This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/cc1d62-ae53-48b7-ac79-641d456283c4/1/pg5C18uvyd0yBdJH1mLYWv3ZoYY.mft File: pg5C18uvyd0yBdJH1mLYWv3ZoYY.mft (raw, json) Hash identifier: nwNlU5CFX1qAcxm7+62ux56I05ZdgFI/4tFkVcwSinQ= Subject key identifier: 58:0A:C4:E6:B2:ED:62:B5:FA:B8:E9:FD:C6:B4:B6:23:D1:7E:B0:E8 Authority key identifier: A6:0E:42:D7:CB:AF:C9:DD:32:05:D2:47:D6:62:D8:5A:FD:D9:A1:86 Certificate issuer: /CN=a60e42d7cbafc9dd3205d247d662d85afdd9a186 Certificate serial: 019B337B64CF7D270788FCDBE81353293DBF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pg5C18uvyd0yBdJH1mLYWv3ZoYY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/cc1d62-ae53-48b7-ac79-641d456283c4/1/pg5C18uvyd0yBdJH1mLYWv3ZoYY.mft Manifest number: 16D8 Signing time: Thu 18 Dec 2025 22:01:23 +0000 Manifest this update: Thu 18 Dec 2025 22:01:23 +0000 Manifest next update: Fri 19 Dec 2025 22:01:23 +0000 Files and hashes: 1: 0TN8GbA_0te4LvZwiVGOjxWVyyI.roa (hash: r7htGnYfYSEvlu71tGptm+rLAL8pN7TnQ6e7cOorBgk=) 2: pg5C18uvyd0yBdJH1mLYWv3ZoYY.crl (hash: G8lT3a/WNTNiJ3QFoplBB1yWWyWcILsBVdhgAIeTMHc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/cc1d62-ae53-48b7-ac79-641d456283c4/1/pg5C18uvyd0yBdJH1mLYWv3ZoYY.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/cc1d62-ae53-48b7-ac79-641d456283c4/1/pg5C18uvyd0yBdJH1mLYWv3ZoYY.mft rsync://rpki.ripe.net/repository/DEFAULT/pg5C18uvyd0yBdJH1mLYWv3ZoYY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:7b:64:cf:7d:27:07:88:fc:db:e8:13:53:29:3d:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a60e42d7cbafc9dd3205d247d662d85afdd9a186 Validity Not Before: Dec 18 22:01:23 2025 GMT Not After : Dec 19 22:01:23 2025 GMT Subject: CN=580ac4e6b2ed62b5fab8e9fdc6b4b623d17eb0e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:cb:c3:8b:39:ce:ae:8c:c3:17:4e:0f:f4:09: 6c:1d:16:76:f6:be:63:3b:27:e3:6a:2d:08:6a:55: 45:9c:59:3f:a3:bb:13:cc:c5:d7:bb:c3:cb:e1:45: 9d:1c:12:13:54:99:1e:b0:5a:e5:d8:76:68:ff:81: a9:27:11:95:96:5f:9f:7e:68:01:d7:0a:cc:24:92: 92:77:e7:fb:c4:db:7a:81:73:de:f4:c5:89:b9:6e: 69:c3:3c:a6:e9:24:db:10:30:ae:67:1c:43:e9:d6: 8d:2c:ff:92:18:2c:c2:21:88:35:09:d4:fb:bb:c4: a3:09:b5:12:a4:e1:63:3d:ea:b8:13:98:1e:01:cb: 17:24:9b:aa:30:87:2b:63:c4:04:d2:67:1a:89:9c: 65:bd:0c:06:ea:9b:39:94:0a:fd:cb:b7:87:a6:32: 92:28:ce:12:0b:c6:dc:2e:a1:dc:bf:e4:0d:de:99: 05:14:41:7c:9e:88:e8:97:81:81:5c:5c:49:15:f2: 20:6a:00:c4:44:36:54:e5:30:1d:e7:39:08:8b:a1: 97:0f:9a:80:4b:8a:e8:c5:1b:d7:d0:b3:51:72:1d: bd:81:a4:59:3d:1f:e1:30:c2:d2:c0:4c:72:57:29: e2:07:00:f4:6d:11:67:73:cf:df:61:4d:05:a2:43: e1:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:0A:C4:E6:B2:ED:62:B5:FA:B8:E9:FD:C6:B4:B6:23:D1:7E:B0:E8 X509v3 Authority Key Identifier: