This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/3d11d8-fae0-4b97-afdf-9c2bbd8c9496/1/pg0SlAGyaTo41bQ3Pcdge_hbim4.mft File: pg0SlAGyaTo41bQ3Pcdge_hbim4.mft (raw, json) Hash identifier: GkX2QtciGnVx1nQwqdU2gCrCMMzelvnfvf34ZU4pUQ0= Subject key identifier: B4:2D:C7:C4:E4:9F:83:2C:AF:CE:67:4C:21:94:6B:FE:DA:C2:AB:6C Authority key identifier: A6:0D:12:94:01:B2:69:3A:38:D5:B4:37:3D:C7:60:7B:F8:5B:8A:6E Certificate issuer: /CN=a60d129401b2693a38d5b4373dc7607bf85b8a6e Certificate serial: 019B5A88E45D6589459D9122B1429FE9495F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pg0SlAGyaTo41bQ3Pcdge_hbim4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/3d11d8-fae0-4b97-afdf-9c2bbd8c9496/1/pg0SlAGyaTo41bQ3Pcdge_hbim4.mft Manifest number: 164F Signing time: Fri 26 Dec 2025 12:01:19 +0000 Manifest this update: Fri 26 Dec 2025 12:01:19 +0000 Manifest next update: Sat 27 Dec 2025 12:01:19 +0000 Files and hashes: 1: VrzBS7iYMQ7CUgFXeIYUKibuq4c.roa (hash: fmhLUOU0qw8zvG4ACPTJc5SXrpkYmfNY3RjrMuYrgqA=) 2: pg0SlAGyaTo41bQ3Pcdge_hbim4.crl (hash: Au1CcOFGdg6BraZMt5MHukGbnekwhqQFI5hp4x0s9DM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/3d11d8-fae0-4b97-afdf-9c2bbd8c9496/1/pg0SlAGyaTo41bQ3Pcdge_hbim4.crl rsync://rpki.ripe.net/repository/DEFAULT/45/3d11d8-fae0-4b97-afdf-9c2bbd8c9496/1/pg0SlAGyaTo41bQ3Pcdge_hbim4.mft rsync://rpki.ripe.net/repository/DEFAULT/pg0SlAGyaTo41bQ3Pcdge_hbim4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:e4:5d:65:89:45:9d:91:22:b1:42:9f:e9:49:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a60d129401b2693a38d5b4373dc7607bf85b8a6e Validity Not Before: Dec 26 12:01:19 2025 GMT Not After : Dec 27 12:01:19 2025 GMT Subject: CN=b42dc7c4e49f832cafce674c21946bfedac2ab6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:93:67:b7:3e:6f:2f:6e:3b:cb:72:7e:7c:30: 82:c7:00:14:29:0f:ca:fa:0c:57:00:30:90:dd:5d: c7:12:c2:df:c3:01:e1:78:9a:72:7e:0a:a0:7a:4d: 31:3d:da:dc:77:28:30:a9:ea:9f:ec:8b:e5:cf:49: 5d:a6:17:b5:8c:1f:7e:c2:74:5c:39:69:98:8b:48: dd:a1:eb:31:38:c3:9f:e3:5d:05:fe:e2:aa:e9:6d: 3a:e1:e7:5a:1c:a3:ba:19:ab:d6:06:fa:38:b4:36: 0b:8a:95:cb:3c:9f:65:34:d8:94:16:61:c8:da:e1: 3e:19:67:ef:f4:92:84:ca:86:3e:c6:d0:55:0a:7b: de:69:f5:11:e0:8d:aa:ed:68:99:47:19:01:ca:fd: fe:d6:1d:a4:c0:3a:69:b5:b1:ce:ae:6d:91:bd:37: 6d:9d:3d:a0:80:84:23:88:b8:e3:1b:f4:dc:53:fd: 36:44:f2:0a:3e:1c:1f:fc:04:9b:75:28:4b:dd:92: c9:50:56:06:5a:1f:c7:0c:80:b3:c9:06:e5:bf:76: 94:fb:52:f2:72:7e:d6:98:50:ac:bb:32:77:5c:e1: 87:80:85:7b:49:26:25:a5:a2:10:0f:20:e9:8c:41: d0:27:3b:58:79:84:d3:12:50:ed:2e:c5:85:6d:63: 57:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:2D:C7:C4:E4:9F:83:2C:AF:CE:67:4C:21:94:6B:FE:DA:C2:AB:6C X509v3 Authority Key Identifier: keyid:A6:0D:12:94:01:B2:69:3A:38:D5:B4:37:3D:C7:60:7B:F8:5B:8A:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pg0SlAGyaTo41bQ3Pcdge_hbim4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3d11d8-fae0-4b97-afdf-9c2bbd8c9496/1/pg0SlAGyaTo41bQ3Pcdge_hbim4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3d11d8-fae0-4b97-afdf-9c2bbd8c9496/1/pg0SlAGyaTo41bQ3Pcdge_hbim4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:f5:f5:98:fc:94:5b:cf:7c:2e:3d:76:b8:69:55:fd:c4:a5: ba:4c:d6:bd:2d:e6:2f:97:73:69:25:17:d5:dd:47:93:45:ba: 29:8d:75:e8:a8:d6:52:ac:e8:ec:60:4e:f0:d4:09:f3:47:d5: 8a:f3:4f:eb:53:89:0b:f0:f4:1f:4f:ca:04:98:2b:12:1a:df: 97:94:5a:f7:f9:f4:74:a2:d5:9e:7d:d0:d7:c1:3e:9b:e5:3a: 85:2a:fc:f7:8a:38:59:73:df:2c:52:8f:fd:92:cf:95:93:37: 89:9b:8f:43:c3:03:a2:b5:36:cc:5f:4e:02:1b:f2:bf:51:b7: 7b:ae:8a:53:42:ec:ec:d5:21:04:b3:3c:48:14:99:fa:db:46: 8e:8a:c5:81:5e:6f:e3:3d:18:01:1e:3c:4b:c5:f0:e6:6b:d9: 24:53:04:79:d2:e3:f0:83:93:34:af:7e:63:54:bb:33:3c:e0: 54:f6:da:04:69:f2:d6:ee:15:f7:a1:61:f9:26:4a:51:e8:61: 6e:80:f0:39:44:0d:19:3f:77:04:2f:a8:0a:9e:5a:7c:e0:68: 57:6f:25:0a:ad:2f:fb:dd:0a:9e:37:2c:4b:14:55:7a:10:2f: 74:b5:52:44:df:83:88:ea:24:1c:13:da:88:ad:62:13:fd:d1: 51:a8:c2:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiORdZYlFnZEisUKf6UlfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2MGQxMjk0MDFiMjY5M2EzOGQ1YjQzNzNkYzc2MDdiZjg1 YjhhNmUwHhcNMjUxMjI2MTIwMTE5WhcNMjUxMjI3MTIwMTE5WjAzMTEwLwYDVQQD EyhiNDJkYzdjNGU0OWY4MzJjYWZjZTY3NGMyMTk0NmJmZWRhYzJhYjZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1JNntz5vL247y3J+fDCCxwAUKQ/K +gxXADCQ3V3HEsLfwwHheJpyfgqgek0xPdrcdygwqeqf7Ivlz0ldphe1jB9+wnRc OWmYi0jdoesxOMOf410F/uKq6W064edaHKO6GavWBvo4tDYLipXLPJ9lNNiUFmHI 2uE+GWfv9JKEyoY+xtBVCnveafUR4I2q7WiZRxkByv3+1h2kwDpptbHOrm2RvTdt nT2ggIQjiLjjG/TcU/02RPIKPhwf/ASbdShL3ZLJUFYGWh/HDICzyQblv3aU+1Ly cn7WmFCsuzJ3XOGHgIV7SSYlpaIQDyDpjEHQJztYeYTTElDtLsWFbWNXbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLQtx8Tkn4Msr85nTCGUa/7awqtsMB8GA1UdIwQY MBaAFKYNEpQBsmk6ONW0Nz3HYHv4W4puMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGcwU2xBR3lhVG80MWJRM1BjZGdlX2hiaW00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS8zZDExZDgtZmFlMC00Yjk3LWFmZGYt OWMyYmJkOGM5NDk2LzEvcGcwU2xBR3lhVG80MWJRM1BjZGdlX2hiaW00Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS8zZDExZDgtZmFlMC00Yjk3LWFmZGYtOWMyYmJkOGM5NDk2 LzEvcGcwU2xBR3lhVG80MWJRM1BjZGdlX2hiaW00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIfX1mPyU W898Lj12uGlV/cSlukzWvS3mL5dzaSUX1d1Hk0W6KY116KjWUqzo7GBO8NQJ80fV ivNP61OJC/D0H0/KBJgrEhrfl5Ra9/n0dKLVnn3Q18E+m+U6hSr894o4WXPfLFKP /ZLPlZM3iZuPQ8MDorU2zF9OAhvyv1G3e66KU0Ls7NUhBLM8SBSZ+ttGjorFgV5v 4z0YAR48S8Xw5mvZJFMEedLj8IOTNK9+Y1S7MzzgVPbaBGny1u4V96Fh+SZKUehh boDwOUQNGT93BC+oCp5afOBoV28lCq0v+90KnjcsSxRVehAvdLVSRN+DiOokHBPa iK1iE/3RUajChQ== -----END CERTIFICATE-----Generated at Fri Dec 26 15:45:08 2025 by rpki-client