This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/a02136-db9b-4bef-ae12-4c25fcbdedd1/1/Pme6gge4HBtHJjsf3o95uZWXA30.mft File: Pme6gge4HBtHJjsf3o95uZWXA30.mft (raw, json) Hash identifier: vg1dALtVM2pPrEmgbtToW6ZdqUD8i8l8wi6ls81Q+W8= Subject key identifier: 19:FC:9B:B9:89:E7:FB:E5:6B:D7:42:D1:1A:86:27:3A:C2:7F:FF:84 Authority key identifier: 3E:67:BA:82:07:B8:1C:1B:47:26:3B:1F:DE:8F:79:B9:95:97:03:7D Certificate issuer: /CN=3e67ba8207b81c1b47263b1fde8f79b99597037d Certificate serial: 019AF12EE4CE1315C155B764FE8DD9CAC197 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pme6gge4HBtHJjsf3o95uZWXA30.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/a02136-db9b-4bef-ae12-4c25fcbdedd1/1/Pme6gge4HBtHJjsf3o95uZWXA30.mft Manifest number: 16F2 Signing time: Sat 06 Dec 2025 01:02:53 +0000 Manifest this update: Sat 06 Dec 2025 01:02:53 +0000 Manifest next update: Sun 07 Dec 2025 01:02:53 +0000 Files and hashes: 1: Pme6gge4HBtHJjsf3o95uZWXA30.crl (hash: W/87ruxgGkfqmrDqYv4JnkZ/0Lc6H+RSbFYWyx+50d0=) 2: Sw2yUjR1ZL0ByAYEDmqJ1PKv-34.roa (hash: nd+025SnSLe+QrA8ZI1nLVUbcuTRnShB52imVtkdZsc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/a02136-db9b-4bef-ae12-4c25fcbdedd1/1/Pme6gge4HBtHJjsf3o95uZWXA30.crl rsync://rpki.ripe.net/repository/DEFAULT/19/a02136-db9b-4bef-ae12-4c25fcbdedd1/1/Pme6gge4HBtHJjsf3o95uZWXA30.mft rsync://rpki.ripe.net/repository/DEFAULT/Pme6gge4HBtHJjsf3o95uZWXA30.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:e4:ce:13:15:c1:55:b7:64:fe:8d:d9:ca:c1:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e67ba8207b81c1b47263b1fde8f79b99597037d Validity Not Before: Dec 6 01:02:53 2025 GMT Not After : Dec 7 01:02:53 2025 GMT Subject: CN=19fc9bb989e7fbe56bd742d11a86273ac27fff84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:6a:fc:9b:90:7c:df:54:e4:c0:e6:67:9f:b2: e0:8c:31:e5:05:65:4f:7c:c8:ae:84:ba:97:e7:d3: d1:c3:8e:94:c8:f6:7d:36:ab:88:83:d8:1a:3a:b5: 3a:32:2d:fa:64:1d:df:ce:ea:80:bc:1b:0d:eb:9b: 04:f1:c7:6f:57:ff:40:62:df:c3:86:67:63:99:99: 05:0b:fb:12:55:7f:c8:7d:32:0a:2c:02:4c:11:e1: 64:8f:fb:2e:0d:a5:ec:c9:b8:2e:61:d7:68:42:0b: 6b:f6:c3:48:b3:8a:c2:b4:1b:14:52:68:6c:54:8c: 99:c9:f5:4d:00:07:f2:ca:fa:b4:d0:c0:8b:77:95: 3b:fd:59:fa:7c:fa:fe:6d:e3:84:0a:05:97:8e:4b: dc:51:8a:6a:91:6b:a2:e0:de:50:a1:52:93:ed:95: d7:9b:ae:72:d4:6d:9f:76:3e:64:45:91:ca:13:b0: 79:b4:09:21:f8:86:ef:0f:c2:85:dd:ed:9c:14:6c: 1d:2f:f4:fb:d5:e4:a6:b8:74:3c:32:c3:5c:b6:e6: cf:3d:a2:24:bc:41:89:ba:81:9e:99:fe:80:0e:fb: 7a:fa:7e:e6:7c:5a:05:c8:46:2b:e2:51:3b:e5:3d: cd:3c:6b:21:4e:78:ee:80:c5:5c:5a:65:5b:6f:50: 54:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:FC:9B:B9:89:E7:FB:E5:6B:D7:42:D1:1A:86:27:3A:C2:7F:FF:84 X509v3 Authority Key Identifier: keyid:3E:67:BA:82:07:B8:1C:1B:47:26:3B:1F:DE:8F:79:B9:95:97:03:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pme6gge4HBtHJjsf3o95uZWXA30.