This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/PGvK_z6ArkGaFdG8s24xmN744ic.mft File: PGvK_z6ArkGaFdG8s24xmN744ic.mft (raw, json) Hash identifier: MF0c/mN5N0JBJ1Sox9MTbGvb/u3Xiq1ZEoUIOwLSRpU= Subject key identifier: BB:5A:03:04:2E:3F:C0:9D:5A:8E:75:FD:AC:01:29:68:CF:4E:6B:5C Authority key identifier: 3C:6B:CA:FF:3E:80:AE:41:9A:15:D1:BC:B3:6E:31:98:DE:F8:E2:27 Certificate issuer: /CN=3c6bcaff3e80ae419a15d1bcb36e3198def8e227 Certificate serial: 019B2D0B5EB075B53BE941AB257D4BCDFD27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PGvK_z6ArkGaFdG8s24xmN744ic.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/PGvK_z6ArkGaFdG8s24xmN744ic.mft Manifest number: 0836 Signing time: Wed 17 Dec 2025 16:01:18 +0000 Manifest this update: Wed 17 Dec 2025 16:01:18 +0000 Manifest next update: Thu 18 Dec 2025 16:01:18 +0000 Files and hashes: 1: BneHQ-af6etJYnzgVpFHJTLWtfI.roa (hash: SK4P5sVwHnq6qFE+d1xG/bjzaly1qgrqi3Y+RExkIAE=) 2: PGvK_z6ArkGaFdG8s24xmN744ic.crl (hash: 4eZN+zeHg7IsQW9bzG4hwk/Yp9KRPuw0GkVwKITplH8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/PGvK_z6ArkGaFdG8s24xmN744ic.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/PGvK_z6ArkGaFdG8s24xmN744ic.mft rsync://rpki.ripe.net/repository/DEFAULT/PGvK_z6ArkGaFdG8s24xmN744ic.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:0b:5e:b0:75:b5:3b:e9:41:ab:25:7d:4b:cd:fd:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c6bcaff3e80ae419a15d1bcb36e3198def8e227 Validity Not Before: Dec 17 16:01:18 2025 GMT Not After : Dec 18 16:01:18 2025 GMT Subject: CN=bb5a03042e3fc09d5a8e75fdac012968cf4e6b5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:78:30:3f:4c:3e:ae:41:b0:c1:60:ba:0f:d2: 1a:4f:ba:25:0f:04:56:00:69:dd:ca:76:db:28:ee: 86:57:93:2a:1b:a3:a8:7d:37:a1:65:a0:1b:c6:d1: 48:77:9a:04:d1:db:81:f1:c2:76:4f:9c:3f:fb:8b: 98:13:c7:16:72:58:a7:3a:a2:ef:87:13:e1:59:eb: 97:38:9f:21:6b:45:31:e8:b1:af:a3:a6:cf:c1:64: c0:af:a7:88:6e:d9:0e:8c:b3:ad:ec:1d:c7:1f:2a: ff:e9:68:e3:c3:7f:8e:37:12:5f:ab:7c:7e:54:f1: 48:9a:3a:46:a9:0a:ef:7d:f4:89:02:7c:d3:a9:ce: 9b:f7:d1:53:cf:02:18:a2:5f:5f:f4:02:d6:d6:63: d3:2a:aa:d6:8d:ca:96:25:1e:27:29:52:be:eb:2f: 88:c3:27:6f:dd:92:e3:95:65:f2:22:53:a5:be:68: 77:b0:4e:7e:3b:41:d9:c4:cf:b2:8d:27:6c:0e:b1: 07:ae:aa:c1:89:65:5f:08:38:d8:51:dd:fc:f9:55: 86:f7:d1:3a:64:6a:1f:cf:11:f1:36:eb:c6:aa:e9: 52:5d:e9:4f:41:02:c6:c9:ca:c8:cf:22:ba:a2:d6: d7:f5:c6:4f:b3:2f:41:19:8f:03:ab:c7:f8:b2:be: 03:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:5A:03:04:2E:3F:C0:9D:5A:8E:75:FD:AC:01:29:68:CF:4E:6B:5C X509v3 Authority Key Identifier: keyid:3C:6B:CA:FF:3E:80:AE:41:9A:15:D1:BC:B3:6E:31:98:DE:F8:E2:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PGvK_z6ArkGaFdG8s24xmN744ic.