This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/26e21e-db81-46c7-955a-77d315cc16aa/1/pj_zsazNggGkEWyYdXM5I0KJgB4.mft File: pj_zsazNggGkEWyYdXM5I0KJgB4.mft (raw, json) Hash identifier: S0KscTOqYs/PWR+icsoXPkrdUlxlQ7J1iCjEapfnHWY= Subject key identifier: D7:BA:F3:39:75:77:13:71:49:A4:B5:DB:26:EC:D9:FC:48:62:F0:E1 Authority key identifier: A6:3F:F3:B1:AC:CD:82:01:A4:11:6C:98:75:73:39:23:42:89:80:1E Certificate issuer: /CN=a63ff3b1accd8201a4116c98757339234289801e Certificate serial: 019B206236BA5FF4D1EBB1CC19E60EBAE201 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pj_zsazNggGkEWyYdXM5I0KJgB4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/26e21e-db81-46c7-955a-77d315cc16aa/1/pj_zsazNggGkEWyYdXM5I0KJgB4.mft Manifest number: 0640 Signing time: Mon 15 Dec 2025 05:01:06 +0000 Manifest this update: Mon 15 Dec 2025 05:01:06 +0000 Manifest next update: Tue 16 Dec 2025 05:01:06 +0000 Files and hashes: 1: mbvBXE7Ze3cn1Ev3k2dL5On_YTs.roa (hash: YK3JNqfED7VqhxPOSKGy2n6p5fg+7MEO42BqGf+EejI=) 2: pj_zsazNggGkEWyYdXM5I0KJgB4.crl (hash: yIUNKLrymZ4ARSaPk05Rbh9YgLZFiFtUlSCBxM/has8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/26e21e-db81-46c7-955a-77d315cc16aa/1/pj_zsazNggGkEWyYdXM5I0KJgB4.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/26e21e-db81-46c7-955a-77d315cc16aa/1/pj_zsazNggGkEWyYdXM5I0KJgB4.mft rsync://rpki.ripe.net/repository/DEFAULT/pj_zsazNggGkEWyYdXM5I0KJgB4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 05:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:62:36:ba:5f:f4:d1:eb:b1:cc:19:e6:0e:ba:e2:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a63ff3b1accd8201a4116c98757339234289801e Validity Not Before: Dec 15 05:01:06 2025 GMT Not After : Dec 16 05:01:06 2025 GMT Subject: CN=d7baf3397577137149a4b5db26ecd9fc4862f0e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:2c:29:ba:5b:0f:29:fd:48:9e:36:3f:60:d6: d6:32:ce:7d:d1:f6:c2:f9:d7:57:41:f7:58:3c:af: 98:55:e9:e5:7b:60:ae:62:5c:6a:2a:9f:3b:12:7d: 1c:f3:f1:c9:1a:bd:66:5a:53:21:22:b9:57:d9:10: 20:df:d7:c4:19:0f:a3:11:18:79:d8:ab:22:e1:67: 53:8e:c2:b0:ee:b6:d9:46:65:cd:c6:8a:45:b4:47: ea:04:d8:62:7b:52:a1:25:21:cc:4d:2a:6e:c8:ab: 56:cc:3a:0d:ba:5b:2a:72:87:bf:25:8f:47:b5:54: 7c:ca:43:aa:2d:44:3d:b3:a2:a2:ac:65:d5:d9:a6: cd:74:a9:be:06:31:db:ab:0d:5c:9f:f8:bf:4b:25: 0c:fe:33:55:27:08:07:17:5a:a3:ec:66:80:5e:8b: 75:28:0b:8f:7f:c4:65:da:56:b8:39:84:18:c8:57: d8:67:14:55:fa:20:e9:23:a4:c4:71:bb:5c:ea:43: e7:cb:60:b0:c2:8d:e0:04:94:81:c2:08:af:96:34: 85:4d:41:d8:b6:31:a9:80:6e:ee:40:f4:98:14:b5: ae:8f:cb:b6:ae:1a:b0:23:65:0f:26:11:83:a1:fe: 73:24:ad:ea:68:aa:ce:b9:2c:ed:42:a6:f7:ae:a8: 04:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:BA:F3:39:75:77:13:71:49:A4:B5:DB:26:EC:D9:FC:48:62:F0:E1 X509v3 Authority Key Identifier: keyid:A6:3F:F3:B1:AC:CD:82:01:A4:11:6C:98:75:73:39:23:42:89:80:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pj_zsazNggGkEWyYdXM5I0KJgB4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/26e21e-db81-46c7-955a-77d315cc16aa/1/pj_zsazNggGkEWyYdXM5I0KJgB4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/26e21e-db81-46c7-955a-77d315cc16aa/1/pj_zsazNggGkEWyYdXM5I0KJgB4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:9c:51:c9:0d:f7:88:ff:64:23:ac:37:f5:e5:b5:99:5c:6f: 6c:72:ab:08:14:24:e2:68:51:e8:28:42:54:25:96:a5:6c:3b: c7:2c:d4:a0:13:92:fc:74:cc:3a:ec:52:16:ad:45:3f:ac:e7: 83:8e:69:3e:a8:99:01:00:37:b4:d8:61:75:9c:d5:d2:28:89: c6:cc:8a:b4:5c:bf:87:e6:23:c5:ef:49:93:80:e9:8d:4d:ab: 3f:2d:fe:0a:be:a0:d3:f8:0e:41:b3:8f:0e:d0:31:e8:96:4a: b6:46:13:62:b4:63:6e:c0:57:d5:99:95:08:83:ff:10:f4:92: 56:92:df:da:f4:51:e6:a5:53:10:1e:6a:ad:1c:ac:a2:0c:ff: 59:97:ae:ff:2d:42:e6:ed:3d:cd:76:e9:2a:50:17:29:73:ac: 7f:6f:b5:5f:c4:6d:5d:ac:ca:6d:f3:6d:a2:2a:d3:26:1b:a1: 23:f9:94:64:16:01:8a:97:54:51:d2:8e:c3:0c:68:bf:b7:50: c8:9f:9f:3d:66:cb:4b:43:e3:c8:e6:8c:4f:73:06:7d:20:00: dd:87:8d:3f:9e:16:01:a6:ae:85:ad:4d:ce:63:df:82:53:d5: 56:d3:57:fb:98:62:be:63:cb:d6:07:91:08:c9:7b:ae:17:fe: 47:12:6c:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsgYja6X/TR67HMGeYOuuIBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2M2ZmM2IxYWNjZDgyMDFhNDExNmM5ODc1NzMzOTIzNDI4 OTgwMWUwHhcNMjUxMjE1MDUwMTA2WhcNMjUxMjE2MDUwMTA2WjAzMTEwLwYDVQQD EyhkN2JhZjMzOTc1NzcxMzcxNDlhNGI1ZGIyNmVjZDlmYzQ4NjJmMGUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2SwpulsPKf1InjY/YNbWMs590fbC +ddXQfdYPK+YVenle2CuYlxqKp87En0c8/HJGr1mWlMhIrlX2RAg39fEGQ+jERh5 2Ksi4WdTjsKw7rbZRmXNxopFtEfqBNhie1KhJSHMTSpuyKtWzDoNulsqcoe/JY9H tVR8ykOqLUQ9s6KirGXV2abNdKm+BjHbqw1cn/i/SyUM/jNVJwgHF1qj7GaAXot1 KAuPf8Rl2la4OYQYyFfYZxRV+iDpI6TEcbtc6kPny2Cwwo3gBJSBwgivljSFTUHY tjGpgG7uQPSYFLWuj8u2rhqwI2UPJhGDof5zJK3qaKrOuSztQqb3rqgE0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNe68zl1dxNxSaS12ybs2fxIYvDhMB8GA1UdIwQY MBaAFKY/87GszYIBpBFsmHVzOSNCiYAeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGpfenNhek5nZ0drRVd5WWRYTTVJMEtKZ0I0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8yNmUyMWUtZGI4MS00NmM3LTk1NWEt NzdkMzE1Y2MxNmFhLzEvcGpfenNhek5nZ0drRVd5WWRYTTVJMEtKZ0I0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC8yNmUyMWUtZGI4MS00NmM3LTk1NWEtNzdkMzE1Y2MxNmFh LzEvcGpfenNhek5nZ0drRVd5WWRYTTVJMEtKZ0I0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE5xRyQ33 iP9kI6w39eW1mVxvbHKrCBQk4mhR6ChCVCWWpWw7xyzUoBOS/HTMOuxSFq1FP6zn g45pPqiZAQA3tNhhdZzV0iiJxsyKtFy/h+Yjxe9Jk4DpjU2rPy3+Cr6g0/gOQbOP DtAx6JZKtkYTYrRjbsBX1ZmVCIP/EPSSVpLf2vRR5qVTEB5qrRysogz/WZeu/y1C 5u09zXbpKlAXKXOsf2+1X8RtXazKbfNtoirTJhuhI/mUZBYBipdUUdKOwwxov7dQ yJ+fPWbLS0PjyOaMT3MGfSAA3YeNP54WAaauha1NzmPfglPVVtNX+5hivmPL1geR CMl7rhf+RxJs8Q== -----END CERTIFICATE-----Generated at Mon Dec 15 12:11:12 2025 by rpki-client