This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/6bbce4-c7d6-4418-9368-247a86b40d5d/1/PbRBy1aafHmaEFn_VzI7g3yqpU4.mft File: PbRBy1aafHmaEFn_VzI7g3yqpU4.mft (raw, json) Hash identifier: S45+Z70lsjtGravEWcsfRhw/HMIhAg+FgQhdfOXKqW4= Subject key identifier: 16:18:CF:C3:B4:C5:AA:8D:0F:31:5A:34:BA:D5:B2:85:A5:0E:92:9E Authority key identifier: 3D:B4:41:CB:56:9A:7C:79:9A:10:59:FF:57:32:3B:83:7C:AA:A5:4E Certificate issuer: /CN=3db441cb569a7c799a1059ff57323b837caaa54e Certificate serial: 019AF276A33ACAFAE681F6C2340B92A4B1B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PbRBy1aafHmaEFn_VzI7g3yqpU4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/6bbce4-c7d6-4418-9368-247a86b40d5d/1/PbRBy1aafHmaEFn_VzI7g3yqpU4.mft Manifest number: 04BE Signing time: Sat 06 Dec 2025 07:00:52 +0000 Manifest this update: Sat 06 Dec 2025 07:00:52 +0000 Manifest next update: Sun 07 Dec 2025 07:00:52 +0000 Files and hashes: 1: PbRBy1aafHmaEFn_VzI7g3yqpU4.crl (hash: URmvRQ/E2EZWXmcAeMJ9RvYKuV6ELeCnfkpNqrJLack=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/6bbce4-c7d6-4418-9368-247a86b40d5d/1/PbRBy1aafHmaEFn_VzI7g3yqpU4.crl rsync://rpki.ripe.net/repository/DEFAULT/08/6bbce4-c7d6-4418-9368-247a86b40d5d/1/PbRBy1aafHmaEFn_VzI7g3yqpU4.mft rsync://rpki.ripe.net/repository/DEFAULT/PbRBy1aafHmaEFn_VzI7g3yqpU4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:a3:3a:ca:fa:e6:81:f6:c2:34:0b:92:a4:b1:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3db441cb569a7c799a1059ff57323b837caaa54e Validity Not Before: Dec 6 07:00:52 2025 GMT Not After : Dec 7 07:00:52 2025 GMT Subject: CN=1618cfc3b4c5aa8d0f315a34bad5b285a50e929e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:57:57:e3:7c:3c:58:b2:8a:ea:58:74:d8:a2: ae:fc:a2:a7:56:83:27:49:4b:e5:61:2a:1c:54:31: 37:f6:c9:00:01:fc:81:b1:ca:3c:a4:1f:5c:72:ee: dc:d6:75:e0:04:0c:ac:8b:cb:13:aa:b6:25:93:27: 07:bc:02:48:1a:93:98:77:3b:65:a1:0f:58:9d:b9: b2:38:fe:44:3b:96:7e:48:12:f7:6a:28:12:99:db: af:22:da:35:40:09:21:33:0c:18:da:06:d0:0d:89: 69:5b:46:58:f1:53:20:bf:b5:3d:d4:9a:8e:1e:b7: fc:ab:30:b9:11:77:59:6f:52:a0:56:d5:87:c0:e7: 0b:b2:99:a5:85:c7:11:46:1f:74:7c:1a:ae:76:0b: d9:26:e2:b0:f5:cb:db:cd:40:a0:d2:cd:37:14:a3: 5f:fa:88:30:8b:d0:28:41:e2:8e:df:67:38:3a:6b: 68:3e:8c:fb:86:0a:99:83:0b:dd:dd:1f:9d:3f:fc: 51:14:1f:21:20:46:3d:ea:ef:d1:a0:f1:25:78:9d: 84:e0:8e:33:fd:4a:88:cf:f1:f2:f5:7f:d7:40:9f: e8:d3:da:bd:eb:6f:a9:db:fd:8e:52:19:7e:12:36: 69:29:46:85:9b:1f:05:ef:6c:45:66:c3:f5:ed:b7: 1f:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:18:CF:C3:B4:C5:AA:8D:0F:31:5A:34:BA:D5:B2:85:A5:0E:92:9E X509v3 Authority Key Identifier: keyid:3D:B4:41:CB:56:9A:7C:79:9A:10:59:FF:57:32:3B:83:7C:AA:A5:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PbRBy1aafHmaEFn_VzI7g3yqpU4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6bbce4-c7d6-4418-9368-247a86b40d5d/1/PbRBy1aafHmaEFn_VzI7g3yqpU4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6bbce4-c7d6-4418-9368-247a86b40d5d/1/PbRBy1aafHmaEFn_VzI7g3yqpU4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:5e:4b:08:90:f5:d8:8b:96:fa:d8:ec:d4:91:b5:2c:12:61: 54:10:58:34:11:20:45:12:d0:4d:19:a6:2c:9c:7b:bc:b4:5b: 34:ba:d4:f1:2a:65:b9:0c:61:4d:28:15:50:f4:82:05:26:24: 77:4b:0e:30:0c:37:1b:ab:34:06:2e:c1:5c:6f:83:e5:f6:81: e6:d8:9e:47:bd:11:d9:43:c1:30:c0:cc:9a:19:62:a5:2d:e5: 7b:c5:bb:64:77:c5:ae:46:67:23:79:09:d1:b2:91:56:0c:5e: 42:e4:cf:1b:c7:7d:12:41:1d:b9:cf:1e:45:ea:15:d1:a3:8f: 4a:8b:0a:56:a1:c7:02:88:f9:89:26:8c:c2:4c:37:04:a6:f2: e4:98:57:52:6e:30:3c:c1:cd:54:f1:da:ee:7b:80:0b:7f:1b: 41:70:09:14:3c:e5:b1:b6:45:5a:c3:b8:e7:eb:3f:59:db:d4: 5e:73:4a:63:74:83:36:77:c3:9e:71:fc:81:8b:4e:cf:47:0d: 71:ae:3f:04:85:6a:8f:60:2b:94:a1:59:85:bb:39:9c:b3:b9: bd:eb:10:44:f9:ba:9a:65:72:86:d0:72:11:4f:21:0c:d0:07: 7b:3f:c9:d0:08:78:dd:eb:fd:25:e9:2d:ed:48:eb:44:94:08: 28:07:b0:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydqM6yvrmgfbCNAuSpLG1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkYjQ0MWNiNTY5YTdjNzk5YTEwNTlmZjU3MzIzYjgzN2Nh YWE1NGUwHhcNMjUxMjA2MDcwMDUyWhcNMjUxMjA3MDcwMDUyWjAzMTEwLwYDVQQD EygxNjE4Y2ZjM2I0YzVhYThkMGYzMTVhMzRiYWQ1YjI4NWE1MGU5MjllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVdX43w8WLKK6lh02KKu/KKnVoMn SUvlYSocVDE39skAAfyBsco8pB9ccu7c1nXgBAysi8sTqrYlkycHvAJIGpOYdztl oQ9YnbmyOP5EO5Z+SBL3aigSmduvIto1QAkhMwwY2gbQDYlpW0ZY8VMgv7U91JqO Hrf8qzC5EXdZb1KgVtWHwOcLspmlhccRRh90fBqudgvZJuKw9cvbzUCg0s03FKNf +ogwi9AoQeKO32c4OmtoPoz7hgqZgwvd3R+dP/xRFB8hIEY96u/RoPEleJ2E4I4z /UqIz/Hy9X/XQJ/o09q962+p2/2OUhl+EjZpKUaFmx8F72xFZsP17bcfhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBYYz8O0xaqNDzFaNLrVsoWlDpKeMB8GA1UdIwQY MBaAFD20QctWmnx5mhBZ/1cyO4N8qqVOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGJSQnkxYWFmSG1hRUZuX1Z6STdnM3lxcFU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC82YmJjZTQtYzdkNi00NDE4LTkzNjgt MjQ3YTg2YjQwZDVkLzEvUGJSQnkxYWFmSG1hRUZuX1Z6STdnM3lxcFU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC82YmJjZTQtYzdkNi00NDE4LTkzNjgtMjQ3YTg2YjQwZDVk LzEvUGJSQnkxYWFmSG1hRUZuX1Z6STdnM3lxcFU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkV5LCJD1 2IuW+tjs1JG1LBJhVBBYNBEgRRLQTRmmLJx7vLRbNLrU8SpluQxhTSgVUPSCBSYk d0sOMAw3G6s0Bi7BXG+D5faB5tieR70R2UPBMMDMmhlipS3le8W7ZHfFrkZnI3kJ 0bKRVgxeQuTPG8d9EkEduc8eReoV0aOPSosKVqHHAoj5iSaMwkw3BKby5JhXUm4w PMHNVPHa7nuAC38bQXAJFDzlsbZFWsO45+s/WdvUXnNKY3SDNnfDnnH8gYtOz0cN ca4/BIVqj2ArlKFZhbs5nLO5vesQRPm6mmVyhtByEU8hDNAHez/J0Ah43ev9Jekt 7UjrRJQIKAewRg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:19:25 2025 by rpki-client