This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/d4e557-0640-48d3-87d6-59029a8b533a/1/Pgq6MPS0BP9N7J_AAWwLvuS2uHc.mft File: Pgq6MPS0BP9N7J_AAWwLvuS2uHc.mft (raw, json) Hash identifier: VEeKNW+UV+8pJp/VodyyzrbvqYFVHSd+sr2DDgSnaSg= Subject key identifier: 04:4A:60:18:8B:FA:34:3A:4B:1D:1A:E6:F8:14:F0:C0:A1:D9:43:C5 Authority key identifier: 3E:0A:BA:30:F4:B4:04:FF:4D:EC:9F:C0:01:6C:0B:BE:E4:B6:B8:77 Certificate issuer: /CN=3e0aba30f4b404ff4dec9fc0016c0bbee4b6b877 Certificate serial: 019AF5AE7571A1C3427A76B609CEF6719CE6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pgq6MPS0BP9N7J_AAWwLvuS2uHc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/d4e557-0640-48d3-87d6-59029a8b533a/1/Pgq6MPS0BP9N7J_AAWwLvuS2uHc.mft Manifest number: 05E2 Signing time: Sat 06 Dec 2025 22:00:42 +0000 Manifest this update: Sat 06 Dec 2025 22:00:42 +0000 Manifest next update: Sun 07 Dec 2025 22:00:42 +0000 Files and hashes: 1: Pgq6MPS0BP9N7J_AAWwLvuS2uHc.crl (hash: EU/suvlUQ8i9H9jFnsE5eILQxJWQBK85Ka0G7sGXc+4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/d4e557-0640-48d3-87d6-59029a8b533a/1/Pgq6MPS0BP9N7J_AAWwLvuS2uHc.crl rsync://rpki.ripe.net/repository/DEFAULT/63/d4e557-0640-48d3-87d6-59029a8b533a/1/Pgq6MPS0BP9N7J_AAWwLvuS2uHc.mft rsync://rpki.ripe.net/repository/DEFAULT/Pgq6MPS0BP9N7J_AAWwLvuS2uHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:ae:75:71:a1:c3:42:7a:76:b6:09:ce:f6:71:9c:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e0aba30f4b404ff4dec9fc0016c0bbee4b6b877 Validity Not Before: Dec 6 22:00:42 2025 GMT Not After : Dec 7 22:00:42 2025 GMT Subject: CN=044a60188bfa343a4b1d1ae6f814f0c0a1d943c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:42:1b:d6:cb:37:b6:ce:6e:41:38:e0:a5:ee: 96:c0:e8:1f:4e:a8:66:4d:a0:f9:1f:41:0c:b5:e8: 61:95:ee:ca:d2:bb:a6:76:91:f8:41:02:ee:89:90: 42:6e:02:f5:f1:da:90:a2:51:45:68:0a:1b:82:e0: bb:56:88:98:9e:15:e5:32:22:59:b5:15:37:4f:f2: dc:7a:73:c1:19:da:82:4f:a3:78:cc:53:c3:da:20: 11:0b:6f:90:3d:13:c2:0a:9f:d0:04:7e:f4:96:d5: b3:dd:ef:e2:14:49:47:bd:d2:5b:5b:59:50:e1:a3: 7e:34:74:e6:34:9e:95:f5:0d:9e:2e:c4:80:4a:9d: d6:8a:89:18:66:4b:0d:f2:4e:0d:7d:bd:ac:f4:a1: 1e:0a:c6:82:a5:72:2d:03:7d:ea:c3:f1:76:f5:bb: ab:80:97:f6:bf:2e:cb:99:21:b6:2f:a1:92:8c:a9: 6f:9b:51:19:a1:44:d3:64:8b:2d:7f:27:cf:49:c4: 12:4e:d8:79:4f:3f:f5:de:b9:48:7c:ba:26:49:26: 1d:11:29:e6:8f:9c:ba:10:ee:6a:0b:0e:99:cc:29: 29:dc:c7:f2:43:cc:b4:65:b7:55:c2:74:7a:14:40: 7e:e2:5b:1c:1d:0b:a2:a9:bf:2c:97:d8:db:8e:dc: e3:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:4A:60:18:8B:FA:34:3A:4B:1D:1A:E6:F8:14:F0:C0:A1:D9:43:C5 X509v3 Authority Key Identifier: keyid:3E:0A:BA:30:F4:B4:04:FF:4D:EC:9F:C0:01:6C:0B:BE:E4:B6:B8:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pgq6MPS0BP9N7J_AAWwLvuS2uHc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d4e557-0640-48d3-87d6-59029a8b533a/1/Pgq6MPS0BP9N7J_AAWwLvuS2uHc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d4e557-0640-48d3-87d6-59029a8b533a/1/Pgq6MPS0BP9N7J_AAWwLvuS2uHc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:56:17:f0:69:98:a9:41:47:b4:3e:0b:31:a9:3c:f4:ea:92: 21:a7:df:f5:44:04:48:fe:6e:b8:d6:5a:64:ad:bf:1f:cc:e3: 61:96:1a:b7:4f:34:68:7f:47:39:b2:33:2d:65:d6:13:57:70: e7:08:80:b9:01:2e:f4:19:1c:e4:c1:01:5b:49:03:27:ab:e4: 49:de:53:56:48:ba:80:75:bc:5b:df:28:50:70:7e:3a:f1:7d: 54:31:15:86:46:57:0b:0a:8e:31:04:a7:57:88:74:74:ff:a8: 65:2d:59:02:8e:82:a8:e9:99:d1:d3:5d:8c:9a:42:65:f4:28: 5d:64:bd:20:c9:a6:c7:bd:9d:6c:86:63:e9:a4:26:39:df:07: 58:8f:3a:4f:fa:f1:62:77:30:55:0b:5a:bc:b4:c5:3f:95:6c: f3:7b:5b:f1:2f:62:cd:2e:c7:16:72:fc:6c:79:cb:78:9e:88: e2:39:95:ab:f8:a9:60:9c:34:99:8b:6e:ec:6a:93:1e:69:01: 0a:d1:bf:07:e3:ca:86:ae:eb:35:83:97:81:41:98:7d:50:8a: 8d:e0:ed:02:25:9b:87:1b:5b:42:85:2d:39:2e:b7:f2:f6:1b: fb:d8:54:b8:00:ab:f0:f7:2f:6c:9f:2b:f3:e2:0a:9f:e4:d3: 32:04:3b:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1rnVxocNCena2Cc72cZzmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlMGFiYTMwZjRiNDA0ZmY0ZGVjOWZjMDAxNmMwYmJlZTRi NmI4NzcwHhcNMjUxMjA2MjIwMDQyWhcNMjUxMjA3MjIwMDQyWjAzMTEwLwYDVQQD EygwNDRhNjAxODhiZmEzNDNhNGIxZDFhZTZmODE0ZjBjMGExZDk0M2M1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0EIb1ss3ts5uQTjgpe6WwOgfTqhm TaD5H0EMtehhle7K0rumdpH4QQLuiZBCbgL18dqQolFFaAobguC7VoiYnhXlMiJZ tRU3T/LcenPBGdqCT6N4zFPD2iARC2+QPRPCCp/QBH70ltWz3e/iFElHvdJbW1lQ 4aN+NHTmNJ6V9Q2eLsSASp3WiokYZksN8k4Nfb2s9KEeCsaCpXItA33qw/F29bur gJf2vy7LmSG2L6GSjKlvm1EZoUTTZIstfyfPScQSTth5Tz/13rlIfLomSSYdESnm j5y6EO5qCw6ZzCkp3MfyQ8y0ZbdVwnR6FEB+4lscHQuiqb8sl9jbjtzjeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFARKYBiL+jQ6Sx0a5vgU8MCh2UPFMB8GA1UdIwQY MBaAFD4KujD0tAT/TeyfwAFsC77ktrh3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGdxNk1QUzBCUDlON0pfQUFXd0x2dVMydUhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9kNGU1NTctMDY0MC00OGQzLTg3ZDYt NTkwMjlhOGI1MzNhLzEvUGdxNk1QUzBCUDlON0pfQUFXd0x2dVMydUhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My9kNGU1NTctMDY0MC00OGQzLTg3ZDYtNTkwMjlhOGI1MzNh LzEvUGdxNk1QUzBCUDlON0pfQUFXd0x2dVMydUhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXFYX8GmY qUFHtD4LMak89OqSIaff9UQESP5uuNZaZK2/H8zjYZYat080aH9HObIzLWXWE1dw 5wiAuQEu9Bkc5MEBW0kDJ6vkSd5TVki6gHW8W98oUHB+OvF9VDEVhkZXCwqOMQSn V4h0dP+oZS1ZAo6CqOmZ0dNdjJpCZfQoXWS9IMmmx72dbIZj6aQmOd8HWI86T/rx YncwVQtavLTFP5Vs83tb8S9izS7HFnL8bHnLeJ6I4jmVq/ipYJw0mYtu7GqTHmkB CtG/B+PKhq7rNYOXgUGYfVCKjeDtAiWbhxtbQoUtOS638vYb+9hUuACr8PcvbJ8r 8+IKn+TTMgQ79Q== -----END CERTIFICATE-----Generated at Sat Dec 6 23:42:56 2025 by rpki-client