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a02136-db9b-4bef-ae12-4c25fcbdedd1/1/Pme6gge4HBtHJjsf3o95uZWXA30.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a02136-db9b-4bef-ae12-4c25fcbdedd1/1/Pme6gge4HBtHJjsf3o95uZWXA30.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption df:31:34:e2:9f:1b:6c:07:a6:dd:a9:b9:3d:f8:86:b5:0e:29: 54:80:a4:7b:f6:b8:a1:94:26:ee:56:45:bc:e9:f6:19:04:a7: 07:26:a0:4c:58:39:b3:64:c7:95:ad:94:bc:66:eb:3d:a2:44: f7:cb:cd:1f:db:cf:36:7f:c0:d5:f9:aa:53:35:2d:a2:73:85: e5:ef:05:e4:8b:d0:57:b2:91:2a:bf:cd:58:8f:ad:20:25:65: 1d:16:cc:1b:74:fb:c8:bc:99:5e:2b:cb:b6:1e:c1:16:7b:10: af:3f:74:ac:51:4b:cb:62:e5:1c:7e:57:3e:8d:07:34:8a:7c: 93:1d:c2:8d:a5:29:65:54:0e:76:62:36:88:ba:a0:fb:ce:7e: a0:b7:0d:8a:ef:ab:39:f8:9f:fd:4f:6d:69:3b:42:5e:f0:43: b0:39:99:e0:51:aa:25:f2:29:b7:3e:2c:68:b5:11:bd:65:80: 9a:9a:66:66:e5:42:c4:0c:19:b4:39:2a:34:34:c5:b4:25:e9: ba:43:5a:e0:6c:06:ba:f7:a2:17:3d:cf:5a:f9:3c:52:c4:2b: 6e:d9:d9:57:cd:0e:ba:e0:d3:a0:89:9c:2e:0c:66:bb:67:35: 60:80:67:7b:59:49:95:ce:ac:d9:16:9c:34:ea:7c:ad:92:2e: a0:d5:f3:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLuTOExXBVbdk/o3ZysGXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjdiYTgyMDdiODFjMWI0NzI2M2IxZmRlOGY3OWI5OTU5 NzAzN2QwHhcNMjUxMjA2MDEwMjUzWhcNMjUxMjA3MDEwMjUzWjAzMTEwLwYDVQQD EygxOWZjOWJiOTg5ZTdmYmU1NmJkNzQyZDExYTg2MjczYWMyN2ZmZjg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWr8m5B831TkwOZnn7LgjDHlBWVP fMiuhLqX59PRw46UyPZ9NquIg9gaOrU6Mi36ZB3fzuqAvBsN65sE8cdvV/9AYt/D hmdjmZkFC/sSVX/IfTIKLAJMEeFkj/suDaXsybguYddoQgtr9sNIs4rCtBsUUmhs VIyZyfVNAAfyyvq00MCLd5U7/Vn6fPr+beOECgWXjkvcUYpqkWui4N5QoVKT7ZXX m65y1G2fdj5kRZHKE7B5tAkh+IbvD8KF3e2cFGwdL/T71eSmuHQ8MsNctubPPaIk vEGJuoGemf6ADvt6+n7mfFoFyEYr4lE75T3NPGshTnjugMVcWmVbb1BUFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBn8m7mJ5/vla9dC0RqGJzrCf/+EMB8GA1UdIwQY MBaAFD5nuoIHuBwbRyY7H96PebmVlwN9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1lNmdnZTRIQnRISmpzZjNvOTV1WldYQTMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9hMDIxMzYtZGI5Yi00YmVmLWFlMTIt NGMyNWZjYmRlZGQxLzEvUG1lNmdnZTRIQnRISmpzZjNvOTV1WldYQTMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9hMDIxMzYtZGI5Yi00YmVmLWFlMTItNGMyNWZjYmRlZGQx LzEvUG1lNmdnZTRIQnRISmpzZjNvOTV1WldYQTMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3zE04p8b bAem3am5PfiGtQ4pVICke/a4oZQm7lZFvOn2GQSnByagTFg5s2THla2UvGbrPaJE 98vNH9vPNn/A1fmqUzUtonOF5e8F5IvQV7KRKr/NWI+tICVlHRbMG3T7yLyZXivL th7BFnsQrz90rFFLy2LlHH5XPo0HNIp8kx3CjaUpZVQOdmI2iLqg+85+oLcNiu+r Ofif/U9taTtCXvBDsDmZ4FGqJfIptz4saLURvWWAmppmZuVCxAwZtDkqNDTFtCXp ukNa4GwGuveiFz3PWvk8UsQrbtnZV80OuuDToImcLgxmu2c1YIBne1lJlc6s2Rac NOp8rZIuoNXzOA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:44:47 2025 by rpki-client