This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/PGvK_z6ArkGaFdG8s24xmN744ic.mft File: PGvK_z6ArkGaFdG8s24xmN744ic.mft (raw, json) Hash identifier: 19CrRVFuR3CZC/pOIGsO0WdVN6iwKvYFNbL8g3u5+f4= Subject key identifier: 79:B7:CC:DE:E5:F2:C7:A6:44:35:A3:F9:66:83:63:96:A2:F9:F6:A4 Authority key identifier: 3C:6B:CA:FF:3E:80:AE:41:9A:15:D1:BC:B3:6E:31:98:DE:F8:E2:27 Certificate issuer: /CN=3c6bcaff3e80ae419a15d1bcb36e3198def8e227 Certificate serial: 019B19BB7905F585EDD180181ADBF7F0AEF8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PGvK_z6ArkGaFdG8s24xmN744ic.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/PGvK_z6ArkGaFdG8s24xmN744ic.mft Manifest number: 082C Signing time: Sat 13 Dec 2025 22:01:15 +0000 Manifest this update: Sat 13 Dec 2025 22:01:15 +0000 Manifest next update: Sun 14 Dec 2025 22:01:15 +0000 Files and hashes: 1: BneHQ-af6etJYnzgVpFHJTLWtfI.roa (hash: SK4P5sVwHnq6qFE+d1xG/bjzaly1qgrqi3Y+RExkIAE=) 2: PGvK_z6ArkGaFdG8s24xmN744ic.crl (hash: Ke+GNlDd84cBnZhwpESmXIOSMDE3+q1b74/oz2kOiEU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/PGvK_z6ArkGaFdG8s24xmN744ic.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/PGvK_z6ArkGaFdG8s24xmN744ic.mft rsync://rpki.ripe.net/repository/DEFAULT/PGvK_z6ArkGaFdG8s24xmN744ic.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 22:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:bb:79:05:f5:85:ed:d1:80:18:1a:db:f7:f0:ae:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c6bcaff3e80ae419a15d1bcb36e3198def8e227 Validity Not Before: Dec 13 22:01:15 2025 GMT Not After : Dec 14 22:01:15 2025 GMT Subject: CN=79b7ccdee5f2c7a64435a3f966836396a2f9f6a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:1b:48:0c:b1:8c:d5:4a:26:a5:b5:06:76:ee: e7:10:42:c4:20:eb:5c:a4:08:f9:42:2b:35:5a:b3: 6d:21:76:13:78:41:41:a8:18:60:12:87:f9:04:26: d2:b2:90:6f:93:45:96:c2:d0:04:b5:4c:10:ff:b9: fe:c5:b7:d3:25:3c:f4:a6:4e:7b:77:b4:5c:1f:80: 5e:22:6a:f5:3a:3e:b3:6c:e3:85:87:a5:42:20:d2: 2b:a1:5d:1b:2e:78:85:d6:df:6b:c0:18:0f:28:77: b2:45:4c:d6:83:1e:85:5c:99:23:1c:33:a4:a1:4d: 60:6d:79:ed:31:98:c5:56:8f:5a:20:23:07:26:77: cf:12:b7:67:59:1d:e0:bb:ac:0d:88:0b:1c:3c:b6: d7:31:ba:13:e0:08:8e:c6:98:57:ae:49:cd:db:4d: 23:ee:b3:cf:36:a1:6a:8f:27:14:c9:f5:63:fb:41: 71:6b:d4:b3:11:03:bd:49:f1:6a:9c:c7:80:5b:26: c7:20:6c:97:48:10:c7:bd:79:7b:7c:c7:21:11:4e: 31:7e:fb:67:f2:63:a4:e6:7b:ce:fb:98:8f:f7:34: 4a:16:e4:51:0a:c4:57:bc:34:89:a1:7f:36:8b:6b: f5:a6:e2:16:c6:8c:d4:50:85:b3:5a:25:fa:63:7f: 1a:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:B7:CC:DE:E5:F2:C7:A6:44:35:A3:F9:66:83:63:96:A2:F9:F6:A4 X509v3 Authority Key Identifier: keyid:3C:6B:CA:FF:3E:80:AE:41:9A:15:D1:BC:B3:6E:31:98:DE:F8:E2:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PGvK_z6ArkGaFdG8s24xmN744ic.