keyid:A6:0E:42:D7:CB:AF:C9:DD:32:05:D2:47:D6:62:D8:5A:FD:D9:A1:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pg5C18uvyd0yBdJH1mLYWv3ZoYY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cc1d62-ae53-48b7-ac79-641d456283c4/1/pg5C18uvyd0yBdJH1mLYWv3ZoYY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cc1d62-ae53-48b7-ac79-641d456283c4/1/pg5C18uvyd0yBdJH1mLYWv3ZoYY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:de:6b:3d:7d:98:fa:81:54:6a:78:c2:be:29:36:c1:24:49: e4:21:db:8e:85:8a:e1:ec:17:dd:07:b4:84:f9:a3:0a:69:1c: cc:06:fa:3a:e6:28:b4:76:ea:5f:c0:76:f7:99:66:5c:62:92: 08:a3:a2:d3:d6:ff:09:20:d9:42:7d:3a:46:70:85:c4:85:6b: 67:53:01:82:1b:25:80:ba:ff:00:ad:a3:ab:ad:2c:de:24:ae: 27:ce:52:f7:df:7b:9a:b7:2a:90:3f:31:ab:c3:42:0d:3f:4c: a2:5b:47:36:e2:d9:f6:eb:76:da:88:22:78:a4:ce:78:40:65: e8:f8:4e:c0:7a:fa:4e:91:52:d3:e6:ea:bc:10:d3:fa:6d:0c: 90:5c:4a:88:3a:f3:85:89:ec:20:5c:f3:d2:0e:9e:d4:91:4c: 20:72:92:08:f2:ce:71:13:d4:35:1f:30:f8:a8:3b:d6:f0:fe: b5:39:c5:47:39:ab:7b:e7:78:bf:1a:4d:f2:80:2e:c7:fd:0f: f2:0b:29:33:cc:92:0d:2d:b1:3d:f1:b6:82:fd:39:a7:88:66: 4c:8c:42:40:6d:37:6f:c3:df:e3:dc:a3:ac:39:db:d6:42:d8: 23:cd:53:e3:a4:77:43:d2:91:6a:0b:74:ed:59:44:c6:0e:8a: 4e:f9:37:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsze2TPfScHiPzb6BNTKT2/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2MGU0MmQ3Y2JhZmM5ZGQzMjA1ZDI0N2Q2NjJkODVhZmRk OWExODYwHhcNMjUxMjE4MjIwMTIzWhcNMjUxMjE5MjIwMTIzWjAzMTEwLwYDVQQD Eyg1ODBhYzRlNmIyZWQ2MmI1ZmFiOGU5ZmRjNmI0YjYyM2QxN2ViMGU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8vDiznOrozDF04P9AlsHRZ29r5j Oyfjai0IalVFnFk/o7sTzMXXu8PL4UWdHBITVJkesFrl2HZo/4GpJxGVll+ffmgB 1wrMJJKSd+f7xNt6gXPe9MWJuW5pwzym6STbEDCuZxxD6daNLP+SGCzCIYg1CdT7 u8SjCbUSpOFjPeq4E5geAcsXJJuqMIcrY8QE0mcaiZxlvQwG6ps5lAr9y7eHpjKS KM4SC8bcLqHcv+QN3pkFFEF8nojol4GBXFxJFfIgagDERDZU5TAd5zkIi6GXD5qA S4roxRvX0LNRch29gaRZPR/hMMLSwExyVyniBwD0bRFnc8/fYU0FokPhMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFgKxOay7WK1+rjp/ca0tiPRfrDoMB8GA1UdIwQY MBaAFKYOQtfLr8ndMgXSR9Zi2Fr92aGGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGc1QzE4dXZ5ZDB5QmRKSDFtTFlXdjNab1lZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9jYzFkNjItYWU1My00OGI3LWFjNzkt NjQxZDQ1NjI4M2M0LzEvcGc1QzE4dXZ5ZDB5QmRKSDFtTFlXdjNab1lZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9jYzFkNjItYWU1My00OGI3LWFjNzktNjQxZDQ1NjI4M2M0 LzEvcGc1QzE4dXZ5ZDB5QmRKSDFtTFlXdjNab1lZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFt5rPX2Y +oFUanjCvik2wSRJ5CHbjoWK4ewX3Qe0hPmjCmkczAb6OuYotHbqX8B295lmXGKS CKOi09b/CSDZQn06RnCFxIVrZ1MBghslgLr/AK2jq60s3iSuJ85S9997mrcqkD8x q8NCDT9MoltHNuLZ9ut22ogieKTOeEBl6PhOwHr6TpFS0+bqvBDT+m0MkFxKiDrz hYnsIFzz0g6e1JFMIHKSCPLOcRPUNR8w+Kg71vD+tTnFRzmre+d4vxpN8oAux/0P 8gspM8ySDS2xPfG2gv05p4hmTIxCQG03b8Pf49yjrDnb1kLYI81T46R3Q9KRagt0 7VlExg6KTvk3yA== -----END CERTIFICATE-----Generated at Fri Dec 19 04:52:06 2025 by rpki-client