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/PGvK_z6ArkGaFdG8s24xmN744ic.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/PGvK_z6ArkGaFdG8s24xmN744ic.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:d4:49:cc:f5:d6:7f:bf:34:17:65:0e:c0:44:c4:a9:99:c7: 7b:be:f3:cd:be:3a:d8:97:fe:e0:e3:18:92:c4:e6:da:f3:8c: 42:f6:fb:73:ff:6c:a8:9d:13:44:5e:01:4c:c1:2e:bf:a6:9d: c2:f6:2c:7a:2b:24:fe:13:ee:4d:5c:70:c5:25:15:ff:ab:78: a6:1c:12:67:f9:59:db:17:fd:29:c9:5c:38:ed:79:7f:d1:c6: 8f:5b:e6:79:0f:2a:09:31:ab:c8:4b:f3:a4:bc:05:13:0e:85: 7f:e4:25:a8:06:84:ce:aa:cd:1e:f7:9f:e7:cd:84:0d:f2:2e: fc:9a:1f:a4:4c:43:c5:56:ea:0f:81:e8:65:88:5e:b3:a3:25: 40:2b:b8:a1:8a:7d:94:49:dd:f9:a1:77:30:f9:45:9f:f7:5f: 4a:fa:c4:d9:c4:ec:39:69:fd:32:fe:e0:59:1b:46:04:94:cf: e6:b1:e8:38:88:74:31:cb:f6:ae:2a:f6:f9:8d:7d:bc:db:0d: 41:d7:75:9f:cf:00:3f:ed:0f:b2:fc:fc:15:c3:a5:8c:ed:d9: d3:67:69:f7:d5:37:31:33:ac:d8:4f:df:ef:71:26:17:60:11: 6f:e3:a3:d1:04:6f:7f:bc:22:c2:37:d2:c1:5e:a9:0f:b2:c4: 2d:97:4e:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstC16wdbU76UGrJX1Lzf0nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjNmJjYWZmM2U4MGFlNDE5YTE1ZDFiY2IzNmUzMTk4ZGVm OGUyMjcwHhcNMjUxMjE3MTYwMTE4WhcNMjUxMjE4MTYwMTE4WjAzMTEwLwYDVQQD EyhiYjVhMDMwNDJlM2ZjMDlkNWE4ZTc1ZmRhYzAxMjk2OGNmNGU2YjVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5HgwP0w+rkGwwWC6D9IaT7olDwRW AGndynbbKO6GV5MqG6OofTehZaAbxtFId5oE0duB8cJ2T5w/+4uYE8cWclinOqLv hxPhWeuXOJ8ha0Ux6LGvo6bPwWTAr6eIbtkOjLOt7B3HHyr/6Wjjw3+ONxJfq3x+ VPFImjpGqQrvffSJAnzTqc6b99FTzwIYol9f9ALW1mPTKqrWjcqWJR4nKVK+6y+I wydv3ZLjlWXyIlOlvmh3sE5+O0HZxM+yjSdsDrEHrqrBiWVfCDjYUd38+VWG99E6 ZGofzxHxNuvGqulSXelPQQLGycrIzyK6otbX9cZPsy9BGY8Dq8f4sr4DFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLtaAwQuP8CdWo51/awBKWjPTmtcMB8GA1UdIwQY MBaAFDxryv8+gK5BmhXRvLNuMZje+OInMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEd2S196NkFya0dhRmRHOHMyNHhtTjc0NGljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9mMzI4ZmYtOTI3Zi00MTE2LThlMzMt NDA0M2IyYzc3YmJmLzEvUEd2S196NkFya0dhRmRHOHMyNHhtTjc0NGljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi9mMzI4ZmYtOTI3Zi00MTE2LThlMzMtNDA0M2IyYzc3YmJm LzEvUEd2S196NkFya0dhRmRHOHMyNHhtTjc0NGljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYtRJzPXW f780F2UOwETEqZnHe77zzb462Jf+4OMYksTm2vOMQvb7c/9sqJ0TRF4BTMEuv6ad wvYseisk/hPuTVxwxSUV/6t4phwSZ/lZ2xf9KclcOO15f9HGj1vmeQ8qCTGryEvz pLwFEw6Ff+QlqAaEzqrNHvef582EDfIu/JofpExDxVbqD4HoZYhes6MlQCu4oYp9 lEnd+aF3MPlFn/dfSvrE2cTsOWn9Mv7gWRtGBJTP5rHoOIh0Mcv2rir2+Y19vNsN Qdd1n88AP+0Psvz8FcOljO3Z02dp99U3MTOs2E/f73EmF2ARb+Oj0QRvf7wiwjfS wV6pD7LELZdO2A== -----END CERTIFICATE-----Generated at Wed Dec 17 18:08:58 2025 by rpki-client