This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/Pt7grog0cFCIgFBEvnXHQDsdx-I.mft File: Pt7grog0cFCIgFBEvnXHQDsdx-I.mft (raw, json) Hash identifier: MkC7hwuWyW0+R2KKP5DoTTfcwF9NbOObnipadUaUQDk= Subject key identifier: E0:EA:C4:A9:FB:06:67:61:D5:B3:85:16:98:97:CB:20:85:74:D2:72 Authority key identifier: 3E:DE:E0:AE:88:34:70:50:88:80:50:44:BE:75:C7:40:3B:1D:C7:E2 Certificate issuer: /CN=3edee0ae8834705088805044be75c7403b1dc7e2 Certificate serial: 019B34C5EDABA9D85A1D7F795576BCC231F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pt7grog0cFCIgFBEvnXHQDsdx-I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/Pt7grog0cFCIgFBEvnXHQDsdx-I.mft Manifest number: 1419 Signing time: Fri 19 Dec 2025 04:02:24 +0000 Manifest this update: Fri 19 Dec 2025 04:02:24 +0000 Manifest next update: Sat 20 Dec 2025 04:02:24 +0000 Files and hashes: 1: Pt7grog0cFCIgFBEvnXHQDsdx-I.crl (hash: Nvy2rj2qJcCWj+kwB4nj3sgvmt82Ih7FG8UD6CUkJ00=) 2: f4uXUqTz6EMLfxnYPkQ3ht2dRz0.roa (hash: WwKae4E8mCPYphGvXV9B/QCbohcENp4wZ1ekmYvPPps=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/Pt7grog0cFCIgFBEvnXHQDsdx-I.crl rsync://rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/Pt7grog0cFCIgFBEvnXHQDsdx-I.mft rsync://rpki.ripe.net/repository/DEFAULT/Pt7grog0cFCIgFBEvnXHQDsdx-I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:02:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c5:ed:ab:a9:d8:5a:1d:7f:79:55:76:bc:c2:31:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3edee0ae8834705088805044be75c7403b1dc7e2 Validity Not Before: Dec 19 04:02:24 2025 GMT Not After : Dec 20 04:02:24 2025 GMT Subject: CN=e0eac4a9fb066761d5b385169897cb208574d272 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:89:96:2b:dc:ec:0a:28:be:1d:71:e7:55:a1: d9:bb:1c:12:5d:86:2e:b6:2d:87:e9:d6:10:48:a0: 4c:2b:99:e9:fd:18:0c:e8:b6:60:5b:57:7e:b7:b4: d9:7b:14:6c:0d:e7:9a:59:5d:ac:06:7d:f4:98:53: 6a:da:8b:0e:2a:94:40:8d:fd:81:53:38:ee:b2:65: 4f:ae:bd:9f:49:48:6d:f0:eb:bf:cc:7d:30:42:1f: d9:96:64:8d:62:cd:f3:77:ba:ab:b8:de:65:ae:e0: 73:12:6b:63:e7:8f:85:44:25:8c:89:90:63:ad:84: 04:ab:f7:76:2c:ab:e8:02:8c:16:0e:c1:0b:57:64: 94:2c:e9:e8:fe:8f:be:b0:9a:15:cd:b5:66:a2:32: 37:6e:07:cf:e4:03:e7:40:3f:cf:19:6c:48:ce:ca: 1a:7e:90:c4:b2:9d:0b:31:02:c5:2b:0c:24:a4:bb: 7a:bd:36:1d:33:b6:4a:0f:47:95:5f:ae:b9:bf:e4: e2:58:63:d9:ef:20:40:b9:67:31:a3:ea:01:d8:e2: ee:19:42:62:b7:61:55:5d:7b:ba:a3:73:f8:32:d5: 0c:62:98:5c:ff:a4:bc:5e:68:3d:3c:d9:eb:e5:40: ea:08:db:9c:c7:1d:04:1b:7a:98:b7:e4:55:f3:ee: 29:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:EA:C4:A9:FB:06:67:61:D5:B3:85:16:98:97:CB:20:85:74:D2:72 X509v3 Authority Key Identifier: keyid:3E:DE:E0:AE:88:34:70:50:88:80:50:44:BE:75:C7:40:3B:1D:C7:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pt7grog0cFCIgFBEvnXHQDsdx-I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/Pt7grog0cFCIgFBEvnXHQDsdx-I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/Pt7grog0cFCIgFBEvnXHQDsdx-I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:2a:13:de:1c:af:c3:75:5f:b7:33:cd:ac:dd:f4:db:ec:bf: 24:ef:ea:bf:3f:e6:3e:07:11:52:c9:ca:e8:84:b6:3b:44:b1: a3:8f:31:ff:cb:47:ab:19:0d:87:a6:8f:a6:01:ae:51:0e:90: 7c:47:35:4b:eb:01:12:37:8a:e0:97:cb:5a:9a:7d:a4:f7:f2: d1:16:5f:75:d7:f9:9e:9a:5a:32:0f:3e:5d:a1:3f:8e:c1:a9: 0a:e7:68:41:7b:20:07:86:33:32:c7:2b:69:11:28:a8:5d:89: fb:cf:a7:d2:66:da:c2:9f:55:d7:5d:03:e6:24:1b:3a:8a:4e: 7c:ca:a5:df:5e:7d:14:45:00:b6:ef:75:72:04:1e:b5:d4:fc: da:65:1a:18:92:45:bb:db:25:bf:41:cd:28:40:cc:d4:35:eb: 2c:c5:3c:26:ef:86:5c:92:af:b0:ad:38:26:cc:94:5a:b8:1b: 9c:da:dd:a4:4c:a6:c5:61:e0:d6:3f:91:0c:c1:d3:1f:c3:ec: 80:31:f3:5a:f6:e9:34:6a:b8:04:ec:a4:39:59:d5:fa:ec:6f: ed:af:1f:70:9a:e6:bf:97:ae:93:83:50:54:a4:a4:1a:7b:e5: a2:68:b9:0b:62:8d:8c:2f:59:ac:2e:1d:35:d1:97:09:f8:e4: d3:64:c0:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xe2rqdhaHX95VXa8wjHzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlZGVlMGFlODgzNDcwNTA4ODgwNTA0NGJlNzVjNzQwM2Ix ZGM3ZTIwHhcNMjUxMjE5MDQwMjI0WhcNMjUxMjIwMDQwMjI0WjAzMTEwLwYDVQQD EyhlMGVhYzRhOWZiMDY2NzYxZDViMzg1MTY5ODk3Y2IyMDg1NzRkMjcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYmWK9zsCii+HXHnVaHZuxwSXYYu ti2H6dYQSKBMK5np/RgM6LZgW1d+t7TZexRsDeeaWV2sBn30mFNq2osOKpRAjf2B UzjusmVPrr2fSUht8Ou/zH0wQh/ZlmSNYs3zd7qruN5lruBzEmtj54+FRCWMiZBj rYQEq/d2LKvoAowWDsELV2SULOno/o++sJoVzbVmojI3bgfP5APnQD/PGWxIzsoa fpDEsp0LMQLFKwwkpLt6vTYdM7ZKD0eVX665v+TiWGPZ7yBAuWcxo+oB2OLuGUJi t2FVXXu6o3P4MtUMYphc/6S8Xmg9PNnr5UDqCNucxx0EG3qYt+RV8+4pMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFODqxKn7Bmdh1bOFFpiXyyCFdNJyMB8GA1UdIwQY MBaAFD7e4K6INHBQiIBQRL51x0A7HcfiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHQ3Z3JvZzBjRkNJZ0ZCRXZuWEhRRHNkeC1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny81MTRjZjQtMTI2Yi00Y2M1LWI0ZDUt NzlhYjQ4ZDgzYmFiLzEvUHQ3Z3JvZzBjRkNJZ0ZCRXZuWEhRRHNkeC1JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny81MTRjZjQtMTI2Yi00Y2M1LWI0ZDUtNzlhYjQ4ZDgzYmFi LzEvUHQ3Z3JvZzBjRkNJZ0ZCRXZuWEhRRHNkeC1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHCoT3hyv w3VftzPNrN302+y/JO/qvz/mPgcRUsnK6IS2O0Sxo48x/8tHqxkNh6aPpgGuUQ6Q fEc1S+sBEjeK4JfLWpp9pPfy0RZfddf5nppaMg8+XaE/jsGpCudoQXsgB4YzMscr aREoqF2J+8+n0mbawp9V110D5iQbOopOfMql3159FEUAtu91cgQetdT82mUaGJJF u9slv0HNKEDM1DXrLMU8Ju+GXJKvsK04JsyUWrgbnNrdpEymxWHg1j+RDMHTH8Ps gDHzWvbpNGq4BOykOVnV+uxv7a8fcJrmv5euk4NQVKSkGnvlomi5C2KNjC9ZrC4d NdGXCfjk02TArw== -----END CERTIFICATE-----Generated at Fri Dec 19 09:27:59 2025 by rpki-client