This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/730d4d-d4ab-4279-b225-6dc0da1f5dee/1/pgkmXYlPp5_NZUL6zAujiXOMhFk.mft File: pgkmXYlPp5_NZUL6zAujiXOMhFk.mft (raw, json) Hash identifier: WaeMM9xSsPf/O4FFE7zYalEl7OneBZZ2GtLbmKAG3tc= Subject key identifier: 63:DE:91:67:87:B1:51:BA:26:3C:41:C1:E5:6B:00:EB:5E:AC:0C:B5 Authority key identifier: A6:09:26:5D:89:4F:A7:9F:CD:65:42:FA:CC:0B:A3:89:73:8C:84:59 Certificate issuer: /CN=a609265d894fa79fcd6542facc0ba389738c8459 Certificate serial: 019B30E8B2B8A92943A140FF7AA2EA48D982 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgkmXYlPp5_NZUL6zAujiXOMhFk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/730d4d-d4ab-4279-b225-6dc0da1f5dee/1/pgkmXYlPp5_NZUL6zAujiXOMhFk.mft Manifest number: 0A9A Signing time: Thu 18 Dec 2025 10:01:54 +0000 Manifest this update: Thu 18 Dec 2025 10:01:54 +0000 Manifest next update: Fri 19 Dec 2025 10:01:54 +0000 Files and hashes: 1: pgkmXYlPp5_NZUL6zAujiXOMhFk.crl (hash: CGV7vGAj5fVOP9fvalumh2BoXtzUI1OMIN9Uf5218ek=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/730d4d-d4ab-4279-b225-6dc0da1f5dee/1/pgkmXYlPp5_NZUL6zAujiXOMhFk.crl rsync://rpki.ripe.net/repository/DEFAULT/61/730d4d-d4ab-4279-b225-6dc0da1f5dee/1/pgkmXYlPp5_NZUL6zAujiXOMhFk.mft rsync://rpki.ripe.net/repository/DEFAULT/pgkmXYlPp5_NZUL6zAujiXOMhFk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 10:01:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:e8:b2:b8:a9:29:43:a1:40:ff:7a:a2:ea:48:d9:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a609265d894fa79fcd6542facc0ba389738c8459 Validity Not Before: Dec 18 10:01:54 2025 GMT Not After : Dec 19 10:01:54 2025 GMT Subject: CN=63de916787b151ba263c41c1e56b00eb5eac0cb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:8d:63:c3:3d:74:a2:07:9b:14:73:c5:6d:f7: ba:6b:b7:b2:e7:48:2a:61:f9:58:d4:a2:c9:df:e6: c4:0f:d6:25:82:77:68:68:11:d7:80:7f:9b:78:3f: 9b:17:4d:81:17:67:a5:15:1b:be:be:31:08:7d:2d: bd:06:69:57:7c:5b:41:9e:39:9e:c8:50:77:eb:a8: 99:11:5a:45:e3:42:4c:a0:20:fa:0b:c6:50:eb:63: 01:cc:41:31:6f:42:6b:2e:c3:0b:6c:cb:ae:b2:8d: 72:a9:59:66:13:7d:0f:a6:4a:9c:7f:c0:28:ff:b7: 7f:4b:f9:3f:8a:33:cc:2c:84:c2:43:e6:b6:b3:eb: ab:df:9d:b6:a5:1c:74:94:32:f0:9e:5f:e1:4c:0d: 8c:05:34:64:fe:10:d4:47:a7:fa:c5:31:f3:6a:64: 6f:e3:d7:cc:be:3e:bc:3f:c3:4f:61:6a:f9:c2:92: 00:34:a1:57:5b:54:1f:4e:c0:bc:10:13:14:1c:71: 03:12:d0:bb:56:70:22:bc:38:57:bc:2b:3d:f0:58: eb:df:0b:25:96:8d:9c:a9:71:17:d1:14:9d:45:81: b5:91:c1:cc:ab:ac:d4:8c:c3:2e:9b:19:39:6e:a6: 25:fd:d4:5d:20:d5:e2:19:f6:ca:18:a2:9b:bc:30: 0a:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:DE:91:67:87:B1:51:BA:26:3C:41:C1:E5:6B:00:EB:5E:AC:0C:B5 X509v3 Authority Key Identifier: keyid:A6:09:26:5D:89:4F:A7:9F:CD:65:42:FA:CC:0B:A3:89:73:8C:84:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgkmXYlPp5_NZUL6zAujiXOMhFk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/730d4d-d4ab-4279-b225-6dc0da1f5dee/1/pgkmXYlPp5_NZUL6zAujiXOMhFk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/730d4d-d4ab-4279-b225-6dc0da1f5dee/1/pgkmXYlPp5_NZUL6zAujiXOMhFk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:16:e6:82:d1:77:b3:d8:6b:e9:11:a5:b6:cd:df:a6:56:c8: ee:2d:9b:d8:49:f5:b4:8a:8e:67:7e:1d:2c:79:55:e8:a6:c8: 1d:10:4c:d1:be:f9:39:85:af:62:90:70:78:57:12:57:65:11: 27:c3:1e:2b:81:0c:a1:89:71:4a:27:ef:c2:d7:bc:88:9d:86: cc:b1:68:cb:55:19:b1:a2:2c:5b:37:0c:d4:34:03:87:de:58: 56:09:32:68:5b:1c:b9:7c:5c:24:9d:fa:4c:08:f8:24:42:30: f9:c7:1b:c6:de:96:18:f8:11:64:5b:c4:04:24:6e:25:1c:e9: 5d:c7:e1:d2:49:79:f6:9d:a0:9a:4b:b3:b8:c2:2a:4e:10:54: 79:b7:39:75:3c:63:eb:bb:f7:ba:fc:14:aa:e8:66:80:4a:05: f1:d4:69:33:f7:f2:d5:1e:4f:30:87:19:b8:07:c5:17:ff:d6: 41:5c:c2:1f:21:d5:32:66:c6:be:73:3e:c6:85:af:07:e5:fb: 1f:26:85:dd:99:e2:cb:11:c6:42:53:64:6c:0a:76:07:ac:ef: 2f:38:67:4f:09:40:07:90:22:48:84:df:06:29:37:42:c4:7d: fc:6c:59:c8:23:e2:7f:ca:1f:b1:84:93:ef:6c:77:f7:e7:ea: a2:d6:41:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsw6LK4qSlDoUD/eqLqSNmCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2MDkyNjVkODk0ZmE3OWZjZDY1NDJmYWNjMGJhMzg5NzM4 Yzg0NTkwHhcNMjUxMjE4MTAwMTU0WhcNMjUxMjE5MTAwMTU0WjAzMTEwLwYDVQQD Eyg2M2RlOTE2Nzg3YjE1MWJhMjYzYzQxYzFlNTZiMDBlYjVlYWMwY2I1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA541jwz10ogebFHPFbfe6a7ey50gq YflY1KLJ3+bED9YlgndoaBHXgH+beD+bF02BF2elFRu+vjEIfS29BmlXfFtBnjme yFB366iZEVpF40JMoCD6C8ZQ62MBzEExb0JrLsMLbMuuso1yqVlmE30Ppkqcf8Ao /7d/S/k/ijPMLITCQ+a2s+ur3522pRx0lDLwnl/hTA2MBTRk/hDUR6f6xTHzamRv 49fMvj68P8NPYWr5wpIANKFXW1QfTsC8EBMUHHEDEtC7VnAivDhXvCs98Fjr3wsl lo2cqXEX0RSdRYG1kcHMq6zUjMMumxk5bqYl/dRdINXiGfbKGKKbvDAKQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGPekWeHsVG6JjxBweVrAOterAy1MB8GA1UdIwQY MBaAFKYJJl2JT6efzWVC+swLo4lzjIRZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGdrbVhZbFBwNV9OWlVMNnpBdWppWE9NaEZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS83MzBkNGQtZDRhYi00Mjc5LWIyMjUt NmRjMGRhMWY1ZGVlLzEvcGdrbVhZbFBwNV9OWlVMNnpBdWppWE9NaEZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS83MzBkNGQtZDRhYi00Mjc5LWIyMjUtNmRjMGRhMWY1ZGVl LzEvcGdrbVhZbFBwNV9OWlVMNnpBdWppWE9NaEZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPBbmgtF3 s9hr6RGlts3fplbI7i2b2En1tIqOZ34dLHlV6KbIHRBM0b75OYWvYpBweFcSV2UR J8MeK4EMoYlxSifvwte8iJ2GzLFoy1UZsaIsWzcM1DQDh95YVgkyaFscuXxcJJ36 TAj4JEIw+ccbxt6WGPgRZFvEBCRuJRzpXcfh0kl59p2gmkuzuMIqThBUebc5dTxj 67v3uvwUquhmgEoF8dRpM/fy1R5PMIcZuAfFF//WQVzCHyHVMmbGvnM+xoWvB+X7 HyaF3ZniyxHGQlNkbAp2B6zvLzhnTwlAB5AiSITfBik3QsR9/GxZyCPif8ofsYST 72x39+fqotZBmg== -----END CERTIFICATE-----Generated at Thu Dec 18 18:36:47 2025 by rpki-client