This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/PgiDSzspc5CcCq9btdNUscDlyj4.mft File: PgiDSzspc5CcCq9btdNUscDlyj4.mft (raw, json) Hash identifier: upQ0IQHqOULqalYt4yrTQFGZxKGS9tBwGtGGdUgoYuM= Subject key identifier: 60:56:2B:6B:6F:2C:A1:73:0E:D8:90:C2:66:A8:28:41:14:6E:8E:63 Authority key identifier: 3E:08:83:4B:3B:29:73:90:9C:0A:AF:5B:B5:D3:54:B1:C0:E5:CA:3E Certificate issuer: /CN=3e08834b3b2973909c0aaf5bb5d354b1c0e5ca3e Certificate serial: 019B43C992E0960C42E5C927E40F93B94CE2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PgiDSzspc5CcCq9btdNUscDlyj4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/PgiDSzspc5CcCq9btdNUscDlyj4.mft Manifest number: 066D Signing time: Mon 22 Dec 2025 02:00:42 +0000 Manifest this update: Mon 22 Dec 2025 02:00:42 +0000 Manifest next update: Tue 23 Dec 2025 02:00:42 +0000 Files and hashes: 1: MtWTrnrND6EP3cM9Z5OSCIGl4vA.roa (hash: pbxVZVZ80DN49b7VnIcQNiVRM2BUbkPepC2i0a2pNpo=) 2: PgiDSzspc5CcCq9btdNUscDlyj4.crl (hash: 9hmAP9GzW13MQEpeOf9l0BwntX6khUrbeYJU6ha3Its=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/PgiDSzspc5CcCq9btdNUscDlyj4.crl rsync://rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/PgiDSzspc5CcCq9btdNUscDlyj4.mft rsync://rpki.ripe.net/repository/DEFAULT/PgiDSzspc5CcCq9btdNUscDlyj4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:c9:92:e0:96:0c:42:e5:c9:27:e4:0f:93:b9:4c:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e08834b3b2973909c0aaf5bb5d354b1c0e5ca3e Validity Not Before: Dec 22 02:00:42 2025 GMT Not After : Dec 23 02:00:42 2025 GMT Subject: CN=60562b6b6f2ca1730ed890c266a82841146e8e63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ac:a9:a4:38:6a:61:27:72:c6:f4:71:90:f9: 25:f8:7d:6e:ba:8c:c2:ef:d0:b8:30:86:7f:c3:1a: e7:77:ca:9a:52:50:2a:16:db:11:03:5c:6c:91:3a: c1:0c:99:c5:b8:e7:fc:32:b2:b5:a4:b5:3c:b4:f7: 23:a0:72:d1:9f:21:64:d7:06:52:88:2f:6a:d5:6d: 09:5c:67:92:b1:77:4d:23:d2:21:42:2f:64:6c:e8: 9a:7d:a5:16:ff:23:2a:66:e4:d3:df:44:86:fe:7d: 5e:b8:cd:36:95:1c:36:df:b2:40:ec:97:c2:86:a3: 62:bb:d0:a5:1e:12:75:c8:26:c5:78:f3:2a:a9:67: e0:33:94:55:3f:d8:a1:c0:b5:11:59:95:ed:f1:f4: 3c:e4:d0:4a:ed:e1:34:51:09:71:37:2d:18:2b:78: 89:a6:2f:e9:af:5c:0d:20:16:f8:50:66:a7:ba:0e: fc:4f:0e:a7:49:6c:22:a7:5b:1d:88:53:63:74:c5: 4f:6b:85:15:ab:47:89:64:dc:cb:24:09:31:d8:2b: d8:24:a8:79:d4:73:30:bb:1f:ca:06:7f:e5:99:93: c3:87:7b:44:ad:6d:c3:e2:8d:0a:c6:e6:99:2a:fe: 3e:fc:f4:e8:88:42:ae:2a:df:b7:fc:4f:9e:96:e9: 25:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:56:2B:6B:6F:2C:A1:73:0E:D8:90:C2:66:A8:28:41:14:6E:8E:63 X509v3 Authority Key Identifier: