This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/d035fb-e860-461d-9728-149e2a3ade76/1/Pngt4bXVKS7dE21SeCWMZ7Bb4io.mft File: Pngt4bXVKS7dE21SeCWMZ7Bb4io.mft (raw, json) Hash identifier: Yn6vZprVOgNk/w4Fff5IMXcFU0XRi8I7bSXUQLUP3zs= Subject key identifier: 1B:43:ED:95:11:89:92:70:33:18:D7:B2:B8:F1:91:76:E8:A6:EF:65 Authority key identifier: 3E:78:2D:E1:B5:D5:29:2E:DD:13:6D:52:78:25:8C:67:B0:5B:E2:2A Certificate issuer: /CN=3e782de1b5d5292edd136d5278258c67b05be22a Certificate serial: 019AF19ADC7F5D6ADA515EFA6DB847DC7590 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pngt4bXVKS7dE21SeCWMZ7Bb4io.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/d035fb-e860-461d-9728-149e2a3ade76/1/Pngt4bXVKS7dE21SeCWMZ7Bb4io.mft Manifest number: 04A5 Signing time: Sat 06 Dec 2025 03:00:49 +0000 Manifest this update: Sat 06 Dec 2025 03:00:49 +0000 Manifest next update: Sun 07 Dec 2025 03:00:49 +0000 Files and hashes: 1: HsLH977Wr8CRqPeFRIsKeWuqNBQ.roa (hash: DfN2Ce+eFgUYzjRB1SnZEzwBexeV9U5bLQB9J92xhK4=) 2: Pngt4bXVKS7dE21SeCWMZ7Bb4io.crl (hash: OGx+/ifKC1/4vIRngWHWYFu3qbetnkRp5Jki6yL7ZLg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/d035fb-e860-461d-9728-149e2a3ade76/1/Pngt4bXVKS7dE21SeCWMZ7Bb4io.crl rsync://rpki.ripe.net/repository/DEFAULT/62/d035fb-e860-461d-9728-149e2a3ade76/1/Pngt4bXVKS7dE21SeCWMZ7Bb4io.mft rsync://rpki.ripe.net/repository/DEFAULT/Pngt4bXVKS7dE21SeCWMZ7Bb4io.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:dc:7f:5d:6a:da:51:5e:fa:6d:b8:47:dc:75:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e782de1b5d5292edd136d5278258c67b05be22a Validity Not Before: Dec 6 03:00:49 2025 GMT Not After : Dec 7 03:00:49 2025 GMT Subject: CN=1b43ed95118992703318d7b2b8f19176e8a6ef65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:14:6c:b7:61:bf:1a:5c:d5:41:a4:eb:f6:74: 73:07:20:a0:9f:63:e2:5f:3b:d8:a9:14:3a:1a:17: b9:2c:80:92:7d:47:0d:6c:d6:2d:22:a7:fc:f9:7e: 9d:68:0d:8a:ae:b8:f9:37:1d:17:5f:48:ec:8f:d1: 75:99:ab:73:13:06:7a:17:21:6f:f7:27:76:cb:da: 43:81:ab:55:7d:ff:f6:ce:93:0d:04:c1:45:2e:7d: 1e:f0:82:f6:64:7a:85:55:1e:13:91:15:d3:be:ac: ef:d9:b7:83:44:8c:90:e9:d6:22:27:aa:cd:3e:47: b9:61:c4:6f:14:b9:9a:1c:8b:06:ea:3b:72:9e:f6: ab:6e:6c:43:92:15:91:4e:6f:7f:93:b3:6b:84:78: 09:b3:af:2b:a1:cb:e7:96:e0:ce:99:46:7a:b9:37: dc:7a:47:2b:f5:fe:21:d3:95:a8:33:06:80:60:66: 02:02:a8:e5:99:d1:11:82:7d:05:c9:41:44:f4:f6: 3e:8c:22:64:31:02:fc:ad:ba:ee:93:e7:cc:43:bb: 57:55:70:67:82:11:30:d4:09:08:f2:39:9b:61:0e: c2:e1:00:ca:67:78:05:20:2e:ee:cb:cf:9f:42:61: 8d:41:e8:86:92:86:be:78:be:e9:81:1e:c5:a3:1b: d7:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:43:ED:95:11:89:92:70:33:18:D7:B2:B8:F1:91:76:E8:A6:EF:65 X509v3 Authority Key Identifier: keyid:3E:78:2D:E1:B5:D5:29:2E:DD:13:6D:52:78:25:8C:67:B0:5B:E2:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pngt4bXVKS7dE21SeCWMZ7Bb4io.