This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/804c2c-85fd-429f-bbaf-f6b044dcd624/1/PGFL8lfTr3cLvzxsLTW_pGVobOs.mft File: PGFL8lfTr3cLvzxsLTW_pGVobOs.mft (raw, json) Hash identifier: IQ2c32nv0U7sq2yF5KD1dSq5FK4x9sJsRJ8vd6dAcuo= Subject key identifier: 87:53:A1:D3:27:C5:A4:0E:34:A4:23:A4:49:D5:D4:05:73:29:F5:1F Authority key identifier: 3C:61:4B:F2:57:D3:AF:77:0B:BF:3C:6C:2D:35:BF:A4:65:68:6C:EB Certificate issuer: /CN=3c614bf257d3af770bbf3c6c2d35bfa465686ceb Certificate serial: 019B4091ACCADB0087667C959D6167278C03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PGFL8lfTr3cLvzxsLTW_pGVobOs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/804c2c-85fd-429f-bbaf-f6b044dcd624/1/PGFL8lfTr3cLvzxsLTW_pGVobOs.mft Manifest number: 178A Signing time: Sun 21 Dec 2025 11:00:47 +0000 Manifest this update: Sun 21 Dec 2025 11:00:47 +0000 Manifest next update: Mon 22 Dec 2025 11:00:47 +0000 Files and hashes: 1: PGFL8lfTr3cLvzxsLTW_pGVobOs.crl (hash: 8fkRII7eyXcGicuTEnatPUikS6p9974Li8fapgvCjOo=) 2: idSC5Hw5WkkMOAbfku6Dkz9XO6I.roa (hash: UXJcLdtFjpO9Edbh8qYFBpHmdjidm11out2Ag90FqaE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/804c2c-85fd-429f-bbaf-f6b044dcd624/1/PGFL8lfTr3cLvzxsLTW_pGVobOs.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/804c2c-85fd-429f-bbaf-f6b044dcd624/1/PGFL8lfTr3cLvzxsLTW_pGVobOs.mft rsync://rpki.ripe.net/repository/DEFAULT/PGFL8lfTr3cLvzxsLTW_pGVobOs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 11:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:91:ac:ca:db:00:87:66:7c:95:9d:61:67:27:8c:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c614bf257d3af770bbf3c6c2d35bfa465686ceb Validity Not Before: Dec 21 11:00:47 2025 GMT Not After : Dec 22 11:00:47 2025 GMT Subject: CN=8753a1d327c5a40e34a423a449d5d4057329f51f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:da:40:e8:a6:dd:3d:69:e9:44:92:a1:01:06: 1f:26:4e:86:e9:79:b2:0a:5b:1b:8d:67:22:71:53: 2c:68:20:52:a6:e3:74:09:16:c7:23:a2:28:0e:cc: c9:b7:ae:20:a8:d7:a7:c6:ae:de:bf:a5:1c:96:6e: 20:5b:0b:11:e2:af:ff:ef:78:37:8e:7e:3d:46:0b: 56:70:ad:be:a4:cd:ac:89:09:d3:39:4e:77:36:d8: 0a:51:cd:59:eb:f4:cc:46:cd:45:75:75:a4:78:f9: f4:bf:57:d6:c3:56:27:46:ae:11:5a:20:76:7e:66: 34:db:a2:1a:0a:96:a2:b9:69:11:76:a4:53:e0:f1: 9e:0f:40:3f:50:a2:e6:4b:92:f9:14:7c:a7:f8:4a: e5:b8:76:63:2a:87:c1:e2:e9:64:d6:72:8d:0e:2f: 58:63:ed:13:c9:11:ca:0a:3f:4f:4b:3a:da:7e:94: 96:fe:48:ff:71:fd:47:94:e8:db:01:e8:53:8c:ba: a0:6b:86:1d:f7:6f:a1:cd:7b:7a:e3:d6:67:63:51: d9:ed:04:5b:d6:f6:48:db:e0:73:87:8f:05:35:3e: 61:16:8b:39:f6:55:2a:6d:58:90:1c:10:cd:04:b6: f9:32:41:51:19:43:8c:8a:53:b4:df:e4:65:bf:5c: 6a:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:53:A1:D3:27:C5:A4:0E:34:A4:23:A4:49:D5:D4:05:73:29:F5:1F X509v3 Authority Key Identifier: keyid:3C:61:4B:F2:57:D3:AF:77:0B:BF:3C:6C:2D:35:BF:A4:65:68:6C:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PGFL8lfTr3cLvzxsLTW_pGVobOs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/804c2c-85fd-429f-bbaf-f6b044dcd624/1/PGFL8lfTr3cLvzxsLTW_pGVobOs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/804c2c-85fd-429f-bbaf-f6b044dcd624/1/PGFL8lfTr3cLvzxsLTW_pGVobOs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:ec:f4:2b:fb:d8:e8:f5:a1:ab:53:73:73:94:84:0a:33:bb: a0:6e:d3:46:0b:8a:3e:e4:fe:97:af:d6:60:95:9a:da:d9:fd: 53:17:fb:31:61:af:dd:51:91:de:35:02:74:9b:32:dc:b4:35: 43:37:c0:62:8e:81:2c:ef:5b:3e:e8:32:49:c6:51:b0:c5:4f: 8e:87:38:5f:2e:74:9b:a6:7a:9c:96:ea:cd:f7:09:87:4c:a4: 49:37:db:02:6a:5f:2f:cb:3a:13:5d:10:2e:52:37:a1:d5:7b: 77:8c:60:4b:c8:a3:57:5f:52:5e:c1:1a:04:c6:2c:f3:24:68: 02:0b:36:31:80:31:ee:46:ed:c9:e4:46:06:37:6c:42:44:53: 7b:7c:1c:c0:f7:66:90:fa:1b:d4:c8:2c:48:19:d4:d4:73:a7: 6b:a4:dc:15:e2:96:e2:61:5e:a0:42:02:68:d6:34:9d:d5:c6: 12:a4:4e:fd:13:74:b8:d7:a9:c5:7f:0f:1f:23:82:15:eb:7f: 9e:29:61:5f:e8:a9:61:0a:9c:b7:ed:56:13:b8:1c:59:32:b7: 46:0f:d7:88:fe:fd:2a:98:57:60:6b:4d:bd:7c:2e:dd:ec:a5: 0a:07:8a:ca:b0:6e:c1:ab:54:f3:01:08:6a:b4:5d:94:e2:45: 00:3a:68:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAkazK2wCHZnyVnWFnJ4wDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjNjE0YmYyNTdkM2FmNzcwYmJmM2M2YzJkMzViZmE0NjU2 ODZjZWIwHhcNMjUxMjIxMTEwMDQ3WhcNMjUxMjIyMTEwMDQ3WjAzMTEwLwYDVQQD Eyg4NzUzYTFkMzI3YzVhNDBlMzRhNDIzYTQ0OWQ1ZDQwNTczMjlmNTFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdpA6KbdPWnpRJKhAQYfJk6G6Xmy ClsbjWcicVMsaCBSpuN0CRbHI6IoDszJt64gqNenxq7ev6Uclm4gWwsR4q//73g3 jn49RgtWcK2+pM2siQnTOU53NtgKUc1Z6/TMRs1FdXWkePn0v1fWw1YnRq4RWiB2 fmY026IaCpaiuWkRdqRT4PGeD0A/UKLmS5L5FHyn+ErluHZjKofB4ulk1nKNDi9Y Y+0TyRHKCj9PSzrafpSW/kj/cf1HlOjbAehTjLqga4Yd92+hzXt649ZnY1HZ7QRb 1vZI2+Bzh48FNT5hFos59lUqbViQHBDNBLb5MkFRGUOMilO03+Rlv1xqlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIdTodMnxaQONKQjpEnV1AVzKfUfMB8GA1UdIwQY MBaAFDxhS/JX0693C788bC01v6RlaGzrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEdGTDhsZlRyM2NMdnp4c0xUV19wR1ZvYk9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi84MDRjMmMtODVmZC00MjlmLWJiYWYt ZjZiMDQ0ZGNkNjI0LzEvUEdGTDhsZlRyM2NMdnp4c0xUV19wR1ZvYk9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi84MDRjMmMtODVmZC00MjlmLWJiYWYtZjZiMDQ0ZGNkNjI0 LzEvUEdGTDhsZlRyM2NMdnp4c0xUV19wR1ZvYk9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeez0K/vY 6PWhq1Nzc5SECjO7oG7TRguKPuT+l6/WYJWa2tn9Uxf7MWGv3VGR3jUCdJsy3LQ1 QzfAYo6BLO9bPugyScZRsMVPjoc4Xy50m6Z6nJbqzfcJh0ykSTfbAmpfL8s6E10Q LlI3odV7d4xgS8ijV19SXsEaBMYs8yRoAgs2MYAx7kbtyeRGBjdsQkRTe3wcwPdm kPob1MgsSBnU1HOna6TcFeKW4mFeoEICaNY0ndXGEqRO/RN0uNepxX8PHyOCFet/ nilhX+ipYQqct+1WE7gcWTK3Rg/XiP79KphXYGtNvXwu3eylCgeKyrBuwatU8wEI arRdlOJFADpoeg== -----END CERTIFICATE-----Generated at Sun Dec 21 19:13:57 2025 by rpki-client