This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft File: PgzNJQR7nLi28Bhnze3oJW9zSiM.mft (raw, json) Hash identifier: sV8Nbp5i5Pckq8lOsnCz88e2+BnZqjbyjgc3uxfR0lY= Subject key identifier: 76:D0:5C:4C:E6:73:BB:38:B8:46:C8:12:A3:65:0F:4B:B1:24:FC:75 Authority key identifier: 3E:0C:CD:25:04:7B:9C:B8:B6:F0:18:67:CD:ED:E8:25:6F:73:4A:23 Certificate issuer: /CN=3e0ccd25047b9cb8b6f01867cdede8256f734a23 Certificate serial: 019AF5E656743D3B782F14CB73D4E4F0D6EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PgzNJQR7nLi28Bhnze3oJW9zSiM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft Manifest number: 0A1A Signing time: Sat 06 Dec 2025 23:01:44 +0000 Manifest this update: Sat 06 Dec 2025 23:01:44 +0000 Manifest next update: Sun 07 Dec 2025 23:01:44 +0000 Files and hashes: 1: PgzNJQR7nLi28Bhnze3oJW9zSiM.crl (hash: 0Sd4KJBd1PJ1S12oSiGmyjEyPnovvGjbQ7sQIfwsc28=) 2: tNlE-RsS8yP8q3aEd77vtdKV4ao.roa (hash: 0s1wr6faxjcsfPekqZ/FFwhO5dh5LLtuhFGeIZLAT0s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft rsync://rpki.ripe.net/repository/DEFAULT/PgzNJQR7nLi28Bhnze3oJW9zSiM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e6:56:74:3d:3b:78:2f:14:cb:73:d4:e4:f0:d6:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e0ccd25047b9cb8b6f01867cdede8256f734a23 Validity Not Before: Dec 6 23:01:44 2025 GMT Not After : Dec 7 23:01:44 2025 GMT Subject: CN=76d05c4ce673bb38b846c812a3650f4bb124fc75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:18:a7:df:e7:8b:ea:f6:dc:10:b4:c7:a4:51: 17:51:98:ae:4b:ef:30:76:54:28:3d:45:cf:d2:e2: 5b:48:9d:cb:d0:0b:51:ec:15:b1:d0:6b:f7:07:d5: 45:62:af:52:bb:e9:e8:f1:63:7f:e9:b7:5c:cc:61: 62:49:6d:12:a6:a7:00:65:2b:85:7a:52:40:71:23: 34:7e:d0:02:31:72:fe:7f:54:db:c7:1f:83:e8:29: d7:c4:e4:2c:5a:7c:e0:6b:da:17:5f:82:3e:f0:f9: e3:b7:f3:e8:a6:bc:50:c7:9b:99:af:9d:29:75:02: fe:df:58:10:7e:70:4b:2f:28:ad:4d:89:b1:0c:8d: 03:7b:0e:e5:f8:e3:9c:f1:12:35:22:77:39:2e:fe: d3:af:db:e2:b6:03:2f:fe:eb:b8:20:79:80:a9:66: ed:49:1a:48:62:80:eb:d6:a2:07:e1:c2:7e:c5:05: cc:cd:1e:09:cc:12:1a:34:2e:7a:53:66:34:2c:48: 29:0a:cc:81:fc:3c:5d:52:2a:bd:4a:a2:b9:6d:31: 4d:5d:29:82:a4:c3:3e:fc:8d:4a:29:34:99:43:20: ba:48:ad:56:d7:c5:a3:19:86:af:00:ea:5f:cb:2b: e3:af:4a:ba:13:f4:21:ab:08:2a:87:c0:95:1f:cd: 4f:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:D0:5C:4C:E6:73:BB:38:B8:46:C8:12:A3:65:0F:4B:B1:24:FC:75 X509v3 Authority Key Identifier: keyid:3E:0C:CD:25:04:7B:9C:B8:B6:F0:18:67:CD:ED:E8:25:6F:73:4A:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PgzNJQR7nLi28Bhnze3oJW9zSiM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:99:82:8f:b4:89:d7:5f:3c:cf:c9:4b:f7:dd:62:d2:24:a5: 