This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/PGvK_z6ArkGaFdG8s24xmN744ic.mft File: PGvK_z6ArkGaFdG8s24xmN744ic.mft (raw, json) Hash identifier: HDspKP8PcGyx5TumEd2Lz8gLfjplHrc34LLTTYppUbg= Subject key identifier: 46:2C:51:F3:07:0D:9C:5E:38:76:99:C2:C6:8F:00:54:B7:2E:FA:CA Authority key identifier: 3C:6B:CA:FF:3E:80:AE:41:9A:15:D1:BC:B3:6E:31:98:DE:F8:E2:27 Certificate issuer: /CN=3c6bcaff3e80ae419a15d1bcb36e3198def8e227 Certificate serial: 019AF31BDF56F38127E344DA9209539CAE5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PGvK_z6ArkGaFdG8s24xmN744ic.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/PGvK_z6ArkGaFdG8s24xmN744ic.mft Manifest number: 0818 Signing time: Sat 06 Dec 2025 10:01:21 +0000 Manifest this update: Sat 06 Dec 2025 10:01:21 +0000 Manifest next update: Sun 07 Dec 2025 10:01:21 +0000 Files and hashes: 1: BneHQ-af6etJYnzgVpFHJTLWtfI.roa (hash: SK4P5sVwHnq6qFE+d1xG/bjzaly1qgrqi3Y+RExkIAE=) 2: PGvK_z6ArkGaFdG8s24xmN744ic.crl (hash: 9Hg+QetOVcV/d+zFUTiGSIQoYYqimTob1s/kDOXf5ow=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/PGvK_z6ArkGaFdG8s24xmN744ic.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/PGvK_z6ArkGaFdG8s24xmN744ic.mft rsync://rpki.ripe.net/repository/DEFAULT/PGvK_z6ArkGaFdG8s24xmN744ic.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:df:56:f3:81:27:e3:44:da:92:09:53:9c:ae:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c6bcaff3e80ae419a15d1bcb36e3198def8e227 Validity Not Before: Dec 6 10:01:21 2025 GMT Not After : Dec 7 10:01:21 2025 GMT Subject: CN=462c51f3070d9c5e387699c2c68f0054b72efaca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:81:e0:6d:78:13:28:9e:32:e2:3b:60:69:f0: df:40:f7:36:8d:e6:20:e2:f2:04:03:a0:d3:9c:3b: 3c:bd:66:2a:df:96:01:aa:92:3d:a1:d2:0a:1d:82: ee:01:67:49:0c:b8:c9:c8:ac:96:6d:97:4c:32:26: b5:dc:f1:20:86:b1:1c:90:95:ec:55:13:3d:78:1b: 9c:85:aa:ba:c4:b4:87:91:0a:5b:b5:11:6c:11:0b: 2b:e3:02:40:fd:67:4f:1a:be:17:6b:46:a8:37:dc: 4d:0a:01:26:9f:c6:1f:cb:b1:3a:38:db:07:d2:ee: be:d7:e0:39:56:d8:7c:9f:f0:d2:fe:3b:3f:33:db: 99:5d:b7:ef:c6:65:ba:9f:0b:f9:23:a2:47:e8:17: 85:2b:e1:08:01:dc:f0:5b:a7:fa:09:9e:47:ac:c7: f1:46:d5:31:bd:2a:df:f9:ab:92:86:b1:be:fd:d4: 19:1d:ea:2c:b4:0a:da:03:36:2c:c6:5f:ab:1f:55: 1e:de:1e:e5:0b:77:97:ca:af:ec:55:50:9b:93:e4: 48:d1:93:96:72:01:ec:4c:1a:27:dc:69:e1:06:a2: 6f:c7:6f:04:72:90:19:9c:fa:75:24:8c:7c:29:3e: 42:77:e7:56:4f:b6:87:2f:00:a6:40:a8:d4:28:73: da:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:2C:51:F3:07:0D:9C:5E:38:76:99:C2:C6:8F:00:54:B7:2E:FA:CA X509v3 Authority Key Identifier: keyid:3C:6B:CA:FF:3E:80:AE:41:9A:15:D1:BC:B3:6E:31:98:DE:F8:E2:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PGvK_z6ArkGaFdG8s24xmN744ic.