This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/PbNCBiV3FppjWX6eOmQl_N5sFmE.mft File: PbNCBiV3FppjWX6eOmQl_N5sFmE.mft (raw, json) Hash identifier: r8Jjn6Eqqgg5pvsu12VFzQFo/u3Wb67SV+jTU8y/cRY= Subject key identifier: A3:F8:9A:37:AA:DC:E2:AB:8D:5A:BC:8A:BA:F5:F5:20:A8:B4:32:15 Authority key identifier: 3D:B3:42:06:25:77:16:9A:63:59:7E:9E:3A:64:25:FC:DE:6C:16:61 Certificate issuer: /CN=3db342062577169a63597e9e3a6425fcde6c1661 Certificate serial: 019AF12D67C0504AD9925238AFB7771B3291 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PbNCBiV3FppjWX6eOmQl_N5sFmE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/PbNCBiV3FppjWX6eOmQl_N5sFmE.mft Manifest number: 0B5A Signing time: Sat 06 Dec 2025 01:01:15 +0000 Manifest this update: Sat 06 Dec 2025 01:01:15 +0000 Manifest next update: Sun 07 Dec 2025 01:01:15 +0000 Files and hashes: 1: 4XfsdEdHX1kDpX0ZLU7CoiedwkE.roa (hash: E0vTS5o3+h35/sl1eIPy8wBqph3C9G+ZoO/00bLGlrw=) 2: PbNCBiV3FppjWX6eOmQl_N5sFmE.crl (hash: wRbB9qGB8ZgABg5R+10mk4N+ahs15yPIsD63TUcgYu8=) 3: Zq7eQ3eZsYsNNl6x7QgRl2tG0cY.roa (hash: 2PLYNC5TQEo40dtz6r8G2q2NVhdYFgS71ZBpW7mlx1I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/PbNCBiV3FppjWX6eOmQl_N5sFmE.crl rsync://rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/PbNCBiV3FppjWX6eOmQl_N5sFmE.mft rsync://rpki.ripe.net/repository/DEFAULT/PbNCBiV3FppjWX6eOmQl_N5sFmE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:67:c0:50:4a:d9:92:52:38:af:b7:77:1b:32:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3db342062577169a63597e9e3a6425fcde6c1661 Validity Not Before: Dec 6 01:01:15 2025 GMT Not After : Dec 7 01:01:15 2025 GMT Subject: CN=a3f89a37aadce2ab8d5abc8abaf5f520a8b43215 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a8:e0:67:96:53:6c:c7:a6:00:26:53:f4:84: f2:b0:06:e4:44:f4:af:f9:55:78:d7:25:5b:fe:4c: c7:d9:2d:72:52:3b:dd:de:35:54:62:5b:31:09:a8: e0:cd:05:58:71:4f:eb:ab:8e:b7:f5:9b:5e:f9:0d: c9:94:ca:21:a3:e5:48:8b:39:d6:70:a1:97:db:36: 8d:19:8a:b5:53:98:fd:79:72:c6:0e:53:2d:a1:2b: 2c:2d:c0:a1:d8:3e:7e:d9:5b:22:88:07:dc:c9:b3: 3d:d3:85:21:fe:11:72:ca:29:5b:fb:cf:19:16:c5: ab:a6:23:20:90:66:72:e1:29:cf:ae:12:d6:4c:af: d6:43:d3:94:3e:1f:3b:3b:69:72:ed:74:bb:84:30: 78:37:f9:1d:b2:52:3c:f3:08:64:9a:28:bf:2f:be: 65:74:d8:72:10:b5:ec:ee:62:62:af:14:d1:f0:43: ec:37:99:0e:aa:8f:81:a5:92:09:aa:75:64:f1:fa: a3:6b:63:28:d6:39:ac:d1:7f:db:84:83:40:3f:7a: 99:dd:8f:5a:e1:27:51:5b:0a:d3:05:34:56:39:39: 79:3b:6e:54:ff:e6:90:8f:95:b8:63:14:13:3d:3b: 77:b2:bb:25:c3:f7:ac:22:b2:d5:2e:10:26:62:b9: a3:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:F8:9A:37:AA:DC:E2:AB:8D:5A:BC:8A:BA:F5:F5:20:A8:B4:32:15 X509v3 Authority Key Identifier: keyid:3D:B3:42:06:25:77:16:9A:63:59:7E:9E:3A:64:25:FC:DE:6C:16:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PbNCBiV3FppjWX6eOmQl_N5sFmE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/PbNCBiV3FppjWX6eOmQl_N5sFmE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/PbNCBiV3FppjWX6eOmQl_N5sFmE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:88:d8:2c:ce:d4:06:f7:25:d6:56:dc:eb:3d:fd:19:78:dc: a7:aa:0d:ff:e5:67:5e:29:9e:ff:ef:51:e1:45:9d:a0:40:97: 4b:65:15:3a:e4:02:5f:d3:d9:f9:80:26:d2:2a:22:d9:54:11: 7a:20:5c:c1:5e:e2:32:6c:c8:d9:aa:71:0e:b5:b3:66:0a:31: 6a:02:b1:af:94:d4:86:76:26:2d:8d:de:e0:cd:1f:f7:ba:c7: ca:e4:58:cc:49:4d:93:78:13:84:99:6b:7a:8e:e8:e3:9f:44: f2:22:45:95:90:ad:49:bb:2c:cb:2e:70:39:9f:11:fa:70:2a: 87:ee:50:fe:75:13:40:cc:ad:49:ae:2f:2b:56:c4:f5:2d:e2: df:b0:78:5c:56:f3:51:54:2c:0b:b8:3d:6e:87:2e:91:7a:f8: f2:0f:d4:90:d5:a8:b3:01:d1:6d:1b:1f:87:6f:5e:49:cd:60: cd:6b:cb:d6:a2:04:b1:5d:77:9a:49:7f:56:42:c3:5a:e0:a5: 72:13:84:70:3b:a1:c5:91:39:25:c0:9d:00:3e:4d:48:6a:73: e3:9c:93:c7:6f:d7:79:c7:4a:a9:11:78:74:63:a6:d5:93:7f: 68:f8:a1:e9:25:e5:7b:85:9d:bf:4a:f7:2f:2e:41:55:09:13: 01:91:22:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLWfAUErZklI4r7d3GzKRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkYjM0MjA2MjU3NzE2OWE2MzU5N2U5ZTNhNjQyNWZjZGU2 YzE2NjEwHhcNMjUxMjA2MDEwMTE1WhcNMjUxMjA3MDEwMTE1WjAzMTEwLwYDVQQD EyhhM2Y4OWEzN2FhZGNlMmFiOGQ1YWJjOGFiYWY1ZjUyMGE4YjQzMjE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKjgZ5ZTbMemACZT9ITysAbkRPSv +VV41yVb/kzH2S1yUjvd3jVUYlsxCajgzQVYcU/rq4639Zte+Q3JlMoho+VIiznW cKGX2zaNGYq1U5j9eXLGDlMtoSssLcCh2D5+2VsiiAfcybM904Uh/hFyyilb+88Z FsWrpiMgkGZy4SnPrhLWTK/WQ9OUPh87O2ly7XS7hDB4N/kdslI88whkmii/L75l dNhyELXs7mJirxTR8EPsN5kOqo+BpZIJqnVk8fqja2Mo1jms0X/bhINAP3qZ3Y9a 4SdRWwrTBTRWOTl5O25U/+aQj5W4YxQTPTt3srslw/esIrLVLhAmYrmjHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKP4mjeq3OKrjVq8irr19SCotDIVMB8GA1UdIwQY MBaAFD2zQgYldxaaY1l+njpkJfzebBZhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGJOQ0JpVjNGcHBqV1g2ZU9tUWxfTjVzRm1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC81MTAwNjYtNDcxZS00NzJhLTg5Nzgt NDk3Mjc3YWZiYWE1LzEvUGJOQ0JpVjNGcHBqV1g2ZU9tUWxfTjVzRm1FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC81MTAwNjYtNDcxZS00NzJhLTg5NzgtNDk3Mjc3YWZiYWE1 LzEvUGJOQ0JpVjNGcHBqV1g2ZU9tUWxfTjVzRm1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADIjYLM7U Bvcl1lbc6z39GXjcp6oN/+VnXime/+9R4UWdoECXS2UVOuQCX9PZ+YAm0ioi2VQR eiBcwV7iMmzI2apxDrWzZgoxagKxr5TUhnYmLY3e4M0f97rHyuRYzElNk3gThJlr eo7o459E8iJFlZCtSbssyy5wOZ8R+nAqh+5Q/nUTQMytSa4vK1bE9S3i37B4XFbz UVQsC7g9bocukXr48g/UkNWoswHRbRsfh29eSc1gzWvL1qIEsV13mkl/VkLDWuCl chOEcDuhxZE5JcCdAD5NSGpz45yTx2/XecdKqRF4dGOm1ZN/aPih6SXle4Wdv0r3 Ly5BVQkTAZEiBg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:26:12 2025 by rpki-client