92:e5:d5:4f:f9:f0:09:ef:f9:5a:a2:78:38:6e:52:9b:f3:56: 62:4c:a5:79:91:05:58:19:5c:4d:61:89:5a:6a:56:b6:8c:01: 26:6c:3e:e8:ac:3a:12:12:1b:08:40:19:06:48:d1:aa:c1:13: 6d:fc:dc:d7:e1:6b:8e:54:8f:0e:7a:2b:33:bc:83:0c:5f:38: 7d:23:57:de:68:e4:39:e4:a0:94:c9:82:0b:9e:97:59:cc:cd: d7:d8:02:32:58:ed:77:b8:4a:66:cb:80:82:8f:ad:81:02:98: 42:ee:fa:56:50:7f:99:3a:b6:0b:9f:ca:b8:15:f4:37:e6:bb: c2:99:8d:3c:72:8d:e0:75:0c:08:77:dd:7b:56:be:41:27:05: 5b:40:a8:eb:77:30:16:5b:f8:e9:6b:42:14:01:1e:5f:97:3c: 05:09:d1:9c:59:7b:b6:e9:97:05:87:c9:87:d9:59:a4:e7:14: 0d:32:87:8d:53:92:6f:48:ba:6d:9a:8b:3c:59:40:d1:92:26: b8:b2:aa:6a:fc:49:39:bd:e1:54:68:72:b7:36:f7:cd:db:0c: 4d:eb:92:a2:76:15:13:4d:ea:9f:43:7f:f1:a2:8a:4f:fb:d3: 80:88:2d:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15lZ0PTt4LxTLc9Tk8NbrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlMGNjZDI1MDQ3YjljYjhiNmYwMTg2N2NkZWRlODI1NmY3 MzRhMjMwHhcNMjUxMjA2MjMwMTQ0WhcNMjUxMjA3MjMwMTQ0WjAzMTEwLwYDVQQD Eyg3NmQwNWM0Y2U2NzNiYjM4Yjg0NmM4MTJhMzY1MGY0YmIxMjRmYzc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxin3+eL6vbcELTHpFEXUZiuS+8w dlQoPUXP0uJbSJ3L0AtR7BWx0Gv3B9VFYq9Su+no8WN/6bdczGFiSW0SpqcAZSuF elJAcSM0ftACMXL+f1Tbxx+D6CnXxOQsWnzga9oXX4I+8Pnjt/PoprxQx5uZr50p dQL+31gQfnBLLyitTYmxDI0Dew7l+OOc8RI1Inc5Lv7Tr9vitgMv/uu4IHmAqWbt SRpIYoDr1qIH4cJ+xQXMzR4JzBIaNC56U2Y0LEgpCsyB/DxdUiq9SqK5bTFNXSmC pMM+/I1KKTSZQyC6SK1W18WjGYavAOpfyyvjr0q6E/Qhqwgqh8CVH81PMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHbQXEzmc7s4uEbIEqNlD0uxJPx1MB8GA1UdIwQY MBaAFD4MzSUEe5y4tvAYZ83t6CVvc0ojMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGd6TkpRUjduTGkyOEJobnplM29KVzl6U2lNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC85Yzg2MzEtZGM2YS00NWMyLWJjZjkt OWNkMDE3MjQzYTA2LzEvUGd6TkpRUjduTGkyOEJobnplM29KVzl6U2lNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC85Yzg2MzEtZGM2YS00NWMyLWJjZjktOWNkMDE3MjQzYTA2 LzEvUGd6TkpRUjduTGkyOEJobnplM29KVzl6U2lNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATJmCj7SJ 1188z8lL991i0iSlkuXVT/nwCe/5WqJ4OG5Sm/NWYkyleZEFWBlcTWGJWmpWtowB Jmw+6Kw6EhIbCEAZBkjRqsETbfzc1+FrjlSPDnorM7yDDF84fSNX3mjkOeSglMmC C56XWczN19gCMljtd7hKZsuAgo+tgQKYQu76VlB/mTq2C5/KuBX0N+a7wpmNPHKN 4HUMCHfde1a+QScFW0Co63cwFlv46WtCFAEeX5c8BQnRnFl7tumXBYfJh9lZpOcU DTKHjVOSb0i6bZqLPFlA0ZImuLKqavxJOb3hVGhytzb3zdsMTeuSonYVE03qn0N/ 8aKKT/vTgIgtow== -----END CERTIFICATE-----Generated at Sun Dec 7 03:37:39 2025 by rpki-client