This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft File: pgzudYLpdZvgFskxqzTZKF0vyLQ.mft (raw, json) Hash identifier: FZyYRVcR0Kd1F9oT11N74ji/5l7LeZYXaFiJq8SZaIw= Subject key identifier: 24:82:C1:AD:73:C6:C9:A6:90:C0:21:FD:B6:39:B6:64:12:CC:58:BF Authority key identifier: A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4 Certificate issuer: /CN=a60cee7582e9759be016c931ab34d9285d2fc8b4 Certificate serial: 019B386A0AF50DD4AEE5C64D816332FD8E6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft Manifest number: 01BE Signing time: Fri 19 Dec 2025 21:00:32 +0000 Manifest this update: Fri 19 Dec 2025 21:00:32 +0000 Manifest next update: Sat 20 Dec 2025 21:00:32 +0000 Files and hashes: 1: Eh7LIuW42CvtdPZwqzRnb0iAEKM.roa (hash: j2OXrFqgsDjaKg5s5TvNOiiSOulderYWQlkF+sXQtfA=) 2: GXNfhhCLmXkcBaMcM3Wqb41chEc.roa (hash: rifz7ON+2GOQGOKbBBrmdaYyl9eb/JIR5S1cj3TU4jE=) 3: U5q4QiR4WiBSQSOv2vD1W1J3XSk.roa (hash: ZdJ45ZazcA/TtNU+GF97U74ZRNYKvCtVCEwip83Krrs=) 4: X1OJBmObFYHg6-TEw8S-Kw2Q7ic.roa (hash: Oyq+zf+xTb/nBsWGWwl35Zcj+K8DjFf57comG4rLZLc=) 5: Y8i3rrn4fUUiKvEOTWMIpo8Wdg0.roa (hash: lhJRliSxc8nIrWSQMwOkXfftJXTelhvnTEYCqHEODt0=) 6: Z1M_6TrqOd8wD9NKtj0iTyQonVc.roa (hash: aDWP4uHhbYWLYFp3XR/+E+EeJ5Rm4IXEZcu1iYff0qg=) 7: ZDayT6lDLS2GCPR-v8fqvcLoQK4.roa (hash: +ziQ7srcO8pPuSJWXnBHZoMe2FpncGGdN6aXUGmO+8s=) 8: dv3-UDRo-QCoPMwkT3OMYFFbOg8.roa (hash: pBj1g6kNC1lCzmrnByXYXnQfvQx7VuBxAQQxYeHelao=) 9: e7E8xfx3ELDzMoRWOc9Rdme69rU.roa (hash: 0vwt809HsOm9NJR+xTP6e5sMA+qhwVmChdRQakkC3R0=) 10: emjANyISkJRoOdzxCAt2kq4CVQE.roa (hash: 9W1oN3mBYbWV8A6Uo6B7h78llPTnM+uYRLY9fCXhQlY=) 11: hLDp0R1tKZ1uQpk7clza_OXTeIc.roa (hash: 2IvvdqWOvjCen06JgJKZvx4rVETFnJduNU5B5/20Srw=) 12: hok1h3DBZfbszYTqi9gXzI5jkqU.roa (hash: Rrp79AM7R2rghKYLAtKfPleubz/8AHn7KNcJJOJ8/Y0=) 13: nTJZbGV07OWGNZmbwc1LGVQ63fM.roa (hash: Ay2/kwpGOcUty9flUCNF+CVVvZB1+h5BADzDbDHTjKE=) 14: oYGGiYdbxpGeCKboMYRmQpGsbJg.roa (hash: 4Tb5SbH+PWEL8ZWRvMbss+TVaZCN9gSpmDVf6SCXqwg=) 15: pdkqkS1juj99e_Rn4XHg8Ro19Vw.roa (hash: 6dIPvtKI/mS29mtJKU9pojIp5TePwJrSyiqffpJGgrY=) 16: pgzudYLpdZvgFskxqzTZKF0vyLQ.crl (hash: YyyMmgexaw5yV0bm0/ZDC72C9D+/YvTegI2ITCamMbE=) 17: qYUhOlm7rxtE24ifggtJupvHC-U.roa (hash: Eq0prYYqmBCy3NmWTbhlJMhDQOJrr51MgbHFrPYHpts=) 18: z1lDJAYiSGQWP0hQT2qsq0NQckw.roa (hash: +w84SriAFLfwafgawze6gO/oCWYDdlLPo2xuwocy9KU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:6a:0a:f5:0d:d4:ae:e5:c6:4d:81:63:32:fd:8e:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a60cee7582e9759be016c931ab34d9285d2fc8b4 Validity Not Before: Dec 19 21:00:32 2025 GMT Not After : Dec 20 21:00:32 2025 GMT Subject: CN=2482c1ad73c6c9a690c021fdb639b66412cc58bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:91:54:db:f1:5d:36:44:bc:bd:21:b3:7d:e6: 6b:52:e9:a7:b7:f8:ef:3c:97:14:ca:29:79:e7:05: 7f:c9:9e:37:5e:bc:1a:8a:79:67:d1:6b:c9:bf:ad: 1c:b7:6b:f0:02:b3:35:72:1d:40:97:e9:cd:e9:c2: 4f:57:da:5f:c7:78:ea:a9:08:b4:ca:86:cc:7a:30: ed:62:81:e1:2c:da:fa:3c:98:e1:c7:7d:02:b7:b1: ad:d9:05:99:52:ec:23:e2:4e:c2:d6:11:48:13:3c: 0f:c1:e4:8b:ce:84:c7:a6:cd:e5:86:19:44:77:5b: