This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.mft File: Pzv1EXdLbh1wa7Jyez0xJXdakS8.mft (raw, json) Hash identifier: ZKM7lAvhDfdDU+VvPc085umLFCXBFqOuAhHrtYPcw+0= Subject key identifier: 24:6A:28:95:ED:2C:25:9C:9A:82:7F:97:8F:8A:D9:76:2A:6B:37:9B Authority key identifier: 3F:3B:F5:11:77:4B:6E:1D:70:6B:B2:72:7B:3D:31:25:77:5A:91:2F Certificate issuer: /CN=3f3bf511774b6e1d706bb2727b3d3125775a912f Certificate serial: 019AACF10F5DCB061FB63ADDE9C8BBBCE0A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pzv1EXdLbh1wa7Jyez0xJXdakS8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.mft Manifest number: 12F4 Signing time: Sat 22 Nov 2025 19:01:10 +0000 Manifest this update: Sat 22 Nov 2025 19:01:10 +0000 Manifest next update: Sun 23 Nov 2025 19:01:10 +0000 Files and hashes: 1: NI2TKci7WqCqy8kg5iraylXHZzQ.roa (hash: FBDYKoklGjXkJ0zMlLJAVAFso/2nr98wz98/NBCBllg=) 2: Pzv1EXdLbh1wa7Jyez0xJXdakS8.crl (hash: v14tp+qFzeGwKciZNXoJ5tnkxiTRRjXiVHnmIGtT//0=) 3: mvLDmuyuUuZFiCTIw_g9i8uNgFg.roa (hash: GZj+Xi5SIMQUMGweRfOhuKIks60lK9TTGOmmhsaxut8=) 4: zURslIPoCzmuF9cVBs91SF_jfZs.roa (hash: PBlZSBkxr5D+YnPFObnzHQvndsM2zZG1fAG0x5+wRk4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.mft rsync://rpki.ripe.net/repository/DEFAULT/Pzv1EXdLbh1wa7Jyez0xJXdakS8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ac:f1:0f:5d:cb:06:1f:b6:3a:dd:e9:c8:bb:bc:e0:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f3bf511774b6e1d706bb2727b3d3125775a912f Validity Not Before: Nov 22 19:01:10 2025 GMT Not After : Nov 23 19:01:10 2025 GMT Subject: CN=246a2895ed2c259c9a827f978f8ad9762a6b379b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:77:fd:fe:a6:89:43:a5:31:2d:58:27:26:04: 9c:12:0e:29:bf:64:4f:03:e0:84:7e:12:19:19:25: c2:d9:65:d9:e0:71:2f:1e:3e:03:f5:68:a6:4c:77: 0e:1f:05:c7:ab:9b:64:c3:bb:41:78:30:16:87:53: be:79:4d:37:26:5d:ee:ac:9c:43:47:c0:1b:3a:4b: 0f:67:35:a1:08:6a:ff:fc:e9:86:02:06:fe:a9:da: cc:38:e5:06:68:62:27:6d:bf:54:4f:58:86:f4:91: 90:e5:e7:90:37:37:24:e1:50:7c:bb:56:6c:69:1d: 82:65:f1:46:f2:e8:8e:33:5f:2e:29:8b:85:7d:46: 23:07:8e:cb:a6:5b:cd:d3:1d:70:44:7a:13:fe:0f: 0e:60:cb:77:2c:bd:6a:23:59:ed:99:cd:a8:f0:86: 52:f0:c7:f0:09:55:61:2f:83:26:37:e5:89:c4:6b: a1:25:14:8e:ba:e4:7c:1f:d1:c5:8a:95:fe:1b:83: e6:48:73:80:aa:17:0f:75:46:7d:b1:26:d4:b4:8d: 74:80:e6:d6:d1:74:1b:a1:47:fe:2a:dd:91:cf:7c: 9f:bf:18:0e:16:9c:85:af:fc:62:7c:d0:96:b4:3c: 34:37:7a:31:44:f6:84:5f:f6:21:70:d9:93:f8:8a: ec:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:6A:28:95:ED:2C:25:9C:9A:82:7F:97:8F:8A:D9:76:2A:6B:37:9B X509v3 Authority Key Identifier: keyid:3F:3B:F5:11:77:4B:6E:1D:70:6B:B2:72:7B:3D:31:25:77:5A:91:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pzv1EXdLbh1wa7Jyez0xJXdakS8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:d3:02:c3:a4:5f:84:05:4b:2a:47:e3:10:59:78:e9:fa:0f: 81:ed:cf:7a:a5:3f:50:6c:90:35:d4:53:b7:97:c7:6e:cb:26: 1b:1a:97:59:e3:2e:6f:31:82:d2:0b:21:b4:df:2d:24:6b:04: 70:c7:ed:be:78:51:c6:4e:aa:56:24:12:4c:3e:bc:d5:ca:8b: ea:35:ce:54:9f:92:81:8e:30:a0:53:fa:43:a1:e1:00:ba:00: d2:4d:3f:de:c5:31:56:36:d2:c2:df:c3:b8:3b:4f:f9:a8:d1: 05:bf:ca:cf:6a:cb:4d:c5:9b:9a:f6:b2:61:1d:02:3b:5b:b7: e2:1f:a0:e4:f2:2b:a8:23:6e:e3:76:d7:91:be:e3:7f:41:7e: 38:83:c1:f5:de:03:39:85:97:77:fa:a5:c5:a9:eb:0d:df:6d: 23:7d:05:fb:f3:ba:3f:ab:14:69:c4:78:82:e6:a3:b4:04:b1: ba:32:24:84:51:56:8e:b4:71:5e:55:17:4d:02:12:b9:9e:35: e3:d1:77:3e:2e:89:20:8f:99:5c:a8:2a:14:65:a1:2a:a9:2d: 42:74:a7:07:4d:c6:65:c8:e7:f2:8a:cc:62:37:e7:af:60:65: 0e:af:5e:8d:ac:56:b7:bf:ac:a5:32:a6:d8:fd:b6:6f:77:8b: a9:a0:54:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqs8Q9dywYftjrd6ci7vOCnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmM2JmNTExNzc0YjZlMWQ3MDZiYjI3MjdiM2QzMTI1Nzc1 YTkxMmYwHhcNMjUxMTIyMTkwMTEwWhcNMjUxMTIzMTkwMTEwWjAzMTEwLwYDVQQD EygyNDZhMjg5NWVkMmMyNTljOWE4MjdmOTc4ZjhhZDk3NjJhNmIzNzliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXf9/qaJQ6UxLVgnJgScEg4pv2RP A+CEfhIZGSXC2WXZ4HEvHj4D9WimTHcOHwXHq5tkw7tBeDAWh1O+eU03Jl3urJxD R8AbOksPZzWhCGr//OmGAgb+qdrMOOUGaGInbb9UT1iG9JGQ5eeQNzck4VB8u1Zs aR2CZfFG8uiOM18uKYuFfUYjB47LplvN0x1wRHoT/g8OYMt3LL1qI1ntmc2o8IZS 8MfwCVVhL4MmN+WJxGuhJRSOuuR8H9HFipX+G4PmSHOAqhcPdUZ9sSbUtI10gObW 0XQboUf+Kt2Rz3yfvxgOFpyFr/xifNCWtDw0N3oxRPaEX/YhcNmT+IrsDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCRqKJXtLCWcmoJ/l4+K2XYqazebMB8GA1UdIwQY MBaAFD879RF3S24dcGuycns9MSV3WpEvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHp2MUVYZExiaDF3YTdKeWV6MHhKWGRha1M4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9mNTU3NTctNTk2NS00MjcwLWJlYWIt YTBkNmRiZmFjNmViLzEvUHp2MUVYZExiaDF3YTdKeWV6MHhKWGRha1M4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS9mNTU3NTctNTk2NS00MjcwLWJlYWItYTBkNmRiZmFjNmVi LzEvUHp2MUVYZExiaDF3YTdKeWV6MHhKWGRha1M4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP9MCw6Rf hAVLKkfjEFl46foPge3PeqU/UGyQNdRTt5fHbssmGxqXWeMubzGC0gshtN8tJGsE cMftvnhRxk6qViQSTD681cqL6jXOVJ+SgY4woFP6Q6HhALoA0k0/3sUxVjbSwt/D uDtP+ajRBb/Kz2rLTcWbmvayYR0CO1u34h+g5PIrqCNu43bXkb7jf0F+OIPB9d4D OYWXd/qlxanrDd9tI30F+/O6P6sUacR4guajtASxujIkhFFWjrRxXlUXTQISuZ41 49F3Pi6JII+ZXKgqFGWhKqktQnSnB03GZcjn8orMYjfnr2BlDq9ejaxWt7+spTKm 2P22b3eLqaBUZg== -----END CERTIFICATE-----Generated at Sat Nov 22 21:40:35 2025 by rpki-client