This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.mft File: Pgvo5I26B98hcRdFuGnjkRzpjiA.mft (raw, json) Hash identifier: jNe+TKS1n8LpXeTvHupTzq1IgFlV7gvUiXlUPaYWQsQ= Subject key identifier: AC:06:1B:75:D8:40:C1:9A:E7:86:A2:CF:10:A2:31:0A:B2:EF:12:BA Authority key identifier: 3E:0B:E8:E4:8D:BA:07:DF:21:71:17:45:B8:69:E3:91:1C:E9:8E:20 Certificate issuer: /CN=3e0be8e48dba07df21711745b869e3911ce98e20 Certificate serial: 019B0F6E70AECE66909ACFA46819D8DA4C48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pgvo5I26B98hcRdFuGnjkRzpjiA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.mft Manifest number: 0EFF Signing time: Thu 11 Dec 2025 22:00:54 +0000 Manifest this update: Thu 11 Dec 2025 22:00:54 +0000 Manifest next update: Fri 12 Dec 2025 22:00:54 +0000 Files and hashes: 1: Pgvo5I26B98hcRdFuGnjkRzpjiA.crl (hash: KidT0ZZZCpY63+Bn2XoX/BgQoSIRtfV+eKH7R9+FFd8=) 2: qSKiJOg3xCxclMNg-Fd_1qbi_3I.roa (hash: /vBH3d6n8qi+I8tEAft/7KOt6213rHrV93iMeTKUeww=) 3: xml2dcCWXKAaFsBtMMtFnOKdOuQ.roa (hash: gElK1Fi5SJc9J5gtHChbTahr7ydhdEBTnlWVGE/WfP8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.mft rsync://rpki.ripe.net/repository/DEFAULT/Pgvo5I26B98hcRdFuGnjkRzpjiA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:6e:70:ae:ce:66:90:9a:cf:a4:68:19:d8:da:4c:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e0be8e48dba07df21711745b869e3911ce98e20 Validity Not Before: Dec 11 22:00:54 2025 GMT Not After : Dec 12 22:00:54 2025 GMT Subject: CN=ac061b75d840c19ae786a2cf10a2310ab2ef12ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a4:dd:c2:5a:61:6b:1d:34:79:09:40:04:47: c2:f3:eb:5e:2b:e1:09:f2:70:9f:e8:71:a3:5b:3d: d8:74:e5:71:e6:cd:82:5a:e0:a0:65:e0:e6:1b:97: 78:27:19:16:03:6e:ce:70:0e:85:d0:27:46:72:0a: cb:83:4a:6f:fc:e6:39:ba:06:e7:1f:a3:62:7b:46: 01:14:89:1c:3c:c2:d8:f4:65:38:b9:ad:54:a6:a4: e6:cc:13:5f:e9:03:cf:89:d8:ff:07:a3:93:bf:79: 2e:7c:61:6f:85:5e:81:9f:7b:e0:1a:b6:9d:96:56: e8:9c:9b:f4:c3:5b:8a:64:9f:54:cd:86:ee:ee:1d: 13:89:96:f9:8a:4b:9b:c3:99:be:b0:7b:54:da:51: ae:2e:0b:6e:b2:9b:e7:44:9f:24:0b:92:95:bd:70: 04:79:57:65:86:9c:e5:07:36:bb:23:88:85:d7:47: 8b:24:4f:ee:26:1c:0e:ed:79:41:92:06:fa:76:2a: e9:72:d2:d8:73:73:e7:7d:9a:cc:ba:47:5b:19:fd: 7a:6a:ac:32:2c:b7:75:a4:5c:36:c8:3b:6d:1b:f4: 7d:cb:c3:2e:35:71:0b:92:ae:eb:ef:12:c3:3f:38: 09:55:1b:a8:a9:2f:5b:b8:79:65:63:4e:d9:80:d9: 78:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:06:1B:75:D8:40:C1:9A:E7:86:A2:CF:10:A2:31:0A:B2:EF:12:BA X509v3 Authority Key Identifier: