGY2OGU1YmZmYzdkLzEvcFoya3FHT052ZGI2UThKOU9zYnNqWnJNaDRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9hZTY3NTEtMTc4ZC00MWUxLWFlYzItMGY2OGU1YmZmYzdk LzEvcFoya3FHT052ZGI2UThKOU9zYnNqWnJNaDRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhVpp6RIT PI/OvK+29EcFK6YX6IVuzo6UxkkcK9MnS+mKZkdbXzZnxSTt4AKfesEWbKS9vd8l JPOvUjLjFw8FFyYTu3s3PqyP12NZR5oq9VVCmjW99h+zaAyUtM92wQl+QXigZPF3 bLlCGmL9h0LT6Yrte57xpCjkXniDT8P+rYPuKdQ5lre0Zb51xZoPodY1lxQVXshw 7n11k7IG29Brms/dhTozQf0vRhhK9fFsiXe3CzXx8akSbwkcgU0kWhLU3n6Rz49R ua5y0tgk7H2H9kTehNljy2tdS+bMUEVdhl2zCqcpw9CjLp4b4SGlRAbtRQhFiH2o oaPynqEpo72HDg== -----END CERTIFICATE-----Generated at Sun Dec 14 14:38:05 2025 by rpki-client