This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft File: PgzNJQR7nLi28Bhnze3oJW9zSiM.mft (raw, json) Hash identifier: tDOYLCH3AY+sVt7L7BY31CPdFeyU6a9Gok/YeGBsMLc= Subject key identifier: EB:72:C6:06:26:5F:D9:92:31:DA:0D:C6:9B:11:CD:DC:CB:EF:7B:9A Authority key identifier: 3E:0C:CD:25:04:7B:9C:B8:B6:F0:18:67:CD:ED:E8:25:6F:73:4A:23 Certificate issuer: /CN=3e0ccd25047b9cb8b6f01867cdede8256f734a23 Certificate serial: 019B33B210952750D287BE1982B9990DDF08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PgzNJQR7nLi28Bhnze3oJW9zSiM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft Manifest number: 0A3A Signing time: Thu 18 Dec 2025 23:01:06 +0000 Manifest this update: Thu 18 Dec 2025 23:01:06 +0000 Manifest next update: Fri 19 Dec 2025 23:01:06 +0000 Files and hashes: 1: PgzNJQR7nLi28Bhnze3oJW9zSiM.crl (hash: VF8jZEeI9PGo/VWSygRWbcmiMBP2K7EgJX/BAsRZNIY=) 2: tNlE-RsS8yP8q3aEd77vtdKV4ao.roa (hash: 0s1wr6faxjcsfPekqZ/FFwhO5dh5LLtuhFGeIZLAT0s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft rsync://rpki.ripe.net/repository/DEFAULT/PgzNJQR7nLi28Bhnze3oJW9zSiM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:b2:10:95:27:50:d2:87:be:19:82:b9:99:0d:df:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e0ccd25047b9cb8b6f01867cdede8256f734a23 Validity Not Before: Dec 18 23:01:06 2025 GMT Not After : Dec 19 23:01:06 2025 GMT Subject: CN=eb72c606265fd99231da0dc69b11cddccbef7b9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:8d:75:9e:ee:c6:9e:d7:0c:8f:fe:37:a4:af: fa:83:0b:b0:a6:50:91:ac:1b:56:9d:f0:d6:62:56: a3:8d:78:bc:08:57:8b:77:e1:05:db:68:e9:0f:3b: d6:6f:89:cf:d1:04:ab:08:34:21:5f:cf:96:5c:c1: bb:45:18:da:a5:02:ca:67:9b:e8:41:92:c3:36:f2: b6:52:0a:b1:d8:db:0e:26:21:02:94:74:c4:01:16: 0c:b9:cf:96:92:30:72:fb:20:50:fd:67:04:37:c1: 33:e2:1a:08:8c:af:fb:cb:f1:4b:ee:c4:54:f9:b3: 34:75:fb:18:e2:dd:a1:21:59:46:fa:ca:f6:d4:07: bf:4d:21:1a:66:86:ec:87:05:1f:01:d8:d7:d4:79: 4a:2b:d3:96:c1:72:00:ad:8a:7f:f8:43:df:17:0d: e8:7e:2d:dd:50:80:e5:78:fe:c0:4a:e0:14:50:27: fc:b6:78:89:c5:89:16:bb:c1:5a:16:44:98:e5:97: 28:cf:fb:1c:17:c5:ce:a2:92:fe:c1:6a:9a:5e:a7: dd:ed:d1:45:8c:32:86:3d:fa:9a:d5:af:47:21:8c: b6:f4:e3:bb:f0:82:d4:1b:3b:90:6e:95:61:c4:d4: 20:91:30:b8:4a:40:31:de:62:a0:19:5f:67:b6:61: f6:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:72:C6:06:26:5F:D9:92:31:DA:0D:C6:9B:11:CD:DC:CB:EF:7B:9A X509v3 Authority Key Identifier: keyid:3E:0C:CD:25:04:7B:9C:B8:B6:F0:18:67:CD:ED:E8:25:6F:73:4A:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PgzNJQR7nLi28Bhnze3oJW9zSiM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:aa:83:d1:cc:52:ca:cb:49:5d:c0:02:af:a6:db:f9:1b:cf: 