This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.mft File: PeSbGET-RCKvvhDN0oGcdEgnfmU.mft (raw, json) Hash identifier: HuMP38/Jmg1Oe012K3ki4N/iG2DrWF5Jr5VX6fBVSwg= Subject key identifier: 6D:5F:5E:EF:8D:F9:77:5E:19:58:50:23:0E:5D:4B:F4:CB:34:BE:9C Authority key identifier: 3D:E4:9B:18:44:FE:44:22:AF:BE:10:CD:D2:81:9C:74:48:27:7E:65 Certificate issuer: /CN=3de49b1844fe4422afbe10cdd2819c7448277e65 Certificate serial: 019B4FCFA053106A1DABB885A72EDC896F80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeSbGET-RCKvvhDN0oGcdEgnfmU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.mft Manifest number: 0B41 Signing time: Wed 24 Dec 2025 10:02:45 +0000 Manifest this update: Wed 24 Dec 2025 10:02:45 +0000 Manifest next update: Thu 25 Dec 2025 10:02:45 +0000 Files and hashes: 1: Fw_E1L4Nw5Hr77P4PSs-fCdld4o.roa (hash: 02j0pLQbdlE9MH5ggabxr1xIMQYmyzEOYjg+Z13q0BA=) 2: PeSbGET-RCKvvhDN0oGcdEgnfmU.crl (hash: OH+0WqTFCoeKcAwG3mUSDmExn4JUokcL+UUmrhDbMTw=) 3: VrCXOdxzLdld1tE0j_xLZ92cqsk.roa (hash: QEJHs3sdF5W7Kc4VSrPn7L7Yyup7NDcWYP/rulbrnEw=) 4: wbEopCsHgdsUwl85d1p6YVkQyt4.roa (hash: Mueh9tzlM1Esxrp4PnyphjifQnr2qX7ryaFawIufllw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.mft rsync://rpki.ripe.net/repository/DEFAULT/PeSbGET-RCKvvhDN0oGcdEgnfmU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:cf:a0:53:10:6a:1d:ab:b8:85:a7:2e:dc:89:6f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3de49b1844fe4422afbe10cdd2819c7448277e65 Validity Not Before: Dec 24 10:02:45 2025 GMT Not After : Dec 25 10:02:45 2025 GMT Subject: CN=6d5f5eef8df9775e195850230e5d4bf4cb34be9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:41:57:81:04:b7:e0:5b:2a:a3:2e:a0:28:0b: 0c:3a:d2:d2:f8:71:df:33:03:17:04:1d:58:e2:19: d8:b0:b1:0a:c1:16:72:cd:9a:57:6d:45:81:81:f7: ce:b7:5f:1b:f3:e8:0b:22:3f:86:7e:0f:08:5c:4f: 75:b2:d4:c4:49:89:a2:ec:6c:64:74:53:0b:7e:a0: 9c:45:ea:ac:1e:4a:e7:6e:49:d0:f4:04:04:e6:1d: dd:91:cf:0c:f1:61:f9:f5:f8:33:c7:37:f3:b6:ab: 57:8f:c4:3a:80:07:d7:9c:6d:1d:8d:16:be:b1:51: 22:15:6f:a0:bb:7f:63:25:ef:dd:3f:ce:8b:78:84: b4:ee:84:c8:73:06:66:3c:48:93:48:b3:cb:45:08: 49:00:99:df:86:70:70:5d:7b:72:4f:e5:91:cc:c3: 1c:39:b2:14:a3:da:f9:24:04:7f:e8:73:76:9e:d9: d6:b3:c9:ef:1b:1d:8f:f7:73:ed:fd:d4:7d:df:bb: 9b:f0:3b:63:c1:be:53:3e:99:1c:a3:d9:af:71:c3: 0c:0d:fb:78:6e:81:0c:b4:d8:f3:e2:6c:49:b5:fd: c7:7a:c0:8f:6c:d5:dd:91:15:b4:c5:f9:ea:1e:d8: e8:09:5e:dc:d7:a8:c1:38:24:39:75:e0:c3:a4:4a: a4:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:5F:5E:EF:8D:F9:77:5E:19:58:50:23:0E:5D:4B:F4:CB:34:BE:9C X509v3 Authority Key Identifier: keyid:3D:E4:9B:18:44:FE:44:22:AF:BE:10:CD:D2:81:9C:74:48:27:7E:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeSbGET-RCKvvhDN0oGcdEgnfmU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:fb:d7:ff:54:fe:c6:98:71:be:41:57:a8:55:c9:c9:59:f6: 00:df:f6:47:6b:81:be:f7:d4:c7:0e:d4:70:b2:82:e2:80:e6: 96:98:fc:06:92:2f:9d:3b:e2:a7:0e:94:cc:5a:f3:64:69:2a: 2c:4f:81:96:ab:61:c5:c9:1b:3f:1e:09:df:33:4e:6f:83:c6: f0:cb:07:6a:d2:63:9d:dc:0e:b3:c5:8a:b7:55:66:97:09:a3: ab:5c:1c:40:40:e6:9f:3d:b6:43:23:b4:2e:af:dd:fa:e4:9b: 97:84:96:42:0b:a0:66:21:85:c0:be:10:4f:49:be:02:21:1d: 91:93:87:50:64:cf:4c:d8:26:b6:54:7c:06:99:38:c6:10:53: 39:37:64:ac:85:75:89:ec:51:8b:bb:0e:24:43:90:a8:ce:64: f2:dd:f4:91:4e:b6:4d:2b:0b:a2:bc:1a:42:7c:9f:9c:ca:a5: bd:41:21:39:4f:e8:6d:6a:82:20:6e:15:6c:4e:c3:43:6f:03: 7c:a8:bb:2f:c1:c1:c7:45:84:d1:e1:a4:67:38:99:a0:07:60: 57:86:16:a9:6a:bc:3e:eb:9b:a7:8c:23:80:ff:9b:da:eb:ca: 2e:e3:1f:03:63:3c:87:60:68:49:0f:07:2f:96:ab:7b:6c:8b: 6e:cc:97:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPz6BTEGodq7iFpy7ciW+AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkZTQ5YjE4NDRmZTQ0MjJhZmJlMTBjZGQyODE5Yzc0NDgy NzdlNjUwHhcNMjUxMjI0MTAwMjQ1WhcNMjUxMjI1MTAwMjQ1WjAzMTEwLwYDVQQD Eyg2ZDVmNWVlZjhkZjk3NzVlMTk1ODUwMjMwZTVkNGJmNGNiMzRiZTljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0FXgQS34Fsqoy6gKAsMOtLS+HHf MwMXBB1Y4hnYsLEKwRZyzZpXbUWBgffOt18b8+gLIj+Gfg8IXE91stTESYmi7Gxk dFMLfqCcReqsHkrnbknQ9AQE5h3dkc8M8WH59fgzxzfztqtXj8Q6gAfXnG0djRa+ sVEiFW+gu39jJe/dP86LeIS07oTIcwZmPEiTSLPLRQhJAJnfhnBwXXtyT+WRzMMc ObIUo9r5JAR/6HN2ntnWs8nvGx2P93Pt/dR937ub8Dtjwb5TPpkco9mvccMMDft4 boEMtNjz4mxJtf3HesCPbNXdkRW0xfnqHtjoCV7c16jBOCQ5deDDpEqkuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG1fXu+N+XdeGVhQIw5dS/TLNL6cMB8GA1UdIwQY MBaAFD3kmxhE/kQir74QzdKBnHRIJ35lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGVTYkdFVC1SQ0t2dmhETjBvR2NkRWduZm1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC84MWIxODgtMjU1ZC00OWM3LTlmOTgt MGFjOWI0ZDdlYWI3LzEvUGVTYkdFVC1SQ0t2dmhETjBvR2NkRWduZm1VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC84MWIxODgtMjU1ZC00OWM3LTlmOTgtMGFjOWI0ZDdlYWI3 LzEvUGVTYkdFVC1SQ0t2dmhETjBvR2NkRWduZm1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATPvX/1T+ xphxvkFXqFXJyVn2AN/2R2uBvvfUxw7UcLKC4oDmlpj8BpIvnTvipw6UzFrzZGkq LE+BlqthxckbPx4J3zNOb4PG8MsHatJjndwOs8WKt1Vmlwmjq1wcQEDmnz22QyO0 Lq/d+uSbl4SWQgugZiGFwL4QT0m+AiEdkZOHUGTPTNgmtlR8Bpk4xhBTOTdkrIV1 iexRi7sOJEOQqM5k8t30kU62TSsLorwaQnyfnMqlvUEhOU/obWqCIG4VbE7DQ28D fKi7L8HBx0WE0eGkZziZoAdgV4YWqWq8Puubp4wjgP+b2uvKLuMfA2M8h2BoSQ8H L5are2yLbsyXaQ== -----END CERTIFICATE-----Generated at Wed Dec 24 18:38:49 2025 by rpki-client