This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft File: pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft (raw, json) Hash identifier: UawTgqHHQWKytKAYDofVcP2tsobtfwFDJ7o6MpcD8wE= Subject key identifier: E6:51:DA:B3:EA:E7:AD:40:23:78:EE:01:8C:49:3A:10:FC:25:90:4B Authority key identifier: A6:08:DB:43:96:4B:69:86:EC:74:0F:0B:5E:33:F6:27:58:9A:C5:60 Certificate issuer: /CN=a608db43964b6986ec740f0b5e33f627589ac560 Certificate serial: 019B3AFE4B27063BC7B39B1A19C2037759B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft Manifest number: 178E Signing time: Sat 20 Dec 2025 09:01:42 +0000 Manifest this update: Sat 20 Dec 2025 09:01:42 +0000 Manifest next update: Sun 21 Dec 2025 09:01:42 +0000 Files and hashes: 1: I3mgQ157a_bF2dTxc-vf7pMJtM4.roa (hash: 7UAHNapwwX16Slile1RjKMtt2nkeBVUncM7zwsYLT8w=) 2: MHgro3rXC3LA-ZCKp8QuaVCuDNM.roa (hash: sXYt7ycXFJCXAbuucaVo5/ccp47LCDa9LjtriRMFWXQ=) 3: PBXMgqYnsJA87BxLSTiMQaCiTQM.roa (hash: wzJgz/i9pbuBUkW2cHLEeF8EDXUdrOLSSMmRBwjvuyY=) 4: Y_tOtZgYIeYtzs_lYehaepicSa4.roa (hash: 0Ji9IYm411z+1YtZY+qouN/MNWctJRSug7dej+6mWcM=) 5: aXYA7UmSga-uAKN3mA-MrcLvQNw.roa (hash: A6mLEC8I6HDPu8tLJ0OvOtzb6OIQimg3DdB4KG2uaDU=) 6: gGa9g3xm-WUrWGnZqfKZudqy63U.roa (hash: gMhH5wVZGQUaR4GjDTcIjxc58KL7jUF42zUcWUMJNmY=) 7: hK0B_1bjDs4SgkjuewwBu_Hyp1Q.roa (hash: P1SdgqhUGccV0nstYPHl8zR8nqe1TrQ9TkFifIcHjeo=) 8: pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.crl (hash: EzPHvVLpDXKBrW5V/+Os7JWxLSZejsUXAU0jIjjHNvc=) 9: rWecwzOy_r05COuEiZl4KWht5j4.roa (hash: APFZzX7MSHk1ET0fGFHAZgyisv5z2ZfhR0L4cxUpeKo=) 10: zVSaKUExhHJLuuGxs99kYQGdQi0.roa (hash: kRzk6R6AO4mRz5HhKteUKae1kEl/X9QjV+pW67bmw5E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft rsync://rpki.ripe.net/repository/DEFAULT/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fe:4b:27:06:3b:c7:b3:9b:1a:19:c2:03:77:59:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a608db43964b6986ec740f0b5e33f627589ac560 Validity Not Before: Dec 20 09:01:42 2025 GMT Not After : Dec 21 09:01:42 2025 GMT Subject: CN=e651dab3eae7ad402378ee018c493a10fc25904b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e6:6e:a5:c0:f1:a3:a4:0f:fc:4c:4d:15:d6: 19:1e:57:22:1c:94:66:09:4a:dc:55:c6:57:0d:aa: 89:57:55:fc:20:04:3c:71:d5:84:d4:93:1f:ed:ff: 67:06:a7:d0:3f:bb:c7:f8:25:44:2e:f0:e8:d8:37: b1:bf:3d:65:8b:30:e3:ea:de:cc:1f:87:be:b5:45: 23:54:8a:8c:9d:13:39:4e:7d:15:9c:01:f3:cc:ab: 9a:30:cc:eb:ba:9b:bc:d3:37:65:8d:c1:8c:2a:f6: 8d:a5:b4:bc:00:4a:70:41:a6:b1:6f:3d:78:8f:96: 10:b9:1b:0d:83:aa:c8:8d:d0:58:d6:72:97:28:73: ac:2a:f2:c6:60:86:a2:1d:11:49:f9:9b:38:11:27: b6:02:9b:ff:65:bd:1b:0b:28:6d:8a:25:72:55:24: 9c:0c:2d:88:26:c2:1d:f0:81:09:7f:4d:a6:d0:74: 92:1a:2d:58:c3:86:c2:1d:8d:f0:b0:95:fb:8a:f2: c0:8c:68:fb:d6:6a:08:bb:52:05:7c:22:b3:3d:32: 93:34:03:db:b2:38:05:64:96:87:ce:9e:d9:b5:5b: d9:d4:23:bd:7c:8d:aa:8f:ea:c4:2c:ce:b4:54:b8: 0b:a9:24:4e:80:6a:45:74:8a:ab:7d:09:90:5b:96: cb:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:51:DA:B3:EA:E7:AD:40:23:78:EE:01:8C:49:3A:10:FC:25:90:4B X509v3 Authority Key Identifier: keyid:A6:08:DB:43:96:4B:69:86:EC:74:0F:0B:5E:33:F6:27:58:9A:C5:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:36:4c:2b:bb:1c:73:6e:28:75:47:45:d9:59:55:42:35:23: 6f:6b:84:30:28:b2:c1:91:2c:8c:d9:64:b8:b5:f3:9f:18:b5: c8:e8:03:48:d9:9c:aa:42:b6:8a:7c:b7:c3:42:d7:c4:e4:59: f0:57:68:4f:56:9d:85:ad:3a:6b:6a:d9:5b:da:10:10:7d:17: a6:a6:d4:82:f8:3a:ba:12:aa:44:3f:fc:c6:52:df:e8:cb:95: f1:17:2a:f0:ba:66:ce:36:e3:05:ca:34:35:92:a5:8a:15:be: c6:32:fc:0c:de:42:59:46:7f:f0:2f:5d:dc:31:6b:4f:a0:96: 35:2c:b0:ec:b1:ab:ed:35:81:e0:b8:ec:d1:f6:61:9b:4a:9c: c0:a6:20:6b:47:ef:20:e3:90:12:1c:38:f7:d8:fa:52:34:ed: 16:6c:80:f2:e6:8c:2a:2b:13:22:1c:c7:ed:7a:c7:8c:fd:c5: f8:ee:78:47:ae:d9:1b:fd:aa:c9:8c:6a:3f:d7:a6:57:9a:87: 69:a7:8b:c7:49:f1:0f:a0:e7:d9:d5:dd:2e:d9:e7:3c:02:f4: 1c:84:1b:8d:53:57:9a:bc:e0:eb:19:d7:3d:df:1a:1a:27:9d: dc:63:d3:65:ac:91:79:10:3c:f5:58:17:41:52:55:d6:84:bd: 84:f7:73:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/ksnBjvHs5saGcIDd1myMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2MDhkYjQzOTY0YjY5ODZlYzc0MGYwYjVlMzNmNjI3NTg5 YWM1NjAwHhcNMjUxMjIwMDkwMTQyWhcNMjUxMjIxMDkwMTQyWjAzMTEwLwYDVQQD EyhlNjUxZGFiM2VhZTdhZDQwMjM3OGVlMDE4YzQ5M2ExMGZjMjU5MDRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseZupcDxo6QP/ExNFdYZHlciHJRm CUrcVcZXDaqJV1X8IAQ8cdWE1JMf7f9nBqfQP7vH+CVELvDo2Dexvz1lizDj6t7M H4e+tUUjVIqMnRM5Tn0VnAHzzKuaMMzrupu80zdljcGMKvaNpbS8AEpwQaaxbz14 j5YQuRsNg6rIjdBY1nKXKHOsKvLGYIaiHRFJ+Zs4ESe2Apv/Zb0bCyhtiiVyVSSc DC2IJsId8IEJf02m0HSSGi1Yw4bCHY3wsJX7ivLAjGj71moIu1IFfCKzPTKTNAPb sjgFZJaHzp7ZtVvZ1CO9fI2qj+rELM60VLgLqSROgGpFdIqrfQmQW5bLwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOZR2rPq561AI3juAYxJOhD8JZBLMB8GA1UdIwQY MBaAFKYI20OWS2mG7HQPC14z9idYmsVgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGdqYlE1WkxhWWJzZEE4TFhqUDJKMWlheFdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi81MDAxNTAtMTU1MS00N2RlLWI1MDQt ZDY0NjgzY2VlMTZmLzEvcGdqYlE1WkxhWWJzZEE4TFhqUDJKMWlheFdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi81MDAxNTAtMTU1MS00N2RlLWI1MDQtZDY0NjgzY2VlMTZm LzEvcGdqYlE1WkxhWWJzZEE4TFhqUDJKMWlheFdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjTZMK7sc c24odUdF2VlVQjUjb2uEMCiywZEsjNlkuLXznxi1yOgDSNmcqkK2iny3w0LXxORZ 8FdoT1adha06a2rZW9oQEH0XpqbUgvg6uhKqRD/8xlLf6MuV8Rcq8LpmzjbjBco0 NZKlihW+xjL8DN5CWUZ/8C9d3DFrT6CWNSyw7LGr7TWB4Ljs0fZhm0qcwKYga0fv IOOQEhw499j6UjTtFmyA8uaMKisTIhzH7XrHjP3F+O54R67ZG/2qyYxqP9emV5qH aaeLx0nxD6Dn2dXdLtnnPAL0HIQbjVNXmrzg6xnXPd8aGied3GPTZayReRA89VgX QVJV1oS9hPdzPw== -----END CERTIFICATE-----Generated at Sat Dec 20 13:14:20 2025 by rpki-client