This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/cc1d62-ae53-48b7-ac79-641d456283c4/1/pg5C18uvyd0yBdJH1mLYWv3ZoYY.mft File: pg5C18uvyd0yBdJH1mLYWv3ZoYY.mft (raw, json) Hash identifier: 68ub5U3uBhZ1I1KEw1d3Dhy2v6wwIazO1821dx/8H7g= Subject key identifier: 42:1B:C7:EF:3F:87:14:BA:FC:F4:6D:F7:5C:06:A5:2D:6E:AC:44:7D Authority key identifier: A6:0E:42:D7:CB:AF:C9:DD:32:05:D2:47:D6:62:D8:5A:FD:D9:A1:86 Certificate issuer: /CN=a60e42d7cbafc9dd3205d247d662d85afdd9a186 Certificate serial: 019B65B101B406B4B3600A144B30880B3DCE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pg5C18uvyd0yBdJH1mLYWv3ZoYY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/cc1d62-ae53-48b7-ac79-641d456283c4/1/pg5C18uvyd0yBdJH1mLYWv3ZoYY.mft Manifest number: 16F2 Signing time: Sun 28 Dec 2025 16:00:57 +0000 Manifest this update: Sun 28 Dec 2025 16:00:57 +0000 Manifest next update: Mon 29 Dec 2025 16:00:57 +0000 Files and hashes: 1: 0TN8GbA_0te4LvZwiVGOjxWVyyI.roa (hash: r7htGnYfYSEvlu71tGptm+rLAL8pN7TnQ6e7cOorBgk=) 2: pg5C18uvyd0yBdJH1mLYWv3ZoYY.crl (hash: CyVlIy/tzCaijibEhB1YQcD6LDAt4gc+Uz4NaId9nM8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/cc1d62-ae53-48b7-ac79-641d456283c4/1/pg5C18uvyd0yBdJH1mLYWv3ZoYY.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/cc1d62-ae53-48b7-ac79-641d456283c4/1/pg5C18uvyd0yBdJH1mLYWv3ZoYY.mft rsync://rpki.ripe.net/repository/DEFAULT/pg5C18uvyd0yBdJH1mLYWv3ZoYY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 16:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:65:b1:01:b4:06:b4:b3:60:0a:14:4b:30:88:0b:3d:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a60e42d7cbafc9dd3205d247d662d85afdd9a186 Validity Not Before: Dec 28 16:00:57 2025 GMT Not After : Dec 29 16:00:57 2025 GMT Subject: CN=421bc7ef3f8714bafcf46df75c06a52d6eac447d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:fc:a0:28:cf:28:36:06:1e:65:8a:ca:39:f6: 74:ec:51:1f:24:9c:32:57:ef:be:04:e0:04:6f:b3: 38:84:c2:54:ed:db:71:eb:07:99:a1:07:5d:ee:81: ce:65:c0:17:ff:06:ab:ae:8b:f6:36:19:6c:47:91: 72:d1:d6:45:6b:be:5a:85:7d:ee:da:17:48:bf:48: 80:58:ba:d1:3e:fe:09:c5:ac:1d:ac:16:8f:1d:c0: b4:1d:49:a8:b8:87:56:67:56:f9:03:92:e0:6b:72: 4f:85:2a:e5:af:b4:8c:08:e9:13:78:6d:32:3f:8f: 09:94:b5:0a:df:ad:3e:5a:8d:b8:35:63:e6:46:e3: a1:00:30:5a:ec:f7:af:80:1e:3c:5a:b3:4e:53:46: 01:0d:1e:27:2e:5d:2f:bb:c7:2c:ab:44:fa:39:13: 0b:fe:a0:58:9b:31:01:12:1c:d8:12:b9:fe:0e:40: 07:1e:a1:34:a9:d8:b6:7c:da:dc:e8:63:3e:f7:b6: 5e:a4:0e:bd:4a:ae:cd:37:a2:ed:6d:93:37:96:c0: 57:3e:a6:86:18:49:57:57:95:2c:31:df:84:89:fe: d9:d4:6d:83:03:12:1e:ee:4d:ee:20:3f:5f:a4:da: cb:b0:16:0f:0a:2e:af:1d:c7:5d:62:ec:ce:02:eb: 2f:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:1B:C7:EF:3F:87:14:BA:FC:F4:6D:F7:5C:06:A5:2D:6E:AC:44:7D X509v3 Authority Key Identifier: keyid:A6:0E:42:D7:CB:AF:C9:DD:32:05:D2:47:D6:62:D8:5A:FD:D9:A1:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pg5C18uvyd0yBdJH1mLYWv3ZoYY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cc1d62-ae53-48b7-ac79-641d456283c4/1/pg5C18uvyd0yBdJH1mLYWv3ZoYY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cc1d62-ae53-48b7-ac79-641d456283c4/1/pg5C18uvyd0yBdJH1mLYWv3ZoYY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:13:7b:71:23:46:c6:63:64:e8:fb:07:ea:e6:36:85:be:2d: a6:fa:3f:49:85:76:ee:03:71:14:f1:e3:29:b0:32:8a:ee:e6: 0f:d5:d5:9e:6a:8f:9e:71:1b:2c:da:69:54:52:42:be:0d:d5: 42:2f:55:a5:ea:ed:11:ef:3e:0b:cf:47:5e:35:f3:7e:c0:f3: d9:79:ba:75:16:8c:0e:7c:68:cf:57:b9:0d:ad:d7:98:91:65: 24:ba:ac:84:4f:47:3f:93:d1:4b:7e:7c:2c:59:9b:51:92:81: a1:68:b3:0e:52:ba:2c:db:e0:e9:db:a3:54:22:e7:d0:e7:af: 1e:9f:1f:df:b2:17:e8:c8:ce:e5:f3:2c:67:fc:c1:a9:f6:52: 82:14:ee:15:28:d1:a2:ad:bc:e3:87:11:92:97:ee:c2:47:a4: 63:98:88:ff:97:e0:01:c2:15:e3:66:2f:d6:5f:41:e7:96:36: 33:12:e2:d5:81:ae:c8:21:99:65:f8:f4:2e:9f:ca:72:11:95: f1:7c:c5:2c:8e:f4:c2:d6:2d:36:28:82:9e:9d:7f:61:f2:da: ae:0e:c6:67:b9:66:4a:69:bc:33:ba:a6:f9:9f:cb:76:dc:bf: 8e:d8:ad:23:f8:6b:2b:73:99:21:12:b3:11:53:ec:1c:66:5a: c6:34:4d:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtlsQG0BrSzYAoUSzCICz3OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2MGU0MmQ3Y2JhZmM5ZGQzMjA1ZDI0N2Q2NjJkODVhZmRk OWExODYwHhcNMjUxMjI4MTYwMDU3WhcNMjUxMjI5MTYwMDU3WjAzMTEwLwYDVQQD Eyg0MjFiYzdlZjNmODcxNGJhZmNmNDZkZjc1YzA2YTUyZDZlYWM0NDdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvygKM8oNgYeZYrKOfZ07FEfJJwy V+++BOAEb7M4hMJU7dtx6weZoQdd7oHOZcAX/warrov2NhlsR5Fy0dZFa75ahX3u 2hdIv0iAWLrRPv4JxawdrBaPHcC0HUmouIdWZ1b5A5Lga3JPhSrlr7SMCOkTeG0y P48JlLUK360+Wo24NWPmRuOhADBa7PevgB48WrNOU0YBDR4nLl0vu8csq0T6ORML /qBYmzEBEhzYErn+DkAHHqE0qdi2fNrc6GM+97ZepA69Sq7NN6LtbZM3lsBXPqaG GElXV5UsMd+Eif7Z1G2DAxIe7k3uID9fpNrLsBYPCi6vHcddYuzOAusvXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEIbx+8/hxS6/PRt91wGpS1urER9MB8GA1UdIwQY MBaAFKYOQtfLr8ndMgXSR9Zi2Fr92aGGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGc1QzE4dXZ5ZDB5QmRKSDFtTFlXdjNab1lZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9jYzFkNjItYWU1My00OGI3LWFjNzkt NjQxZDQ1NjI4M2M0LzEvcGc1QzE4dXZ5ZDB5QmRKSDFtTFlXdjNab1lZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9jYzFkNjItYWU1My00OGI3LWFjNzktNjQxZDQ1NjI4M2M0 LzEvcGc1QzE4dXZ5ZDB5QmRKSDFtTFlXdjNab1lZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFxN7cSNG xmNk6PsH6uY2hb4tpvo/SYV27gNxFPHjKbAyiu7mD9XVnmqPnnEbLNppVFJCvg3V Qi9VpertEe8+C89HXjXzfsDz2Xm6dRaMDnxoz1e5Da3XmJFlJLqshE9HP5PRS358 LFmbUZKBoWizDlK6LNvg6dujVCLn0OevHp8f37IX6MjO5fMsZ/zBqfZSghTuFSjR oq2844cRkpfuwkekY5iI/5fgAcIV42Yv1l9B55Y2MxLi1YGuyCGZZfj0Lp/KchGV 8XzFLI70wtYtNiiCnp1/YfLarg7GZ7lmSmm8M7qm+Z/Ldty/jtitI/hrK3OZIRKz EVPsHGZaxjRNhg== -----END CERTIFICATE-----Generated at Mon Dec 29 00:46:26 2025 by rpki-client