This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/PgiDSzspc5CcCq9btdNUscDlyj4.mft File: PgiDSzspc5CcCq9btdNUscDlyj4.mft (raw, json) Hash identifier: ZEGkgcWu/Hi+yRtusxJ0EjnLRYeM8cPbM6V7+B3mtvk= Subject key identifier: B4:1C:14:C6:78:16:2C:8A:AA:4F:60:08:48:D7:90:0A:4C:A6:25:B7 Authority key identifier: 3E:08:83:4B:3B:29:73:90:9C:0A:AF:5B:B5:D3:54:B1:C0:E5:CA:3E Certificate issuer: /CN=3e08834b3b2973909c0aaf5bb5d354b1c0e5ca3e Certificate serial: 019B36458259A1275258875D20CB03E343E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PgiDSzspc5CcCq9btdNUscDlyj4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/PgiDSzspc5CcCq9btdNUscDlyj4.mft Manifest number: 0666 Signing time: Fri 19 Dec 2025 11:01:23 +0000 Manifest this update: Fri 19 Dec 2025 11:01:23 +0000 Manifest next update: Sat 20 Dec 2025 11:01:23 +0000 Files and hashes: 1: MtWTrnrND6EP3cM9Z5OSCIGl4vA.roa (hash: pbxVZVZ80DN49b7VnIcQNiVRM2BUbkPepC2i0a2pNpo=) 2: PgiDSzspc5CcCq9btdNUscDlyj4.crl (hash: fEmlNM7Ua5oWHS36eoU67tWA/UQGo1JH2iUcghqBRWc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/PgiDSzspc5CcCq9btdNUscDlyj4.crl rsync://rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/PgiDSzspc5CcCq9btdNUscDlyj4.mft rsync://rpki.ripe.net/repository/DEFAULT/PgiDSzspc5CcCq9btdNUscDlyj4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:45:82:59:a1:27:52:58:87:5d:20:cb:03:e3:43:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e08834b3b2973909c0aaf5bb5d354b1c0e5ca3e Validity Not Before: Dec 19 11:01:23 2025 GMT Not After : Dec 20 11:01:23 2025 GMT Subject: CN=b41c14c678162c8aaa4f600848d7900a4ca625b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:2b:3b:ab:1d:79:4a:56:32:41:08:76:25:6c: a5:77:49:72:7b:da:49:e8:54:a2:55:ec:b9:ee:4b: 49:eb:96:b1:9d:5b:7a:7f:99:c9:53:4b:6a:02:de: b0:da:b1:98:03:41:40:b9:4d:81:51:8a:18:6f:bc: f3:87:c5:44:d3:5b:b0:ea:8b:b8:19:25:22:ea:86: b0:ca:e1:8c:a5:34:ef:fd:cd:5c:bf:0c:f5:83:74: 69:c2:02:70:45:c1:a9:96:24:32:83:f9:44:4b:46: a1:59:80:4c:da:f9:6a:f2:8c:2b:c8:eb:39:ae:59: 93:d2:07:ad:9e:3e:c9:9f:26:54:54:05:b2:0d:ba: 1d:f1:4a:96:f4:ee:41:57:0d:06:84:12:e6:16:ad: 12:49:97:52:38:69:cc:ec:95:45:d0:75:b1:ba:8b: 93:36:dd:00:95:d7:76:39:58:b3:24:73:21:73:9d: 7d:ea:7e:e9:45:8f:ed:70:c3:be:d0:46:5f:ee:51: 66:85:0a:9c:50:6f:3e:f6:4d:aa:15:17:dc:b4:fc: 44:39:bc:88:d3:cc:db:0a:28:31:3e:6b:c9:6a:5f: 96:07:c0:82:31:9d:1e:27:a4:07:26:9e:fc:6e:b6: 7f:6b:65:11:f4:cd:64:5e:12:20:1d:e2:c2:72:7b: c1:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:1C:14:C6:78:16:2C:8A:AA:4F:60:08:48:D7:90:0A:4C:A6:25:B7 X509v3 Authority Key Identifier: