This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/b69811-cf3f-49bc-82ae-e55f9f9169db/1/pbJlTkMrdNyNpm2BayYM_8gXMXU.mft File: pbJlTkMrdNyNpm2BayYM_8gXMXU.mft (raw, json) Hash identifier: 6F6qhOGUeTDzqWBW850UasN+ot/oRgDiDAxYHwc7w0s= Subject key identifier: 77:54:46:A0:21:93:06:50:4B:32:D6:D1:83:7F:92:03:00:D0:7E:BE Authority key identifier: A5:B2:65:4E:43:2B:74:DC:8D:A6:6D:81:6B:26:0C:FF:C8:17:31:75 Certificate issuer: /CN=a5b2654e432b74dc8da66d816b260cffc8173175 Certificate serial: 019B2BF88F9B07DD743089BDD252A26C1B45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pbJlTkMrdNyNpm2BayYM_8gXMXU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/b69811-cf3f-49bc-82ae-e55f9f9169db/1/pbJlTkMrdNyNpm2BayYM_8gXMXU.mft Manifest number: 177C Signing time: Wed 17 Dec 2025 11:01:08 +0000 Manifest this update: Wed 17 Dec 2025 11:01:08 +0000 Manifest next update: Thu 18 Dec 2025 11:01:08 +0000 Files and hashes: 1: pbJlTkMrdNyNpm2BayYM_8gXMXU.crl (hash: RLYIE9xRJIjMXFM+vFtbMoa7sUpsmCE3zi8jqPNMVcY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/b69811-cf3f-49bc-82ae-e55f9f9169db/1/pbJlTkMrdNyNpm2BayYM_8gXMXU.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/b69811-cf3f-49bc-82ae-e55f9f9169db/1/pbJlTkMrdNyNpm2BayYM_8gXMXU.mft rsync://rpki.ripe.net/repository/DEFAULT/pbJlTkMrdNyNpm2BayYM_8gXMXU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:f8:8f:9b:07:dd:74:30:89:bd:d2:52:a2:6c:1b:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5b2654e432b74dc8da66d816b260cffc8173175 Validity Not Before: Dec 17 11:01:08 2025 GMT Not After : Dec 18 11:01:08 2025 GMT Subject: CN=775446a0219306504b32d6d1837f920300d07ebe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:11:29:86:ed:0c:7e:10:b6:26:fb:7a:e9:0a: 33:4f:9b:f6:99:58:9c:3a:7b:ad:14:c8:a9:24:8e: e9:90:fa:0f:1d:75:70:5c:97:aa:91:c1:aa:cd:8b: 17:2d:30:3a:93:4c:9d:b8:52:76:1e:95:48:0c:0c: 58:94:f3:ee:fb:e3:3b:05:4a:67:a6:2b:12:85:70: 20:db:30:c1:a4:9b:29:37:e5:74:18:d9:d5:4d:63: 2c:df:6c:0e:28:6a:46:89:94:2a:2b:07:25:e9:2a: 4b:ea:a1:36:b6:27:c0:7f:dc:d7:06:da:0f:1f:1c: 29:bb:17:d3:4d:40:59:05:05:df:0f:05:25:3f:a9: 78:ec:92:46:8b:ac:b9:1e:64:b8:3d:11:0c:ba:aa: 45:83:38:68:e6:d1:c2:7b:37:e6:32:7a:5c:e0:c2: 53:36:12:2a:b8:0d:8e:e5:15:b9:da:23:36:d3:d3: a9:a0:27:e0:18:9c:aa:d5:ca:1f:c1:78:51:a5:83: 1b:50:82:e5:ff:5b:06:53:03:c1:70:45:35:b6:2f: 7f:b4:7b:c2:f8:de:5a:7f:49:2c:a9:d4:02:49:2a: 4d:eb:fe:25:d3:b2:77:c0:c8:47:59:99:af:1c:53: 22:19:a0:01:4d:52:7a:30:1f:d7:d9:53:ed:79:c4: dd:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:54:46:A0:21:93:06:50:4B:32:D6:D1:83:7F:92:03:00:D0:7E:BE X509v3 Authority Key Identifier: