This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/PgiDSzspc5CcCq9btdNUscDlyj4.mft File: PgiDSzspc5CcCq9btdNUscDlyj4.mft (raw, json) Hash identifier: 5kwQvp0u/jJ4WGjbNUhM9NzaJQBVd0EMqs06HCis8yU= Subject key identifier: FD:C2:C6:DC:A9:CA:C1:A1:58:74:3E:CF:29:74:6C:9D:19:FC:24:C4 Authority key identifier: 3E:08:83:4B:3B:29:73:90:9C:0A:AF:5B:B5:D3:54:B1:C0:E5:CA:3E Certificate issuer: /CN=3e08834b3b2973909c0aaf5bb5d354b1c0e5ca3e Certificate serial: 019AF2ADA8FFEB338308837510FE16EA2CC3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PgiDSzspc5CcCq9btdNUscDlyj4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/PgiDSzspc5CcCq9btdNUscDlyj4.mft Manifest number: 0643 Signing time: Sat 06 Dec 2025 08:00:58 +0000 Manifest this update: Sat 06 Dec 2025 08:00:58 +0000 Manifest next update: Sun 07 Dec 2025 08:00:58 +0000 Files and hashes: 1: MtWTrnrND6EP3cM9Z5OSCIGl4vA.roa (hash: pbxVZVZ80DN49b7VnIcQNiVRM2BUbkPepC2i0a2pNpo=) 2: PgiDSzspc5CcCq9btdNUscDlyj4.crl (hash: 5wq7d4rkq9QgZZIYDZhJyJHT0U9lorCzKTw3W2Koa5U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/PgiDSzspc5CcCq9btdNUscDlyj4.crl rsync://rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/PgiDSzspc5CcCq9btdNUscDlyj4.mft rsync://rpki.ripe.net/repository/DEFAULT/PgiDSzspc5CcCq9btdNUscDlyj4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:a8:ff:eb:33:83:08:83:75:10:fe:16:ea:2c:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e08834b3b2973909c0aaf5bb5d354b1c0e5ca3e Validity Not Before: Dec 6 08:00:58 2025 GMT Not After : Dec 7 08:00:58 2025 GMT Subject: CN=fdc2c6dca9cac1a158743ecf29746c9d19fc24c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:23:19:de:cc:f0:bd:c3:9c:84:c9:2f:52:56: fe:0e:ba:65:bf:28:d9:db:d1:de:8c:b6:73:1c:f8: b2:77:5c:a0:7b:1d:0e:e1:f2:e1:42:ab:e3:7d:a9: 1c:19:57:25:1c:4a:5a:fd:d0:a0:d1:f0:6b:3e:c8: dd:8b:4d:d9:37:0d:02:1d:fa:03:71:20:51:7a:df: f6:06:2d:3a:20:ab:82:f2:c2:d0:42:75:b8:ca:58: 9c:ae:13:f9:98:63:d6:1e:0d:d2:55:d4:6a:26:52: 88:65:b5:7b:52:8b:3e:27:8f:de:a6:ee:8b:d5:4f: 16:a0:b1:f8:69:88:28:93:3d:8d:3a:8b:70:83:c1: ee:51:52:12:ee:c9:46:3d:bf:e7:4e:ef:6e:2e:96: de:a9:ed:42:10:ae:e4:1d:0c:42:c2:54:c1:c2:dd: 4f:3a:36:b5:eb:9d:29:1e:94:69:05:53:73:bb:cf: d5:ab:fe:20:cd:76:bc:e2:9f:84:79:26:60:68:9e: fc:49:de:2f:97:19:73:32:f3:8d:76:13:ac:5e:90: 89:68:15:2c:c9:ae:eb:dd:10:e6:ca:0c:6b:76:0f: 52:0d:97:e6:59:99:34:20:f6:c7:02:d2:91:06:c6: 6c:2d:6e:f8:69:02:b4:dc:0e:e2:31:8c:1c:b9:71: eb:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:C2:C6:DC:A9:CA:C1:A1:58:74:3E:CF:29:74:6C:9D:19:FC:24:C4 X509v3 Authority Key Identifier: keyid:3E:08:83:4B:3B:29:73:90:9C:0A:AF:5B:B5:D3:54:B1:C0:E5:CA:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PgiDSzspc5CcCq9btdNUscDlyj4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/PgiDSzspc5CcCq9btdNUscDlyj4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/PgiDSzspc5CcCq9btdNUscDlyj4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:5d:22:00:6b:34:09:6e:90:34:b0:bf:55:8b:49:d6:54:cb: ec:60:8e:de:63:4f:22:b5:32:85:3f:21:0d:e8:fa:37:c1:9d: 94:66:73:fe:d9:b5:f7:55:63:62:20:4a:f9:f1:b6:7e:8b:b6: 28:b7:53:5c:83:60:b6:15:d8:bb:bd:0a:58:b6:1c:51:15:31: d2:51:1f:d2:e8:77:83:bb:13:f9:9e:ee:6d:68:2e:4e:3d:f4: 85:69:38:0f:77:05:53:73:46:66:2f:27:01:29:63:5e:d9:80: 3e:d7:d6:de:fc:7d:08:19:22:b4:21:28:48:29:1a:44:25:1e: 41:b2:b0:28:e7:dd:c6:28:2c:c5:03:a8:97:5b:f3:05:ee:bd: f0:ec:bf:22:db:02:21:7a:02:a4:be:c7:c4:a1:28:fb:6e:b9: 70:49:6c:7e:85:6a:d0:fb:70:90:56:9a:47:bd:5a:6e:65:7a: 46:7a:d1:5c:7b:e0:39:b4:bb:93:25:98:6b:10:63:3d:3a:8d: 0b:98:7b:49:96:50:c2:b8:4e:a2:e4:27:7a:67:c7:9e:f5:5a: 5f:34:ce:c0:7f:22:00:62:41:e7:bd:af:d0:23:e4:ec:e6:13: d2:a4:7a:c2:1b:4d:16:2d:80:74:c5:0a:0e:d5:f9:ca:db:bd: 0d:68:17:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryraj/6zODCIN1EP4W6izDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlMDg4MzRiM2IyOTczOTA5YzBhYWY1YmI1ZDM1NGIxYzBl NWNhM2UwHhcNMjUxMjA2MDgwMDU4WhcNMjUxMjA3MDgwMDU4WjAzMTEwLwYDVQQD EyhmZGMyYzZkY2E5Y2FjMWExNTg3NDNlY2YyOTc0NmM5ZDE5ZmMyNGM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0SMZ3szwvcOchMkvUlb+DrplvyjZ 29HejLZzHPiyd1ygex0O4fLhQqvjfakcGVclHEpa/dCg0fBrPsjdi03ZNw0CHfoD cSBRet/2Bi06IKuC8sLQQnW4ylicrhP5mGPWHg3SVdRqJlKIZbV7Uos+J4/epu6L 1U8WoLH4aYgokz2NOotwg8HuUVIS7slGPb/nTu9uLpbeqe1CEK7kHQxCwlTBwt1P Oja1650pHpRpBVNzu8/Vq/4gzXa84p+EeSZgaJ78Sd4vlxlzMvONdhOsXpCJaBUs ya7r3RDmygxrdg9SDZfmWZk0IPbHAtKRBsZsLW74aQK03A7iMYwcuXHrPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP3CxtypysGhWHQ+zyl0bJ0Z/CTEMB8GA1UdIwQY MBaAFD4Ig0s7KXOQnAqvW7XTVLHA5co+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGdpRFN6c3BjNUNjQ3E5YnRkTlVzY0RseWo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9lZjAzYjMtNzQ3Mi00NmRlLTk1ODYt ZmQ3Yjk3MzljYTI2LzEvUGdpRFN6c3BjNUNjQ3E5YnRkTlVzY0RseWo0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC9lZjAzYjMtNzQ3Mi00NmRlLTk1ODYtZmQ3Yjk3MzljYTI2 LzEvUGdpRFN6c3BjNUNjQ3E5YnRkTlVzY0RseWo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJl0iAGs0 CW6QNLC/VYtJ1lTL7GCO3mNPIrUyhT8hDej6N8GdlGZz/tm191VjYiBK+fG2fou2 KLdTXINgthXYu70KWLYcURUx0lEf0uh3g7sT+Z7ubWguTj30hWk4D3cFU3NGZi8n ASljXtmAPtfW3vx9CBkitCEoSCkaRCUeQbKwKOfdxigsxQOol1vzBe698Oy/ItsC IXoCpL7HxKEo+265cElsfoVq0PtwkFaaR71abmV6RnrRXHvgObS7kyWYaxBjPTqN C5h7SZZQwrhOouQnemfHnvVaXzTOwH8iAGJB572v0CPk7OYT0qR6whtNFi2AdMUK DtX5ytu9DWgXrw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:15:31 2025 by rpki-client