This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.mft File: PeSbGET-RCKvvhDN0oGcdEgnfmU.mft (raw, json) Hash identifier: qFwtfui2fvG6BvT4p2KqFLoF+dkwNt6mMfQgFvae2+E= Subject key identifier: E2:F8:BE:51:BF:9D:20:C6:56:72:11:1B:32:D5:49:B2:60:DA:2D:62 Authority key identifier: 3D:E4:9B:18:44:FE:44:22:AF:BE:10:CD:D2:81:9C:74:48:27:7E:65 Certificate issuer: /CN=3de49b1844fe4422afbe10cdd2819c7448277e65 Certificate serial: 019AF6F9969EEAE1B5B71B433FDABAB566E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeSbGET-RCKvvhDN0oGcdEgnfmU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.mft Manifest number: 0B13 Signing time: Sun 07 Dec 2025 04:02:23 +0000 Manifest this update: Sun 07 Dec 2025 04:02:23 +0000 Manifest next update: Mon 08 Dec 2025 04:02:23 +0000 Files and hashes: 1: Fw_E1L4Nw5Hr77P4PSs-fCdld4o.roa (hash: 02j0pLQbdlE9MH5ggabxr1xIMQYmyzEOYjg+Z13q0BA=) 2: PeSbGET-RCKvvhDN0oGcdEgnfmU.crl (hash: WPruN8rpnJ03dSpl+vAff1Rq9XgeW5WWMXQ37bJQUkM=) 3: VrCXOdxzLdld1tE0j_xLZ92cqsk.roa (hash: QEJHs3sdF5W7Kc4VSrPn7L7Yyup7NDcWYP/rulbrnEw=) 4: wbEopCsHgdsUwl85d1p6YVkQyt4.roa (hash: Mueh9tzlM1Esxrp4PnyphjifQnr2qX7ryaFawIufllw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.mft rsync://rpki.ripe.net/repository/DEFAULT/PeSbGET-RCKvvhDN0oGcdEgnfmU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:f9:96:9e:ea:e1:b5:b7:1b:43:3f:da:ba:b5:66:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3de49b1844fe4422afbe10cdd2819c7448277e65 Validity Not Before: Dec 7 04:02:23 2025 GMT Not After : Dec 8 04:02:23 2025 GMT Subject: CN=e2f8be51bf9d20c65672111b32d549b260da2d62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:12:f4:fd:54:67:c5:7e:67:a0:d9:60:cc:d4: 5b:03:fa:5d:d2:ba:cb:1c:a6:e0:da:db:fc:10:38: 88:95:c6:da:df:5c:2d:35:a2:85:20:f7:86:92:d9: 61:6c:04:ca:e6:06:56:43:2f:87:5d:f1:1d:6e:3a: a7:87:87:5b:6b:3f:5a:d7:1e:24:a9:33:09:f0:b9: ff:d2:1b:4d:91:37:b7:5f:cb:e9:84:03:c2:31:6e: cb:1c:23:18:11:c3:ba:af:39:fd:37:c9:8e:fc:36: 18:cf:5c:82:81:b8:6b:2e:4b:18:cd:fd:a1:18:f3: b0:a3:83:d9:cf:17:ad:42:82:63:3c:f8:d0:46:5e: 23:6c:36:bb:13:ba:63:78:7f:54:86:8a:f7:c3:34: 22:dc:80:bd:68:67:cb:4e:0a:12:e4:06:d7:b4:80: f0:88:55:ec:af:03:8c:04:22:79:1d:70:b7:70:2b: 5e:9b:42:e9:c5:c0:13:e5:82:70:ae:ad:97:af:ba: b7:74:19:de:37:fa:a1:ee:e2:3f:60:3d:b3:0b:83: 3d:e6:0c:73:ff:c4:0f:0b:b4:71:a2:de:0b:cd:8f: 3e:d1:8d:c2:ed:c2:ab:f0:21:61:0d:31:73:4b:fe: 4a:77:6f:07:75:43:41:f9:48:e4:27:ac:5d:71:f3: d0:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:F8:BE:51:BF:9D:20:C6:56:72:11:1B:32:D5:49:B2:60:DA:2D:62 X509v3 Authority Key Identifier: keyid:3D:E4:9B:18:44:FE:44:22:AF:BE:10:CD:D2:81:9C:74:48:27:7E:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeSbGET-RCKvvhDN0oGcdEgnfmU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:c2:ea:e8:79:3e:bb:86:df:c3:c5:54:0b:b3:ae:36:4c:05: 73:21:dd:d7:5f:fb:24:d4:7d:e9:f7:bc:a2:c6:b7:80:72:ff: 36:30:67:7e:bf:e1:96:83:46:ba:89:23:82:c5:be:1a:32:c2: b9:a8:7a:92:4f:ea:51:82:66:1e:a8:24:5b:2f:36:67:70:26: 97:86:88:e2:6a:03:9b:2d:75:4e:18:38:cd:c7:9a:f3:63:96: 77:3c:26:7a:35:29:bf:2d:5b:ed:0b:2e:ab:34:d9:9a:30:bf: a5:6a:9e:74:bd:c2:24:1b:f0:0a:e8:63:57:76:e8:61:2e:c0: 5b:b5:42:d5:6d:38:7d:bb:ed:d0:44:65:a9:c0:fa:c8:a0:a3: 58:e2:46:7f:0f:04:58:27:68:34:3e:6c:71:9b:fb:9d:d1:b4: 0b:a5:30:90:d4:c0:c2:53:14:72:4c:e3:4e:78:02:8a:48:35: 4f:93:58:7d:87:39:5d:41:63:51:8a:95:2d:a2:60:dd:ac:b8: 06:ec:7a:5c:11:e2:a5:b1:e8:ed:86:4c:28:1a:b9:f6:44:74: f5:05:63:90:02:cf:42:9b:e0:4c:fe:e8:07:4f:ad:f4:90:ef: bc:e2:5a:15:b3:30:f6:e8:44:e9:d4:45:b4:aa:9d:5f:12:59: a3:df:71:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2+Zae6uG1txtDP9q6tWbkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkZTQ5YjE4NDRmZTQ0MjJhZmJlMTBjZGQyODE5Yzc0NDgy NzdlNjUwHhcNMjUxMjA3MDQwMjIzWhcNMjUxMjA4MDQwMjIzWjAzMTEwLwYDVQQD EyhlMmY4YmU1MWJmOWQyMGM2NTY3MjExMWIzMmQ1NDliMjYwZGEyZDYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3hL0/VRnxX5noNlgzNRbA/pd0rrL HKbg2tv8EDiIlcba31wtNaKFIPeGktlhbATK5gZWQy+HXfEdbjqnh4dbaz9a1x4k qTMJ8Ln/0htNkTe3X8vphAPCMW7LHCMYEcO6rzn9N8mO/DYYz1yCgbhrLksYzf2h GPOwo4PZzxetQoJjPPjQRl4jbDa7E7pjeH9Uhor3wzQi3IC9aGfLTgoS5AbXtIDw iFXsrwOMBCJ5HXC3cCtem0LpxcAT5YJwrq2Xr7q3dBneN/qh7uI/YD2zC4M95gxz /8QPC7Rxot4LzY8+0Y3C7cKr8CFhDTFzS/5Kd28HdUNB+UjkJ6xdcfPQuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOL4vlG/nSDGVnIRGzLVSbJg2i1iMB8GA1UdIwQY MBaAFD3kmxhE/kQir74QzdKBnHRIJ35lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGVTYkdFVC1SQ0t2dmhETjBvR2NkRWduZm1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC84MWIxODgtMjU1ZC00OWM3LTlmOTgt MGFjOWI0ZDdlYWI3LzEvUGVTYkdFVC1SQ0t2dmhETjBvR2NkRWduZm1VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC84MWIxODgtMjU1ZC00OWM3LTlmOTgtMGFjOWI0ZDdlYWI3 LzEvUGVTYkdFVC1SQ0t2dmhETjBvR2NkRWduZm1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcsLq6Hk+ u4bfw8VUC7OuNkwFcyHd11/7JNR96fe8osa3gHL/NjBnfr/hloNGuokjgsW+GjLC uah6kk/qUYJmHqgkWy82Z3Aml4aI4moDmy11Thg4zcea82OWdzwmejUpvy1b7Qsu qzTZmjC/pWqedL3CJBvwCuhjV3boYS7AW7VC1W04fbvt0ERlqcD6yKCjWOJGfw8E WCdoND5scZv7ndG0C6UwkNTAwlMUckzjTngCikg1T5NYfYc5XUFjUYqVLaJg3ay4 Bux6XBHipbHo7YZMKBq59kR09QVjkALPQpvgTP7oB0+t9JDvvOJaFbMw9uhE6dRF tKqdXxJZo99xaA== -----END CERTIFICATE-----Generated at Sun Dec 7 07:28:21 2025 by rpki-client