This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/d035fb-e860-461d-9728-149e2a3ade76/1/Pngt4bXVKS7dE21SeCWMZ7Bb4io.mft File: Pngt4bXVKS7dE21SeCWMZ7Bb4io.mft (raw, json) Hash identifier: hFGResBWu7d80Y5hyAE4GnByD9RSpSUec0W4AybMUcw= Subject key identifier: 48:64:67:53:9B:68:63:95:59:03:F0:8E:A4:D7:A4:C8:7F:DF:BD:4C Authority key identifier: 3E:78:2D:E1:B5:D5:29:2E:DD:13:6D:52:78:25:8C:67:B0:5B:E2:2A Certificate issuer: /CN=3e782de1b5d5292edd136d5278258c67b05be22a Certificate serial: 019B59E3BD3E78EA50EE47161C2BA2888021 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pngt4bXVKS7dE21SeCWMZ7Bb4io.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/d035fb-e860-461d-9728-149e2a3ade76/1/Pngt4bXVKS7dE21SeCWMZ7Bb4io.mft Manifest number: 04DB Signing time: Fri 26 Dec 2025 09:00:55 +0000 Manifest this update: Fri 26 Dec 2025 09:00:55 +0000 Manifest next update: Sat 27 Dec 2025 09:00:55 +0000 Files and hashes: 1: HsLH977Wr8CRqPeFRIsKeWuqNBQ.roa (hash: DfN2Ce+eFgUYzjRB1SnZEzwBexeV9U5bLQB9J92xhK4=) 2: Pngt4bXVKS7dE21SeCWMZ7Bb4io.crl (hash: uswDnZUcq2z/eYh5tmeTRc7dc5C2L0QN5GLvYFmBd9Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/d035fb-e860-461d-9728-149e2a3ade76/1/Pngt4bXVKS7dE21SeCWMZ7Bb4io.crl rsync://rpki.ripe.net/repository/DEFAULT/62/d035fb-e860-461d-9728-149e2a3ade76/1/Pngt4bXVKS7dE21SeCWMZ7Bb4io.mft rsync://rpki.ripe.net/repository/DEFAULT/Pngt4bXVKS7dE21SeCWMZ7Bb4io.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e3:bd:3e:78:ea:50:ee:47:16:1c:2b:a2:88:80:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e782de1b5d5292edd136d5278258c67b05be22a Validity Not Before: Dec 26 09:00:55 2025 GMT Not After : Dec 27 09:00:55 2025 GMT Subject: CN=486467539b6863955903f08ea4d7a4c87fdfbd4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:1d:76:bb:94:ad:aa:6f:3c:ea:26:1c:9c:5a: e1:4e:9c:1d:b9:6d:8b:1b:a7:f5:d2:12:32:77:a8: 42:d9:91:5a:1a:40:8f:80:64:6a:e2:56:5f:4d:55: b9:3d:20:80:65:58:c7:bc:db:37:06:fe:ef:a5:b5: 9c:43:a2:f2:d0:d8:8d:b1:b3:c7:ab:d7:0b:d1:b7: b1:1d:b4:fd:3c:67:01:2b:03:16:78:39:8e:a1:2c: 06:c9:a7:9a:4c:fb:3d:72:53:cb:e8:f3:c6:a7:14: 29:17:43:d0:7b:46:41:0d:54:3b:13:0b:ab:62:56: 79:60:fc:bc:6b:38:a6:aa:84:b9:c6:32:7b:27:15: fe:af:cb:d3:3a:6d:1c:84:69:d0:b3:48:23:06:a6: 42:d9:7c:81:23:8c:8f:1f:24:22:bc:5f:1e:4c:b3: 84:45:79:9e:02:9c:df:b3:2a:4e:c7:2f:99:86:17: 37:39:bb:6c:72:23:4d:8c:f4:63:b2:e3:d0:a0:e6: 71:d0:5a:2c:7b:a1:97:0a:0f:40:5a:2f:3c:91:9d: 36:5f:d0:6e:b0:e9:d3:f9:dd:c4:16:cd:c6:f1:2b: d3:1c:50:e0:a9:c1:aa:cb:da:a7:15:0f:1d:5f:5d: cc:32:fa:92:6f:9b:75:00:c1:2b:d1:2a:bf:cc:48: 2d:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:64:67:53:9B:68:63:95:59:03:F0:8E:A4:D7:A4:C8:7F:DF:BD:4C X509v3 Authority Key Identifier: keyid:3E:78:2D:E1:B5:D5:29:2E:DD:13:6D:52:78:25:8C:67:B0:5B:E2:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pngt4bXVKS7dE21SeCWMZ7Bb4io.