This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/e83bb9-a5c2-4774-9ebb-ae327dbe45c9/1/PZ--FcPNteA0NeJM9i8W-2xiOWw.mft File: PZ--FcPNteA0NeJM9i8W-2xiOWw.mft (raw, json) Hash identifier: qbxjaJ2dh4bkiuaLL+fKBlFw/HfFz/i7tgzOty7+cVA= Subject key identifier: 11:40:B4:9C:96:8D:CD:15:01:B5:B2:32:09:CC:5A:B8:32:4F:40:0A Authority key identifier: 3D:9F:BE:15:C3:CD:B5:E0:34:35:E2:4C:F6:2F:16:FB:6C:62:39:6C Certificate issuer: /CN=3d9fbe15c3cdb5e03435e24cf62f16fb6c62396c Certificate serial: 019B41A4664A6EAC044D182C6BBBD5C7E417 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PZ--FcPNteA0NeJM9i8W-2xiOWw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/e83bb9-a5c2-4774-9ebb-ae327dbe45c9/1/PZ--FcPNteA0NeJM9i8W-2xiOWw.mft Manifest number: 178B Signing time: Sun 21 Dec 2025 16:00:51 +0000 Manifest this update: Sun 21 Dec 2025 16:00:51 +0000 Manifest next update: Mon 22 Dec 2025 16:00:51 +0000 Files and hashes: 1: Du4r0IcScgI4YpWJ-9I9INdoB6g.roa (hash: 5uHGYRf/yqBocoz7nK2AWJUng6JU07jGh7qJ3ZcIHek=) 2: PZ--FcPNteA0NeJM9i8W-2xiOWw.crl (hash: ff58ld92i6gQbQBFGsPfoCGGspJ+gLX5sDs0PMLmUhU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/e83bb9-a5c2-4774-9ebb-ae327dbe45c9/1/PZ--FcPNteA0NeJM9i8W-2xiOWw.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/e83bb9-a5c2-4774-9ebb-ae327dbe45c9/1/PZ--FcPNteA0NeJM9i8W-2xiOWw.mft rsync://rpki.ripe.net/repository/DEFAULT/PZ--FcPNteA0NeJM9i8W-2xiOWw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:a4:66:4a:6e:ac:04:4d:18:2c:6b:bb:d5:c7:e4:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d9fbe15c3cdb5e03435e24cf62f16fb6c62396c Validity Not Before: Dec 21 16:00:51 2025 GMT Not After : Dec 22 16:00:51 2025 GMT Subject: CN=1140b49c968dcd1501b5b23209cc5ab8324f400a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:84:74:49:65:5e:7d:08:80:a6:75:24:32:e9: 76:86:f0:80:53:07:1b:50:c8:df:9e:e2:3b:74:9f: ff:c2:43:0c:ab:fc:42:0a:11:8a:ba:f6:c7:68:33: 57:e6:f1:05:7b:6c:7a:2b:48:ba:cf:80:22:f2:bd: 15:3f:eb:f0:5e:6f:9c:33:cd:2b:a1:df:58:43:da: d1:31:93:c6:a7:64:38:2e:98:87:c0:05:50:da:b6: 2e:0c:40:b0:38:d0:18:1f:b6:ee:1c:ec:26:e2:76: f0:8d:41:fb:24:1a:af:73:6b:78:9e:c2:7b:bd:3c: 6e:f5:a4:c8:e6:31:88:99:bf:f5:07:b1:22:56:8e: 2f:b7:1e:f0:df:11:90:6b:fa:6c:d4:69:91:6b:29: c0:a7:65:d8:b0:ae:19:50:68:ff:93:7e:ca:c2:0b: 30:15:4c:38:9c:a0:eb:8a:21:84:a3:23:c6:a6:af: 8d:62:01:14:1c:f3:db:b0:be:51:6e:2c:bb:cb:c8: 0e:ef:0b:a9:a4:30:5b:e1:07:f9:59:30:22:c0:bc: 1f:f7:d4:d1:9d:a8:b5:96:7d:98:07:29:a7:32:fc: 21:8f:e9:37:cf:61:84:f4:70:2c:f7:84:7a:7e:67: 94:f2:84:5d:1e:1a:73:a6:77:b1:5d:55:88:c7:62: 57:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:40:B4:9C:96:8D:CD:15:01:B5:B2:32:09:CC:5A:B8:32:4F:40:0A X509v3 Authority Key Identifier: keyid:3D:9F:BE:15:C3:CD:B5:E0:34:35:E2:4C:F6:2F:16:FB:6C:62:39:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PZ--FcPNteA0NeJM9i8W-2xiOWw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e83bb9-a5c2-4774-9ebb-ae327dbe45c9/1/PZ--FcPNteA0NeJM9i8W-2xiOWw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e83bb9-a5c2-4774-9ebb-ae327dbe45c9/1/PZ--FcPNteA0NeJM9i8W-2xiOWw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:99:e1:a3:13:64:b4:93:ec:b1:b1:7b:b3:13:54:eb:29:5d: bd:30:26:b3:bf:a2:e1:3c:3e:f5:3d:7e:70:27:52:c2:9e:d2: d0:1d:e2:56:e2:2c:70:de:e6:7c:8c:ea:1c:c1:66:99:a6:35: 0f:b0:2b:fa:d0:5a:55:47:23:4b:93:cd:a0:80:fd:0c:34:3a: 91:ae:1f:e6:25:f1:11:fe:ba:a7:30:98:d6:f7:fd:05:e5:a3: 2f:fa:4f:28:eb:55:68:b1:8a:8d:5e:6f:84:ec:18:64:aa:3b: 9e:7d:a6:ba:31:59:f3:6e:87:cb:93:10:bb:1b:29:bd:e5:ca: 5b:1f:d1:9c:bd:c8:ab:12:f1:38:6f:ce:e2:a3:4f:b7:da:9d: 12:db:12:5b:44:28:61:a0:47:5f:d4:9e:00:38:d5:5c:89:95: f8:0a:61:f6:1d:b7:45:2d:7f:a7:96:0a:62:23:75:70:fd:08: 7e:8b:ce:4b:e7:c1:db:85:b9:bc:9e:e8:f9:a0:78:06:3b:69: 07:37:e1:54:6d:36:6a:de:0d:de:81:54:d2:7d:e6:35:ff:23: 8a:5f:17:3c:d3:d9:4e:f4:e3:10:0e:20:4b:22:e8:0e:75:b3: 1a:ad:9c:a7:27:0b:e2:d9:fc:5b:e7:a4:73:28:ac:36:a9:6a: af:43:92:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBpGZKbqwETRgsa7vVx+QXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkOWZiZTE1YzNjZGI1ZTAzNDM1ZTI0Y2Y2MmYxNmZiNmM2 MjM5NmMwHhcNMjUxMjIxMTYwMDUxWhcNMjUxMjIyMTYwMDUxWjAzMTEwLwYDVQQD EygxMTQwYjQ5Yzk2OGRjZDE1MDFiNWIyMzIwOWNjNWFiODMyNGY0MDBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIR0SWVefQiApnUkMul2hvCAUwcb UMjfnuI7dJ//wkMMq/xCChGKuvbHaDNX5vEFe2x6K0i6z4Ai8r0VP+vwXm+cM80r od9YQ9rRMZPGp2Q4LpiHwAVQ2rYuDECwONAYH7buHOwm4nbwjUH7JBqvc2t4nsJ7 vTxu9aTI5jGImb/1B7EiVo4vtx7w3xGQa/ps1GmRaynAp2XYsK4ZUGj/k37Kwgsw FUw4nKDriiGEoyPGpq+NYgEUHPPbsL5Rbiy7y8gO7wuppDBb4Qf5WTAiwLwf99TR nai1ln2YBymnMvwhj+k3z2GE9HAs94R6fmeU8oRdHhpzpnexXVWIx2JX/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBFAtJyWjc0VAbWyMgnMWrgyT0AKMB8GA1UdIwQY MBaAFD2fvhXDzbXgNDXiTPYvFvtsYjlsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFotLUZjUE50ZUEwTmVKTTlpOFctMnhpT1d3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9lODNiYjktYTVjMi00Nzc0LTllYmIt YWUzMjdkYmU0NWM5LzEvUFotLUZjUE50ZUEwTmVKTTlpOFctMnhpT1d3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9lODNiYjktYTVjMi00Nzc0LTllYmItYWUzMjdkYmU0NWM5 LzEvUFotLUZjUE50ZUEwTmVKTTlpOFctMnhpT1d3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm5nhoxNk tJPssbF7sxNU6yldvTAms7+i4Tw+9T1+cCdSwp7S0B3iVuIscN7mfIzqHMFmmaY1 D7Ar+tBaVUcjS5PNoID9DDQ6ka4f5iXxEf66pzCY1vf9BeWjL/pPKOtVaLGKjV5v hOwYZKo7nn2mujFZ826Hy5MQuxspveXKWx/RnL3IqxLxOG/O4qNPt9qdEtsSW0Qo YaBHX9SeADjVXImV+Aph9h23RS1/p5YKYiN1cP0IfovOS+fB24W5vJ7o+aB4Bjtp BzfhVG02at4N3oFU0n3mNf8jil8XPNPZTvTjEA4gSyLoDnWzGq2cpycL4tn8W+ek cyisNqlqr0OSmQ== -----END CERTIFICATE-----Generated at Sun Dec 21 22:58:19 2025 by rpki-client