This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/ccbd44-63b3-4105-b39d-1a5559fdd4df/1/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.mft File: pgrUsV5cHP7Ar7H4GKdqCPGGOG0.mft (raw, json) Hash identifier: 14J9LwXfuThOQb/17GnCv0o+L+0BSRSwlwstWPKi0ik= Subject key identifier: 28:36:8E:61:88:B6:5C:00:0E:9A:50:8F:D7:E0:56:17:6A:52:A8:55 Authority key identifier: A6:0A:D4:B1:5E:5C:1C:FE:C0:AF:B1:F8:18:A7:6A:08:F1:86:38:6D Certificate issuer: /CN=a60ad4b15e5c1cfec0afb1f818a76a08f186386d Certificate serial: 019AF0BF7674154DE2364299EF43D205565C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/ccbd44-63b3-4105-b39d-1a5559fdd4df/1/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.mft Manifest number: 07B0 Signing time: Fri 05 Dec 2025 23:01:10 +0000 Manifest this update: Fri 05 Dec 2025 23:01:10 +0000 Manifest next update: Sat 06 Dec 2025 23:01:10 +0000 Files and hashes: 1: 0LPzaTRGADRQ7NYT2u33MSGVUAc.roa (hash: z6+o9T+5otMMS/QAipfJXTyY4jZN2xR3W6lhfsxnRH0=) 2: pgrUsV5cHP7Ar7H4GKdqCPGGOG0.crl (hash: GQpvmPLdqr5+Qiis0nL/j0emjVdMgHtI2PlLl7biK38=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/ccbd44-63b3-4105-b39d-1a5559fdd4df/1/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/ccbd44-63b3-4105-b39d-1a5559fdd4df/1/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.mft rsync://rpki.ripe.net/repository/DEFAULT/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 17:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:76:74:15:4d:e2:36:42:99:ef:43:d2:05:56:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a60ad4b15e5c1cfec0afb1f818a76a08f186386d Validity Not Before: Dec 5 23:01:10 2025 GMT Not After : Dec 6 23:01:10 2025 GMT Subject: CN=28368e6188b65c000e9a508fd7e056176a52a855 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c1:6b:ce:3c:04:2d:5b:c4:d1:27:0a:ac:0b: 20:fa:35:87:80:be:84:52:cb:16:83:98:a7:d8:0b: 73:78:b2:26:7b:d3:bb:c9:37:b1:74:91:45:71:21: 7a:95:a4:9e:71:14:60:a9:4b:4a:1f:9c:7d:3c:36: df:fc:35:15:e7:18:a0:7e:7a:b2:41:08:48:79:c6: 76:ac:a4:9a:03:e0:87:95:29:37:05:e4:fe:45:07: af:7c:f1:31:f7:ac:88:3d:b3:d6:8b:23:e2:d7:89: ef:cc:ec:6e:ca:23:9c:91:9f:58:4d:12:19:9c:13: b8:04:47:48:56:5c:ac:19:9a:79:cc:a1:f7:ae:74: d4:59:49:d1:50:8a:a7:1f:3c:52:5d:05:da:49:d9: fa:b1:0b:48:05:7b:2d:d9:c6:42:c9:8b:f5:be:8c: 66:95:12:80:25:a4:05:38:cb:1c:5f:41:a3:6f:f9: a0:03:d5:b9:69:e0:e8:79:7a:a2:80:fb:95:a1:f2: 00:b7:60:b6:0c:30:0f:56:ab:a0:a5:bc:c9:af:f0: 40:e9:b5:fe:b7:20:8a:94:f1:b9:4f:f6:a0:cc:22: 9a:ea:99:ea:72:4d:e1:8b:70:a4:09:17:31:59:50: 7d:b0:75:de:e8:59:aa:b3:4b:00:c5:14:68:21:be: 2c:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:36:8E:61:88:B6:5C:00:0E:9A:50:8F:D7:E0:56:17:6A:52:A8:55 X509v3 Authority Key Identifier: keyid:A6:0A:D4:B1:5E:5C:1C:FE:C0:AF:B1:F8:18:A7:6A:08:F1:86:38:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ccbd44-63b3-4105-b39d-1a5559fdd4df/1/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ccbd44-63b3-4105-b39d-1a5559fdd4df/1/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:00:e0:7a:c4:e6:ab:d3:a8:5f:b5:fd:93:88:3f:1e:28:f5: d4:f2:04:84:ba:c6:3b:03:2b:eb:e3:ea:a1:70:0b:fe:a4:4a: 2b:f4:bd:f8:42:16:93:38:7b:32:5b:b6:01:8f:de:5f:8f:2c: f7:a6:38:78:3d:17:51:46:97:71:4d:5e:db:54:22:ee:8a:69: f0:bc:bd:6d:df:72:26:d5:df:8d:1b:8f:d4:42:1a:7b:f8:18: 5d:40:7c:60:c7:25:6c:6a:d8:d0:7e:68:23:ae:27:01:37:01: 50:53:19:63:96:2c:09:9e:7c:fd:8f:75:5b:59:62:53:03:52: 95:5d:4c:9b:13:db:7e:b6:3b:7f:d8:d4:15:f9:38:5b:6a:2f: 98:3b:05:46:19:5f:51:d2:cd:8a:41:c5:bf:c4:9a:88:a4:cb: 19:b6:e9:0f:56:02:f0:ca:0b:67:26:38:36:03:e6:ad:b2:aa: 6c:d1:a9:01:0e:fe:97:db:72:63:16:98:30:e8:d6:4e:96:ec: 57:31:73:47:a6:e2:1b:ca:1b:56:76:a8:ef:4b:00:42:a6:bd: 61:ce:f7:f7:10:f0:ce:03:ef:f4:e9:93:4a:2b:b1:0f:34:d2: f3:8d:cb:3f:3a:e1:4f:f0:9a:04:8f:f6:d2:f3:ac:11:a0:48: b8:f7:43:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv3Z0FU3iNkKZ70PSBVZcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2MGFkNGIxNWU1YzFjZmVjMGFmYjFmODE4YTc2YTA4ZjE4 NjM4NmQwHhcNMjUxMjA1MjMwMTEwWhcNMjUxMjA2MjMwMTEwWjAzMTEwLwYDVQQD EygyODM2OGU2MTg4YjY1YzAwMGU5YTUwOGZkN2UwNTYxNzZhNTJhODU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMFrzjwELVvE0ScKrAsg+jWHgL6E UssWg5in2AtzeLIme9O7yTexdJFFcSF6laSecRRgqUtKH5x9PDbf/DUV5xigfnqy QQhIecZ2rKSaA+CHlSk3BeT+RQevfPEx96yIPbPWiyPi14nvzOxuyiOckZ9YTRIZ nBO4BEdIVlysGZp5zKH3rnTUWUnRUIqnHzxSXQXaSdn6sQtIBXst2cZCyYv1voxm lRKAJaQFOMscX0Gjb/mgA9W5aeDoeXqigPuVofIAt2C2DDAPVqugpbzJr/BA6bX+ tyCKlPG5T/agzCKa6pnqck3hi3CkCRcxWVB9sHXe6Fmqs0sAxRRoIb4saQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCg2jmGItlwADppQj9fgVhdqUqhVMB8GA1UdIwQY MBaAFKYK1LFeXBz+wK+x+BinagjxhjhtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGdyVXNWNWNIUDdBcjdINEdLZHFDUEdHT0cwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9jY2JkNDQtNjNiMy00MTA1LWIzOWQt MWE1NTU5ZmRkNGRmLzEvcGdyVXNWNWNIUDdBcjdINEdLZHFDUEdHT0cwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy9jY2JkNDQtNjNiMy00MTA1LWIzOWQtMWE1NTU5ZmRkNGRm LzEvcGdyVXNWNWNIUDdBcjdINEdLZHFDUEdHT0cwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeADgesTm q9OoX7X9k4g/Hij11PIEhLrGOwMr6+PqoXAL/qRKK/S9+EIWkzh7Mlu2AY/eX48s 96Y4eD0XUUaXcU1e21Qi7opp8Ly9bd9yJtXfjRuP1EIae/gYXUB8YMclbGrY0H5o I64nATcBUFMZY5YsCZ58/Y91W1liUwNSlV1MmxPbfrY7f9jUFfk4W2ovmDsFRhlf UdLNikHFv8SaiKTLGbbpD1YC8MoLZyY4NgPmrbKqbNGpAQ7+l9tyYxaYMOjWTpbs VzFzR6biG8obVnao70sAQqa9Yc739xDwzgPv9OmTSiuxDzTS843LPzrhT/CaBI/2 0vOsEaBIuPdDdg== -----END CERTIFICATE-----Generated at Sat Dec 6 02:25:30 2025 by rpki-client