86:79:cb:0c:6a:53:e6:6f:24:73:90:66:72:77:95:e4:10:10: 81:62:04:71:fc:fc:22:bc:70:fe:4c:de:a3:f5:f2:77:43:dd: 7f:38:ff:8c:89:a0:c6:d4:65:6c:2b:87:f5:f3:9f:e0:18:65: 34:06:5c:d6:3c:9c:dd:54:f0:d8:9d:36:9b:4e:4d:d5:ef:7b: c1:06:56:a4:74:7d:e1:c2:b1:8b:c8:52:be:b9:b8:87:a7:78: 20:5c:04:e7:dd:6d:94:98:9a:21:ec:8e:6e:0b:7a:dd:f4:88: 5c:53:7f:d5:8d:fb:98:79:af:3a:03:fe:7b:14:22:24:26:14: 3a:04:12:2e:46:d1:2e:1f:a0:89:b8:24:54:de:33:cc:3e:6d: d4:c4:1b:7b:12:89:03:c9:ee:96:e6:84:47:28:e2:75:f6:cb: b1:3e:5f:2a:b5:d4:9e:06:ca:4f:ba:1e:eb:6a:75:36:d7:47: d8:15:8e:45:a3:ca:92:41:15:a8:fb:5f:bf:81:ba:4c:6e:12: 31:cc:ed:02:82:06:10:2b:2b:87:13:bf:47:46:33:0c:63:c1: 46:3c:52:18:17:78:4e:04:cb:27:7a:60:31:bd:35:c0:2b:68: b5:56:aa:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszshCVJ1DSh74ZgrmZDd8IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlMGNjZDI1MDQ3YjljYjhiNmYwMTg2N2NkZWRlODI1NmY3 MzRhMjMwHhcNMjUxMjE4MjMwMTA2WhcNMjUxMjE5MjMwMTA2WjAzMTEwLwYDVQQD EyhlYjcyYzYwNjI2NWZkOTkyMzFkYTBkYzY5YjExY2RkY2NiZWY3YjlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoI11nu7GntcMj/43pK/6gwuwplCR rBtWnfDWYlajjXi8CFeLd+EF22jpDzvWb4nP0QSrCDQhX8+WXMG7RRjapQLKZ5vo QZLDNvK2Ugqx2NsOJiEClHTEARYMuc+WkjBy+yBQ/WcEN8Ez4hoIjK/7y/FL7sRU +bM0dfsY4t2hIVlG+sr21Ae/TSEaZobshwUfAdjX1HlKK9OWwXIArYp/+EPfFw3o fi3dUIDleP7ASuAUUCf8tniJxYkWu8FaFkSY5Zcoz/scF8XOopL+wWqaXqfd7dFF jDKGPfqa1a9HIYy29OO78ILUGzuQbpVhxNQgkTC4SkAx3mKgGV9ntmH2TQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOtyxgYmX9mSMdoNxpsRzdzL73uaMB8GA1UdIwQY MBaAFD4MzSUEe5y4tvAYZ83t6CVvc0ojMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGd6TkpRUjduTGkyOEJobnplM29KVzl6U2lNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC85Yzg2MzEtZGM2YS00NWMyLWJjZjkt OWNkMDE3MjQzYTA2LzEvUGd6TkpRUjduTGkyOEJobnplM29KVzl6U2lNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC85Yzg2MzEtZGM2YS00NWMyLWJjZjktOWNkMDE3MjQzYTA2 LzEvUGd6TkpRUjduTGkyOEJobnplM29KVzl6U2lNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtKqD0cxS ystJXcACr6bb+RvPhnnLDGpT5m8kc5BmcneV5BAQgWIEcfz8Irxw/kzeo/Xyd0Pd fzj/jImgxtRlbCuH9fOf4BhlNAZc1jyc3VTw2J02m05N1e97wQZWpHR94cKxi8hS vrm4h6d4IFwE591tlJiaIeyObgt63fSIXFN/1Y37mHmvOgP+exQiJCYUOgQSLkbR Lh+gibgkVN4zzD5t1MQbexKJA8nuluaERyjidfbLsT5fKrXUngbKT7oe62p1NtdH 2BWORaPKkkEVqPtfv4G6TG4SMcztAoIGECsrhxO/R0YzDGPBRjxSGBd4TgTLJ3pg Mb01wCtotVaqAw== -----END CERTIFICATE-----Generated at Fri Dec 19 08:08:12 2025 by rpki-client