This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/3d11d8-fae0-4b97-afdf-9c2bbd8c9496/1/pg0SlAGyaTo41bQ3Pcdge_hbim4.mft File: pg0SlAGyaTo41bQ3Pcdge_hbim4.mft (raw, json) Hash identifier: BuJRK/bv+JNs3NAuX5SGICeL0/00+pJwh52ADlIhLOY= Subject key identifier: 48:80:11:A2:03:66:A8:15:99:24:F9:E6:39:A0:C9:96:60:78:AC:9F Authority key identifier: A6:0D:12:94:01:B2:69:3A:38:D5:B4:37:3D:C7:60:7B:F8:5B:8A:6E Certificate issuer: /CN=a60d129401b2693a38d5b4373dc7607bf85b8a6e Certificate serial: 019B49274DF4C272CD60A6F49A76FE77A2CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pg0SlAGyaTo41bQ3Pcdge_hbim4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/3d11d8-fae0-4b97-afdf-9c2bbd8c9496/1/pg0SlAGyaTo41bQ3Pcdge_hbim4.mft Manifest number: 1646 Signing time: Tue 23 Dec 2025 03:01:11 +0000 Manifest this update: Tue 23 Dec 2025 03:01:11 +0000 Manifest next update: Wed 24 Dec 2025 03:01:11 +0000 Files and hashes: 1: VrzBS7iYMQ7CUgFXeIYUKibuq4c.roa (hash: fmhLUOU0qw8zvG4ACPTJc5SXrpkYmfNY3RjrMuYrgqA=) 2: pg0SlAGyaTo41bQ3Pcdge_hbim4.crl (hash: Qj0vyBdOUJkn8PJVFk0h3p3seLtWdAPuEhEV/5wsTBE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/3d11d8-fae0-4b97-afdf-9c2bbd8c9496/1/pg0SlAGyaTo41bQ3Pcdge_hbim4.crl rsync://rpki.ripe.net/repository/DEFAULT/45/3d11d8-fae0-4b97-afdf-9c2bbd8c9496/1/pg0SlAGyaTo41bQ3Pcdge_hbim4.mft rsync://rpki.ripe.net/repository/DEFAULT/pg0SlAGyaTo41bQ3Pcdge_hbim4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:27:4d:f4:c2:72:cd:60:a6:f4:9a:76:fe:77:a2:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a60d129401b2693a38d5b4373dc7607bf85b8a6e Validity Not Before: Dec 23 03:01:11 2025 GMT Not After : Dec 24 03:01:11 2025 GMT Subject: CN=488011a20366a8159924f9e639a0c9966078ac9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d8:65:02:28:77:19:5e:1b:f8:01:2a:b3:81: a0:0b:82:87:f6:f6:7a:98:cc:bd:92:cf:bf:02:64: 5b:b8:58:da:a4:d5:e4:31:3d:3a:14:4f:21:b8:20: c0:e0:c8:33:ac:41:85:14:97:2b:10:76:85:80:16: 0e:6b:f6:f1:3a:26:93:21:6a:57:bc:c7:cc:f5:71: e8:05:da:35:0a:80:cd:39:c4:44:56:b7:9a:e5:9f: f9:a8:94:6f:36:ca:f5:0a:b3:99:e4:13:f9:6c:66: 10:0b:3a:1f:9b:f1:ba:43:4f:db:21:0a:f0:6c:9f: ee:b3:fb:78:00:94:4b:82:28:b6:70:ef:18:23:4a: 13:db:b8:d9:64:17:9f:99:75:86:9b:ea:7d:d2:f1: b9:a6:cb:eb:81:fb:1a:79:b7:48:88:11:ef:c1:00: 77:e0:2a:65:6b:7c:58:a3:cb:38:f3:05:05:a7:1c: ed:a6:75:be:8a:4f:3d:91:ed:e1:5d:a6:1a:3a:65: b3:32:da:84:99:de:3b:09:9e:be:64:ac:2b:85:e9: 33:03:8c:f6:36:d5:db:a6:35:b2:2b:35:69:6b:18: 7c:fd:b9:3d:b3:cf:59:2a:41:be:5e:26:af:8f:35: ff:2a:9c:bd:5f:b3:7e:eb:8b:64:c0:00:84:e9:f7: a7:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:80:11:A2:03:66:A8:15:99:24:F9:E6:39:A0:C9:96:60:78:AC:9F X509v3 Authority Key Identifier: keyid:A6:0D:12:94:01:B2:69:3A:38:D5:B4:37:3D:C7:60:7B:F8:5B:8A:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pg0SlAGyaTo41bQ3Pcdge_hbim4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3d11d8-fae0-4b97-afdf-9c2bbd8c9496/1/pg0SlAGyaTo41bQ3Pcdge_hbim4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3d11d8-fae0-4b97-afdf-9c2bbd8c9496/1/pg0SlAGyaTo41bQ3Pcdge_hbim4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:8f:31:72:04:4c:3f:79:b7:3e:d0:3a:dd:0d:fb:6a:d6:33: ac:d2:4c:76:b5:a0:0e:fb:64:45:5c:40:c1:0d:d1:ce:2b:27: ef:c8:0a:d1:df:6c:2d:00:58:59:c4:2c:57:bc:b2:7c:01:f4: 25:42:3f:1a:d5:5e:3b:da:b6:ae:15:44:c1:6e:42:3c:4d:78: ee:cd:ac:01:30:e6:8f:c3:de:b0:40:78:29:72:cf:8b:b3:fb: cc:39:0e:84:56:49:04:8c:eb:31:39:c0:ec:4a:e3:9a:38:d0: 80:a6:e6:2d:fb:93:51:3a:6c:1a:84:2b:f7:6a:95:71:34:1c: bd:a4:1d:95:e9:d2:18:ec:3e:3f:0e:9c:e1:ef:62:14:28:16: c1:76:54:af:20:1a:d7:e7:12:3a:5d:cc:62:e5:ed:a7:d9:be: 57:47:18:32:3a:b1:0d:28:83:68:77:3e:63:47:d4:2d:6a:81: 3b:74:c5:e1:0e:69:5a:fc:96:43:e7:13:cb:94:2b:6a:9e:9c: 09:20:78:85:bd:15:a6:d2:f1:82:ce:1f:d9:32:0c:97:83:69: d8:e0:68:aa:32:59:8b:f6:79:f5:cc:ac:71:41:31:6c:b4:0d: 8f:8c:15:18:a6:d2:81:75:f5:b1:44:6f:7b:dc:fe:ea:cf:69: 73:40:72:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtJJ030wnLNYKb0mnb+d6LMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2MGQxMjk0MDFiMjY5M2EzOGQ1YjQzNzNkYzc2MDdiZjg1 YjhhNmUwHhcNMjUxMjIzMDMwMTExWhcNMjUxMjI0MDMwMTExWjAzMTEwLwYDVQQD Eyg0ODgwMTFhMjAzNjZhODE1OTkyNGY5ZTYzOWEwYzk5NjYwNzhhYzlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0dhlAih3GV4b+AEqs4GgC4KH9vZ6 mMy9ks+/AmRbuFjapNXkMT06FE8huCDA4MgzrEGFFJcrEHaFgBYOa/bxOiaTIWpX vMfM9XHoBdo1CoDNOcREVrea5Z/5qJRvNsr1CrOZ5BP5bGYQCzofm/G6Q0/bIQrw bJ/us/t4AJRLgii2cO8YI0oT27jZZBefmXWGm+p90vG5psvrgfsaebdIiBHvwQB3 4Cpla3xYo8s48wUFpxztpnW+ik89ke3hXaYaOmWzMtqEmd47CZ6+ZKwrhekzA4z2 NtXbpjWyKzVpaxh8/bk9s89ZKkG+XiavjzX/Kpy9X7N+64tkwACE6fen9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEiAEaIDZqgVmST55jmgyZZgeKyfMB8GA1UdIwQY MBaAFKYNEpQBsmk6ONW0Nz3HYHv4W4puMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGcwU2xBR3lhVG80MWJRM1BjZGdlX2hiaW00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS8zZDExZDgtZmFlMC00Yjk3LWFmZGYt OWMyYmJkOGM5NDk2LzEvcGcwU2xBR3lhVG80MWJRM1BjZGdlX2hiaW00Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS8zZDExZDgtZmFlMC00Yjk3LWFmZGYtOWMyYmJkOGM5NDk2 LzEvcGcwU2xBR3lhVG80MWJRM1BjZGdlX2hiaW00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY48xcgRM P3m3PtA63Q37atYzrNJMdrWgDvtkRVxAwQ3Rzisn78gK0d9sLQBYWcQsV7yyfAH0 JUI/GtVeO9q2rhVEwW5CPE147s2sATDmj8PesEB4KXLPi7P7zDkOhFZJBIzrMTnA 7ErjmjjQgKbmLfuTUTpsGoQr92qVcTQcvaQdlenSGOw+Pw6c4e9iFCgWwXZUryAa 1+cSOl3MYuXtp9m+V0cYMjqxDSiDaHc+Y0fULWqBO3TF4Q5pWvyWQ+cTy5Qrap6c CSB4hb0VptLxgs4f2TIMl4Np2OBoqjJZi/Z59cyscUExbLQNj4wVGKbSgXX1sURv e9z+6s9pc0ByXg== -----END CERTIFICATE-----Generated at Tue Dec 23 07:19:01 2025 by rpki-client