keyid:3E:0B:E8:E4:8D:BA:07:DF:21:71:17:45:B8:69:E3:91:1C:E9:8E:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pgvo5I26B98hcRdFuGnjkRzpjiA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:73:6b:23:3f:0c:a2:32:33:03:fe:d1:b9:e1:50:c6:8c:83: b9:28:78:39:ca:3d:6c:0c:a3:22:3e:a8:90:de:92:8e:31:36: 87:36:97:2d:98:50:3b:46:bd:50:cf:af:de:f4:e2:31:67:02: d8:34:b0:5c:63:58:aa:e8:6f:f2:4b:ce:cd:25:5f:48:10:17: 31:28:7a:24:23:04:51:b8:c8:f3:d7:2b:55:a7:65:c6:3d:f9: 61:63:72:7a:5d:db:66:96:07:ee:42:52:1a:3e:56:e0:24:e2: 4f:46:c5:43:68:01:f2:26:45:05:a4:64:a8:91:9e:43:3a:ad: 8f:c7:b2:6e:4b:61:5d:88:ff:53:bf:47:9e:57:f2:a8:04:de: cf:3f:29:64:23:70:54:0c:38:d1:1c:ef:08:e5:53:bd:22:f7: a2:78:dd:da:04:f7:a1:c5:91:5f:bd:7c:f5:75:0a:10:9e:63: 7e:c1:9d:41:df:01:46:15:8f:df:37:37:03:20:a5:49:8a:e3: a1:0b:88:e1:e0:91:64:ab:80:d5:4b:71:16:61:58:b7:ca:69: 3d:58:3f:79:ed:d2:9b:7a:8b:70:a7:17:e7:84:3f:8f:81:2e: a2:57:cf:57:ca:27:25:64:44:97:98:77:7c:bd:2a:db:37:8c: 2a:68:88:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPbnCuzmaQms+kaBnY2kxIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlMGJlOGU0OGRiYTA3ZGYyMTcxMTc0NWI4NjllMzkxMWNl OThlMjAwHhcNMjUxMjExMjIwMDU0WhcNMjUxMjEyMjIwMDU0WjAzMTEwLwYDVQQD EyhhYzA2MWI3NWQ4NDBjMTlhZTc4NmEyY2YxMGEyMzEwYWIyZWYxMmJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqTdwlphax00eQlABEfC8+teK+EJ 8nCf6HGjWz3YdOVx5s2CWuCgZeDmG5d4JxkWA27OcA6F0CdGcgrLg0pv/OY5ugbn H6Nie0YBFIkcPMLY9GU4ua1UpqTmzBNf6QPPidj/B6OTv3kufGFvhV6Bn3vgGrad llbonJv0w1uKZJ9UzYbu7h0TiZb5ikubw5m+sHtU2lGuLgtuspvnRJ8kC5KVvXAE eVdlhpzlBza7I4iF10eLJE/uJhwO7XlBkgb6dirpctLYc3PnfZrMukdbGf16aqwy LLd1pFw2yDttG/R9y8MuNXELkq7r7xLDPzgJVRuoqS9buHllY07ZgNl43QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKwGG3XYQMGa54aizxCiMQqy7xK6MB8GA1UdIwQY MBaAFD4L6OSNugffIXEXRbhp45Ec6Y4gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGd2bzVJMjZCOThoY1JkRnVHbmprUnpwamlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy85NWJjZTktMWU4ZS00MWMxLTg5Zjgt MjBmOWYwZGJmNDU4LzEvUGd2bzVJMjZCOThoY1JkRnVHbmprUnpwamlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy85NWJjZTktMWU4ZS00MWMxLTg5ZjgtMjBmOWYwZGJmNDU4 LzEvUGd2bzVJMjZCOThoY1JkRnVHbmprUnpwamlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQXNrIz8M ojIzA/7RueFQxoyDuSh4Oco9bAyjIj6okN6SjjE2hzaXLZhQO0a9UM+v3vTiMWcC 2DSwXGNYquhv8kvOzSVfSBAXMSh6JCMEUbjI89crVadlxj35YWNyel3bZpYH7kJS Gj5W4CTiT0bFQ2gB8iZFBaRkqJGeQzqtj8eybkthXYj/U79HnlfyqATezz8pZCNw VAw40RzvCOVTvSL3onjd2gT3ocWRX7189XUKEJ5jfsGdQd8BRhWP3zc3AyClSYrj oQuI4eCRZKuA1UtxFmFYt8ppPVg/ee3Sm3qLcKcX54Q/j4EuolfPV8onJWREl5h3 fL0q2zeMKmiIBw== -----END CERTIFICATE-----Generated at Fri Dec 12 02:32:08 2025 by rpki-client