This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/4c9e86-1ad7-4a8f-a55b-92cf01fa7e6c/1/1-pgy8HocZdfjU_SOCG_PJQhoiP8.mft File: 1-pgy8HocZdfjU_SOCG_PJQhoiP8.mft (raw, json) Hash identifier: IDA59MwcESuYhl6Bk54SFTWCPswxuDntkAEk2j05H/c= Subject key identifier: AA:DD:AE:BB:1E:6B:5B:49:09:D5:CF:5F:DF:A5:D4:C7:EB:03:C6:2F Authority key identifier: FA:98:32:F0:7A:1C:65:D7:E3:53:F4:8E:08:6F:CF:25:08:68:88:FF Certificate issuer: /CN=fa9832f07a1c65d7e353f48e086fcf25086888ff Certificate serial: 019AF1D259378400D42FA865FD80E6BC597F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-pgy8HocZdfjU_SOCG_PJQhoiP8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/4c9e86-1ad7-4a8f-a55b-92cf01fa7e6c/1/1-pgy8HocZdfjU_SOCG_PJQhoiP8.mft Manifest number: 2C Signing time: Sat 06 Dec 2025 04:01:25 +0000 Manifest this update: Sat 06 Dec 2025 04:01:25 +0000 Manifest next update: Sun 07 Dec 2025 04:01:25 +0000 Files and hashes: 1: 1-pgy8HocZdfjU_SOCG_PJQhoiP8.crl (hash: xppklVx1JV7dOTcAJILrGTklD442XnuFoUcRbdXqKNU=) 2: mrJn6nD0GC6PzZPQcJGEwHtlTMs.roa (hash: HL+CopIX/Je4zBh55UeuNqaw17GY2N3s/OSsQC+mKKk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/4c9e86-1ad7-4a8f-a55b-92cf01fa7e6c/1/1-pgy8HocZdfjU_SOCG_PJQhoiP8.crl rsync://rpki.ripe.net/repository/DEFAULT/41/4c9e86-1ad7-4a8f-a55b-92cf01fa7e6c/1/1-pgy8HocZdfjU_SOCG_PJQhoiP8.mft rsync://rpki.ripe.net/repository/DEFAULT/1-pgy8HocZdfjU_SOCG_PJQhoiP8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:59:37:84:00:d4:2f:a8:65:fd:80:e6:bc:59:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa9832f07a1c65d7e353f48e086fcf25086888ff Validity Not Before: Dec 6 04:01:25 2025 GMT Not After : Dec 7 04:01:25 2025 GMT Subject: CN=aaddaebb1e6b5b4909d5cf5fdfa5d4c7eb03c62f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:9a:4c:43:ec:da:0b:e5:72:93:a1:da:d7:e8: 13:4a:f8:c0:02:dd:07:72:c7:23:48:0f:72:8d:e9: 88:ae:23:63:0e:e3:c0:69:ad:e3:08:4a:00:f9:63: a3:ba:40:61:1a:21:74:65:67:89:bb:ca:dc:b9:ba: a0:a7:92:3e:bd:25:f6:15:dc:10:73:da:71:68:98: 9f:11:88:37:9e:59:2a:60:ea:50:9c:c2:ea:49:2f: 4e:88:be:bd:07:be:7b:de:e9:5a:df:ac:d9:4f:7a: a4:c2:0d:91:50:b6:78:1f:8b:58:f0:17:c8:57:65: 8e:0f:0a:4f:08:15:54:2f:ff:44:16:79:b8:2e:d4: 90:54:fb:ad:81:8e:cd:8d:25:54:32:0d:4a:ee:17: d4:08:0b:5e:11:78:9e:ee:02:95:8a:a2:4e:ca:7f: f0:6f:81:e5:47:f6:46:15:d0:a9:d3:c0:29:51:68: 28:85:07:f9:02:50:85:e6:e4:19:5a:8a:79:1a:04: 2e:7a:3a:de:32:0a:80:ac:24:3e:c7:1a:7b:93:01: 12:61:7f:a0:2c:1c:07:7b:c8:23:91:9f:a0:2f:fb: e6:e1:a1:d6:cb:0d:2c:de:6c:e2:d6:76:00:b0:43: 22:3d:5c:39:06:84:a2:af:7a:41:68:93:ff:12:e8: e3:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:DD:AE:BB:1E:6B:5B:49:09:D5:CF:5F:DF:A5:D4:C7:EB:03:C6:2F X509v3 Authority Key Identifier: keyid:FA:98:32:F0:7A:1C:65:D7:E3:53:F4:8E:08:6F:CF:25:08:68:88:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-pgy8HocZdfjU_SOCG_PJQhoiP8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4c9e86-1ad7-4a8f-a55b-92cf01fa7e6c/1/1-pgy8HocZdfjU_SOCG_PJQhoiP8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4c9e86-1ad7-4a8f-a55b-92cf01fa7e6c/1/1-pgy8HocZdfjU_SOCG_PJQhoiP8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:9e:4d:29:f6:87:78:1d:b1:18:4f:9a:fd:36:7c:20:5d:44: 81:25:93:e8:1b:03:07:57:c9:af:63:ad:9a:2c:28:59:aa:b5: 6d:6a:2a:82:fe:24:ec:92:fc:7c:d5:6d:8b:59:fc:14:51:76: 3d:6c:57:32:bd:13:57:26:14:c4:78:fa:89:04:a3:7c:5a:92: ef:ce:eb:51:1d:01:b8:48:95:cc:f6:b1:53:e1:a5:24:9d:c1: 1d:65:3a:cc:04:ef:6b:a8:ca:90:bc:51:b1:b1:52:b9:24:96: 3d:89:02:30:83:45:80:95:31:91:fe:08:d2:b7:c7:8e:3d:0c: 81:45:47:66:2d:89:98:71:96:32:3e:78:23:85:47:09:82:29: 22:23:c0:3e:20:dc:bf:c9:75:30:10:ee:5e:2c:ca:a7:7e:cb: 9c:06:81:eb:34:b7:00:c7:cc:18:7e:0f:b5:10:6e:06:c1:9d: 20:bd:cd:bd:7e:71:ed:26:b1:40:b1:13:11:15:a8:04:a9:26: e0:2c:37:76:09:38:61:24:cf:1b:92:79:e5:ab:b3:46:10:ae: 4f:82:a8:bf:99:8c:2e:60:06:f5:d2:ae:3c:87:96:d1:6a:cf: 08:af:c8:dc:7b:b7:d0:ae:3b:2d:26:e6:5f:25:7d:d5:62:f0: a3:89:ed:e1 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrx0lk3hADUL6hl/YDmvFl/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhOTgzMmYwN2ExYzY1ZDdlMzUzZjQ4ZTA4NmZjZjI1MDg2 ODg4ZmYwHhcNMjUxMjA2MDQwMTI1WhcNMjUxMjA3MDQwMTI1WjAzMTEwLwYDVQQD EyhhYWRkYWViYjFlNmI1YjQ5MDlkNWNmNWZkZmE1ZDRjN2ViMDNjNjJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJpMQ+zaC+Vyk6Ha1+gTSvjAAt0H cscjSA9yjemIriNjDuPAaa3jCEoA+WOjukBhGiF0ZWeJu8rcubqgp5I+vSX2FdwQ c9pxaJifEYg3nlkqYOpQnMLqSS9OiL69B7573ula36zZT3qkwg2RULZ4H4tY8BfI V2WODwpPCBVUL/9EFnm4LtSQVPutgY7NjSVUMg1K7hfUCAteEXie7gKViqJOyn/w b4HlR/ZGFdCp08ApUWgohQf5AlCF5uQZWop5GgQuejreMgqArCQ+xxp7kwESYX+g LBwHe8gjkZ+gL/vm4aHWyw0s3mzi1nYAsEMiPVw5BoSir3pBaJP/EujjPwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFKrdrrsea1tJCdXPX9+l1MfrA8YvMB8GA1UdIwQY MBaAFPqYMvB6HGXX41P0jghvzyUIaIj/MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1wZ3k4SG9jWmRmalVfU09DR19QSlFob2lQOC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDEvNGM5ZTg2LTFhZDctNGE4Zi1hNTVi LTkyY2YwMWZhN2U2Yy8xLzEtcGd5OEhvY1pkZmpVX1NPQ0dfUEpRaG9pUDgubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzQxLzRjOWU4Ni0xYWQ3LTRhOGYtYTU1Yi05MmNmMDFmYTdl NmMvMS8xLXBneThIb2NaZGZqVV9TT0NHX1BKUWhvaVA4LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr55N KfaHeB2xGE+a/TZ8IF1EgSWT6BsDB1fJr2OtmiwoWaq1bWoqgv4k7JL8fNVti1n8 FFF2PWxXMr0TVyYUxHj6iQSjfFqS787rUR0BuEiVzPaxU+GlJJ3BHWU6zATva6jK kLxRsbFSuSSWPYkCMINFgJUxkf4I0rfHjj0MgUVHZi2JmHGWMj54I4VHCYIpIiPA PiDcv8l1MBDuXizKp37LnAaB6zS3AMfMGH4PtRBuBsGdIL3NvX5x7SaxQLETERWo BKkm4Cw3dgk4YSTPG5J55auzRhCuT4Kov5mMLmAG9dKuPIeW0WrPCK/I3Hu30K47 LSbmXyV91WLwo4nt4Q== -----END CERTIFICATE-----Generated at Sat Dec 6 08:02:44 2025 by rpki-client