This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/804c2c-85fd-429f-bbaf-f6b044dcd624/1/PGFL8lfTr3cLvzxsLTW_pGVobOs.mft File: PGFL8lfTr3cLvzxsLTW_pGVobOs.mft (raw, json) Hash identifier: MsD1QPJ69Qmiegk6Yf0BERKaFV9xlwsHkAzo3H+QVY0= Subject key identifier: D7:11:CC:CB:F2:94:43:EF:05:4C:49:9B:DB:08:51:4D:34:4C:E2:07 Authority key identifier: 3C:61:4B:F2:57:D3:AF:77:0B:BF:3C:6C:2D:35:BF:A4:65:68:6C:EB Certificate issuer: /CN=3c614bf257d3af770bbf3c6c2d35bfa465686ceb Certificate serial: 019B2F3065626D16F966302D28CC914A4E9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PGFL8lfTr3cLvzxsLTW_pGVobOs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/804c2c-85fd-429f-bbaf-f6b044dcd624/1/PGFL8lfTr3cLvzxsLTW_pGVobOs.mft Manifest number: 1781 Signing time: Thu 18 Dec 2025 02:00:59 +0000 Manifest this update: Thu 18 Dec 2025 02:00:59 +0000 Manifest next update: Fri 19 Dec 2025 02:00:59 +0000 Files and hashes: 1: PGFL8lfTr3cLvzxsLTW_pGVobOs.crl (hash: 86WIfLFEzAXHTuyLOGcLvRlFf6YZKdVW3WxKI7AcdSM=) 2: idSC5Hw5WkkMOAbfku6Dkz9XO6I.roa (hash: UXJcLdtFjpO9Edbh8qYFBpHmdjidm11out2Ag90FqaE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/804c2c-85fd-429f-bbaf-f6b044dcd624/1/PGFL8lfTr3cLvzxsLTW_pGVobOs.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/804c2c-85fd-429f-bbaf-f6b044dcd624/1/PGFL8lfTr3cLvzxsLTW_pGVobOs.mft rsync://rpki.ripe.net/repository/DEFAULT/PGFL8lfTr3cLvzxsLTW_pGVobOs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:30:65:62:6d:16:f9:66:30:2d:28:cc:91:4a:4e:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c614bf257d3af770bbf3c6c2d35bfa465686ceb Validity Not Before: Dec 18 02:00:59 2025 GMT Not After : Dec 19 02:00:59 2025 GMT Subject: CN=d711cccbf29443ef054c499bdb08514d344ce207 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:bf:5a:60:c0:32:75:81:1c:c1:e4:83:2a:1b: 37:0b:8d:87:43:72:18:b6:90:3c:c2:25:76:5a:dc: de:92:d3:5e:3a:38:1d:62:9d:8e:41:92:8f:83:90: e6:b6:28:7b:cf:50:2e:a6:fb:2d:0a:41:c8:4c:c6: 71:5c:eb:98:30:a4:a2:5d:9d:64:60:00:57:81:d9: c5:8e:af:8a:92:ad:49:3f:50:e3:c4:f8:61:24:d0: a7:47:11:e0:4c:78:da:33:bd:83:97:82:be:12:28: 90:4e:f7:c8:df:ee:74:ce:c5:c0:9c:e3:9b:fd:8c: 6f:d3:00:01:9c:3b:cd:02:6c:76:fd:21:16:a8:59: 74:f6:fd:84:bd:79:d7:0e:d9:56:a5:92:25:19:06: be:c0:84:7d:0f:83:13:4a:17:15:60:e2:56:95:51: 5b:df:55:c5:df:76:3f:96:77:9a:7a:b5:f2:52:b9: 86:2e:74:4a:ca:46:00:3f:19:48:3f:3d:73:40:ce: 12:ee:f8:b4:ba:ca:a1:44:7c:0d:ef:07:2a:3f:2b: 7d:d4:c5:57:0e:7b:dd:1a:d8:a1:15:6e:33:03:75: d1:e1:e3:66:69:be:0a:23:ef:b5:26:88:bd:65:7f: 89:d6:60:c9:c2:4c:87:77:4e:8b:39:8e:49:64:b4: 8e:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:11:CC:CB:F2:94:43:EF:05:4C:49:9B:DB:08:51:4D:34:4C:E2:07 X509v3 Authority Key Identifier: keyid:3C:61:4B:F2:57:D3:AF:77:0B:BF:3C:6C:2D:35:BF:A4:65:68:6C:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PGFL8lfTr3cLvzxsLTW_pGVobOs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/804c2c-85fd-429f-bbaf-f6b044dcd624/1/PGFL8lfTr3cLvzxsLTW_pGVobOs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/804c2c-85fd-429f-bbaf-f6b044dcd624/1/PGFL8lfTr3cLvzxsLTW_pGVobOs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:99:89:11:70:73:0f:2f:1e:30:3d:d4:75:c8:63:49:6d:0a: f7:35:cc:34:a2:fa:64:0b:90:62:88:ce:42:e5:c4:83:96:38: 9c:b0:dd:8f:f1:aa:f5:c5:66:7e:a9:d6:3d:fd:91:eb:5a:72: 26:89:fe:33:72:a6:b6:4a:25:8c:55:f8:8b:c8:73:18:ca:b0: 54:3e:aa:49:c6:7d:3d:9b:27:72:1b:07:57:a5:7a:aa:63:0f: 29:23:81:62:0a:d4:c4:91:b2:89:38:75:16:c2:27:4c:89:b2: a4:00:6c:e8:b9:f1:e0:02:69:b3:51:db:ca:bf:0c:0e:f9:02: 21:a8:4e:ad:f2:f3:37:f8:b5:bf:a6:4e:99:2f:4f:ef:36:35: df:7a:41:58:d9:cf:7f:b6:16:b7:4f:d2:4b:26:f3:6a:e0:cf: f6:ae:e6:81:84:af:90:b7:62:50:03:90:8e:f7:24:c2:ba:bb: eb:a2:10:0f:ec:f4:28:1f:95:3f:6e:9f:8f:b3:48:4f:55:cc: fa:f4:65:20:a5:7e:ec:58:4b:06:b0:d8:52:1d:87:82:9c:e2: 91:81:4d:9f:76:41:6f:b7:44:cf:51:3b:84:a2:4e:08:3d:ce: c2:91:48:08:66:d0:41:e6:83:fc:8a:49:72:1f:a3:28:2b:74: 7b:c5:82:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvMGVibRb5ZjAtKMyRSk6aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjNjE0YmYyNTdkM2FmNzcwYmJmM2M2YzJkMzViZmE0NjU2 ODZjZWIwHhcNMjUxMjE4MDIwMDU5WhcNMjUxMjE5MDIwMDU5WjAzMTEwLwYDVQQD EyhkNzExY2NjYmYyOTQ0M2VmMDU0YzQ5OWJkYjA4NTE0ZDM0NGNlMjA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtL9aYMAydYEcweSDKhs3C42HQ3IY tpA8wiV2WtzektNeOjgdYp2OQZKPg5Dmtih7z1AupvstCkHITMZxXOuYMKSiXZ1k YABXgdnFjq+Kkq1JP1DjxPhhJNCnRxHgTHjaM72Dl4K+EiiQTvfI3+50zsXAnOOb /Yxv0wABnDvNAmx2/SEWqFl09v2EvXnXDtlWpZIlGQa+wIR9D4MTShcVYOJWlVFb 31XF33Y/lneaerXyUrmGLnRKykYAPxlIPz1zQM4S7vi0usqhRHwN7wcqPyt91MVX DnvdGtihFW4zA3XR4eNmab4KI++1Joi9ZX+J1mDJwkyHd06LOY5JZLSO7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNcRzMvylEPvBUxJm9sIUU00TOIHMB8GA1UdIwQY MBaAFDxhS/JX0693C788bC01v6RlaGzrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEdGTDhsZlRyM2NMdnp4c0xUV19wR1ZvYk9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi84MDRjMmMtODVmZC00MjlmLWJiYWYt ZjZiMDQ0ZGNkNjI0LzEvUEdGTDhsZlRyM2NMdnp4c0xUV19wR1ZvYk9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi84MDRjMmMtODVmZC00MjlmLWJiYWYtZjZiMDQ0ZGNkNjI0 LzEvUEdGTDhsZlRyM2NMdnp4c0xUV19wR1ZvYk9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa5mJEXBz Dy8eMD3UdchjSW0K9zXMNKL6ZAuQYojOQuXEg5Y4nLDdj/Gq9cVmfqnWPf2R61py Jon+M3KmtkoljFX4i8hzGMqwVD6qScZ9PZsnchsHV6V6qmMPKSOBYgrUxJGyiTh1 FsInTImypABs6Lnx4AJps1Hbyr8MDvkCIahOrfLzN/i1v6ZOmS9P7zY133pBWNnP f7YWt0/SSybzauDP9q7mgYSvkLdiUAOQjvckwrq766IQD+z0KB+VP26fj7NIT1XM +vRlIKV+7FhLBrDYUh2HgpzikYFNn3ZBb7dEz1E7hKJOCD3OwpFICGbQQeaD/IpJ ch+jKCt0e8WCBA== -----END CERTIFICATE-----Generated at Thu Dec 18 07:10:18 2025 by rpki-client