This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/804c2c-85fd-429f-bbaf-f6b044dcd624/1/PGFL8lfTr3cLvzxsLTW_pGVobOs.mft File: PGFL8lfTr3cLvzxsLTW_pGVobOs.mft (raw, json) Hash identifier: KDRNuT0MK74rZkkOHE4kDA63i+Ii4owWXYqiBHkhcOk= Subject key identifier: 66:C3:27:E6:D4:EE:2F:F4:58:F3:F0:01:E0:1E:3D:EA:B8:8C:75:AB Authority key identifier: 3C:61:4B:F2:57:D3:AF:77:0B:BF:3C:6C:2D:35:BF:A4:65:68:6C:EB Certificate issuer: /CN=3c614bf257d3af770bbf3c6c2d35bfa465686ceb Certificate serial: 019AF3523AA53AD1554F36F8B707DFBDD295 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PGFL8lfTr3cLvzxsLTW_pGVobOs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/804c2c-85fd-429f-bbaf-f6b044dcd624/1/PGFL8lfTr3cLvzxsLTW_pGVobOs.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 11:00:43 +0000 Manifest this update: Sat 06 Dec 2025 11:00:43 +0000 Manifest next update: Sun 07 Dec 2025 11:00:43 +0000 Files and hashes: 1: PGFL8lfTr3cLvzxsLTW_pGVobOs.crl (hash: ta1HGyRlHJ1h3TeQaujR/Afbv5dBgRzIC06RJEdUGFs=) 2: idSC5Hw5WkkMOAbfku6Dkz9XO6I.roa (hash: UXJcLdtFjpO9Edbh8qYFBpHmdjidm11out2Ag90FqaE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/804c2c-85fd-429f-bbaf-f6b044dcd624/1/PGFL8lfTr3cLvzxsLTW_pGVobOs.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/804c2c-85fd-429f-bbaf-f6b044dcd624/1/PGFL8lfTr3cLvzxsLTW_pGVobOs.mft rsync://rpki.ripe.net/repository/DEFAULT/PGFL8lfTr3cLvzxsLTW_pGVobOs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:3a:a5:3a:d1:55:4f:36:f8:b7:07:df:bd:d2:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c614bf257d3af770bbf3c6c2d35bfa465686ceb Validity Not Before: Dec 6 11:00:43 2025 GMT Not After : Dec 7 11:00:43 2025 GMT Subject: CN=66c327e6d4ee2ff458f3f001e01e3deab88c75ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:89:b5:e1:c0:99:f3:43:fa:e6:2b:98:59:c8: 73:7f:84:94:b2:8e:90:52:ae:f7:5c:b0:44:61:00: 6a:5d:d9:44:c9:35:44:f0:42:d0:6e:e5:48:fb:47: c3:95:ed:54:d8:21:8e:86:65:82:59:08:dc:93:8e: f2:b1:6a:4c:43:af:3a:06:6c:76:3c:ea:65:69:fc: 61:d7:25:d5:db:f5:37:3b:d8:b7:15:28:46:e9:5c: 10:85:4f:2e:8f:33:91:36:1f:6f:1a:fe:09:1b:30: 96:49:f4:89:68:25:67:51:33:8c:99:f1:4d:77:94: 06:0d:c0:1d:7e:07:c7:54:25:e4:e6:60:aa:4d:ee: 20:8a:8e:65:6e:d5:f5:dc:6e:23:01:fd:dd:fd:1a: 1e:f7:6e:69:63:29:38:d4:44:34:36:3c:f3:80:f8: c0:3c:3a:9d:22:79:f3:af:b2:b1:05:ae:bf:87:91: b9:13:a1:de:f8:14:4e:a2:ee:20:d0:2c:f3:b1:c2: 26:3c:fc:15:4a:64:54:2b:c0:97:f5:68:95:dc:ee: cc:e4:50:f2:74:89:c5:ee:bf:00:5d:df:3d:d9:c1: d7:cd:39:61:e6:a4:c0:6c:0f:64:4f:b8:b0:d5:33: dd:fe:ae:c8:ce:f4:c4:3c:0b:ec:4d:d1:c3:95:84: 79:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:C3:27:E6:D4:EE:2F:F4:58:F3:F0:01:E0:1E:3D:EA:B8:8C:75:AB X509v3 Authority Key Identifier: keyid:3C:61:4B:F2:57:D3:AF:77:0B:BF:3C:6C:2D:35:BF:A4:65:68:6C:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PGFL8lfTr3cLvzxsLTW_pGVobOs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/804c2c-85fd-429f-bbaf-f6b044dcd624/1/PGFL8lfTr3cLvzxsLTW_pGVobOs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/804c2c-85fd-429f-bbaf-f6b044dcd624/1/PGFL8lfTr3cLvzxsLTW_pGVobOs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:42:e4:53:51:4c:cd:35:82:2d:5a:a3:92:68:ce:3f:3b:9a: 21:bf:e4:0e:d1:a9:c3:e0:16:88:02:02:27:e8:7d:22:06:b6: 49:26:eb:5d:82:67:c7:31:c9:49:95:f2:7e:f9:95:d3:a3:ac: 39:4e:28:2e:8d:26:16:99:7a:f3:51:0a:8c:a9:a2:7d:90:68: 58:33:bc:13:88:8f:41:ae:c3:ac:6a:62:18:01:e4:c1:7f:23: 70:64:04:7e:94:11:0f:27:ef:e3:e6:07:61:25:31:6a:83:09: de:52:d2:3c:7e:f7:1c:ca:3c:ce:7e:67:e6:35:65:28:cc:27: c6:3f:7d:ad:06:73:49:0d:99:49:fb:4e:62:d6:26:2f:ff:a0: 2a:54:17:18:ce:1c:20:93:8c:c1:e9:08:a6:e0:d2:c9:25:5b: 2b:f0:8e:91:41:db:0b:b3:42:55:37:99:d7:f0:2b:53:a6:af: e1:e3:e9:7e:1c:38:e3:9c:a0:f9:86:f1:a9:db:16:e6:ca:c2: 77:32:8b:3e:77:64:2d:cc:9b:e1:34:ca:b5:50:bc:ed:9c:96: 42:96:40:db:a1:ec:e1:b8:bc:fc:86:f3:50:7d:9a:d2:1a:56: 8d:c4:5c:21:54:cf:a6:12:10:63:b3:ae:df:60:90:1f:33:ba: bb:f2:78:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUjqlOtFVTzb4twffvdKVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjNjE0YmYyNTdkM2FmNzcwYmJmM2M2YzJkMzViZmE0NjU2 ODZjZWIwHhcNMjUxMjA2MTEwMDQzWhcNMjUxMjA3MTEwMDQzWjAzMTEwLwYDVQQD Eyg2NmMzMjdlNmQ0ZWUyZmY0NThmM2YwMDFlMDFlM2RlYWI4OGM3NWFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnom14cCZ80P65iuYWchzf4SUso6Q Uq73XLBEYQBqXdlEyTVE8ELQbuVI+0fDle1U2CGOhmWCWQjck47ysWpMQ686Bmx2 POplafxh1yXV2/U3O9i3FShG6VwQhU8ujzORNh9vGv4JGzCWSfSJaCVnUTOMmfFN d5QGDcAdfgfHVCXk5mCqTe4gio5lbtX13G4jAf3d/Roe925pYyk41EQ0NjzzgPjA PDqdInnzr7KxBa6/h5G5E6He+BROou4g0CzzscImPPwVSmRUK8CX9WiV3O7M5FDy dInF7r8AXd892cHXzTlh5qTAbA9kT7iw1TPd/q7IzvTEPAvsTdHDlYR5pwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGbDJ+bU7i/0WPPwAeAePeq4jHWrMB8GA1UdIwQY MBaAFDxhS/JX0693C788bC01v6RlaGzrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEdGTDhsZlRyM2NMdnp4c0xUV19wR1ZvYk9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi84MDRjMmMtODVmZC00MjlmLWJiYWYt ZjZiMDQ0ZGNkNjI0LzEvUEdGTDhsZlRyM2NMdnp4c0xUV19wR1ZvYk9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi84MDRjMmMtODVmZC00MjlmLWJiYWYtZjZiMDQ0ZGNkNjI0 LzEvUEdGTDhsZlRyM2NMdnp4c0xUV19wR1ZvYk9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADkLkU1FM zTWCLVqjkmjOPzuaIb/kDtGpw+AWiAICJ+h9Iga2SSbrXYJnxzHJSZXyfvmV06Os OU4oLo0mFpl681EKjKmifZBoWDO8E4iPQa7DrGpiGAHkwX8jcGQEfpQRDyfv4+YH YSUxaoMJ3lLSPH73HMo8zn5n5jVlKMwnxj99rQZzSQ2ZSftOYtYmL/+gKlQXGM4c IJOMwekIpuDSySVbK/COkUHbC7NCVTeZ1/ArU6av4ePpfhw445yg+YbxqdsW5srC dzKLPndkLcyb4TTKtVC87ZyWQpZA26Hs4bi8/IbzUH2a0hpWjcRcIVTPphIQY7Ou 32CQHzO6u/J4jA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:15:22 2025 by rpki-client