This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.mft File: Pgvo5I26B98hcRdFuGnjkRzpjiA.mft (raw, json) Hash identifier: ZYCJW+TZzOXZVyG0NkHO0w1ItTxr/7CvgQIqVedP/CQ= Subject key identifier: 4D:41:60:DD:32:E8:D4:2F:62:23:74:6D:14:39:11:B8:36:35:AC:D0 Authority key identifier: 3E:0B:E8:E4:8D:BA:07:DF:21:71:17:45:B8:69:E3:91:1C:E9:8E:20 Certificate issuer: /CN=3e0be8e48dba07df21711745b869e3911ce98e20 Certificate serial: 019B3DC787B157BF619110579272B0F23887 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pgvo5I26B98hcRdFuGnjkRzpjiA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.mft Manifest number: 0F17 Signing time: Sat 20 Dec 2025 22:00:45 +0000 Manifest this update: Sat 20 Dec 2025 22:00:45 +0000 Manifest next update: Sun 21 Dec 2025 22:00:45 +0000 Files and hashes: 1: Pgvo5I26B98hcRdFuGnjkRzpjiA.crl (hash: ZCUOpJkeaX4uZQbGevM/fcrjBGJ7BeZrANd4+HbbLHY=) 2: qSKiJOg3xCxclMNg-Fd_1qbi_3I.roa (hash: /vBH3d6n8qi+I8tEAft/7KOt6213rHrV93iMeTKUeww=) 3: xml2dcCWXKAaFsBtMMtFnOKdOuQ.roa (hash: gElK1Fi5SJc9J5gtHChbTahr7ydhdEBTnlWVGE/WfP8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.mft rsync://rpki.ripe.net/repository/DEFAULT/Pgvo5I26B98hcRdFuGnjkRzpjiA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 22:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:87:b1:57:bf:61:91:10:57:92:72:b0:f2:38:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e0be8e48dba07df21711745b869e3911ce98e20 Validity Not Before: Dec 20 22:00:45 2025 GMT Not After : Dec 21 22:00:45 2025 GMT Subject: CN=4d4160dd32e8d42f6223746d143911b83635acd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:cd:5a:55:e5:b1:91:0d:c7:e9:ba:ec:37:e9: 9f:84:d6:06:21:e4:f3:c6:08:ce:8c:34:a7:20:db: a1:b3:90:15:84:ff:64:ba:cd:a5:e4:e1:98:8a:eb: a2:a8:95:55:00:9c:55:3c:09:84:99:a4:71:90:06: b0:91:7c:52:00:ac:02:6f:95:73:38:11:2d:b2:2b: 16:b0:3c:6b:26:b6:f1:bd:b2:6b:90:c3:9b:e3:74: 26:71:d0:4d:8a:8c:42:5e:72:a0:d4:9b:10:11:5a: 34:04:35:a1:0c:15:15:9a:b8:81:64:11:0e:c3:8a: 84:b2:35:2c:38:95:18:21:9f:ef:85:b2:ec:48:f8: b9:5a:ba:89:83:d1:11:2b:c8:7f:17:ed:a3:02:a4: 05:bd:25:2a:7e:db:a9:1b:2e:7a:34:1e:b5:e2:d2: 71:34:8c:62:8d:f2:ae:2e:db:58:ca:27:c6:ca:8b: 1b:60:a9:47:8d:cc:88:f2:03:0c:ba:64:43:86:08: 1f:48:f5:1b:a5:76:1b:8b:43:ba:4d:00:43:ec:70: 87:5d:67:f6:c2:1c:5a:17:23:69:d5:2f:3b:88:54: 04:d4:74:09:13:ed:71:7a:95:4d:ed:a2:0b:f6:e4: fe:9c:c9:76:91:46:3b:1a:c0:27:35:91:bc:0b:b6: e5:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:41:60:DD:32:E8:D4:2F:62:23:74:6D:14:39:11:B8:36:35:AC:D0 X509v3 Authority Key Identifier: keyid:3E:0B:E8:E4:8D:BA:07:DF:21:71:17:45:B8:69:E3:91:1C:E9:8E:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pgvo5I26B98hcRdFuGnjkRzpjiA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:67:a1:4c:98:7f:c5:a8:13:b3:da:9e:d5:85:61:1a:6a:54: c4:eb:ac:b7:f0:04:eb:4c:6f:11:4b:e6:01:7d:c1:51:7c:80: 7e:01:c9:92:0f:b6:9c:1f:8e:c3:1a:d5:4a:2b:a7:6d:a0:55: f6:86:fa:8b:b5:b9:5d:36:d6:d1:f4:9b:ef:0c:eb:29:0f:48: 2f:2e:e1:20:23:a4:83:42:c1:3a:2b:1b:f7:c6:d3:3e:d3:48: 27:a5:73:c3:81:4a:52:1d:86:db:26:83:1f:d0:5d:b1:2e:f2: fa:8b:3b:c2:dd:07:2b:fc:27:c9:56:8a:62:b7:1e:71:72:1b: e7:86:37:f9:ad:da:a4:99:72:d4:36:a2:c3:73:75:65:fe:d4: f1:88:25:20:8b:3b:8e:d5:af:d1:fb:4a:43:81:b9:de:0d:25: 21:39:e1:85:f5:00:2a:62:89:51:d7:1a:2d:90:0d:88:28:92: ff:a2:42:ee:64:81:24:a0:a0:63:8f:df:41:ac:5b:45:d4:e0: 8e:ff:23:34:f8:bb:bb:b4:fa:90:05:26:0a:ba:84:8d:54:72: be:c8:cd:7b:61:e0:30:48:c9:d3:c9:33:1c:a9:77:12:7e:c8: b8:ed:a8:03:59:c6:b4:a8:78:bc:00:b1:01:c7:10:2f:cc:fe: 2a:1e:f2:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x4exV79hkRBXknKw8jiHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlMGJlOGU0OGRiYTA3ZGYyMTcxMTc0NWI4NjllMzkxMWNl OThlMjAwHhcNMjUxMjIwMjIwMDQ1WhcNMjUxMjIxMjIwMDQ1WjAzMTEwLwYDVQQD Eyg0ZDQxNjBkZDMyZThkNDJmNjIyMzc0NmQxNDM5MTFiODM2MzVhY2QwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7s1aVeWxkQ3H6brsN+mfhNYGIeTz xgjOjDSnINuhs5AVhP9kus2l5OGYiuuiqJVVAJxVPAmEmaRxkAawkXxSAKwCb5Vz OBEtsisWsDxrJrbxvbJrkMOb43QmcdBNioxCXnKg1JsQEVo0BDWhDBUVmriBZBEO w4qEsjUsOJUYIZ/vhbLsSPi5WrqJg9ERK8h/F+2jAqQFvSUqftupGy56NB614tJx NIxijfKuLttYyifGyosbYKlHjcyI8gMMumRDhggfSPUbpXYbi0O6TQBD7HCHXWf2 whxaFyNp1S87iFQE1HQJE+1xepVN7aIL9uT+nMl2kUY7GsAnNZG8C7bl/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE1BYN0y6NQvYiN0bRQ5Ebg2NazQMB8GA1UdIwQY MBaAFD4L6OSNugffIXEXRbhp45Ec6Y4gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGd2bzVJMjZCOThoY1JkRnVHbmprUnpwamlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy85NWJjZTktMWU4ZS00MWMxLTg5Zjgt MjBmOWYwZGJmNDU4LzEvUGd2bzVJMjZCOThoY1JkRnVHbmprUnpwamlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy85NWJjZTktMWU4ZS00MWMxLTg5ZjgtMjBmOWYwZGJmNDU4 LzEvUGd2bzVJMjZCOThoY1JkRnVHbmprUnpwamlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlGehTJh/ xagTs9qe1YVhGmpUxOust/AE60xvEUvmAX3BUXyAfgHJkg+2nB+OwxrVSiunbaBV 9ob6i7W5XTbW0fSb7wzrKQ9ILy7hICOkg0LBOisb98bTPtNIJ6Vzw4FKUh2G2yaD H9BdsS7y+os7wt0HK/wnyVaKYrcecXIb54Y3+a3apJly1Daiw3N1Zf7U8YglIIs7 jtWv0ftKQ4G53g0lITnhhfUAKmKJUdcaLZANiCiS/6JC7mSBJKCgY4/fQaxbRdTg jv8jNPi7u7T6kAUmCrqEjVRyvsjNe2HgMEjJ08kzHKl3En7IuO2oA1nGtKh4vACx AccQL8z+Kh7ymg== -----END CERTIFICATE-----Generated at Sun Dec 21 07:58:07 2025 by rpki-client