This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3d7b8a-e074-4f16-a629-2128d840c429/1/pgD8lkBCiaxYthBH3fhiGH9asn4.mft File: pgD8lkBCiaxYthBH3fhiGH9asn4.mft (raw, json) Hash identifier: 1RGIzZA/7/x2VNRGVeMAIY1WsghJnY402k8XeMmjJhU= Subject key identifier: 9F:D6:67:02:58:B2:B8:12:CB:7A:83:65:45:64:63:10:46:68:D7:86 Authority key identifier: A6:00:FC:96:40:42:89:AC:58:B6:10:47:DD:F8:62:18:7F:5A:B2:7E Certificate issuer: /CN=a600fc96404289ac58b61047ddf862187f5ab27e Certificate serial: 019B104A555420FB3286B63BCBADAC4CE4A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgD8lkBCiaxYthBH3fhiGH9asn4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3d7b8a-e074-4f16-a629-2128d840c429/1/pgD8lkBCiaxYthBH3fhiGH9asn4.mft Manifest number: 1772 Signing time: Fri 12 Dec 2025 02:01:05 +0000 Manifest this update: Fri 12 Dec 2025 02:01:05 +0000 Manifest next update: Sat 13 Dec 2025 02:01:05 +0000 Files and hashes: 1: BFaJClF3p4qT7dCc22lWmwjl7l0.roa (hash: 8kW6E4fmgwFFVui51mNwFwgDzJW114zoN23nienu6x8=) 2: pgD8lkBCiaxYthBH3fhiGH9asn4.crl (hash: arAIYYSX0CV4P7HRXzxh2h2yEqNaZqTyf+qhohSeBhQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3d7b8a-e074-4f16-a629-2128d840c429/1/pgD8lkBCiaxYthBH3fhiGH9asn4.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/3d7b8a-e074-4f16-a629-2128d840c429/1/pgD8lkBCiaxYthBH3fhiGH9asn4.mft rsync://rpki.ripe.net/repository/DEFAULT/pgD8lkBCiaxYthBH3fhiGH9asn4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:4a:55:54:20:fb:32:86:b6:3b:cb:ad:ac:4c:e4:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a600fc96404289ac58b61047ddf862187f5ab27e Validity Not Before: Dec 12 02:01:05 2025 GMT Not After : Dec 13 02:01:05 2025 GMT Subject: CN=9fd6670258b2b812cb7a8365456463104668d786 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:bc:10:6c:89:72:80:89:60:38:84:e6:c5:05: 86:e4:01:f3:c6:1d:ed:bc:b4:9e:72:a7:8f:30:b0: 01:b5:c6:52:43:47:90:f1:37:af:41:d4:8f:6c:f2: c2:36:2a:c8:e5:f3:88:ef:71:5c:f2:3b:71:f0:1f: 7d:82:23:7d:1e:45:dc:78:33:a2:b9:a2:aa:f8:10: b8:04:e7:e9:e3:1f:31:9c:73:7e:62:5a:31:83:cb: 03:f9:28:b2:3c:d0:da:11:08:45:bb:7a:54:8c:67: 26:b7:82:e3:e0:f9:52:1c:59:65:46:eb:94:c3:f8: 5a:d2:f1:69:b1:e8:01:0e:d0:b9:99:ae:16:58:7c: 27:95:f6:bf:a1:74:27:b8:71:76:f4:54:6c:07:c2: fa:b9:c8:b3:3b:3c:1f:01:e6:45:31:29:73:c5:1e: 36:27:a0:73:6c:e2:14:b1:9a:f3:0e:3d:a4:04:46: 06:9b:18:f9:25:c3:a9:1e:ee:0f:d6:15:5f:94:d1: 17:b9:e3:98:80:16:0b:5c:94:00:c4:b1:74:90:a1: 44:02:2d:4d:15:4e:bd:b3:b0:af:b8:23:0e:c5:7d: ca:64:4a:f7:17:3d:c2:35:6b:1f:f7:b1:e1:bf:45: 9d:b8:ff:65:b8:2f:78:cc:cc:8b:33:d4:fc:f2:77: 5d:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:D6:67:02:58:B2:B8:12:CB:7A:83:65:45:64:63:10:46:68:D7:86 X509v3 Authority Key Identifier: keyid:A6:00:FC:96:40:42:89:AC:58:B6:10:47:DD:F8:62:18:7F:5A:B2:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgD8lkBCiaxYthBH3fhiGH9asn4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3d7b8a-e074-4f16-a629-2128d840c429/1/pgD8lkBCiaxYthBH3fhiGH9asn4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3d7b8a-e074-4f16-a629-2128d840c429/1/pgD8lkBCiaxYthBH3fhiGH9asn4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:6f:48:c4:5a:77:ce:b7:da:02:82:1b:77:83:b2:2c:53:7b: 3e:04:53:05:b9:f9:ed:c7:46:2c:e5:85:f8:62:f0:8a:92:70: 08:21:bc:6d:c7:d2:ad:fb:8d:af:66:0f:6f:1a:4b:88:9a:c1: 8a:d5:5b:08:a0:f6:85:bf:50:45:3c:80:5c:88:58:8a:9d:9d: 6b:c8:da:78:82:be:7b:c7:3c:60:a1:74:b8:96:e5:95:87:75: b8:6c:76:83:1a:46:c6:2e:4d:89:b9:72:14:8f:b9:8f:bc:3e: 5a:ea:64:ff:1b:c4:43:19:71:3a:2e:8f:c7:9a:9b:3a:3f:f8: bf:13:08:48:64:57:cb:fa:e7:9d:74:97:32:91:21:15:09:97: 48:a3:7e:78:9e:50:97:ac:c9:6f:b3:6c:78:e2:54:f3:17:20: 83:88:b7:1c:01:86:bf:9f:85:2c:da:32:db:e9:f2:ca:1d:81: 0e:80:62:47:0c:e0:de:16:a9:a8:c0:45:e0:07:d3:6f:54:c1: 75:55:25:30:2b:8c:b0:eb:16:d5:d6:d0:47:3d:9e:9f:bf:af: 56:3b:da:a4:32:06:07:c5:68:61:e0:e9:e1:d7:9f:95:59:17: f3:ef:55:c0:22:35:64:ce:3f:5f:7e:03:7c:f1:81:f3:dd:37: b1:a2:54:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQSlVUIPsyhrY7y62sTOShMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2MDBmYzk2NDA0Mjg5YWM1OGI2MTA0N2RkZjg2MjE4N2Y1 YWIyN2UwHhcNMjUxMjEyMDIwMTA1WhcNMjUxMjEzMDIwMTA1WjAzMTEwLwYDVQQD Eyg5ZmQ2NjcwMjU4YjJiODEyY2I3YTgzNjU0NTY0NjMxMDQ2NjhkNzg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7wQbIlygIlgOITmxQWG5AHzxh3t vLSecqePMLABtcZSQ0eQ8TevQdSPbPLCNirI5fOI73Fc8jtx8B99giN9HkXceDOi uaKq+BC4BOfp4x8xnHN+Yloxg8sD+SiyPNDaEQhFu3pUjGcmt4Lj4PlSHFllRuuU w/ha0vFpsegBDtC5ma4WWHwnlfa/oXQnuHF29FRsB8L6ucizOzwfAeZFMSlzxR42 J6BzbOIUsZrzDj2kBEYGmxj5JcOpHu4P1hVflNEXueOYgBYLXJQAxLF0kKFEAi1N FU69s7CvuCMOxX3KZEr3Fz3CNWsf97Hhv0WduP9luC94zMyLM9T88nddnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ/WZwJYsrgSy3qDZUVkYxBGaNeGMB8GA1UdIwQY MBaAFKYA/JZAQomsWLYQR934Yhh/WrJ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGdEOGxrQkNpYXhZdGhCSDNmaGlHSDlhc240LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zZDdiOGEtZTA3NC00ZjE2LWE2Mjkt MjEyOGQ4NDBjNDI5LzEvcGdEOGxrQkNpYXhZdGhCSDNmaGlHSDlhc240Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS8zZDdiOGEtZTA3NC00ZjE2LWE2MjktMjEyOGQ4NDBjNDI5 LzEvcGdEOGxrQkNpYXhZdGhCSDNmaGlHSDlhc240LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc29IxFp3 zrfaAoIbd4OyLFN7PgRTBbn57cdGLOWF+GLwipJwCCG8bcfSrfuNr2YPbxpLiJrB itVbCKD2hb9QRTyAXIhYip2da8jaeIK+e8c8YKF0uJbllYd1uGx2gxpGxi5Nibly FI+5j7w+Wupk/xvEQxlxOi6Px5qbOj/4vxMISGRXy/rnnXSXMpEhFQmXSKN+eJ5Q l6zJb7NseOJU8xcgg4i3HAGGv5+FLNoy2+nyyh2BDoBiRwzg3hapqMBF4AfTb1TB dVUlMCuMsOsW1dbQRz2en7+vVjvapDIGB8VoYeDp4deflVkX8+9VwCI1ZM4/X34D fPGB8903saJUBg== -----END CERTIFICATE-----Generated at Fri Dec 12 05:24:06 2025 by rpki-client