This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f5cc1e-a294-45c7-9d10-f1bc956858aa/1/pszH03YZ_dof84uT_s5gq9SYq4Q.mft File: pszH03YZ_dof84uT_s5gq9SYq4Q.mft (raw, json) Hash identifier: L7+Zs2s9Ykveq9psn6kCpmdrRi3Tu89Lg8Zy2OOWK7o= Subject key identifier: B9:F0:D1:08:9B:74:35:D9:4C:62:F7:FA:51:9B:AA:A1:76:A5:1D:BC Authority key identifier: A6:CC:C7:D3:76:19:FD:DA:1F:F3:8B:93:FE:CE:60:AB:D4:98:AB:84 Certificate issuer: /CN=a6ccc7d37619fdda1ff38b93fece60abd498ab84 Certificate serial: 019B5AF66729B3CE0641FB26BD2ECCE0B626 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pszH03YZ_dof84uT_s5gq9SYq4Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f5cc1e-a294-45c7-9d10-f1bc956858aa/1/pszH03YZ_dof84uT_s5gq9SYq4Q.mft Manifest number: 90 Signing time: Fri 26 Dec 2025 14:00:56 +0000 Manifest this update: Fri 26 Dec 2025 14:00:56 +0000 Manifest next update: Sat 27 Dec 2025 14:00:56 +0000 Files and hashes: 1: FCK5h5gubPMhZ3Rsrd7Tj4OARZE.roa (hash: 7f8n8xrs8z+GOmfg9rEL/AINEMlWtSmtFpMtGEwaqcw=) 2: pszH03YZ_dof84uT_s5gq9SYq4Q.crl (hash: FSuxOJTZXzVi5U/dvSP6W4HL2EQbIYjq6arbC7UXEdE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/f5cc1e-a294-45c7-9d10-f1bc956858aa/1/pszH03YZ_dof84uT_s5gq9SYq4Q.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/f5cc1e-a294-45c7-9d10-f1bc956858aa/1/pszH03YZ_dof84uT_s5gq9SYq4Q.mft rsync://rpki.ripe.net/repository/DEFAULT/pszH03YZ_dof84uT_s5gq9SYq4Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:f6:67:29:b3:ce:06:41:fb:26:bd:2e:cc:e0:b6:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6ccc7d37619fdda1ff38b93fece60abd498ab84 Validity Not Before: Dec 26 14:00:56 2025 GMT Not After : Dec 27 14:00:56 2025 GMT Subject: CN=b9f0d1089b7435d94c62f7fa519baaa176a51dbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:4a:f4:92:f3:b0:18:d9:e3:07:62:f0:65:bf: 25:d5:9b:13:0e:55:0a:5e:e3:41:d9:a7:1d:7f:49: 93:25:27:7c:b0:36:56:17:b6:30:28:9c:3b:87:e0: 50:48:e4:98:c8:90:f4:b4:ab:76:c5:dc:0b:5d:de: 57:5e:2d:ce:16:33:db:82:5d:ce:8c:6b:57:57:10: e5:5a:6a:2e:20:42:ad:e3:61:1b:53:e0:da:69:fe: 84:bf:84:b8:9f:b3:c0:51:e1:49:83:04:2c:06:36: 8a:ab:c6:53:7c:ea:23:c5:5e:be:dc:50:da:47:9b: fc:fd:f9:36:6e:fd:11:bf:c9:c7:f9:b4:ca:ec:e4: d9:26:49:eb:aa:12:a4:54:e4:95:a7:be:96:7f:05: 43:2a:0e:af:dd:db:a6:47:d2:15:49:cc:fd:2d:d1: 5f:6a:61:ea:92:90:d8:77:20:19:5e:09:36:b4:49: e3:a0:b7:17:4a:26:5c:46:49:ba:9b:ec:b6:df:5e: 0c:69:07:75:35:c4:57:dc:1a:42:9c:b0:c8:ef:af: 2a:90:93:2f:df:61:a5:c3:39:33:c7:ae:31:3b:71: d8:94:75:99:cb:4a:1d:97:c5:a9:cc:12:b4:34:2a: ee:53:c5:6a:31:c5:ce:2b:0d:57:1a:34:b9:90:84: 10:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:F0:D1:08:9B:74:35:D9:4C:62:F7:FA:51:9B:AA:A1:76:A5:1D:BC X509v3 Authority Key Identifier: keyid:A6:CC:C7:D3:76:19:FD:DA:1F:F3:8B:93:FE:CE:60:AB:D4:98:AB:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pszH03YZ_dof84uT_s5gq9SYq4Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f5cc1e-a294-45c7-9d10-f1bc956858aa/1/pszH03YZ_dof84uT_s5gq9SYq4Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f5cc1e-a294-45c7-9d10-f1bc956858aa/1/pszH03YZ_dof84uT_s5gq9SYq4Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:b3:92:1c:de:82:18:e0:1c:07:a9:4f:50:9d:b8:97:13:23: 4c:f0:4c:bd:4f:13:ca:1c:b4:36:ad:80:4f:5c:25:44:06:92: 97:ce:71:d7:6c:19:b0:ed:1b:34:ad:3d:25:35:0d:8c:4d:67: 4a:8a:ac:bd:37:ec:ad:1e:57:68:8d:8f:ef:56:06:79:bf:01: 0f:3d:fa:6a:d4:29:5c:42:3b:c8:16:15:e1:78:45:67:e2:c3: 9f:54:95:18:be:8a:aa:dc:29:4b:43:47:3c:74:9f:fa:d2:ed: b4:90:5b:ad:ff:bf:c4:86:17:0d:e9:81:72:52:73:92:87:d1: 21:cb:43:84:1f:67:be:50:b2:65:9b:ee:40:f1:ba:d6:48:71: ef:fa:58:19:f8:5d:ae:19:d4:52:da:f1:b5:45:8e:60:b1:19: ad:31:75:93:36:17:67:f9:34:51:eb:65:41:d5:92:44:72:0e: 89:34:30:7a:0f:d5:af:38:19:88:a6:04:a0:30:6d:1a:01:79: 6d:88:45:89:3c:fe:fe:85:f6:ca:0f:c3:5c:c0:54:ca:53:55: 80:eb:65:07:7b:b7:ba:ef:5f:99:0b:00:82:ba:2d:8a:09:d0: 80:53:f8:f0:0a:c8:d5:e8:8d:88:33:69:43:d4:dc:77:21:b1: c1:b8:8b:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZta9mcps84GQfsmvS7M4LYmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2Y2NjN2QzNzYxOWZkZGExZmYzOGI5M2ZlY2U2MGFiZDQ5 OGFiODQwHhcNMjUxMjI2MTQwMDU2WhcNMjUxMjI3MTQwMDU2WjAzMTEwLwYDVQQD EyhiOWYwZDEwODliNzQzNWQ5NGM2MmY3ZmE1MTliYWFhMTc2YTUxZGJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUr0kvOwGNnjB2LwZb8l1ZsTDlUK XuNB2acdf0mTJSd8sDZWF7YwKJw7h+BQSOSYyJD0tKt2xdwLXd5XXi3OFjPbgl3O jGtXVxDlWmouIEKt42EbU+Daaf6Ev4S4n7PAUeFJgwQsBjaKq8ZTfOojxV6+3FDa R5v8/fk2bv0Rv8nH+bTK7OTZJknrqhKkVOSVp76WfwVDKg6v3dumR9IVScz9LdFf amHqkpDYdyAZXgk2tEnjoLcXSiZcRkm6m+y2314MaQd1NcRX3BpCnLDI768qkJMv 32Glwzkzx64xO3HYlHWZy0odl8WpzBK0NCruU8VqMcXOKw1XGjS5kIQQVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLnw0QibdDXZTGL3+lGbqqF2pR28MB8GA1UdIwQY MBaAFKbMx9N2Gf3aH/OLk/7OYKvUmKuEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHN6SDAzWVpfZG9mODR1VF9zNWdxOVNZcTRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9mNWNjMWUtYTI5NC00NWM3LTlkMTAt ZjFiYzk1Njg1OGFhLzEvcHN6SDAzWVpfZG9mODR1VF9zNWdxOVNZcTRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC9mNWNjMWUtYTI5NC00NWM3LTlkMTAtZjFiYzk1Njg1OGFh LzEvcHN6SDAzWVpfZG9mODR1VF9zNWdxOVNZcTRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPrOSHN6C GOAcB6lPUJ24lxMjTPBMvU8Tyhy0Nq2AT1wlRAaSl85x12wZsO0bNK09JTUNjE1n SoqsvTfsrR5XaI2P71YGeb8BDz36atQpXEI7yBYV4XhFZ+LDn1SVGL6KqtwpS0NH PHSf+tLttJBbrf+/xIYXDemBclJzkofRIctDhB9nvlCyZZvuQPG61khx7/pYGfhd rhnUUtrxtUWOYLEZrTF1kzYXZ/k0UetlQdWSRHIOiTQweg/VrzgZiKYEoDBtGgF5 bYhFiTz+/oX2yg/DXMBUylNVgOtlB3u3uu9fmQsAgrotignQgFP48ArI1eiNiDNp Q9TcdyGxwbiLPQ== -----END CERTIFICATE-----Generated at Fri Dec 26 17:43:38 2025 by rpki-client