ab:42:53:fe:86:05:d7:56:cc:db:cf:6b:a0:a4:50: 44:10:a7:22:87:c8:d0:06:ab:d7:77:6c:2a:77:ab: ad:de:ac:21:6b:5e:05:b4:f6:b0:07:df:f6:59:f4: ee:19:2d:fd:f6:01:d9:82:91:32:35:62:e5:12:df: 66:82:39:e0:56:c4:9b:ae:fa:03:ab:23:1e:8a:c7: e7:83:2a:7a:e1:9d:84:98:14:04:0b:6c:a0:9e:1a: c2:3c:4a:fc:8b:3f:26:5c:51:34:7d:22:36:de:28: fd:9d:62:12:f1:e9:f8:c7:e1:7f:0d:c3:1f:4c:bc: 65:cd:f0:79:ed:5f:3a:37:f6:02:1a:d9:07:f4:56: 29:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:82:C1:AD:73:C6:C9:A6:90:C0:21:FD:B6:39:B6:64:12:CC:58:BF X509v3 Authority Key Identifier: keyid:A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:19:52:a4:c8:90:18:f4:77:0c:29:7b:80:ef:67:77:60:49: ff:29:58:6a:ca:e8:5d:64:4e:92:bc:7e:63:ae:f2:3e:22:1a: ae:23:c1:9d:a7:01:2e:fb:5d:4e:bc:1b:ea:df:49:5f:84:2e: 4c:73:57:2f:83:3c:96:85:30:2e:18:01:c4:66:08:4d:69:b8: a9:7d:d0:7b:85:f3:ca:18:2b:c0:3f:bf:ea:8a:f3:fc:24:8b: e8:7f:b1:b1:13:89:5a:20:fb:73:cd:2f:31:25:e8:e6:b2:30: 8d:9d:a9:7c:84:ad:6c:6c:a8:bc:5c:b2:ac:4c:ed:c6:b0:46: 2a:44:d8:21:65:39:3a:4d:a9:44:c5:f9:89:64:a9:0f:a9:c5: 48:fb:db:bc:a7:59:fd:3f:42:7e:b7:f6:8b:55:db:0d:ae:20: 44:d2:f0:55:9e:d9:a9:5c:7c:d8:91:45:01:6c:9b:b3:20:fa: d5:5d:89:da:cd:9f:d2:5d:96:9f:d8:c3:ff:52:bc:93:fa:aa: bb:bf:19:c7:7c:73:98:ba:96:41:1a:7e:5d:93:c9:bb:e9:f7: 95:ec:95:76:bb:28:f2:6f:23:e1:1c:0f:54:33:49:21:21:bf: ef:3b:f9:01:85:8d:8d:e1:c7:1c:e6:5e:3e:3f:e4:6d:71:57: a3:21:9a:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4agr1DdSu5cZNgWMy/Y5rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2MGNlZTc1ODJlOTc1OWJlMDE2YzkzMWFiMzRkOTI4NWQy ZmM4YjQwHhcNMjUxMjE5MjEwMDMyWhcNMjUxMjIwMjEwMDMyWjAzMTEwLwYDVQQD EygyNDgyYzFhZDczYzZjOWE2OTBjMDIxZmRiNjM5YjY2NDEyY2M1OGJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6pFU2/FdNkS8vSGzfeZrUumnt/jv PJcUyil55wV/yZ43Xrwainln0WvJv60ct2vwArM1ch1Al+nN6cJPV9pfx3jqqQi0 yobMejDtYoHhLNr6PJjhx30Ct7Gt2QWZUuwj4k7C1hFIEzwPweSLzoTHps3lhhlE d1urQlP+hgXXVszbz2ugpFBEEKcih8jQBqvXd2wqd6ut3qwha14FtPawB9/2WfTu GS399gHZgpEyNWLlEt9mgjngVsSbrvoDqyMeisfngyp64Z2EmBQEC2ygnhrCPEr8 iz8mXFE0fSI23ij9nWIS8en4x+F/DcMfTLxlzfB57V86N/YCGtkH9FYpyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCSCwa1zxsmmkMAh/bY5tmQSzFi/MB8GA1UdIwQY MBaAFKYM7nWC6XWb4BbJMas02ShdL8i0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGd6dWRZTHBkWnZnRnNreHF6VFpLRjB2eUxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9kZWNhZDAtMjZkYS00YjlhLWIxYTct ZDNiMzhjZTlkYzM0LzEvcGd6dWRZTHBkWnZnRnNreHF6VFpLRjB2eUxRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9kZWNhZDAtMjZkYS00YjlhLWIxYTctZDNiMzhjZTlkYzM0 LzEvcGd6dWRZTHBkWnZnRnNreHF6VFpLRjB2eUxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGBlSpMiQ GPR3DCl7gO9nd2BJ/ylYasroXWROkrx+Y67yPiIariPBnacBLvtdTrwb6t9JX4Qu THNXL4M8loUwLhgBxGYITWm4qX3Qe4XzyhgrwD+/6orz/CSL6H+xsROJWiD7c80v MSXo5rIwjZ2pfIStbGyovFyyrEztxrBGKkTYIWU5Ok2pRMX5iWSpD6nFSPvbvKdZ /T9Cfrf2i1XbDa4gRNLwVZ7ZqVx82JFFAWybsyD61V2J2s2f0l2Wn9jD/1K8k/qq u78Zx3xzmLqWQRp+XZPJu+n3leyVdrso8m8j4RwPVDNJISG/7zv5AYWNjeHHHOZe Pj/kbXFXoyGaww== -----END CERTIFICATE-----Generated at Sat Dec 20 01:20:18 2025 by rpki-client