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/d035fb-e860-461d-9728-149e2a3ade76/1/Pngt4bXVKS7dE21SeCWMZ7Bb4io.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/d035fb-e860-461d-9728-149e2a3ade76/1/Pngt4bXVKS7dE21SeCWMZ7Bb4io.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:e4:83:52:b3:5f:d9:0d:34:7d:86:72:a4:44:8b:c5:72:99: 17:eb:6e:87:70:97:7d:21:92:53:e7:93:b9:4e:f5:81:7e:93: 1a:e1:b8:cd:fb:ab:b4:38:d6:9d:2a:27:8d:0e:7b:e0:fa:bc: 5c:b6:10:13:6c:17:b5:b4:28:c1:a0:43:9d:e8:80:ab:14:a2: 6f:20:e6:f7:83:8a:d1:f0:60:57:40:e1:6d:14:82:35:90:69: ee:8d:e2:34:6e:50:b2:41:f5:4d:b7:76:bb:9e:5f:da:22:a0: d7:99:be:0c:b7:0d:dd:52:c4:68:ab:2a:aa:af:77:d4:bc:ee: 00:97:14:c7:52:06:77:64:a3:c8:79:c3:2e:cf:84:16:d7:16: 4c:f7:a8:cc:2c:b0:cc:09:27:b9:3c:ef:8b:cd:21:2a:72:3b: cf:ed:93:75:f6:07:33:41:81:2f:56:d7:87:56:f6:de:e6:89: d0:f3:48:69:1c:0c:a4:a5:86:9a:85:cb:db:77:b4:36:86:d2: 1c:74:a1:29:7d:84:75:e7:f4:e3:0f:92:56:df:13:f6:8c:40: ad:41:67:a0:a7:cd:fb:b7:f2:03:99:9e:88:4d:67:2f:cd:a3: c0:7b:1f:ba:d0:6a:88:eb:e2:b6:be:00:3e:1b:cd:0a:6d:65: d2:c3:6c:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ470+eOpQ7kcWHCuiiIAhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNzgyZGUxYjVkNTI5MmVkZDEzNmQ1Mjc4MjU4YzY3YjA1 YmUyMmEwHhcNMjUxMjI2MDkwMDU1WhcNMjUxMjI3MDkwMDU1WjAzMTEwLwYDVQQD Eyg0ODY0Njc1MzliNjg2Mzk1NTkwM2YwOGVhNGQ3YTRjODdmZGZiZDRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArR12u5Stqm886iYcnFrhTpwduW2L G6f10hIyd6hC2ZFaGkCPgGRq4lZfTVW5PSCAZVjHvNs3Bv7vpbWcQ6Ly0NiNsbPH q9cL0bexHbT9PGcBKwMWeDmOoSwGyaeaTPs9clPL6PPGpxQpF0PQe0ZBDVQ7Ewur YlZ5YPy8azimqoS5xjJ7JxX+r8vTOm0chGnQs0gjBqZC2XyBI4yPHyQivF8eTLOE RXmeApzfsypOxy+Zhhc3ObtsciNNjPRjsuPQoOZx0Fose6GXCg9AWi88kZ02X9Bu sOnT+d3EFs3G8SvTHFDgqcGqy9qnFQ8dX13MMvqSb5t1AMEr0Sq/zEgt1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEhkZ1ObaGOVWQPwjqTXpMh/371MMB8GA1UdIwQY MBaAFD54LeG11Sku3RNtUngljGewW+IqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG5ndDRiWFZLUzdkRTIxU2VDV01aN0JiNGlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9kMDM1ZmItZTg2MC00NjFkLTk3Mjgt MTQ5ZTJhM2FkZTc2LzEvUG5ndDRiWFZLUzdkRTIxU2VDV01aN0JiNGlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi9kMDM1ZmItZTg2MC00NjFkLTk3MjgtMTQ5ZTJhM2FkZTc2 LzEvUG5ndDRiWFZLUzdkRTIxU2VDV01aN0JiNGlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQeSDUrNf 2Q00fYZypESLxXKZF+tuh3CXfSGSU+eTuU71gX6TGuG4zfurtDjWnSonjQ574Pq8 XLYQE2wXtbQowaBDneiAqxSibyDm94OK0fBgV0DhbRSCNZBp7o3iNG5QskH1Tbd2 u55f2iKg15m+DLcN3VLEaKsqqq931LzuAJcUx1IGd2SjyHnDLs+EFtcWTPeozCyw zAknuTzvi80hKnI7z+2TdfYHM0GBL1bXh1b23uaJ0PNIaRwMpKWGmoXL23e0NobS HHShKX2Edef04w+SVt8T9oxArUFnoKfN+7fyA5meiE1nL82jwHsfutBqiOvitr4A PhvNCm1l0sNsCQ== -----END CERTIFICATE-----Generated at Fri Dec 26 11:15:55 2025 by rpki-client