This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft
File: pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft (raw, json)
Hash identifier: syAjl+8jPDnw5JYKFqPOaOWQNfvmaDltISYIbfW23ag=
Subject key identifier: D8:98:F1:AA:27:12:0F:B9:EF:C1:08:5C:4A:5A:01:CE:DC:60:B4:BD
Authority key identifier: A6:08:DB:43:96:4B:69:86:EC:74:0F:0B:5E:33:F6:27:58:9A:C5:60
Certificate issuer: /CN=a608db43964b6986ec740f0b5e33f627589ac560
Certificate serial: 019B3532F7F6DE5D941077F4981DF599D722
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft
Manifest number: 178B
Signing time: Fri 19 Dec 2025 06:01:31 +0000
Manifest this update: Fri 19 Dec 2025 06:01:31 +0000
Manifest next update: Sat 20 Dec 2025 06:01:31 +0000
Files and hashes: 1: I3mgQ157a_bF2dTxc-vf7pMJtM4.roa (hash: 7UAHNapwwX16Slile1RjKMtt2nkeBVUncM7zwsYLT8w=)
2: MHgro3rXC3LA-ZCKp8QuaVCuDNM.roa (hash: sXYt7ycXFJCXAbuucaVo5/ccp47LCDa9LjtriRMFWXQ=)
3: PBXMgqYnsJA87BxLSTiMQaCiTQM.roa (hash: wzJgz/i9pbuBUkW2cHLEeF8EDXUdrOLSSMmRBwjvuyY=)
4: Y_tOtZgYIeYtzs_lYehaepicSa4.roa (hash: 0Ji9IYm411z+1YtZY+qouN/MNWctJRSug7dej+6mWcM=)
5: aXYA7UmSga-uAKN3mA-MrcLvQNw.roa (hash: A6mLEC8I6HDPu8tLJ0OvOtzb6OIQimg3DdB4KG2uaDU=)
6: gGa9g3xm-WUrWGnZqfKZudqy63U.roa (hash: gMhH5wVZGQUaR4GjDTcIjxc58KL7jUF42zUcWUMJNmY=)
7: hK0B_1bjDs4SgkjuewwBu_Hyp1Q.roa (hash: P1SdgqhUGccV0nstYPHl8zR8nqe1TrQ9TkFifIcHjeo=)
8: pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.crl (hash: 8aIgwihtdLBkHfMCYtAr7ZV1cDQwVoXB8oAHUS0FMPk=)
9: rWecwzOy_r05COuEiZl4KWht5j4.roa (hash: APFZzX7MSHk1ET0fGFHAZgyisv5z2ZfhR0L4cxUpeKo=)
10: zVSaKUExhHJLuuGxs99kYQGdQi0.roa (hash: kRzk6R6AO4mRz5HhKteUKae1kEl/X9QjV+pW67bmw5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Dec 2025 22:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:35:32:f7:f6:de:5d:94:10:77:f4:98:1d:f5:99:d7:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a608db43964b6986ec740f0b5e33f627589ac560
Validity
Not Before: Dec 19 06:01:31 2025 GMT
Not After : Dec 20 06:01:31 2025 GMT
Subject: CN=d898f1aa27120fb9efc1085c4a5a01cedc60b4bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:13:2b:56:79:73:48:af:19:97:02:4e:72:8e:
90:09:16:b1:71:3f:03:77:04:74:bb:c5:5a:6d:fe:
ef:4a:68:22:5c:2f:56:77:a4:3e:17:f9:a2:50:50:
e3:97:01:a7:e1:96:60:c4:42:78:71:4b:a8:cf:7e:
6a:8e:3d:12:ab:7f:99:18:09:1c:13:8f:d0:02:29:
dd:b1:95:cd:47:4b:73:70:8c:3a:7e:6b:68:d0:7d:
aa:c1:ff:61:17:4c:ae:b6:4a:fe:05:56:ec:c8:b1:
e3:59:a0:0c:ae:5b:10:bf:88:e2:fa:30:a0:e7:55:
98:74:77:c8:c8:7e:1c:ad:31:c3:7b:16:99:75:1f:
73:25:d2:7f:a8:f7:ed:a4:3c:34:64:cd:53:49:30:
18:65:f1:65:d8:83:45:55:aa:45:ce:64:ec:5c:52:
a6:d4:d7:b7:1a:e9:0a:60:5d:fe:2b:3e:36:ee:c0:
3d:8f:c5:f6:ae:22:fe:cd:22:0a:5e:36:24:20:ce:
0f:a1:bc:80:b6:21:24:ed:b5:99:fd:97:1f:30:04:
29:16:38:e0:01:f8:14:d1:43:80:8a:12:9b:08:26:
d0:a5:ac:ab:d2:0b:56:6f:a0:58:30:fb:e7:56:cb:
9b:ec:48:47:8d:70:cc:1f:cd:24:8a:77:e8:d8:a5:
2c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:98:F1:AA:27:12:0F:B9:EF:C1:08:5C:4A:5A:01:CE:DC:60:B4:BD
X509v3 Authority Key Identifier:
keyid:A6:08:DB:43:96:4B:69:86:EC:74:0F:0B:5E:33:F6:27:58:9A:C5:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:46:1a:99:13:50:d0:38:61:10:78:9b:15:b5:4a:f3:09:ff:
93:83:bb:ba:70:65:53:45:02:63:d6:b5:d2:c2:bc:9d:2a:e2:
f9:60:b0:f5:43:ad:1b:b2:38:3b:aa:52:1c:02:05:27:a0:53:
5c:40:6e:aa:48:72:38:9f:af:fd:54:eb:ae:ce:dc:5e:0e:bb:
7c:d3:e6:00:a0:5d:3a:40:61:61:35:1b:3e:6b:67:f3:21:fc:
06:35:ab:99:03:30:51:46:9b:95:f8:48:64:c7:a8:33:c3:cc:
4d:1e:35:6b:af:1f:03:8c:a3:58:ea:22:5b:0b:97:c7:f1:80:
f6:b5:17:f6:8e:1f:f9:ae:89:8e:91:55:50:a5:3a:e2:02:e2:
e6:4f:7a:4e:4d:93:b0:e3:0d:e9:c1:17:be:04:4f:62:49:86:
55:92:71:0b:28:8e:9c:5a:f0:41:16:19:32:bd:7c:d5:3b:d4:
c3:5c:ba:43:21:c5:b0:7c:e5:8b:1c:2f:fb:98:3f:3a:d4:f5:
0a:87:78:82:75:0f:0f:47:37:c0:92:a7:00:6f:fe:15:52:d6:
ce:30:fc:ef:fc:13:e9:1b:cb:d2:b1:65:c1:e7:8c:df:bb:dd:
b9:d4:be:68:98:cb:5d:37:3e:f2:7a:17:f4:2f:68:39:4b:7e:
1c:c8:ec:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 07:26:30 2025 by rpki-client