This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft File: PgzNJQR7nLi28Bhnze3oJW9zSiM.mft (raw, json) Hash identifier: wj+JH33UrAhHicYi3RSIueV1T3l8dALp0Y0PX/TDVqc= Subject key identifier: 73:3B:EA:39:D7:C2:1E:F2:FC:EF:A4:BB:62:E3:9B:28:D2:A1:23:C5 Authority key identifier: 3E:0C:CD:25:04:7B:9C:B8:B6:F0:18:67:CD:ED:E8:25:6F:73:4A:23 Certificate issuer: /CN=3e0ccd25047b9cb8b6f01867cdede8256f734a23 Certificate serial: 019B262DCE55A9664E4417B01FB95477E432 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PgzNJQR7nLi28Bhnze3oJW9zSiM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft Manifest number: 0A33 Signing time: Tue 16 Dec 2025 08:01:34 +0000 Manifest this update: Tue 16 Dec 2025 08:01:34 +0000 Manifest next update: Wed 17 Dec 2025 08:01:34 +0000 Files and hashes: 1: PgzNJQR7nLi28Bhnze3oJW9zSiM.crl (hash: q47tkwpj/CHCMp0wvATHbuiK61tKWm2yy0eH52Mdbps=) 2: tNlE-RsS8yP8q3aEd77vtdKV4ao.roa (hash: 0s1wr6faxjcsfPekqZ/FFwhO5dh5LLtuhFGeIZLAT0s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft rsync://rpki.ripe.net/repository/DEFAULT/PgzNJQR7nLi28Bhnze3oJW9zSiM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 08:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:2d:ce:55:a9:66:4e:44:17:b0:1f:b9:54:77:e4:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e0ccd25047b9cb8b6f01867cdede8256f734a23 Validity Not Before: Dec 16 08:01:34 2025 GMT Not After : Dec 17 08:01:34 2025 GMT Subject: CN=733bea39d7c21ef2fcefa4bb62e39b28d2a123c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:26:18:c4:91:f4:84:52:38:66:a4:54:1a:3b: bc:be:ef:2d:6d:5f:22:ab:dd:dc:27:c0:19:0a:2c: d6:a9:bd:e8:ec:5e:26:d1:92:c5:95:91:e0:7f:cd: 17:4a:ca:98:94:56:5b:4b:70:36:20:71:56:cd:4c: 63:7e:0b:87:b7:cb:d3:e8:f0:59:8c:4e:a6:95:ca: 8e:7b:0c:9e:62:aa:4b:ed:39:76:8a:df:cd:2e:13: d0:c0:88:f3:3f:82:f9:4a:88:73:ce:8d:28:43:e9: ff:31:ea:50:bd:e9:ad:17:74:c2:5c:24:34:e3:ec: 54:4c:01:af:59:72:05:03:4e:c3:e7:74:bd:d6:a9: 58:38:ce:76:13:8c:7a:a5:12:fd:f0:45:86:7a:4e: b7:e7:99:e9:64:7f:52:31:67:39:08:ab:35:d5:1a: c0:20:5c:5a:a0:0d:86:66:a3:5b:cd:6e:6c:93:3f: c5:5e:c1:da:2c:ef:04:67:d0:cf:5a:a1:db:ab:0f: 91:cf:96:d9:14:9c:42:5c:2b:ef:25:a6:54:ea:19: f6:38:dc:57:f4:96:eb:51:ec:b3:66:44:65:ba:2d: 18:90:20:d8:e4:8d:34:49:c8:d5:fc:7e:97:9f:4c: 61:8e:40:fa:ea:4f:d0:20:52:f4:06:60:d5:1a:a4: bf:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:3B:EA:39:D7:C2:1E:F2:FC:EF:A4:BB:62:E3:9B:28:D2:A1:23:C5 X509v3 Authority Key Identifier: