This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/ccbd44-63b3-4105-b39d-1a5559fdd4df/1/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.mft File: pgrUsV5cHP7Ar7H4GKdqCPGGOG0.mft (raw, json) Hash identifier: ZjF5wmrVUNgmNo/6PgfqvK5Of8qFb3FAufKufSmUiy0= Subject key identifier: F9:25:FF:72:90:D7:89:65:64:62:73:C1:70:FD:71:D4:F2:D5:0B:D3 Authority key identifier: A6:0A:D4:B1:5E:5C:1C:FE:C0:AF:B1:F8:18:A7:6A:08:F1:86:38:6D Certificate issuer: /CN=a60ad4b15e5c1cfec0afb1f818a76a08f186386d Certificate serial: 019AF2ADA0A8D3D6F0086A4F38A24DDEA021 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/ccbd44-63b3-4105-b39d-1a5559fdd4df/1/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.mft Manifest number: 07B1 Signing time: Sat 06 Dec 2025 08:00:56 +0000 Manifest this update: Sat 06 Dec 2025 08:00:56 +0000 Manifest next update: Sun 07 Dec 2025 08:00:56 +0000 Files and hashes: 1: 0LPzaTRGADRQ7NYT2u33MSGVUAc.roa (hash: z6+o9T+5otMMS/QAipfJXTyY4jZN2xR3W6lhfsxnRH0=) 2: pgrUsV5cHP7Ar7H4GKdqCPGGOG0.crl (hash: zPPdHHYnvs84wmcRVl5JIAka6ycn/XrnItBbhaN7jQw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/ccbd44-63b3-4105-b39d-1a5559fdd4df/1/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/ccbd44-63b3-4105-b39d-1a5559fdd4df/1/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.mft rsync://rpki.ripe.net/repository/DEFAULT/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:a0:a8:d3:d6:f0:08:6a:4f:38:a2:4d:de:a0:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a60ad4b15e5c1cfec0afb1f818a76a08f186386d Validity Not Before: Dec 6 08:00:56 2025 GMT Not After : Dec 7 08:00:56 2025 GMT Subject: CN=f925ff7290d78965646273c170fd71d4f2d50bd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:45:bd:9a:3d:72:e8:de:1b:f3:b2:a4:21:82: c1:df:57:1b:35:55:65:d1:fe:4a:3b:cb:be:8b:07: 7a:7b:2e:ff:68:a3:50:77:87:0f:a8:1e:3e:f6:71: 1c:2a:2d:d0:b5:9c:2f:2b:25:a1:ea:2b:92:b5:e5: 8e:26:64:85:a7:93:3e:ea:10:3d:b7:7b:0f:2b:99: f6:2e:e6:a9:50:fe:04:33:95:c5:84:96:9b:b9:e1: 06:e2:96:cf:fa:76:e8:9f:b0:3b:08:80:8f:1d:03: 94:cb:1f:fb:f1:48:a1:6b:7c:6c:28:cc:d9:1a:af: cc:f3:07:13:c8:ba:40:b7:f6:3f:87:10:7e:fb:5a: 4a:0c:70:d8:84:12:81:24:64:79:49:bd:8a:b3:83: d2:87:00:f8:e8:69:6a:01:8f:e4:7d:7c:8d:8f:ed: 8e:d4:09:dd:95:59:25:83:bb:51:51:63:c9:0e:dd: b7:f4:bc:e1:95:d3:91:77:7f:12:2a:de:f7:44:e1: b9:25:93:17:1f:18:c6:f7:93:ef:a8:55:fd:f8:07: 40:61:ff:b2:f9:bf:4f:bf:67:41:5f:0c:62:a7:31: db:05:86:f6:12:c4:07:c6:b3:a3:ac:56:b9:64:cc: 4e:f0:bb:f3:d0:09:6a:95:87:b8:e6:ec:c4:d9:79: b8:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:25:FF:72:90:D7:89:65:64:62:73:C1:70:FD:71:D4:F2:D5:0B:D3 X509v3 Authority Key Identifier: keyid:A6:0A:D4:B1:5E:5C:1C:FE:C0:AF:B1:F8:18:A7:6A:08:F1:86:38:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ccbd44-63b3-4105-b39d-1a5559fdd4df/1/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ccbd44-63b3-4105-b39d-1a5559fdd4df/1/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:ae:66:2b:37:7e:e9:e2:c2:d5:65:7c:ba:4f:25:77:a3:1a: 50:30:56:0f:2f:12:8f:40:3c:d1:9a:88:ad:29:5a:4e:7f:2c: c7:fd:9f:61:56:39:66:91:0f:e6:3c:b6:ca:0a:07:7c:c0:8f: 2d:20:d1:ee:f3:7b:72:05:28:5a:5e:f7:61:87:36:82:63:56: 68:53:11:de:8b:a1:2e:c6:60:0b:c3:24:ea:5f:c4:56:48:da: c5:79:62:1b:10:ec:a5:0f:10:0f:53:07:14:b1:b0:de:bd:af: 68:f8:cd:b7:5f:f4:65:f0:c3:10:b9:bb:2d:2c:12:b6:41:17: 6c:a9:f0:56:38:4d:05:b1:04:b8:cd:90:60:b1:99:c0:2a:40: 77:3d:e1:6f:32:6f:96:17:4e:50:2b:35:5d:22:65:eb:7d:cc: 28:09:c4:68:8e:ca:ae:3e:d0:3d:8a:8a:bc:f2:8d:2a:23:28: b2:34:25:39:d2:55:eb:2c:83:88:1d:65:01:86:bd:f3:96:90: d7:f3:71:35:95:5b:fc:ff:0a:27:89:cf:49:87:49:39:ee:57: 90:e5:b1:5d:1a:86:10:bf:3e:cd:53:d9:56:00:57:b1:43:4a: ed:90:36:1c:4c:0c:fc:91:b1:ad:c0:4f:59:55:67:5b:73:24: 46:4f:66:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryraCo09bwCGpPOKJN3qAhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2MGFkNGIxNWU1YzFjZmVjMGFmYjFmODE4YTc2YTA4ZjE4 NjM4NmQwHhcNMjUxMjA2MDgwMDU2WhcNMjUxMjA3MDgwMDU2WjAzMTEwLwYDVQQD EyhmOTI1ZmY3MjkwZDc4OTY1NjQ2MjczYzE3MGZkNzFkNGYyZDUwYmQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0W9mj1y6N4b87KkIYLB31cbNVVl 0f5KO8u+iwd6ey7/aKNQd4cPqB4+9nEcKi3QtZwvKyWh6iuSteWOJmSFp5M+6hA9 t3sPK5n2LuapUP4EM5XFhJabueEG4pbP+nbon7A7CICPHQOUyx/78Uiha3xsKMzZ Gq/M8wcTyLpAt/Y/hxB++1pKDHDYhBKBJGR5Sb2Ks4PShwD46GlqAY/kfXyNj+2O 1AndlVklg7tRUWPJDt239LzhldORd38SKt73ROG5JZMXHxjG95PvqFX9+AdAYf+y +b9Pv2dBXwxipzHbBYb2EsQHxrOjrFa5ZMxO8Lvz0AlqlYe45uzE2Xm4vwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPkl/3KQ14llZGJzwXD9cdTy1QvTMB8GA1UdIwQY MBaAFKYK1LFeXBz+wK+x+BinagjxhjhtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGdyVXNWNWNIUDdBcjdINEdLZHFDUEdHT0cwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9jY2JkNDQtNjNiMy00MTA1LWIzOWQt MWE1NTU5ZmRkNGRmLzEvcGdyVXNWNWNIUDdBcjdINEdLZHFDUEdHT0cwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy9jY2JkNDQtNjNiMy00MTA1LWIzOWQtMWE1NTU5ZmRkNGRm LzEvcGdyVXNWNWNIUDdBcjdINEdLZHFDUEdHT0cwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANa5mKzd+ 6eLC1WV8uk8ld6MaUDBWDy8Sj0A80ZqIrSlaTn8sx/2fYVY5ZpEP5jy2ygoHfMCP LSDR7vN7cgUoWl73YYc2gmNWaFMR3ouhLsZgC8Mk6l/EVkjaxXliGxDspQ8QD1MH FLGw3r2vaPjNt1/0ZfDDELm7LSwStkEXbKnwVjhNBbEEuM2QYLGZwCpAdz3hbzJv lhdOUCs1XSJl633MKAnEaI7Krj7QPYqKvPKNKiMosjQlOdJV6yyDiB1lAYa985aQ 1/NxNZVb/P8KJ4nPSYdJOe5XkOWxXRqGEL8+zVPZVgBXsUNK7ZA2HEwM/JGxrcBP WVVnW3MkRk9mDg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:07:40 2025 by rpki-client