This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.mft File: Pgvo5I26B98hcRdFuGnjkRzpjiA.mft (raw, json) Hash identifier: ydcilqvfOnsl7BIHtYsACJWPmEUZlfHPnY0/PpBDjgM= Subject key identifier: 0D:AB:81:DD:3A:5B:81:8E:9C:02:20:8C:D6:93:E3:10:F3:BC:B6:D0 Authority key identifier: 3E:0B:E8:E4:8D:BA:07:DF:21:71:17:45:B8:69:E3:91:1C:E9:8E:20 Certificate issuer: /CN=3e0be8e48dba07df21711745b869e3911ce98e20 Certificate serial: 019AF27694D2819DEC74740EBB00EA64C119 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pgvo5I26B98hcRdFuGnjkRzpjiA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.mft Manifest number: 0EF0 Signing time: Sat 06 Dec 2025 07:00:48 +0000 Manifest this update: Sat 06 Dec 2025 07:00:48 +0000 Manifest next update: Sun 07 Dec 2025 07:00:48 +0000 Files and hashes: 1: Pgvo5I26B98hcRdFuGnjkRzpjiA.crl (hash: p8OnV1K65Jvwd84GdP/+6Nd+jQuNYETUN2QP4J0VYgE=) 2: qSKiJOg3xCxclMNg-Fd_1qbi_3I.roa (hash: /vBH3d6n8qi+I8tEAft/7KOt6213rHrV93iMeTKUeww=) 3: xml2dcCWXKAaFsBtMMtFnOKdOuQ.roa (hash: gElK1Fi5SJc9J5gtHChbTahr7ydhdEBTnlWVGE/WfP8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.mft rsync://rpki.ripe.net/repository/DEFAULT/Pgvo5I26B98hcRdFuGnjkRzpjiA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:94:d2:81:9d:ec:74:74:0e:bb:00:ea:64:c1:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e0be8e48dba07df21711745b869e3911ce98e20 Validity Not Before: Dec 6 07:00:48 2025 GMT Not After : Dec 7 07:00:48 2025 GMT Subject: CN=0dab81dd3a5b818e9c02208cd693e310f3bcb6d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:26:33:a6:d3:bc:85:31:7e:3f:23:59:33:48: bc:32:c3:b7:53:52:7f:17:02:bc:5d:c1:fb:49:df: 32:03:21:4d:cf:e7:31:63:1f:17:1d:35:75:a1:18: 51:de:9b:bf:74:7e:e2:7c:1e:45:68:31:d9:f3:5e: 83:ed:15:55:b4:2d:6b:9f:8a:8b:9c:df:cc:e7:71: f2:92:be:b0:e9:94:4d:26:53:1c:ad:a7:c7:70:04: f4:3b:cd:72:d5:2a:3a:78:42:01:43:a4:74:33:6e: 8e:df:48:96:d3:4b:bf:c0:fc:22:8f:fe:3d:55:61: 73:bb:fa:d6:71:f4:c0:16:3f:ab:1e:3b:7e:54:13: f5:df:9f:71:77:54:02:af:e0:1e:1f:a4:06:07:aa: 04:83:f4:66:d2:01:d4:7b:fd:2e:0b:cd:d0:64:b8: 46:09:d6:5f:5a:58:89:07:b0:0f:d2:70:10:4b:97: a7:82:b8:bc:7b:a6:a6:0d:3c:e6:17:e0:b4:41:33: 48:8b:7c:e9:c7:aa:c4:23:94:33:5f:ff:45:89:ff: 61:13:8d:d4:b6:18:05:ab:d5:c6:c4:9d:bf:63:70: 17:03:ea:d8:a6:14:60:e8:33:68:d6:f6:4b:e9:d1: 34:b4:f3:cf:34:bd:55:90:d0:ed:9a:e1:bc:2b:54: a9:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:AB:81:DD:3A:5B:81:8E:9C:02:20:8C:D6:93:E3:10:F3:BC:B6:D0 X509v3 Authority Key Identifier: