This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft File: I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft (raw, json) Hash identifier: gT1txWSGc7kvf+E18Nb8p+uKBWCKkzi6W3cEw3QSVVo= Subject key identifier: A9:D3:0F:9A:33:6F:56:54:56:07:11:C3:03:C1:EB:17:3C:49:CF:1D Authority key identifier: 23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47 Certificate issuer: /CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47 Certificate serial: 019B1BAAAB340852612E3D765851AD784B64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft Manifest number: 14A6 Signing time: Sun 14 Dec 2025 07:02:08 +0000 Manifest this update: Sun 14 Dec 2025 07:02:08 +0000 Manifest next update: Mon 15 Dec 2025 07:02:08 +0000 Files and hashes: 1: 0qZlk63Gwo6PVve3R8hoNJeSalk.roa (hash: 9K8bAvhRQIcuHPJMwOdonfj+LysEV1qKdWBg1zShX+0=) 2: 1aR-_v953E36WGgYgibzeTBiCDE.roa (hash: FoIR2LSFc6nQ5Kqt0WYRr1Y8u7rsf9kyNtd6rG0B9zM=) 3: 2S36hALNEuA4FHD_a934872Co8w.roa (hash: 7vbdkC8QrVhET/DTmD2itapsbG53efZ5NYts2gI1WdE=) 4: I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl (hash: kngThr/GmEj8QvVJ5iJddlfnCU0SfC9w580FYQSZZ3U=) 5: JiS1Tiph5HTmGNzZ0KtBUIEaf7A.roa (hash: Gom6zOjgSh5rBVSKZ2f6ZCcspQ3wfulcfmXimj0TCtQ=) 6: KtKxD1HbUkxdQbT12LynXd7iXTs.roa (hash: sI8vJTHX8+A6Ti8zSaEXzqBtKgPjjPc75g33e2ATpPA=) 7: Q9Q78d-jsiF5ILAqRcPi-38ptt8.roa (hash: YzBAYIWUa9/3ZSqBiY5Wy7QpsAq3KA1Xx1umoytO+nA=) 8: ZpGAbaG9iTc5mQjGkWx21egzJos.roa (hash: hVROdEr8DhK5izAOiu4sPZbk59hiOCePPc1b1fzj7Mc=) 9: aCwRSHVYBYpytuE1o9MjNgDXz9I.roa (hash: lR91pW0BeR+aoFpolYB6lJ9nl5KY3mWGfuxUgw4Zch4=) 10: hTDGmmn2FYXUzU7TBnMKhJwzgBA.roa (hash: 1eTmB0t+VZgY89Mes1TNlFqfs2UJeJff1ZjTxBLpw/g=) 11: jlKsVMX7wEteoIWfSN3Uc9eAuVQ.roa (hash: 5HOZUuYu7Rw+ksliSgplThO4PdfYnW2rqUfOLfK21mA=) 12: k8Tsh2igTKK0UWxKZTZKxjOauZg.roa (hash: 2YaWS9l2TW+UMAMDTk1uUSdz30uNtfJAEAiFghKc1/k=) 13: r5RDCZVrjcs26zN2wJ5oPZzWcrE.roa (hash: ABN+n8WXzNyvhNn0KAYr1OZE1UelVHRBMWhRAYF1K1Q=) 14: z1a3i0frazTQqXgXDMZwXIVumzA.roa (hash: 8QcYCFJ7DbfNpdlzOwLSm6hk+eQgt4rWp4xCUkBVN6Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:aa:ab:34:08:52:61:2e:3d:76:58:51:ad:78:4b:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47 Validity Not Before: Dec 14 07:02:08 2025 GMT Not After : Dec 15 07:02:08 2025 GMT Subject: CN=a9d30f9a336f5654560711c303c1eb173c49cf1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:45:1d:64:ca:41:3b:4f:b2:45:ef:d1:39:43: c5:bb:51:06:45:a3:fe:1c:06:7f:15:b2:59:a3:a2: 8d:d9:96:f1:07:cd:b1:29:78:84:85:47:b8:18:ee: 34:c9:ac:5b:ba:e3:2d:e1:e6:8c:73:17:c6:d8:0c: c6:da:32:35:83:9d:42:1e:9e:89:9b:b7:6d:80:e0: 41:af:ca:0b:87:a1:47:d8:40:b1:10:4e:8e:ac:ea: da:99:02:e0:a9:ec:e5:05:64:99:dc:49:dc:18:e6: db:c2:84:cd:c1:74:f7:ac:38:da:53:ca:d2:a1:27: cb:cc:9a:06:33:97:e1:f2:c6:b0:2e:18:0d:fd:53: 7e:fb:05:5f:d3:75:8f:78:02:c5:23:9a:e1:e9:34: 3b:a9:27:72:ac:91:6c:51:c9:e8:34:ec:f0:2f:b0: da:37:c8:91:8d:77:6d:60:ed:64:de:43:d6:18:61: 