keyid:3E:0C:CD:25:04:7B:9C:B8:B6:F0:18:67:CD:ED:E8:25:6F:73:4A:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PgzNJQR7nLi28Bhnze3oJW9zSiM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:45:ec:99:72:5d:b1:a2:e5:ea:61:cb:d1:ab:75:41:09:c9: a6:cb:62:4b:46:50:21:74:df:04:1f:9a:bc:d2:07:0a:19:04: 8e:e0:b9:d4:e1:01:ba:0a:13:8b:4d:33:87:b2:ff:ff:2e:68: cb:73:40:33:db:e6:2c:3f:e6:c2:d6:6e:75:4b:0f:8f:59:11: 98:18:4d:d4:e7:e2:8e:4f:30:78:3c:27:0c:c4:50:5c:d6:c2: e2:fc:db:09:f7:e8:fc:3a:4b:a9:c3:3b:46:33:08:54:ab:31: 54:80:88:9a:bb:7c:8c:3b:25:95:53:6e:07:e7:39:7d:80:95: af:b3:46:c5:a8:b3:18:63:66:f7:a8:2a:2b:aa:78:ea:48:4d: 52:c2:f4:ac:98:b3:d9:1a:26:a6:62:c4:9f:8b:6b:41:21:57: 89:32:8b:dc:50:2a:76:00:69:de:87:b5:88:b0:92:8a:76:07: 44:4f:d9:a5:f1:6d:c1:99:0d:b6:67:47:3b:b0:8f:0c:74:d0: 6c:bf:99:02:2a:60:fd:9f:5e:27:a3:49:bb:3a:2b:7a:c0:fe: e2:72:a5:3b:a4:16:9d:f0:ff:ac:78:ea:e1:8c:61:91:cc:a4: b6:09:61:31:2d:ae:95:4d:dd:f9:ba:f1:8b:e5:a0:54:8a:68: c8:a6:5f:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsmLc5VqWZORBewH7lUd+QyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlMGNjZDI1MDQ3YjljYjhiNmYwMTg2N2NkZWRlODI1NmY3 MzRhMjMwHhcNMjUxMjE2MDgwMTM0WhcNMjUxMjE3MDgwMTM0WjAzMTEwLwYDVQQD Eyg3MzNiZWEzOWQ3YzIxZWYyZmNlZmE0YmI2MmUzOWIyOGQyYTEyM2M1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0yYYxJH0hFI4ZqRUGju8vu8tbV8i q93cJ8AZCizWqb3o7F4m0ZLFlZHgf80XSsqYlFZbS3A2IHFWzUxjfguHt8vT6PBZ jE6mlcqOewyeYqpL7Tl2it/NLhPQwIjzP4L5Sohzzo0oQ+n/MepQvemtF3TCXCQ0 4+xUTAGvWXIFA07D53S91qlYOM52E4x6pRL98EWGek6355npZH9SMWc5CKs11RrA IFxaoA2GZqNbzW5skz/FXsHaLO8EZ9DPWqHbqw+Rz5bZFJxCXCvvJaZU6hn2ONxX 9JbrUeyzZkRlui0YkCDY5I00ScjV/H6Xn0xhjkD66k/QIFL0BmDVGqS/oQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHM76jnXwh7y/O+ku2LjmyjSoSPFMB8GA1UdIwQY MBaAFD4MzSUEe5y4tvAYZ83t6CVvc0ojMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGd6TkpRUjduTGkyOEJobnplM29KVzl6U2lNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC85Yzg2MzEtZGM2YS00NWMyLWJjZjkt OWNkMDE3MjQzYTA2LzEvUGd6TkpRUjduTGkyOEJobnplM29KVzl6U2lNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC85Yzg2MzEtZGM2YS00NWMyLWJjZjktOWNkMDE3MjQzYTA2 LzEvUGd6TkpRUjduTGkyOEJobnplM29KVzl6U2lNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYkXsmXJd saLl6mHL0at1QQnJpstiS0ZQIXTfBB+avNIHChkEjuC51OEBugoTi00zh7L//y5o y3NAM9vmLD/mwtZudUsPj1kRmBhN1Ofijk8weDwnDMRQXNbC4vzbCffo/DpLqcM7 RjMIVKsxVICImrt8jDsllVNuB+c5fYCVr7NGxaizGGNm96gqK6p46khNUsL0rJiz 2RompmLEn4trQSFXiTKL3FAqdgBp3oe1iLCSinYHRE/ZpfFtwZkNtmdHO7CPDHTQ bL+ZAipg/Z9eJ6NJuzoresD+4nKlO6QWnfD/rHjq4YxhkcyktglhMS2ulU3d+brx i+WgVIpoyKZfiQ== -----END CERTIFICATE-----Generated at Tue Dec 16 14:40:49 2025 by rpki-client