This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft File: PgzNJQR7nLi28Bhnze3oJW9zSiM.mft (raw, json) Hash identifier: 1H1vxLnGLSL1LFcZLzo//8DPCDDXbefNHTylmHXwOik= Subject key identifier: 92:97:4A:AE:31:41:0F:41:B0:CD:88:90:6A:65:67:1E:4F:66:85:D6 Authority key identifier: 3E:0C:CD:25:04:7B:9C:B8:B6:F0:18:67:CD:ED:E8:25:6F:73:4A:23 Certificate issuer: /CN=3e0ccd25047b9cb8b6f01867cdede8256f734a23 Certificate serial: 019B4ADF1967C21CB4349AEEED4BDDE8329B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PgzNJQR7nLi28Bhnze3oJW9zSiM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft Manifest number: 0A46 Signing time: Tue 23 Dec 2025 11:01:33 +0000 Manifest this update: Tue 23 Dec 2025 11:01:33 +0000 Manifest next update: Wed 24 Dec 2025 11:01:33 +0000 Files and hashes: 1: PgzNJQR7nLi28Bhnze3oJW9zSiM.crl (hash: h9IRTlo+Dkv8YQA1xrkdJXXTGSJ8RydsD3Bh+UQZjdg=) 2: tNlE-RsS8yP8q3aEd77vtdKV4ao.roa (hash: 0s1wr6faxjcsfPekqZ/FFwhO5dh5LLtuhFGeIZLAT0s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft rsync://rpki.ripe.net/repository/DEFAULT/PgzNJQR7nLi28Bhnze3oJW9zSiM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 11:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:df:19:67:c2:1c:b4:34:9a:ee:ed:4b:dd:e8:32:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e0ccd25047b9cb8b6f01867cdede8256f734a23 Validity Not Before: Dec 23 11:01:33 2025 GMT Not After : Dec 24 11:01:33 2025 GMT Subject: CN=92974aae31410f41b0cd88906a65671e4f6685d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c5:4a:d2:69:e8:98:41:c9:e7:fc:61:6c:d2: 42:8b:8f:51:1f:f2:20:af:14:74:9a:07:a4:22:a5: cd:fe:67:8c:ad:54:cb:0c:47:66:a2:66:39:bc:a5: b1:e8:50:60:db:51:df:84:50:e6:16:6d:51:22:f5: 64:37:8f:f2:cf:3a:97:2f:eb:a7:c8:a5:c8:70:2f: 35:05:b5:e6:a5:de:1b:17:e8:9a:6c:44:41:fe:d7: c4:ce:3c:8b:5d:69:28:32:23:e9:d8:7c:e1:29:b2: d0:49:32:f4:ff:13:34:bc:bf:3c:95:fa:24:ed:2e: 89:2b:82:80:9a:37:42:84:ba:a6:14:39:cc:73:75: 8c:0b:2a:fc:47:1e:3d:59:e0:4a:ec:7e:10:c4:43: df:c3:04:11:88:b8:70:19:5b:d3:ef:99:21:51:35: d8:72:1b:9a:11:65:0e:ac:46:99:59:1e:6f:ec:1d: b7:81:39:63:5a:65:38:c5:e2:30:5d:4e:47:c2:ec: a9:36:93:ba:30:5a:06:bc:0b:17:83:b5:57:06:b3: e7:37:ff:a4:2e:e5:99:5a:5e:52:de:6f:2a:71:5b: 7c:c2:be:9a:22:a7:b8:63:be:ba:79:ae:2e:72:09: d5:a9:be:d3:b0:cf:5a:ed:e3:40:3a:50:bb:b2:ac: aa:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:97:4A:AE:31:41:0F:41:B0:CD:88:90:6A:65:67:1E:4F:66:85:D6 X509v3 Authority Key Identifier: keyid:3E:0C:CD:25:04:7B:9C:B8:B6:F0:18:67:CD:ED:E8:25:6F:73:4A:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PgzNJQR7nLi28Bhnze3oJW9zSiM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:9d:20:4a:40:c3:fd:f5:d8:64:b9:40:3a:af:1e:94:78:df: b8:de:7f:91:61:dc:35:89:20:5b:04:2c:ff:ca:e1:93:94:1f: e3:7a:1c:48:98:77:f8:57:2f:2b:f0:bb:c2:3b:5c:f3:5b:a6: 81:4d:2c:7c:57:5e:4b:c7:b2:e0:55:c3:01:d5:1c:3d:6a:2e: a6:cb:25:71:a7:3f:58:14:46:ef:13:5a:27:dd:e1:d6:9b:91: c6:ba:a2:41:2b:d6:dc:2a:ff:94:80:19:db:1a:af:27:8a:df: 32:b8:78:6b:b7:50:db:a9:9f:35:c1:ca:28:66:b1:6e:9b:05: d2:16:4d:df:06:e0:1a:ce:00:e3:92:78:77:6d:a9:3c:89:26: 5d:b1:6c:78:15:c0:35:a9:7f:23:72:62:f7:82:9c:80:7a:7f: f9:f3:49:24:c2:b5:fe:48:23:31:af:85:29:b7:04:eb:f4:23: d6:e4:ba:fc:5a:59:63:3c:bc:a0:35:c3:1d:80:64:59:77:98: a8:22:75:d2:cf:7b:06:f0:7b:62:39:40:ae:a1:92:da:ae:75: 62:ea:cf:00:0c:24:7e:41:f6:13:e2:09:f1:24:a4:b9:ef:90: e2:81:aa:67:2c:e5:52:f6:e3:c8:44:6c:4f:08:59:b7:db:6c: 0e:a1:7a:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtK3xlnwhy0NJru7Uvd6DKbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlMGNjZDI1MDQ3YjljYjhiNmYwMTg2N2NkZWRlODI1NmY3 MzRhMjMwHhcNMjUxMjIzMTEwMTMzWhcNMjUxMjI0MTEwMTMzWjAzMTEwLwYDVQQD Eyg5Mjk3NGFhZTMxNDEwZjQxYjBjZDg4OTA2YTY1NjcxZTRmNjY4NWQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcVK0mnomEHJ5/xhbNJCi49RH/Ig rxR0mgekIqXN/meMrVTLDEdmomY5vKWx6FBg21HfhFDmFm1RIvVkN4/yzzqXL+un yKXIcC81BbXmpd4bF+iabERB/tfEzjyLXWkoMiPp2HzhKbLQSTL0/xM0vL88lfok 7S6JK4KAmjdChLqmFDnMc3WMCyr8Rx49WeBK7H4QxEPfwwQRiLhwGVvT75khUTXY chuaEWUOrEaZWR5v7B23gTljWmU4xeIwXU5HwuypNpO6MFoGvAsXg7VXBrPnN/+k LuWZWl5S3m8qcVt8wr6aIqe4Y766ea4ucgnVqb7TsM9a7eNAOlC7sqyq5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJKXSq4xQQ9BsM2IkGplZx5PZoXWMB8GA1UdIwQY MBaAFD4MzSUEe5y4tvAYZ83t6CVvc0ojMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGd6TkpRUjduTGkyOEJobnplM29KVzl6U2lNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC85Yzg2MzEtZGM2YS00NWMyLWJjZjkt OWNkMDE3MjQzYTA2LzEvUGd6TkpRUjduTGkyOEJobnplM29KVzl6U2lNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC85Yzg2MzEtZGM2YS00NWMyLWJjZjktOWNkMDE3MjQzYTA2 LzEvUGd6TkpRUjduTGkyOEJobnplM29KVzl6U2lNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZp0gSkDD /fXYZLlAOq8elHjfuN5/kWHcNYkgWwQs/8rhk5Qf43ocSJh3+FcvK/C7wjtc81um gU0sfFdeS8ey4FXDAdUcPWoupsslcac/WBRG7xNaJ93h1puRxrqiQSvW3Cr/lIAZ 2xqvJ4rfMrh4a7dQ26mfNcHKKGaxbpsF0hZN3wbgGs4A45J4d22pPIkmXbFseBXA Nal/I3Ji94KcgHp/+fNJJMK1/kgjMa+FKbcE6/Qj1uS6/FpZYzy8oDXDHYBkWXeY qCJ10s97BvB7YjlArqGS2q51YurPAAwkfkH2E+IJ8SSkue+Q4oGqZyzlUvbjyERs TwhZt9tsDqF62Q== -----END CERTIFICATE-----Generated at Tue Dec 23 18:33:31 2025 by rpki-client