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/PGvK_z6ArkGaFdG8s24xmN744ic.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/PGvK_z6ArkGaFdG8s24xmN744ic.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:80:69:34:c1:9e:6d:a0:e6:3e:04:f9:e2:6a:f1:60:ee:50: c6:2f:8e:b1:95:97:d8:a3:b9:6f:d6:42:ef:75:43:73:07:b3: bb:40:4c:12:70:08:53:90:d3:44:f7:e0:49:76:36:8d:d2:bc: f0:c7:9f:38:84:46:75:2e:60:33:49:d7:4c:9f:b5:9b:43:9a: e3:e5:93:80:65:2f:50:5c:ae:55:e9:14:1b:25:65:12:33:5a: 96:98:f3:e2:34:ef:17:e3:9c:1f:01:32:37:23:3f:09:ed:dc: c3:b2:09:64:00:24:cf:7d:e0:e4:33:96:61:8c:df:99:25:6e: bc:01:d2:a7:bf:cb:c1:6f:00:33:6d:46:36:1d:2e:d2:81:76: 6b:c4:69:54:cf:54:46:2f:af:ca:29:fd:a4:53:7f:81:38:f3: 44:80:94:08:9d:57:3f:1d:8d:e8:19:85:4e:5e:25:0b:fc:35: ba:20:f8:67:d3:a7:9f:4d:ec:9c:c4:19:ec:55:6a:14:46:b4: e9:75:0a:16:93:3c:6d:42:4b:91:1f:a0:c6:0b:14:ee:70:db: 8f:4e:ae:71:7f:3f:91:62:ec:56:f4:ce:8f:ce:1e:bb:bd:01: 22:14:29:8c:e2:dd:56:57:13:43:a9:ff:4e:2b:78:24:d3:8b: c4:00:77:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG99W84En40TakglTnK5bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjNmJjYWZmM2U4MGFlNDE5YTE1ZDFiY2IzNmUzMTk4ZGVm OGUyMjcwHhcNMjUxMjA2MTAwMTIxWhcNMjUxMjA3MTAwMTIxWjAzMTEwLwYDVQQD Eyg0NjJjNTFmMzA3MGQ5YzVlMzg3Njk5YzJjNjhmMDA1NGI3MmVmYWNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1oHgbXgTKJ4y4jtgafDfQPc2jeYg 4vIEA6DTnDs8vWYq35YBqpI9odIKHYLuAWdJDLjJyKyWbZdMMia13PEghrEckJXs VRM9eBuchaq6xLSHkQpbtRFsEQsr4wJA/WdPGr4Xa0aoN9xNCgEmn8Yfy7E6ONsH 0u6+1+A5Vth8n/DS/js/M9uZXbfvxmW6nwv5I6JH6BeFK+EIAdzwW6f6CZ5HrMfx RtUxvSrf+auShrG+/dQZHeostAraAzYsxl+rH1Ue3h7lC3eXyq/sVVCbk+RI0ZOW cgHsTBon3GnhBqJvx28EcpAZnPp1JIx8KT5Cd+dWT7aHLwCmQKjUKHPaNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEYsUfMHDZxeOHaZwsaPAFS3LvrKMB8GA1UdIwQY MBaAFDxryv8+gK5BmhXRvLNuMZje+OInMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEd2S196NkFya0dhRmRHOHMyNHhtTjc0NGljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9mMzI4ZmYtOTI3Zi00MTE2LThlMzMt NDA0M2IyYzc3YmJmLzEvUEd2S196NkFya0dhRmRHOHMyNHhtTjc0NGljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi9mMzI4ZmYtOTI3Zi00MTE2LThlMzMtNDA0M2IyYzc3YmJm LzEvUEd2S196NkFya0dhRmRHOHMyNHhtTjc0NGljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG4BpNMGe baDmPgT54mrxYO5Qxi+OsZWX2KO5b9ZC73VDcwezu0BMEnAIU5DTRPfgSXY2jdK8 8MefOIRGdS5gM0nXTJ+1m0Oa4+WTgGUvUFyuVekUGyVlEjNalpjz4jTvF+OcHwEy NyM/Ce3cw7IJZAAkz33g5DOWYYzfmSVuvAHSp7/LwW8AM21GNh0u0oF2a8RpVM9U Ri+vyin9pFN/gTjzRICUCJ1XPx2N6BmFTl4lC/w1uiD4Z9Onn03snMQZ7FVqFEa0 6XUKFpM8bUJLkR+gxgsU7nDbj06ucX8/kWLsVvTOj84eu70BIhQpjOLdVlcTQ6n/ Tit4JNOLxAB3XA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:49:06 2025 by rpki-client