This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft File: pCzz6j9GGa3XsfheXbx2jNPRdC0.mft (raw, json) Hash identifier: cIVLpej2CDnTm8mt5Rz26th+zFzPgRX9+t6FxQ8LW8Q= Subject key identifier: B4:01:A4:9D:A9:C8:43:74:72:3C:70:72:69:56:45:0F:A8:BF:4A:EC Authority key identifier: A4:2C:F3:EA:3F:46:19:AD:D7:B1:F8:5E:5D:BC:76:8C:D3:D1:74:2D Certificate issuer: /CN=a42cf3ea3f4619add7b1f85e5dbc768cd3d1742d Certificate serial: 019B0F6E2A3C9BB0B3212DE8A216271E36A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pCzz6j9GGa3XsfheXbx2jNPRdC0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft Manifest number: 1771 Signing time: Thu 11 Dec 2025 22:00:36 +0000 Manifest this update: Thu 11 Dec 2025 22:00:36 +0000 Manifest next update: Fri 12 Dec 2025 22:00:36 +0000 Files and hashes: 1: SNV_1VpgwAmnXneSKWb5jRq8ToE.roa (hash: WATnXIVshclXFF3TBwoPfH1QR7+uJEv7hk540ZBWOkc=) 2: lVzggsEuwHNUmwDhZ4XQcolHpDk.roa (hash: eA/BupKOc3qojEoZ8E13TwJIMViSsM3/KaYEEgTR1Jc=) 3: pCzz6j9GGa3XsfheXbx2jNPRdC0.crl (hash: Y7UAdXPTPv74nYsWEk5J3qs2aOlz7ghcjLkW4MCWzds=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft rsync://rpki.ripe.net/repository/DEFAULT/pCzz6j9GGa3XsfheXbx2jNPRdC0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 22:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:6e:2a:3c:9b:b0:b3:21:2d:e8:a2:16:27:1e:36:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a42cf3ea3f4619add7b1f85e5dbc768cd3d1742d Validity Not Before: Dec 11 22:00:36 2025 GMT Not After : Dec 12 22:00:36 2025 GMT Subject: CN=b401a49da9c84374723c70726956450fa8bf4aec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:06:9f:73:d5:98:f5:26:52:b3:39:98:07:60: c4:d4:8e:91:d7:c4:4e:8d:e5:a2:5e:08:10:85:5f: dd:6b:87:da:6f:f5:c7:e9:e4:0c:01:23:5d:50:c5: 6d:df:a9:f7:48:a4:85:e4:59:28:5d:5f:1d:9e:7c: 08:8e:cb:78:a5:32:92:32:1f:68:f2:2b:3a:cd:be: da:2a:f3:d5:17:76:95:10:b6:eb:bb:40:ae:a0:78: 3a:08:4d:5d:47:ea:0f:da:ce:a3:75:0d:a5:c7:16: 92:74:9c:fb:49:96:6b:5f:08:34:29:15:03:2c:33: 8c:44:0e:13:53:57:e2:71:20:68:93:04:32:d7:9d: 40:f4:0b:1a:c4:b0:d7:46:22:b0:b9:29:c5:e1:82: b4:e2:7a:83:14:13:98:2d:b4:e6:3a:83:d6:de:92: 3f:4a:98:82:a4:ce:81:07:38:da:81:92:5e:6a:d8: 1a:6a:cc:bc:a2:f8:a1:f8:c2:f7:c0:09:3e:ca:d5: d7:09:e9:a4:66:7b:3d:8b:39:64:f3:47:5f:7d:f7: 3d:44:c7:81:20:c0:19:62:40:5b:4b:5d:16:70:2e: 5e:b9:64:a7:29:73:af:45:b3:20:7d:2c:af:52:9d: 11:f3:35:76:95:53:19:3e:08:a8:7e:50:b4:84:98: 58:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:01:A4:9D:A9:C8:43:74:72:3C:70:72:69:56:45:0F:A8:BF:4A:EC X509v3 Authority Key Identifier: keyid:A4:2C:F3:EA:3F:46:19:AD:D7:B1:F8:5E:5D:BC:76:8C:D3:D1:74:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pCzz6j9GGa3XsfheXbx2jNPRdC0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:c8:6e:08:6c:21:09:32:9a:03:27:64:d8:85:24:93:44:0d: c7:a1:40:67:39:fe:5e:7f:f7:82:cf:70:12:a3:2f:f8:0a:3b: 9a:5c:26:4a:fc:72:72:08:6f:50:46:5c:7b:41:96:f6:a6:e6: 14:a4:03:2b:da:bd:bd:00:ea:c8:64:5f:88:7a:25:3a:4c:66: e6:0b:e3:03:77:70:f6:cb:54:57:6d:60:0a:15:8d:51:10:db: ea:42:e9:20:34:97:d6:9a:18:e4:8b:be:5b:2b:25:d4:f7:6e: 94:0a:a6:dc:d9:19:09:4d:ca:11:66:12:ac:ce:e5:e8:50:f2: 59:d7:12:32:9f:ad:31:0e:2b:72:76:64:b6:a0:29:5c:cd:62: 99:fe:95:82:58:6e:ab:70:e6:a7:94:9e:3e:cf:c9:fd:c4:d0: ce:1c:a5:e4:b7:6d:e9:4e:bc:83:d1:83:e7:23:94:45:82:e4: 31:97:69:8f:30:21:26:ac:51:a0:e1:e7:8f:02:99:5f:83:41: ca:92:55:48:2e:9f:aa:2a:cc:3f:8c:f1:2c:13:07:b4:c9:c7: cd:ac:bc:83:28:20:94:c3:87:73:db:39:86:d1:e3:a9:8a:7a: df:e4:8f:67:bc:b8:bf:4f:b4:08:2a:60:77:6a:ca:f4:94:f9: 26:17:8a:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPbio8m7CzIS3oohYnHjajMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0MmNmM2VhM2Y0NjE5YWRkN2IxZjg1ZTVkYmM3NjhjZDNk MTc0MmQwHhcNMjUxMjExMjIwMDM2WhcNMjUxMjEyMjIwMDM2WjAzMTEwLwYDVQQD EyhiNDAxYTQ5ZGE5Yzg0Mzc0NzIzYzcwNzI2OTU2NDUwZmE4YmY0YWVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgafc9WY9SZSszmYB2DE1I6R18RO jeWiXggQhV/da4fab/XH6eQMASNdUMVt36n3SKSF5FkoXV8dnnwIjst4pTKSMh9o 8is6zb7aKvPVF3aVELbru0CuoHg6CE1dR+oP2s6jdQ2lxxaSdJz7SZZrXwg0KRUD LDOMRA4TU1ficSBokwQy151A9AsaxLDXRiKwuSnF4YK04nqDFBOYLbTmOoPW3pI/ SpiCpM6BBzjagZJeatgaasy8ovih+ML3wAk+ytXXCemkZns9izlk80dfffc9RMeB IMAZYkBbS10WcC5euWSnKXOvRbMgfSyvUp0R8zV2lVMZPgioflC0hJhYUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLQBpJ2pyEN0cjxwcmlWRQ+ov0rsMB8GA1UdIwQY MBaAFKQs8+o/Rhmt17H4Xl28dozT0XQtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEN6ejZqOUdHYTNYc2ZoZVhieDJqTlBSZEMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC81NzI2OWItMGY3MC00NmNmLWJjZTIt Yzc3NzUxNTlmYzgyLzEvcEN6ejZqOUdHYTNYc2ZoZVhieDJqTlBSZEMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC81NzI2OWItMGY3MC00NmNmLWJjZTItYzc3NzUxNTlmYzgy LzEvcEN6ejZqOUdHYTNYc2ZoZVhieDJqTlBSZEMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk8huCGwh CTKaAydk2IUkk0QNx6FAZzn+Xn/3gs9wEqMv+Ao7mlwmSvxycghvUEZce0GW9qbm FKQDK9q9vQDqyGRfiHolOkxm5gvjA3dw9stUV21gChWNURDb6kLpIDSX1poY5Iu+ Wysl1PdulAqm3NkZCU3KEWYSrM7l6FDyWdcSMp+tMQ4rcnZktqApXM1imf6Vglhu q3Dmp5SePs/J/cTQzhyl5Ldt6U68g9GD5yOURYLkMZdpjzAhJqxRoOHnjwKZX4NB ypJVSC6fqirMP4zxLBMHtMnHzay8gygglMOHc9s5htHjqYp63+SPZ7y4v0+0CCpg d2rK9JT5JheKvw== -----END CERTIFICATE-----Generated at Fri Dec 12 06:39:38 2025 by rpki-client