keyid:A5:B2:65:4E:43:2B:74:DC:8D:A6:6D:81:6B:26:0C:FF:C8:17:31:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbJlTkMrdNyNpm2BayYM_8gXMXU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/b69811-cf3f-49bc-82ae-e55f9f9169db/1/pbJlTkMrdNyNpm2BayYM_8gXMXU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/b69811-cf3f-49bc-82ae-e55f9f9169db/1/pbJlTkMrdNyNpm2BayYM_8gXMXU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:83:5a:af:c5:28:59:d0:bc:1a:c6:e1:53:f3:26:47:a1:1d: 38:3b:4f:aa:02:86:b6:d9:a1:45:0d:40:3e:0d:30:19:a3:fb: a3:8f:fe:b8:1a:83:e1:c3:2e:3f:56:ad:0d:bb:7d:2f:3c:e9: 6a:da:89:36:62:ed:86:c6:33:e2:5a:1c:04:0d:c9:88:d8:27: fd:73:68:7b:f5:4a:e9:8b:49:96:37:a3:de:5f:69:a6:5e:e6: b5:ce:6b:97:1d:cc:a2:4a:a2:3a:b5:99:0e:43:6f:91:4d:46: 68:52:14:ff:0c:da:07:ad:ac:c4:a2:11:8d:e6:84:be:63:d8: 74:ca:25:42:6b:d9:90:39:e9:5b:37:74:01:72:43:bf:bb:83: 05:c0:af:34:14:dd:9b:c9:b2:64:0c:8f:7c:a0:a6:c6:6a:9c: 91:69:ae:15:9b:3a:d5:25:8f:6a:8b:29:f0:45:df:da:ea:c0: 70:14:b6:ae:3b:22:18:0f:2f:65:69:42:37:c0:e0:5a:51:14: 48:c5:8f:d7:41:25:b0:2d:73:df:9b:17:93:85:2e:aa:84:6b: b1:1d:4d:fe:59:e2:88:3a:fc:f4:85:90:ed:e7:3c:ec:ba:32: af:cb:b9:ee:e7:9e:c1:7b:f6:9e:a0:1d:3a:63:39:d7:b1:9e: 7e:d5:87:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsr+I+bB910MIm90lKibBtFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1YjI2NTRlNDMyYjc0ZGM4ZGE2NmQ4MTZiMjYwY2ZmYzgx NzMxNzUwHhcNMjUxMjE3MTEwMTA4WhcNMjUxMjE4MTEwMTA4WjAzMTEwLwYDVQQD Eyg3NzU0NDZhMDIxOTMwNjUwNGIzMmQ2ZDE4MzdmOTIwMzAwZDA3ZWJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBEphu0MfhC2Jvt66QozT5v2mVic OnutFMipJI7pkPoPHXVwXJeqkcGqzYsXLTA6k0yduFJ2HpVIDAxYlPPu++M7BUpn pisShXAg2zDBpJspN+V0GNnVTWMs32wOKGpGiZQqKwcl6SpL6qE2tifAf9zXBtoP HxwpuxfTTUBZBQXfDwUlP6l47JJGi6y5HmS4PREMuqpFgzho5tHCezfmMnpc4MJT NhIquA2O5RW52iM209OpoCfgGJyq1cofwXhRpYMbUILl/1sGUwPBcEU1ti9/tHvC +N5af0ksqdQCSSpN6/4l07J3wMhHWZmvHFMiGaABTVJ6MB/X2VPtecTdxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHdURqAhkwZQSzLW0YN/kgMA0H6+MB8GA1UdIwQY MBaAFKWyZU5DK3TcjaZtgWsmDP/IFzF1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGJKbFRrTXJkTnlOcG0yQmF5WU1fOGdYTVhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9iNjk4MTEtY2YzZi00OWJjLTgyYWUt ZTU1ZjlmOTE2OWRiLzEvcGJKbFRrTXJkTnlOcG0yQmF5WU1fOGdYTVhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi9iNjk4MTEtY2YzZi00OWJjLTgyYWUtZTU1ZjlmOTE2OWRi LzEvcGJKbFRrTXJkTnlOcG0yQmF5WU1fOGdYTVhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFINar8Uo WdC8GsbhU/MmR6EdODtPqgKGttmhRQ1APg0wGaP7o4/+uBqD4cMuP1atDbt9Lzzp atqJNmLthsYz4locBA3JiNgn/XNoe/VK6YtJljej3l9ppl7mtc5rlx3MokqiOrWZ DkNvkU1GaFIU/wzaB62sxKIRjeaEvmPYdMolQmvZkDnpWzd0AXJDv7uDBcCvNBTd m8myZAyPfKCmxmqckWmuFZs61SWPaosp8EXf2urAcBS2rjsiGA8vZWlCN8DgWlEU SMWP10ElsC1z35sXk4UuqoRrsR1N/lniiDr89IWQ7ec87Loyr8u57ueewXv2nqAd OmM517GeftWHPg== -----END CERTIFICATE-----Generated at Wed Dec 17 18:10:02 2025 by rpki-client