This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/ccbd44-63b3-4105-b39d-1a5559fdd4df/1/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.mft File: pgrUsV5cHP7Ar7H4GKdqCPGGOG0.mft (raw, json) Hash identifier: 07wH6fqLtArE2z0ADCRnbydXlp1p5GTCekwr9OsoP/g= Subject key identifier: CE:EE:B8:85:8A:E8:69:E6:74:D6:E9:F8:18:4D:A6:8A:15:8F:DA:09 Authority key identifier: A6:0A:D4:B1:5E:5C:1C:FE:C0:AF:B1:F8:18:A7:6A:08:F1:86:38:6D Certificate issuer: /CN=a60ad4b15e5c1cfec0afb1f818a76a08f186386d Certificate serial: 019B307A224D14C4D232EFA0A7885684BC32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/ccbd44-63b3-4105-b39d-1a5559fdd4df/1/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.mft Manifest number: 07D1 Signing time: Thu 18 Dec 2025 08:01:09 +0000 Manifest this update: Thu 18 Dec 2025 08:01:09 +0000 Manifest next update: Fri 19 Dec 2025 08:01:09 +0000 Files and hashes: 1: 0LPzaTRGADRQ7NYT2u33MSGVUAc.roa (hash: z6+o9T+5otMMS/QAipfJXTyY4jZN2xR3W6lhfsxnRH0=) 2: pgrUsV5cHP7Ar7H4GKdqCPGGOG0.crl (hash: YcA8iYlSP0yFgdypmSLlcO7I7iD91IjaU1QCljUmo5g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/ccbd44-63b3-4105-b39d-1a5559fdd4df/1/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/ccbd44-63b3-4105-b39d-1a5559fdd4df/1/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.mft rsync://rpki.ripe.net/repository/DEFAULT/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 08:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:7a:22:4d:14:c4:d2:32:ef:a0:a7:88:56:84:bc:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a60ad4b15e5c1cfec0afb1f818a76a08f186386d Validity Not Before: Dec 18 08:01:09 2025 GMT Not After : Dec 19 08:01:09 2025 GMT Subject: CN=ceeeb8858ae869e674d6e9f8184da68a158fda09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:1f:c2:e3:2d:49:0b:a5:6b:47:ac:be:82:91: 19:4f:09:b0:a5:bc:47:71:ce:02:8e:97:15:4f:57: 00:09:29:c0:d8:c2:38:8e:2a:c9:67:2f:fb:95:f9: e0:49:93:0d:bc:70:7b:8b:f1:97:7b:72:22:8e:68: 5b:23:99:d6:b5:e5:52:9d:b1:8b:3e:bc:ed:67:2e: 23:f3:a6:2a:2b:40:83:9f:5a:2f:c3:29:8a:b7:dc: ab:14:e1:1f:2b:e5:86:8d:f4:6a:44:8c:84:47:8b: b2:ed:0c:80:3e:21:c2:80:25:16:e8:48:a6:22:07: ce:6b:66:43:b9:91:91:3b:21:0a:52:15:34:3b:da: 1b:dd:09:20:99:31:03:9e:d1:64:74:cf:0b:72:e4: 55:32:b6:c1:c3:8d:d5:9c:9a:a5:be:60:bc:f0:0a: 13:e9:f6:12:fa:09:27:3b:25:29:33:2f:a3:ab:d6: 4f:bf:08:65:e8:3c:4f:de:04:10:68:3d:e4:1e:07: 93:c2:52:cb:c5:78:75:30:ed:0e:ff:df:3a:95:57: 57:5f:13:ac:11:ef:1c:c5:12:a5:aa:14:8d:4d:2b: 9e:29:6d:0b:e2:65:31:5e:5d:96:ae:a3:04:f7:39: a5:f4:e6:60:3e:4f:6b:03:db:62:9e:e4:6c:7e:1a: bb:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:EE:B8:85:8A:E8:69:E6:74:D6:E9:F8:18:4D:A6:8A:15:8F:DA:09 X509v3 Authority Key Identifier: keyid:A6:0A:D4:B1:5E:5C:1C:FE:C0:AF:B1:F8:18:A7:6A:08:F1:86:38:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ccbd44-63b3-4105-b39d-1a5559fdd4df/1/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ccbd44-63b3-4105-b39d-1a5559fdd4df/1/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:1c:f2:5f:a1:aa:5c:c0:3b:b6:74:06:fa:54:28:98:8c:90: fc:52:02:83:96:78:b7:4b:8a:22:3e:ff:4a:2d:35:e1:fb:b8: 5f:f5:13:72:a5:46:99:c5:5a:a0:f3:59:75:de:36:8f:62:c3: 96:03:a4:02:88:72:d9:92:bd:a5:3b:cd:80:e9:3c:bb:90:0c: e6:d3:9d:c4:09:57:47:b3:be:9e:2d:48:0c:eb:d8:95:fa:e8: 12:55:e5:62:5f:c8:5c:bf:c6:ca:8f:ee:51:a7:85:01:13:ef: 0e:65:8c:95:40:0e:31:1c:9f:6c:69:81:39:0e:24:77:58:5d: 62:66:f9:42:1f:dd:4e:15:23:70:e0:e4:a0:c0:38:6a:10:c2: b8:5c:6d:d5:b3:72:38:de:3f:0a:cf:13:1c:79:15:2a:f0:dc: 00:bb:e2:27:a5:e5:a1:65:9c:bd:83:3d:97:c8:b5:d3:0b:32: 4e:cf:46:da:a5:a0:73:10:39:10:a5:66:9a:10:33:c9:64:fb: d5:c7:29:de:ec:21:81:92:1b:f1:86:1d:66:f1:e4:bd:e0:db: fd:86:ae:d7:6c:77:43:b8:25:4b:df:a9:b6:fd:d6:8e:1b:dc: 8b:43:23:23:48:55:6f:35:91:f8:07:47:d0:c5:27:40:a4:96: 6a:81:92:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsweiJNFMTSMu+gp4hWhLwyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2MGFkNGIxNWU1YzFjZmVjMGFmYjFmODE4YTc2YTA4ZjE4 NjM4NmQwHhcNMjUxMjE4MDgwMTA5WhcNMjUxMjE5MDgwMTA5WjAzMTEwLwYDVQQD EyhjZWVlYjg4NThhZTg2OWU2NzRkNmU5ZjgxODRkYTY4YTE1OGZkYTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlR/C4y1JC6VrR6y+gpEZTwmwpbxH cc4CjpcVT1cACSnA2MI4jirJZy/7lfngSZMNvHB7i/GXe3IijmhbI5nWteVSnbGL PrztZy4j86YqK0CDn1ovwymKt9yrFOEfK+WGjfRqRIyER4uy7QyAPiHCgCUW6Eim IgfOa2ZDuZGROyEKUhU0O9ob3QkgmTEDntFkdM8LcuRVMrbBw43VnJqlvmC88AoT 6fYS+gknOyUpMy+jq9ZPvwhl6DxP3gQQaD3kHgeTwlLLxXh1MO0O/986lVdXXxOs Ee8cxRKlqhSNTSueKW0L4mUxXl2WrqME9zml9OZgPk9rA9tinuRsfhq7PwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM7uuIWK6GnmdNbp+BhNpooVj9oJMB8GA1UdIwQY MBaAFKYK1LFeXBz+wK+x+BinagjxhjhtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGdyVXNWNWNIUDdBcjdINEdLZHFDUEdHT0cwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9jY2JkNDQtNjNiMy00MTA1LWIzOWQt MWE1NTU5ZmRkNGRmLzEvcGdyVXNWNWNIUDdBcjdINEdLZHFDUEdHT0cwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy9jY2JkNDQtNjNiMy00MTA1LWIzOWQtMWE1NTU5ZmRkNGRm LzEvcGdyVXNWNWNIUDdBcjdINEdLZHFDUEdHT0cwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPBzyX6Gq XMA7tnQG+lQomIyQ/FICg5Z4t0uKIj7/Si014fu4X/UTcqVGmcVaoPNZdd42j2LD lgOkAohy2ZK9pTvNgOk8u5AM5tOdxAlXR7O+ni1IDOvYlfroElXlYl/IXL/Gyo/u UaeFARPvDmWMlUAOMRyfbGmBOQ4kd1hdYmb5Qh/dThUjcODkoMA4ahDCuFxt1bNy ON4/Cs8THHkVKvDcALviJ6XloWWcvYM9l8i10wsyTs9G2qWgcxA5EKVmmhAzyWT7 1ccp3uwhgZIb8YYdZvHkveDb/Yau12x3Q7glS9+ptv3Wjhvci0MjI0hVbzWR+AdH 0MUnQKSWaoGStA== -----END CERTIFICATE-----Generated at Thu Dec 18 17:51:54 2025 by rpki-client