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/d035fb-e860-461d-9728-149e2a3ade76/1/Pngt4bXVKS7dE21SeCWMZ7Bb4io.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/d035fb-e860-461d-9728-149e2a3ade76/1/Pngt4bXVKS7dE21SeCWMZ7Bb4io.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:71:f9:6d:ca:c6:89:3e:69:90:10:ae:2a:fd:5c:04:72:44: 5e:b4:8e:05:fc:55:eb:f8:de:35:45:5f:ad:9b:f6:2b:ff:b3: 16:2f:68:4e:f4:a1:b5:df:6e:05:96:c7:a5:53:b1:17:bb:ea: 89:44:32:ac:5e:7a:55:c7:96:07:30:19:75:4a:8c:a1:2f:34: 96:c1:dc:fb:da:4f:39:fe:08:2f:b8:1b:ea:82:22:1e:b0:07: fe:71:31:aa:ab:43:95:87:ff:23:df:2a:95:3f:c6:c2:0d:0d: 99:42:29:e4:27:0c:a0:36:00:99:20:d2:cd:0f:18:91:ec:14: 7b:e1:ec:a0:38:d2:15:b0:bb:34:4f:74:e0:d2:16:6f:2c:67: cb:51:ea:14:b2:c1:e3:14:a5:ab:0e:a0:24:35:2a:3d:2d:9c: 21:96:43:95:75:a3:77:bc:9a:d4:e5:83:2e:7e:38:b9:a2:15: 0f:20:36:ea:d3:d6:32:fe:0f:00:d1:56:27:6f:74:2c:8c:bc: ae:8f:cd:95:b6:fd:65:73:51:50:ae:a1:e9:a7:45:56:d8:28: 93:ce:c2:fe:3e:85:62:0c:95:f5:41:3f:f3:0d:4b:d7:5f:30: 42:f4:8b:fb:4f:d8:24:a4:f9:3d:a9:0a:f2:5e:46:b4:dd:66: 79:8f:a6:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmtx/XWraUV76bbhH3HWQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNzgyZGUxYjVkNTI5MmVkZDEzNmQ1Mjc4MjU4YzY3YjA1 YmUyMmEwHhcNMjUxMjA2MDMwMDQ5WhcNMjUxMjA3MDMwMDQ5WjAzMTEwLwYDVQQD EygxYjQzZWQ5NTExODk5MjcwMzMxOGQ3YjJiOGYxOTE3NmU4YTZlZjY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0BRst2G/GlzVQaTr9nRzByCgn2Pi XzvYqRQ6Ghe5LICSfUcNbNYtIqf8+X6daA2Krrj5Nx0XX0jsj9F1matzEwZ6FyFv 9yd2y9pDgatVff/2zpMNBMFFLn0e8IL2ZHqFVR4TkRXTvqzv2beDRIyQ6dYiJ6rN Pke5YcRvFLmaHIsG6jtynvarbmxDkhWRTm9/k7NrhHgJs68rocvnluDOmUZ6uTfc ekcr9f4h05WoMwaAYGYCAqjlmdERgn0FyUFE9PY+jCJkMQL8rbruk+fMQ7tXVXBn ghEw1AkI8jmbYQ7C4QDKZ3gFIC7uy8+fQmGNQeiGkoa+eL7pgR7FoxvX8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBtD7ZURiZJwMxjXsrjxkXbopu9lMB8GA1UdIwQY MBaAFD54LeG11Sku3RNtUngljGewW+IqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG5ndDRiWFZLUzdkRTIxU2VDV01aN0JiNGlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9kMDM1ZmItZTg2MC00NjFkLTk3Mjgt MTQ5ZTJhM2FkZTc2LzEvUG5ndDRiWFZLUzdkRTIxU2VDV01aN0JiNGlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi9kMDM1ZmItZTg2MC00NjFkLTk3MjgtMTQ5ZTJhM2FkZTc2 LzEvUG5ndDRiWFZLUzdkRTIxU2VDV01aN0JiNGlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgnH5bcrG iT5pkBCuKv1cBHJEXrSOBfxV6/jeNUVfrZv2K/+zFi9oTvShtd9uBZbHpVOxF7vq iUQyrF56VceWBzAZdUqMoS80lsHc+9pPOf4IL7gb6oIiHrAH/nExqqtDlYf/I98q lT/Gwg0NmUIp5CcMoDYAmSDSzQ8YkewUe+HsoDjSFbC7NE904NIWbyxny1HqFLLB 4xSlqw6gJDUqPS2cIZZDlXWjd7ya1OWDLn44uaIVDyA26tPWMv4PANFWJ290LIy8 ro/Nlbb9ZXNRUK6h6adFVtgok87C/j6FYgyV9UE/8w1L118wQvSL+0/YJKT5PakK 8l5GtN1meY+mmA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:55:04 2025 by rpki-client