keyid:3E:08:83:4B:3B:29:73:90:9C:0A:AF:5B:B5:D3:54:B1:C0:E5:CA:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PgiDSzspc5CcCq9btdNUscDlyj4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/PgiDSzspc5CcCq9btdNUscDlyj4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/PgiDSzspc5CcCq9btdNUscDlyj4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:91:79:d9:5f:b5:e4:02:e2:ab:d7:96:f5:fa:7e:6e:13:93: bd:05:a8:89:66:f6:95:a5:81:7a:f2:70:6c:45:c3:6d:f5:74: 72:cf:3e:58:82:87:58:7a:78:8d:d3:f4:b9:e5:ff:14:47:82: 4f:b9:59:c2:aa:37:c8:8d:20:21:e8:d4:97:25:88:4d:5b:10: b2:29:d7:28:8b:2c:01:8e:fc:0a:9d:34:16:0e:14:85:09:bd: db:19:60:9a:bf:09:95:be:37:43:ca:12:40:c3:fd:36:b5:f6: 14:1c:6f:b2:78:ce:57:1c:98:aa:39:e5:76:3f:aa:67:43:9b: 96:a1:78:05:18:40:b6:b9:c0:f9:b7:4a:1b:22:4b:45:39:e8: 28:eb:23:2d:3d:39:7d:38:c7:8b:62:d4:e1:cb:5e:01:09:a8: f7:75:29:32:4d:79:87:34:38:08:eb:fb:25:9b:e7:2b:c8:9b: 12:b6:88:87:2f:81:1d:37:da:8f:a7:e4:ce:0b:04:75:09:e9: 27:11:64:98:72:11:a5:1b:96:32:7a:1f:f4:24:e3:f6:ce:4b: d6:fa:a4:f5:aa:bf:08:74:a7:2f:b9:87:0f:8e:fe:1d:00:c3: 46:be:51:9a:64:94:ca:d9:ac:b6:0e:bb:1e:10:46:b1:41:0c: b8:08:86:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDyZLglgxC5ckn5A+TuUziMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlMDg4MzRiM2IyOTczOTA5YzBhYWY1YmI1ZDM1NGIxYzBl NWNhM2UwHhcNMjUxMjIyMDIwMDQyWhcNMjUxMjIzMDIwMDQyWjAzMTEwLwYDVQQD Eyg2MDU2MmI2YjZmMmNhMTczMGVkODkwYzI2NmE4Mjg0MTE0NmU4ZTYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqyppDhqYSdyxvRxkPkl+H1uuozC 79C4MIZ/wxrnd8qaUlAqFtsRA1xskTrBDJnFuOf8MrK1pLU8tPcjoHLRnyFk1wZS iC9q1W0JXGeSsXdNI9IhQi9kbOiafaUW/yMqZuTT30SG/n1euM02lRw237JA7JfC hqNiu9ClHhJ1yCbFePMqqWfgM5RVP9ihwLURWZXt8fQ85NBK7eE0UQlxNy0YK3iJ pi/pr1wNIBb4UGanug78Tw6nSWwip1sdiFNjdMVPa4UVq0eJZNzLJAkx2CvYJKh5 1HMwux/KBn/lmZPDh3tErW3D4o0KxuaZKv4+/PToiEKuKt+3/E+eluklBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGBWK2tvLKFzDtiQwmaoKEEUbo5jMB8GA1UdIwQY MBaAFD4Ig0s7KXOQnAqvW7XTVLHA5co+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGdpRFN6c3BjNUNjQ3E5YnRkTlVzY0RseWo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9lZjAzYjMtNzQ3Mi00NmRlLTk1ODYt ZmQ3Yjk3MzljYTI2LzEvUGdpRFN6c3BjNUNjQ3E5YnRkTlVzY0RseWo0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC9lZjAzYjMtNzQ3Mi00NmRlLTk1ODYtZmQ3Yjk3MzljYTI2 LzEvUGdpRFN6c3BjNUNjQ3E5YnRkTlVzY0RseWo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEZF52V+1 5ALiq9eW9fp+bhOTvQWoiWb2laWBevJwbEXDbfV0cs8+WIKHWHp4jdP0ueX/FEeC T7lZwqo3yI0gIejUlyWITVsQsinXKIssAY78Cp00Fg4UhQm92xlgmr8Jlb43Q8oS QMP9NrX2FBxvsnjOVxyYqjnldj+qZ0OblqF4BRhAtrnA+bdKGyJLRTnoKOsjLT05 fTjHi2LU4cteAQmo93UpMk15hzQ4COv7JZvnK8ibEraIhy+BHTfaj6fkzgsEdQnp JxFkmHIRpRuWMnof9CTj9s5L1vqk9aq/CHSnL7mHD47+HQDDRr5RmmSUytmstg67 HhBGsUEMuAiGSw== -----END CERTIFICATE-----Generated at Mon Dec 22 08:08:09 2025 by rpki-client