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/PGvK_z6ArkGaFdG8s24xmN744ic.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/PGvK_z6ArkGaFdG8s24xmN744ic.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:4c:ab:8f:43:77:2c:82:4a:9e:4a:c6:e0:eb:ef:ad:56:4f: 3a:78:5c:03:3d:9b:a0:c2:7c:12:25:5e:50:6b:79:ce:e7:99: 91:4a:a8:49:a4:6b:34:05:c1:e6:a1:2e:22:9f:e2:c4:76:82: 12:9d:bd:01:4d:c7:13:df:55:25:e2:86:c3:01:19:88:a3:a1: b9:5d:53:df:6d:a3:80:17:c6:47:7e:b4:23:ba:6e:77:93:e1: 2d:6f:c2:25:5e:58:77:11:b7:32:8e:a9:77:f3:66:14:38:a1: 49:75:07:ed:01:03:e4:d7:34:00:8d:8e:97:6f:03:b5:8e:50: f6:f6:8c:6e:03:53:ca:e7:aa:cf:fb:1d:81:6d:72:39:d8:63: ec:d5:b1:f2:35:b9:d5:30:3b:aa:aa:9e:af:bc:72:f8:0e:c6: 65:7e:71:11:12:c7:97:f1:38:72:b0:4a:0d:58:4c:f8:28:ac: ef:a4:d4:bf:9c:d2:4d:93:68:bf:98:46:d9:df:a5:cf:a2:20: 6b:ad:f4:f1:11:a2:71:4b:95:d9:65:a6:9e:92:21:45:19:dd: 39:8d:22:ca:51:0f:e7:27:a4:4e:da:4d:2f:42:94:a1:e5:8f: 92:e2:4a:cf:93:64:fe:a9:71:24:b8:c0:25:54:8a:38:b4:c5: db:1c:92:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZu3kF9YXt0YAYGtv38K74MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjNmJjYWZmM2U4MGFlNDE5YTE1ZDFiY2IzNmUzMTk4ZGVm OGUyMjcwHhcNMjUxMjEzMjIwMTE1WhcNMjUxMjE0MjIwMTE1WjAzMTEwLwYDVQQD Eyg3OWI3Y2NkZWU1ZjJjN2E2NDQzNWEzZjk2NjgzNjM5NmEyZjlmNmE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxtIDLGM1UompbUGdu7nEELEIOtc pAj5Qis1WrNtIXYTeEFBqBhgEof5BCbSspBvk0WWwtAEtUwQ/7n+xbfTJTz0pk57 d7RcH4BeImr1Oj6zbOOFh6VCINIroV0bLniF1t9rwBgPKHeyRUzWgx6FXJkjHDOk oU1gbXntMZjFVo9aICMHJnfPErdnWR3gu6wNiAscPLbXMboT4AiOxphXrknN200j 7rPPNqFqjycUyfVj+0Fxa9SzEQO9SfFqnMeAWybHIGyXSBDHvXl7fMchEU4xfvtn 8mOk5nvO+5iP9zRKFuRRCsRXvDSJoX82i2v1puIWxozUUIWzWiX6Y38aOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHm3zN7l8semRDWj+WaDY5ai+fakMB8GA1UdIwQY MBaAFDxryv8+gK5BmhXRvLNuMZje+OInMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEd2S196NkFya0dhRmRHOHMyNHhtTjc0NGljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9mMzI4ZmYtOTI3Zi00MTE2LThlMzMt NDA0M2IyYzc3YmJmLzEvUEd2S196NkFya0dhRmRHOHMyNHhtTjc0NGljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi9mMzI4ZmYtOTI3Zi00MTE2LThlMzMtNDA0M2IyYzc3YmJm LzEvUEd2S196NkFya0dhRmRHOHMyNHhtTjc0NGljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFEyrj0N3 LIJKnkrG4OvvrVZPOnhcAz2boMJ8EiVeUGt5zueZkUqoSaRrNAXB5qEuIp/ixHaC Ep29AU3HE99VJeKGwwEZiKOhuV1T322jgBfGR360I7pud5PhLW/CJV5YdxG3Mo6p d/NmFDihSXUH7QED5Nc0AI2Ol28DtY5Q9vaMbgNTyueqz/sdgW1yOdhj7NWx8jW5 1TA7qqqer7xy+A7GZX5xERLHl/E4crBKDVhM+Cis76TUv5zSTZNov5hG2d+lz6Ig a6308RGicUuV2WWmnpIhRRndOY0iylEP5yekTtpNL0KUoeWPkuJKz5Nk/qlxJLjA JVSKOLTF2xySQQ== -----END CERTIFICATE-----Generated at Sun Dec 14 07:42:19 2025 by rpki-client