keyid:3E:0B:E8:E4:8D:BA:07:DF:21:71:17:45:B8:69:E3:91:1C:E9:8E:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pgvo5I26B98hcRdFuGnjkRzpjiA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:2f:e2:ef:4a:3e:df:89:09:b4:10:5e:fe:3e:1d:13:13:6b: 72:4c:e7:19:df:ad:84:6e:68:97:22:07:bb:be:6e:98:29:a3: a9:64:bd:7c:27:c5:88:c3:6a:24:e1:32:4c:f7:1d:42:f0:c2: 85:6d:fd:a6:ba:b3:5b:f4:30:1f:81:f5:a9:d4:e5:46:26:5c: 3b:26:9a:44:68:d6:96:c5:8b:a1:21:0d:4e:2c:46:30:52:39: 24:cf:96:60:b4:46:0b:30:a6:b9:cc:08:ab:61:ad:d8:f9:55: 05:fa:16:81:6a:c3:67:c0:4e:05:c6:36:55:61:ee:cd:3c:ae: c6:30:dd:b0:88:a2:6f:a6:a8:68:63:97:0d:9c:77:36:b6:43: 8a:85:6d:93:16:e5:b4:e1:c8:d3:71:63:27:2b:35:b0:2b:8d: 70:3b:2e:56:d3:14:fc:d5:5b:14:75:3a:8b:4e:33:51:5f:fa: 73:86:77:0a:1b:1c:af:fd:eb:73:cf:5f:44:64:c1:b4:be:a0: 64:f8:d9:fc:24:9b:15:ca:41:38:af:14:42:93:fc:92:d6:d8: 7e:80:7c:e1:ea:09:3a:6b:cf:18:41:33:11:aa:80:b1:18:dd: c9:78:e4:38:08:e2:73:94:95:04:fc:28:a4:16:d6:4c:9f:c1: 2a:0a:6d:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydpTSgZ3sdHQOuwDqZMEZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlMGJlOGU0OGRiYTA3ZGYyMTcxMTc0NWI4NjllMzkxMWNl OThlMjAwHhcNMjUxMjA2MDcwMDQ4WhcNMjUxMjA3MDcwMDQ4WjAzMTEwLwYDVQQD EygwZGFiODFkZDNhNWI4MThlOWMwMjIwOGNkNjkzZTMxMGYzYmNiNmQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyiYzptO8hTF+PyNZM0i8MsO3U1J/ FwK8XcH7Sd8yAyFNz+cxYx8XHTV1oRhR3pu/dH7ifB5FaDHZ816D7RVVtC1rn4qL nN/M53Hykr6w6ZRNJlMcrafHcAT0O81y1So6eEIBQ6R0M26O30iW00u/wPwij/49 VWFzu/rWcfTAFj+rHjt+VBP1359xd1QCr+AeH6QGB6oEg/Rm0gHUe/0uC83QZLhG CdZfWliJB7AP0nAQS5engri8e6amDTzmF+C0QTNIi3zpx6rEI5QzX/9Fif9hE43U thgFq9XGxJ2/Y3AXA+rYphRg6DNo1vZL6dE0tPPPNL1VkNDtmuG8K1SpZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA2rgd06W4GOnAIgjNaT4xDzvLbQMB8GA1UdIwQY MBaAFD4L6OSNugffIXEXRbhp45Ec6Y4gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGd2bzVJMjZCOThoY1JkRnVHbmprUnpwamlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy85NWJjZTktMWU4ZS00MWMxLTg5Zjgt MjBmOWYwZGJmNDU4LzEvUGd2bzVJMjZCOThoY1JkRnVHbmprUnpwamlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy85NWJjZTktMWU4ZS00MWMxLTg5ZjgtMjBmOWYwZGJmNDU4 LzEvUGd2bzVJMjZCOThoY1JkRnVHbmprUnpwamlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbS/i70o+ 34kJtBBe/j4dExNrckznGd+thG5olyIHu75umCmjqWS9fCfFiMNqJOEyTPcdQvDC hW39prqzW/QwH4H1qdTlRiZcOyaaRGjWlsWLoSENTixGMFI5JM+WYLRGCzCmucwI q2Gt2PlVBfoWgWrDZ8BOBcY2VWHuzTyuxjDdsIiib6aoaGOXDZx3NrZDioVtkxbl tOHI03FjJys1sCuNcDsuVtMU/NVbFHU6i04zUV/6c4Z3Chscr/3rc89fRGTBtL6g ZPjZ/CSbFcpBOK8UQpP8ktbYfoB84eoJOmvPGEEzEaqAsRjdyXjkOAjic5SVBPwo pBbWTJ/BKgptQA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:14:07 2025 by rpki-client