keyid:3E:08:83:4B:3B:29:73:90:9C:0A:AF:5B:B5:D3:54:B1:C0:E5:CA:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PgiDSzspc5CcCq9btdNUscDlyj4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/PgiDSzspc5CcCq9btdNUscDlyj4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/PgiDSzspc5CcCq9btdNUscDlyj4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:81:bd:13:61:6c:81:eb:a9:7d:ec:c6:bf:7f:f7:e5:e6:fb: 7d:fc:6d:85:70:4d:f7:2e:09:99:39:07:76:a2:7e:20:a9:b6: 5b:3d:dd:38:4f:00:48:d8:03:4c:56:0c:61:62:48:36:ac:0c: fd:85:ec:9e:03:fd:cc:47:5c:5e:9f:c0:5d:b1:5c:f6:3a:a1: 63:79:4b:87:b3:89:91:49:de:6e:e7:71:d7:33:bc:b9:b8:ba: 76:5e:ab:73:ac:ce:a5:75:7d:80:e2:4c:18:c7:b7:1c:e8:7f: d2:af:c5:96:65:90:c3:2a:d0:91:57:c5:0e:39:38:75:2c:bb: ca:33:9e:30:73:09:51:95:a4:0d:bb:27:d8:d2:de:db:68:e7: d6:1a:87:66:c2:7d:f9:80:7c:89:60:df:c4:6c:83:28:4e:4f: 7b:7f:fe:c9:e8:3a:6e:a0:c8:24:8b:fb:87:8a:26:8c:d3:09: 1c:ff:ce:be:23:aa:f0:91:4e:39:64:f8:9e:68:c0:99:c9:dc: fa:d0:9f:89:61:ee:5a:52:c0:dc:65:27:eb:37:2d:1d:50:f6: 6d:64:26:6d:8c:7b:bf:f6:77:e6:6d:d6:83:7b:98:61:0e:e8: e6:22:7a:c2:be:d8:23:83:d9:6c:dc:4e:29:e5:0a:33:5a:36: 14:1d:66:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2RYJZoSdSWIddIMsD40PiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlMDg4MzRiM2IyOTczOTA5YzBhYWY1YmI1ZDM1NGIxYzBl NWNhM2UwHhcNMjUxMjE5MTEwMTIzWhcNMjUxMjIwMTEwMTIzWjAzMTEwLwYDVQQD EyhiNDFjMTRjNjc4MTYyYzhhYWE0ZjYwMDg0OGQ3OTAwYTRjYTYyNWI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxys7qx15SlYyQQh2JWyld0lye9pJ 6FSiVey57ktJ65axnVt6f5nJU0tqAt6w2rGYA0FAuU2BUYoYb7zzh8VE01uw6ou4 GSUi6oawyuGMpTTv/c1cvwz1g3RpwgJwRcGpliQyg/lES0ahWYBM2vlq8owryOs5 rlmT0getnj7JnyZUVAWyDbod8UqW9O5BVw0GhBLmFq0SSZdSOGnM7JVF0HWxuouT Nt0Aldd2OVizJHMhc5196n7pRY/tcMO+0EZf7lFmhQqcUG8+9k2qFRfctPxEObyI 08zbCigxPmvJal+WB8CCMZ0eJ6QHJp78brZ/a2UR9M1kXhIgHeLCcnvBtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLQcFMZ4FiyKqk9gCEjXkApMpiW3MB8GA1UdIwQY MBaAFD4Ig0s7KXOQnAqvW7XTVLHA5co+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGdpRFN6c3BjNUNjQ3E5YnRkTlVzY0RseWo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9lZjAzYjMtNzQ3Mi00NmRlLTk1ODYt ZmQ3Yjk3MzljYTI2LzEvUGdpRFN6c3BjNUNjQ3E5YnRkTlVzY0RseWo0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC9lZjAzYjMtNzQ3Mi00NmRlLTk1ODYtZmQ3Yjk3MzljYTI2 LzEvUGdpRFN6c3BjNUNjQ3E5YnRkTlVzY0RseWo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiIG9E2Fs geupfezGv3/35eb7ffxthXBN9y4JmTkHdqJ+IKm2Wz3dOE8ASNgDTFYMYWJINqwM /YXsngP9zEdcXp/AXbFc9jqhY3lLh7OJkUnebudx1zO8ubi6dl6rc6zOpXV9gOJM GMe3HOh/0q/FlmWQwyrQkVfFDjk4dSy7yjOeMHMJUZWkDbsn2NLe22jn1hqHZsJ9 +YB8iWDfxGyDKE5Pe3/+yeg6bqDIJIv7h4omjNMJHP/OviOq8JFOOWT4nmjAmcnc +tCfiWHuWlLA3GUn6zctHVD2bWQmbYx7v/Z35m3Wg3uYYQ7o5iJ6wr7YI4PZbNxO KeUKM1o2FB1mtg== -----END CERTIFICATE-----Generated at Fri Dec 19 14:51:24 2025 by rpki-client