This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft File: I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft (raw, json) Hash identifier: 1sVlHBM27TyTpHBoWcIbfJJMP+Ahj7dN9s6tk+b2yYw= Subject key identifier: 9A:3C:23:AC:37:F8:FD:9F:57:35:3A:3B:9B:92:AB:EB:68:C2:EC:47 Authority key identifier: 23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47 Certificate issuer: /CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47 Certificate serial: 019B21768ABDBDCB3EC48E7F432472275892 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft Manifest number: 14A9 Signing time: Mon 15 Dec 2025 10:02:55 +0000 Manifest this update: Mon 15 Dec 2025 10:02:55 +0000 Manifest next update: Tue 16 Dec 2025 10:02:55 +0000 Files and hashes: 1: 0qZlk63Gwo6PVve3R8hoNJeSalk.roa (hash: 9K8bAvhRQIcuHPJMwOdonfj+LysEV1qKdWBg1zShX+0=) 2: 1aR-_v953E36WGgYgibzeTBiCDE.roa (hash: FoIR2LSFc6nQ5Kqt0WYRr1Y8u7rsf9kyNtd6rG0B9zM=) 3: 2S36hALNEuA4FHD_a934872Co8w.roa (hash: 7vbdkC8QrVhET/DTmD2itapsbG53efZ5NYts2gI1WdE=) 4: I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl (hash: wdhpLzLFbwz+2Jvs+xPP/3Rqs5cw4qdlfAwN5naO8vI=) 5: JiS1Tiph5HTmGNzZ0KtBUIEaf7A.roa (hash: Gom6zOjgSh5rBVSKZ2f6ZCcspQ3wfulcfmXimj0TCtQ=) 6: KtKxD1HbUkxdQbT12LynXd7iXTs.roa (hash: sI8vJTHX8+A6Ti8zSaEXzqBtKgPjjPc75g33e2ATpPA=) 7: Q9Q78d-jsiF5ILAqRcPi-38ptt8.roa (hash: YzBAYIWUa9/3ZSqBiY5Wy7QpsAq3KA1Xx1umoytO+nA=) 8: ZpGAbaG9iTc5mQjGkWx21egzJos.roa (hash: hVROdEr8DhK5izAOiu4sPZbk59hiOCePPc1b1fzj7Mc=) 9: aCwRSHVYBYpytuE1o9MjNgDXz9I.roa (hash: lR91pW0BeR+aoFpolYB6lJ9nl5KY3mWGfuxUgw4Zch4=) 10: hTDGmmn2FYXUzU7TBnMKhJwzgBA.roa (hash: 1eTmB0t+VZgY89Mes1TNlFqfs2UJeJff1ZjTxBLpw/g=) 11: jlKsVMX7wEteoIWfSN3Uc9eAuVQ.roa (hash: 5HOZUuYu7Rw+ksliSgplThO4PdfYnW2rqUfOLfK21mA=) 12: k8Tsh2igTKK0UWxKZTZKxjOauZg.roa (hash: 2YaWS9l2TW+UMAMDTk1uUSdz30uNtfJAEAiFghKc1/k=) 13: r5RDCZVrjcs26zN2wJ5oPZzWcrE.roa (hash: ABN+n8WXzNyvhNn0KAYr1OZE1UelVHRBMWhRAYF1K1Q=) 14: z1a3i0frazTQqXgXDMZwXIVumzA.roa (hash: 8QcYCFJ7DbfNpdlzOwLSm6hk+eQgt4rWp4xCUkBVN6Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:76:8a:bd:bd:cb:3e:c4:8e:7f:43:24:72:27:58:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47 Validity Not Before: Dec 15 10:02:55 2025 GMT Not After : Dec 16 10:02:55 2025 GMT Subject: CN=9a3c23ac37f8fd9f57353a3b9b92abeb68c2ec47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:a0:58:0c:fd:61:bd:a1:4c:ff:ba:a0:66:f6: 42:5a:97:61:5a:0f:c3:9e:62:6a:a8:d8:47:25:a6: f8:db:c1:ea:94:7a:78:7f:92:3b:09:43:c8:63:c0: 1b:27:39:80:fd:3d:f5:1c:1c:24:57:6a:7d:68:84: 31:fc:52:a9:b3:b1:8c:74:52:e7:ea:6b:b7:0c:04: f8:33:40:79:35:3a:40:f1:63:5e:c1:0d:14:be:fb: a5:7c:b6:43:11:0c:ce:2f:a5:4f:24:84:03:1e:7d: d8:1e:7e:f1:c2:cb:12:eb:38:9a:a6:06:40:31:9f: 00:cb:8e:cf:aa:97:d4:41:93:00:ca:06:b8:92:61: 2d:de:39:dd:ec:27:82:c0:f2:cc:dd:17:ef:40:7d: 87:85:94:a7:d3:12:75:21:cc:8a:8b:ef:87:87:b6: 99:3e:c3:01:20:92:e6:6b:b2:db:2b:cd:0d:56:be: d3:30:14:35:74:cf:a6:9a:98:ae:5c:c9:d6:f9:84: 5a:ff:34:35:72:40:21:3e:21:85:da:ae:88:3c:d3: 5b:11:05:02:9f:c4:88:aa:da:8e:73:98:66:1f:bb: 6c:54:31:65:ab:4e:b7:f5:db:a4:6f:f4:66:12:36: d4:74:28:21:5d:d9:03:7c:36:4b:2f:b7:6f:81:ff: 8d:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:3C:23:AC:37:F8:FD:9F:57:35:3A:3B:9B:92:AB:EB:68:C2:EC:47 X509v3 Authority Key Identifier: keyid:23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:ed:3b:cb:2a:77:4b:29:6f:5e:c5:dd:4b:45:b3:56:37:9e: dc:ef:f5:77:e1:7f:be:c6:cc:3b:92:ea:f4:7f:ef:d7:18:5e: f2:99:70:00:c7:ad:0f:b4:fb:c6:67:fa:db:da:6b:6c:f5:52: 36:8d:ac:43:89:1b:c6:3c:5c:32:ce:1d:77:91:3b:d4:11:9e: c4:08:c0:85:86:dd:53:ba:b3:a6:ae:ae:db:93:0e:d7:fb:68: ef:cf:42:6f:b3:a4:42:ad:31:69:9a:97:2b:72:1a:d5:fa:aa: fd:e7:2e:92:10:18:ca:1e:f2:1a:f3:07:ae:6f:bd:84:02:9f: 41:7c:c7:5f:11:c0:2c:66:16:1b:03:8d:dd:7b:a0:7e:80:14: a7:12:01:3a:be:d5:5c:44:2e:9f:62:f4:64:2c:b8:44:a6:b3: 8b:71:ab:32:f4:5f:32:65:34:b5:63:eb:3e:a5:d8:a0:4f:29: 7a:b3:f1:73:ec:30:7f:0d:8c:1d:95:86:d9:7f:44:a4:76:54: 54:b4:22:eb:71:49:b1:d5:92:c7:04:e5:a7:fc:6e:0d:04:67: 80:1b:76:fb:9c:bf:ae:26:c1:15:a7:4b:c0:a6:af:17:c8:0f: d2:9c:d7:d4:6a:0e:f1:a8:bf:e4:ab:4e:0b:80:57:e1:11:2e: 05:b3:30:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshdoq9vcs+xI5/QyRyJ1iSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzZTNkOTJiZmUxNjYxOWNhNTAwYzAzMjY3ZWZmYTlhYTdj YTBjNDcwHhcNMjUxMjE1MTAwMjU1WhcNMjUxMjE2MTAwMjU1WjAzMTEwLwYDVQQD Eyg5YTNjMjNhYzM3ZjhmZDlmNTczNTNhM2I5YjkyYWJlYjY4YzJlYzQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0aBYDP1hvaFM/7qgZvZCWpdhWg/D nmJqqNhHJab428HqlHp4f5I7CUPIY8AbJzmA/T31HBwkV2p9aIQx/FKps7GMdFLn 6mu3DAT4M0B5NTpA8WNewQ0UvvulfLZDEQzOL6VPJIQDHn3YHn7xwssS6ziapgZA MZ8Ay47PqpfUQZMAyga4kmEt3jnd7CeCwPLM3RfvQH2HhZSn0xJ1IcyKi++Hh7aZ PsMBIJLma7LbK80NVr7TMBQ1dM+mmpiuXMnW+YRa/zQ1ckAhPiGF2q6IPNNbEQUC n8SIqtqOc5hmH7tsVDFlq0639dukb/RmEjbUdCghXdkDfDZLL7dvgf+NLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJo8I6w3+P2fVzU6O5uSq+towuxHMB8GA1UdIwQY MBaAFCPj2Sv+FmGcpQDAMmfv+pqnygxHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSS1QWktfNFdZWnlsQU1BeVotXzZtcWZLREVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC85YzJjOTAtYzdkNC00OGI3LTliYWYt ZjFiZjBjMzNhOTA4LzEvSS1QWktfNFdZWnlsQU1BeVotXzZtcWZLREVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC85YzJjOTAtYzdkNC00OGI3LTliYWYtZjFiZjBjMzNhOTA4 LzEvSS1QWktfNFdZWnlsQU1BeVotXzZtcWZLREVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoO07yyp3 SylvXsXdS0WzVjee3O/1d+F/vsbMO5Lq9H/v1xhe8plwAMetD7T7xmf629prbPVS No2sQ4kbxjxcMs4dd5E71BGexAjAhYbdU7qzpq6u25MO1/to789Cb7OkQq0xaZqX K3Ia1fqq/ecukhAYyh7yGvMHrm+9hAKfQXzHXxHALGYWGwON3XugfoAUpxIBOr7V XEQun2L0ZCy4RKazi3GrMvRfMmU0tWPrPqXYoE8perPxc+wwfw2MHZWG2X9EpHZU VLQi63FJsdWSxwTlp/xuDQRngBt2+5y/ribBFadLwKavF8gP0pzX1GoO8ai/5KtO C4BX4REuBbMwmg== -----END CERTIFICATE-----Generated at Mon Dec 15 12:06:36 2025 by rpki-client