This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.mft File: PeSbGET-RCKvvhDN0oGcdEgnfmU.mft (raw, json) Hash identifier: dJ+nbo86T5KttH775lppjpdoyAeYzW0HcW3hSECnq/8= Subject key identifier: 5B:4C:5B:67:43:32:9C:84:E0:E5:45:D8:F4:D9:D3:9A:BE:4D:CC:64 Authority key identifier: 3D:E4:9B:18:44:FE:44:22:AF:BE:10:CD:D2:81:9C:74:48:27:7E:65 Certificate issuer: /CN=3de49b1844fe4422afbe10cdd2819c7448277e65 Certificate serial: 019B3A90220B2C89BA5D1C5586A93A254948 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeSbGET-RCKvvhDN0oGcdEgnfmU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.mft Manifest number: 0B36 Signing time: Sat 20 Dec 2025 07:01:22 +0000 Manifest this update: Sat 20 Dec 2025 07:01:22 +0000 Manifest next update: Sun 21 Dec 2025 07:01:22 +0000 Files and hashes: 1: Fw_E1L4Nw5Hr77P4PSs-fCdld4o.roa (hash: 02j0pLQbdlE9MH5ggabxr1xIMQYmyzEOYjg+Z13q0BA=) 2: PeSbGET-RCKvvhDN0oGcdEgnfmU.crl (hash: rqM+oco7aAupfBWARPKzhkNj5i/WVlscyGF6B6wGcGA=) 3: VrCXOdxzLdld1tE0j_xLZ92cqsk.roa (hash: QEJHs3sdF5W7Kc4VSrPn7L7Yyup7NDcWYP/rulbrnEw=) 4: wbEopCsHgdsUwl85d1p6YVkQyt4.roa (hash: Mueh9tzlM1Esxrp4PnyphjifQnr2qX7ryaFawIufllw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.mft rsync://rpki.ripe.net/repository/DEFAULT/PeSbGET-RCKvvhDN0oGcdEgnfmU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:90:22:0b:2c:89:ba:5d:1c:55:86:a9:3a:25:49:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3de49b1844fe4422afbe10cdd2819c7448277e65 Validity Not Before: Dec 20 07:01:22 2025 GMT Not After : Dec 21 07:01:22 2025 GMT Subject: CN=5b4c5b6743329c84e0e545d8f4d9d39abe4dcc64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:cf:bd:50:17:c9:50:a3:b7:c0:ed:ca:e9:15: 36:e8:d0:f8:f9:3e:c1:b8:ac:a9:45:48:fb:22:cd: 9c:9c:e0:2f:0b:a2:fb:cd:b9:18:e3:4d:62:19:86: 37:91:80:ba:64:f0:57:ad:67:26:08:55:41:88:70: 97:85:0f:b1:19:e2:24:c0:d2:d1:05:be:d3:48:f1: 16:6e:0f:3b:49:de:12:e4:76:fe:92:00:81:ae:3a: 44:1b:e0:04:39:fc:70:ef:62:4b:e1:7a:f5:88:91: 8d:6a:83:84:b5:f9:af:fd:07:42:87:bd:d8:12:89: d3:4e:c3:25:2b:97:bc:44:e6:b7:e6:bc:8b:b9:f2: 73:5f:e5:6d:b8:24:8a:67:1e:82:52:a2:3c:45:e6: 80:99:e8:6f:08:0a:cd:ea:de:ce:fb:1e:29:01:fc: 68:49:0e:65:91:e0:53:9b:34:2e:c1:11:6c:3e:78: 9d:c2:44:62:0d:11:50:52:49:13:c3:5f:a6:38:46: 2b:30:9f:22:bf:9a:90:74:3e:2b:12:18:a2:a6:aa: 57:7c:f2:3b:4e:8e:36:b6:5b:68:91:d9:05:89:32: 98:e5:c0:7c:94:b1:7f:6f:11:6e:94:d0:78:b6:2e: f8:e9:c7:d5:8e:2c:16:0c:03:35:a6:a6:fb:58:8b: ed:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:4C:5B:67:43:32:9C:84:E0:E5:45:D8:F4:D9:D3:9A:BE:4D:CC:64 X509v3 Authority Key Identifier: keyid:3D:E4:9B:18:44:FE:44:22:AF:BE:10:CD:D2:81:9C:74:48:27:7E:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeSbGET-RCKvvhDN0oGcdEgnfmU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:76:8e:98:8b:2a:f9:77:0a:7e:c1:9c:08:99:96:de:76:6a: ac:1b:01:cc:45:35:e3:8a:87:6b:f7:5e:32:99:47:f7:4b:97: 6e:e8:0d:d2:79:9f:ec:3f:c0:14:9f:a2:79:30:a8:87:fd:ff: d6:ee:c6:48:11:5a:88:cd:ac:0d:42:5d:d0:1c:ec:f6:1a:8c: f0:cc:e7:f0:dd:ea:f0:0f:7c:06:5a:f6:bd:7d:cb:4f:6e:d8: 9e:75:3f:c2:19:15:5b:66:48:4c:77:a1:22:9e:2d:5d:5a:e0: 5f:f7:48:e8:0e:89:46:dc:00:3c:63:bf:59:26:6b:c0:86:e5: 37:98:96:ad:c0:3c:24:09:de:3c:94:49:23:9d:59:78:d8:8a: 2a:91:56:94:70:79:06:5f:0b:6b:0c:6a:03:80:a7:a8:db:13: ff:40:1c:8d:b8:2f:d1:f7:66:90:aa:ac:cb:75:35:e6:2d:e8: cc:78:78:f6:03:4f:58:1f:58:09:35:44:38:18:83:aa:b0:a2: b3:92:44:d1:63:83:b2:fb:bc:ba:0d:7f:ec:5a:0b:be:3f:48: 18:2b:d4:7d:a2:0f:27:91:5b:47:a9:84:3d:af:de:2e:d9:1e: d5:eb:0b:c1:b3:57:24:4d:0c:4c:ba:5d:1c:95:98:b4:18:37: f4:50:d3:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kCILLIm6XRxVhqk6JUlIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkZTQ5YjE4NDRmZTQ0MjJhZmJlMTBjZGQyODE5Yzc0NDgy NzdlNjUwHhcNMjUxMjIwMDcwMTIyWhcNMjUxMjIxMDcwMTIyWjAzMTEwLwYDVQQD Eyg1YjRjNWI2NzQzMzI5Yzg0ZTBlNTQ1ZDhmNGQ5ZDM5YWJlNGRjYzY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsM+9UBfJUKO3wO3K6RU26ND4+T7B uKypRUj7Is2cnOAvC6L7zbkY401iGYY3kYC6ZPBXrWcmCFVBiHCXhQ+xGeIkwNLR Bb7TSPEWbg87Sd4S5Hb+kgCBrjpEG+AEOfxw72JL4Xr1iJGNaoOEtfmv/QdCh73Y EonTTsMlK5e8ROa35ryLufJzX+VtuCSKZx6CUqI8ReaAmehvCArN6t7O+x4pAfxo SQ5lkeBTmzQuwRFsPnidwkRiDRFQUkkTw1+mOEYrMJ8iv5qQdD4rEhiipqpXfPI7 To42tltokdkFiTKY5cB8lLF/bxFulNB4ti746cfVjiwWDAM1pqb7WIvtWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFtMW2dDMpyE4OVF2PTZ05q+TcxkMB8GA1UdIwQY MBaAFD3kmxhE/kQir74QzdKBnHRIJ35lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGVTYkdFVC1SQ0t2dmhETjBvR2NkRWduZm1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC84MWIxODgtMjU1ZC00OWM3LTlmOTgt MGFjOWI0ZDdlYWI3LzEvUGVTYkdFVC1SQ0t2dmhETjBvR2NkRWduZm1VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC84MWIxODgtMjU1ZC00OWM3LTlmOTgtMGFjOWI0ZDdlYWI3 LzEvUGVTYkdFVC1SQ0t2dmhETjBvR2NkRWduZm1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVnaOmIsq +XcKfsGcCJmW3nZqrBsBzEU144qHa/deMplH90uXbugN0nmf7D/AFJ+ieTCoh/3/ 1u7GSBFaiM2sDUJd0Bzs9hqM8Mzn8N3q8A98Blr2vX3LT27YnnU/whkVW2ZITHeh Ip4tXVrgX/dI6A6JRtwAPGO/WSZrwIblN5iWrcA8JAnePJRJI51ZeNiKKpFWlHB5 Bl8LawxqA4CnqNsT/0Acjbgv0fdmkKqsy3U15i3ozHh49gNPWB9YCTVEOBiDqrCi s5JE0WODsvu8ug1/7FoLvj9IGCvUfaIPJ5FbR6mEPa/eLtke1esLwbNXJE0MTLpd HJWYtBg39FDTMA== -----END CERTIFICATE-----Generated at Sat Dec 20 08:46:26 2025 by rpki-client