28:08:61:94:40:f7:f3:3b:3d:43:ea:b2:a6:68:b5: 77:28:16:6d:38:9d:ea:2c:67:0c:bc:46:6c:cb:4a: e5:09:13:fc:ec:e1:04:ed:9b:29:e6:d9:2e:a1:73: 1f:11:37:c5:35:94:8d:63:96:38:64:c2:dc:91:17: 09:db:ad:aa:c8:1e:17:61:a2:6e:f9:47:1f:fd:5f: 7f:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:D3:0F:9A:33:6F:56:54:56:07:11:C3:03:C1:EB:17:3C:49:CF:1D X509v3 Authority Key Identifier: keyid:23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:38:0c:f9:31:fe:e3:94:cc:10:06:8e:d2:f6:b3:0a:38:b9: 6b:ea:d3:02:2a:0c:a3:e3:21:2b:71:2e:07:5f:ab:a1:bd:a6: aa:e4:9e:ed:4a:a9:1e:c6:f6:ae:dd:b6:bf:6d:08:2f:f9:39: 81:e4:33:a8:70:d8:55:17:bb:be:b3:d8:09:20:20:1f:fc:3f: c0:3a:6b:7c:b6:90:02:16:d0:0f:e4:6a:75:1f:95:20:82:37: a7:f6:a5:8e:93:a7:2e:0e:c6:37:29:88:00:96:df:1c:7d:4e: 3f:54:89:cd:5c:91:6c:b5:31:e7:3d:f7:fe:ba:38:2a:bd:dd: 0f:ae:46:bd:ea:44:d6:fe:9e:b8:ea:12:10:ed:31:e5:dc:c7: f3:ca:9a:1c:d8:bf:8c:7f:ac:ef:42:4e:e8:1e:40:0e:bb:f4: 03:a1:65:1b:8b:65:1e:00:a1:70:72:8f:5a:16:d4:8a:ef:55: af:1b:6d:30:38:c9:0d:7a:8e:07:66:cb:69:9f:4a:e1:46:6c: e2:9a:b2:e3:46:49:a9:8a:34:f0:34:e3:85:8a:99:b2:3d:8d: ad:53:e6:aa:7d:e3:d6:bd:b3:1e:4b:82:de:19:30:9f:66:14: e0:5a:30:2c:a5:03:03:19:41:55:c8:22:34:ea:9f:96:ad:03: a3:5f:a2:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsbqqs0CFJhLj12WFGteEtkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzZTNkOTJiZmUxNjYxOWNhNTAwYzAzMjY3ZWZmYTlhYTdj YTBjNDcwHhcNMjUxMjE0MDcwMjA4WhcNMjUxMjE1MDcwMjA4WjAzMTEwLwYDVQQD EyhhOWQzMGY5YTMzNmY1NjU0NTYwNzExYzMwM2MxZWIxNzNjNDljZjFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEUdZMpBO0+yRe/ROUPFu1EGRaP+ HAZ/FbJZo6KN2ZbxB82xKXiEhUe4GO40yaxbuuMt4eaMcxfG2AzG2jI1g51CHp6J m7dtgOBBr8oLh6FH2ECxEE6OrOramQLgqezlBWSZ3EncGObbwoTNwXT3rDjaU8rS oSfLzJoGM5fh8sawLhgN/VN++wVf03WPeALFI5rh6TQ7qSdyrJFsUcnoNOzwL7Da N8iRjXdtYO1k3kPWGGEoCGGUQPfzOz1D6rKmaLV3KBZtOJ3qLGcMvEZsy0rlCRP8 7OEE7Zsp5tkuoXMfETfFNZSNY5Y4ZMLckRcJ262qyB4XYaJu+Ucf/V9/pQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKnTD5ozb1ZUVgcRwwPB6xc8Sc8dMB8GA1UdIwQY MBaAFCPj2Sv+FmGcpQDAMmfv+pqnygxHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSS1QWktfNFdZWnlsQU1BeVotXzZtcWZLREVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC85YzJjOTAtYzdkNC00OGI3LTliYWYt ZjFiZjBjMzNhOTA4LzEvSS1QWktfNFdZWnlsQU1BeVotXzZtcWZLREVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC85YzJjOTAtYzdkNC00OGI3LTliYWYtZjFiZjBjMzNhOTA4 LzEvSS1QWktfNFdZWnlsQU1BeVotXzZtcWZLREVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmjgM+TH+ 45TMEAaO0vazCji5a+rTAioMo+MhK3EuB1+rob2mquSe7UqpHsb2rt22v20IL/k5 geQzqHDYVRe7vrPYCSAgH/w/wDprfLaQAhbQD+RqdR+VIII3p/aljpOnLg7GNymI AJbfHH1OP1SJzVyRbLUx5z33/ro4Kr3dD65GvepE1v6euOoSEO0x5dzH88qaHNi/ jH+s70JO6B5ADrv0A6FlG4tlHgChcHKPWhbUiu9VrxttMDjJDXqOB2bLaZ9K4UZs 4pqy40ZJqYo08DTjhYqZsj2NrVPmqn3j1r2zHkuC3hkwn2YU4FowLKUDAxlBVcgi NOqflq0Do1+izQ== -----END CERTIFICATE-----Generated at Sun Dec 14 12:03:14 2025 by rpki-client