This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/Pt7grog0cFCIgFBEvnXHQDsdx-I.mft File: Pt7grog0cFCIgFBEvnXHQDsdx-I.mft (raw, json) Hash identifier: HD0+VDRQwWV31ce+4W532wzMFVuzrk/znpjN4MhZgzE= Subject key identifier: 3E:16:BC:EE:F1:24:9F:FF:37:3B:33:B3:C9:65:DE:F1:23:A0:9A:E6 Authority key identifier: 3E:DE:E0:AE:88:34:70:50:88:80:50:44:BE:75:C7:40:3B:1D:C7:E2 Certificate issuer: /CN=3edee0ae8834705088805044be75c7403b1dc7e2 Certificate serial: 019AF50BBA1B5B8BA89D0B8ADB8E720DB657 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pt7grog0cFCIgFBEvnXHQDsdx-I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/Pt7grog0cFCIgFBEvnXHQDsdx-I.mft Manifest number: 13F8 Signing time: Sat 06 Dec 2025 19:02:57 +0000 Manifest this update: Sat 06 Dec 2025 19:02:57 +0000 Manifest next update: Sun 07 Dec 2025 19:02:57 +0000 Files and hashes: 1: Pt7grog0cFCIgFBEvnXHQDsdx-I.crl (hash: DsA0HW0j90dZkTprixNKPSqHMOjpICpyL4gOO716Yno=) 2: f4uXUqTz6EMLfxnYPkQ3ht2dRz0.roa (hash: WwKae4E8mCPYphGvXV9B/QCbohcENp4wZ1ekmYvPPps=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/Pt7grog0cFCIgFBEvnXHQDsdx-I.crl rsync://rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/Pt7grog0cFCIgFBEvnXHQDsdx-I.mft rsync://rpki.ripe.net/repository/DEFAULT/Pt7grog0cFCIgFBEvnXHQDsdx-I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:02:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:ba:1b:5b:8b:a8:9d:0b:8a:db:8e:72:0d:b6:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3edee0ae8834705088805044be75c7403b1dc7e2 Validity Not Before: Dec 6 19:02:57 2025 GMT Not After : Dec 7 19:02:57 2025 GMT Subject: CN=3e16bceef1249fff373b33b3c965def123a09ae6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b1:f3:9b:a9:e8:ae:a7:73:2e:48:1c:d3:08: 61:3b:f7:04:b0:00:c5:cd:ea:60:51:79:ec:86:71: 72:8b:f1:4c:c5:99:43:c0:0e:d7:fd:e8:e4:dd:e6: c9:4d:be:f3:82:6f:5c:df:72:9b:74:3d:c5:35:80: ef:07:91:ad:78:59:9f:8f:bd:6a:e1:13:34:a3:0e: 7c:ae:ba:fe:5c:1d:52:8b:ff:ff:d7:14:55:61:b1: fa:3c:8c:a2:81:51:4c:bd:08:64:e1:e0:5b:5b:6a: 2c:8e:bb:21:3a:0a:5b:7c:61:38:ed:dc:7f:ef:1d: 1e:0f:1f:ac:0a:b8:24:93:f3:c4:e6:e7:e8:93:be: a5:23:13:aa:e7:f0:36:9a:99:22:6f:60:26:51:7c: 0e:7b:a8:71:7b:33:c5:a5:c9:2a:fe:1d:65:04:bf: 39:c0:b7:33:25:fe:2a:e0:8c:22:95:1a:77:62:9a: 22:a3:01:b1:bb:11:93:c8:40:91:3c:96:24:ba:b6: 19:88:08:f2:a4:6f:23:d9:ac:1e:01:3b:d4:0a:7a: 68:14:f3:dc:d4:1b:49:5f:8f:3b:78:48:69:84:00: 0d:cc:31:2a:17:fa:2a:c1:29:00:20:0f:2d:e7:67: 56:a1:9b:df:69:99:42:45:30:71:27:42:88:76:b8: 90:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:16:BC:EE:F1:24:9F:FF:37:3B:33:B3:C9:65:DE:F1:23:A0:9A:E6 X509v3 Authority Key Identifier: keyid:3E:DE:E0:AE:88:34:70:50:88:80:50:44:BE:75:C7:40:3B:1D:C7:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pt7grog0cFCIgFBEvnXHQDsdx-I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/Pt7grog0cFCIgFBEvnXHQDsdx-I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/Pt7grog0cFCIgFBEvnXHQDsdx-I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:71:d5:ae:60:a6:79:30:6d:ac:c2:da:9c:df:be:48:59:58: 62:28:6f:66:ed:bd:1d:43:a6:2c:35:4f:d7:70:3e:50:c2:b0: bd:ed:23:f1:4c:94:4b:f1:bc:40:22:55:63:63:9b:13:f0:a9: 22:0c:f2:74:b5:3b:80:8e:62:1f:d9:0a:cf:de:f6:73:12:96: 6b:a5:da:75:74:d9:8c:97:a2:c2:65:69:ad:5b:15:62:2f:67: cd:0c:4a:34:94:92:f4:e0:3f:6a:c0:e8:20:f3:84:8a:05:31: 4e:bc:8a:5b:5f:0b:9d:0b:2a:81:4d:e0:59:6d:da:25:4c:41: 62:c9:da:56:7e:db:4b:34:9d:2f:d6:61:b4:e3:f4:21:f8:05: a0:97:6b:d1:a2:ec:4a:fb:47:5a:c8:b4:89:7b:25:15:e5:79: 12:11:1f:c6:ee:3e:0b:82:e6:8c:e9:c0:2e:8f:51:b8:8b:6e: cb:6d:5d:8c:9b:c9:f4:ef:ad:89:6d:0b:2f:07:c5:d7:dc:61: 9a:5f:07:80:01:b5:86:8d:0a:0a:f0:81:b2:e2:da:db:a3:ce: da:ae:81:f2:49:5a:36:84:5d:42:b7:39:59:6c:8e:c0:75:a9: 32:f9:9f:f1:cd:60:37:96:40:64:5b:49:0d:b8:63:60:9d:ee: 41:d4:dd:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1C7obW4uonQuK245yDbZXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlZGVlMGFlODgzNDcwNTA4ODgwNTA0NGJlNzVjNzQwM2Ix ZGM3ZTIwHhcNMjUxMjA2MTkwMjU3WhcNMjUxMjA3MTkwMjU3WjAzMTEwLwYDVQQD EygzZTE2YmNlZWYxMjQ5ZmZmMzczYjMzYjNjOTY1ZGVmMTIzYTA5YWU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubHzm6norqdzLkgc0whhO/cEsADF zepgUXnshnFyi/FMxZlDwA7X/ejk3ebJTb7zgm9c33KbdD3FNYDvB5GteFmfj71q 4RM0ow58rrr+XB1Si///1xRVYbH6PIyigVFMvQhk4eBbW2osjrshOgpbfGE47dx/ 7x0eDx+sCrgkk/PE5ufok76lIxOq5/A2mpkib2AmUXwOe6hxezPFpckq/h1lBL85 wLczJf4q4IwilRp3YpoiowGxuxGTyECRPJYkurYZiAjypG8j2aweATvUCnpoFPPc 1BtJX487eEhphAANzDEqF/oqwSkAIA8t52dWoZvfaZlCRTBxJ0KIdriQLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD4WvO7xJJ//Nzszs8ll3vEjoJrmMB8GA1UdIwQY MBaAFD7e4K6INHBQiIBQRL51x0A7HcfiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHQ3Z3JvZzBjRkNJZ0ZCRXZuWEhRRHNkeC1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny81MTRjZjQtMTI2Yi00Y2M1LWI0ZDUt NzlhYjQ4ZDgzYmFiLzEvUHQ3Z3JvZzBjRkNJZ0ZCRXZuWEhRRHNkeC1JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny81MTRjZjQtMTI2Yi00Y2M1LWI0ZDUtNzlhYjQ4ZDgzYmFi LzEvUHQ3Z3JvZzBjRkNJZ0ZCRXZuWEhRRHNkeC1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADnHVrmCm eTBtrMLanN++SFlYYihvZu29HUOmLDVP13A+UMKwve0j8UyUS/G8QCJVY2ObE/Cp IgzydLU7gI5iH9kKz972cxKWa6XadXTZjJeiwmVprVsVYi9nzQxKNJSS9OA/asDo IPOEigUxTryKW18LnQsqgU3gWW3aJUxBYsnaVn7bSzSdL9ZhtOP0IfgFoJdr0aLs SvtHWsi0iXslFeV5EhEfxu4+C4LmjOnALo9RuItuy21djJvJ9O+tiW0LLwfF19xh ml8HgAG1ho0KCvCBsuLa26PO2q6B8klaNoRdQrc5WWyOwHWpMvmf8c1gN5ZAZFtJ DbhjYJ3uQdTd+g== -----END CERTIFICATE-----Generated at Sun Dec 7 02:19:28 2025 by rpki-client