This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/b69811-cf3f-49bc-82ae-e55f9f9169db/1/pbJlTkMrdNyNpm2BayYM_8gXMXU.mft File: pbJlTkMrdNyNpm2BayYM_8gXMXU.mft (raw, json) Hash identifier: C1y6R35z8/kt/bsHf0IPS1d+rgalvW+NX39Msnk0Pv0= Subject key identifier: 32:62:81:78:8A:0C:EA:48:87:F6:41:54:99:9B:FD:35:20:A7:2E:35 Authority key identifier: A5:B2:65:4E:43:2B:74:DC:8D:A6:6D:81:6B:26:0C:FF:C8:17:31:75 Certificate issuer: /CN=a5b2654e432b74dc8da66d816b260cffc8173175 Certificate serial: 019AF3F7D35A91BB8091AB1EE564F3CA3B41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pbJlTkMrdNyNpm2BayYM_8gXMXU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/b69811-cf3f-49bc-82ae-e55f9f9169db/1/pbJlTkMrdNyNpm2BayYM_8gXMXU.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 14:01:36 +0000 Manifest this update: Sat 06 Dec 2025 14:01:36 +0000 Manifest next update: Sun 07 Dec 2025 14:01:36 +0000 Files and hashes: 1: pbJlTkMrdNyNpm2BayYM_8gXMXU.crl (hash: 29pU59MAzmmDZWMEJIu6Y+RbQk5R4qeVLtfUPPwvcns=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/b69811-cf3f-49bc-82ae-e55f9f9169db/1/pbJlTkMrdNyNpm2BayYM_8gXMXU.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/b69811-cf3f-49bc-82ae-e55f9f9169db/1/pbJlTkMrdNyNpm2BayYM_8gXMXU.mft rsync://rpki.ripe.net/repository/DEFAULT/pbJlTkMrdNyNpm2BayYM_8gXMXU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:d3:5a:91:bb:80:91:ab:1e:e5:64:f3:ca:3b:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5b2654e432b74dc8da66d816b260cffc8173175 Validity Not Before: Dec 6 14:01:36 2025 GMT Not After : Dec 7 14:01:36 2025 GMT Subject: CN=326281788a0cea4887f64154999bfd3520a72e35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:dd:af:f8:3f:e8:63:03:88:97:22:e0:7f:89: 86:92:ac:db:b8:3c:d3:ba:56:03:4c:f7:f5:b5:d1: 81:c8:06:b6:b1:89:fa:d4:76:bb:51:e0:86:75:57: 02:b7:da:78:8a:41:6b:8a:46:d6:fd:18:cb:d4:6e: 4d:95:fb:47:c0:df:b0:95:cb:54:77:bf:36:ff:8d: 0f:86:15:2e:66:56:30:fc:3a:17:33:dc:d7:1d:9f: 7a:a3:18:6a:ba:30:8f:18:57:bf:f3:fc:96:45:6f: 74:43:9d:a7:5d:ee:fb:a0:2a:a2:03:d7:ba:64:00: 9d:e3:ad:90:0a:70:40:5e:bc:cd:dc:fe:d0:2b:35: 00:ff:6e:35:c0:68:3f:c5:d8:90:24:c8:38:57:07: b0:1d:e0:c2:92:99:fd:0e:15:9b:ca:96:f3:41:ff: 6d:8b:e9:58:85:7e:d8:ab:0d:0d:c0:d5:ae:93:e0: e2:8d:5b:00:14:eb:78:2d:d0:32:d7:b9:98:17:7f: 0a:39:d2:1d:00:22:c7:94:ed:ba:d6:47:f2:83:31: 92:fc:58:e0:9f:02:67:b5:24:e7:bf:2b:e1:27:88: 4b:95:6f:08:f5:d0:35:87:c4:db:03:41:7c:41:9f: 42:5e:d5:e5:0e:a6:fa:2f:31:d6:60:4a:02:5c:80: 81:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:62:81:78:8A:0C:EA:48:87:F6:41:54:99:9B:FD:35:20:A7:2E:35 X509v3 Authority Key Identifier: keyid:A5:B2:65:4E:43:2B:74:DC:8D:A6:6D:81:6B:26:0C:FF:C8:17:31:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbJlTkMrdNyNpm2BayYM_8gXMXU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/b69811-cf3f-49bc-82ae-e55f9f9169db/1/pbJlTkMrdNyNpm2BayYM_8gXMXU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/b69811-cf3f-49bc-82ae-e55f9f9169db/1/pbJlTkMrdNyNpm2BayYM_8gXMXU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:44:2e:93:60:ff:ef:b2:d4:27:1c:a6:4e:c8:24:7b:48:9e: 27:38:98:c2:2e:01:86:7c:c5:1e:c4:67:99:bc:40:11:08:90: e2:ff:c7:c8:c4:74:b0:18:cd:cd:ca:6a:40:02:e0:2c:dd:79: 6c:12:f0:19:e6:58:f1:4b:1d:91:69:47:93:47:9b:ef:6e:bb: 7a:d9:a6:ff:32:ff:93:be:1c:e3:66:bd:a4:26:5c:58:ce:cd: 0f:77:c1:1e:3a:ab:63:f7:e9:c3:3c:4a:c7:bd:ab:00:9a:76: 62:aa:c5:23:13:3a:eb:e5:04:8f:94:ec:3c:8d:da:5f:ba:3a: 62:74:43:94:41:e2:f6:fd:8d:64:97:d9:85:ff:04:dd:83:9c: ff:3a:9f:d2:5c:65:af:aa:01:dd:ca:c0:e0:03:8a:89:a7:8b: 0e:78:5f:fb:79:b0:d5:c8:b1:cb:0b:20:f0:ea:72:63:7e:26: 2f:40:a0:30:9f:eb:23:6d:51:58:86:48:01:17:32:56:eb:33: f2:dd:0f:0b:b5:21:fd:c5:27:46:04:d2:a6:80:6e:87:f3:da: 7f:cd:46:5a:0f:30:12:6b:fb:ab:91:ea:5e:e0:9e:65:65:84: 63:b0:5b:56:62:b1:74:0f:c3:ff:f4:cf:64:17:6d:4a:e1:77: b6:a3:14:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz99NakbuAkase5WTzyjtBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1YjI2NTRlNDMyYjc0ZGM4ZGE2NmQ4MTZiMjYwY2ZmYzgx NzMxNzUwHhcNMjUxMjA2MTQwMTM2WhcNMjUxMjA3MTQwMTM2WjAzMTEwLwYDVQQD EygzMjYyODE3ODhhMGNlYTQ4ODdmNjQxNTQ5OTliZmQzNTIwYTcyZTM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA592v+D/oYwOIlyLgf4mGkqzbuDzT ulYDTPf1tdGByAa2sYn61Ha7UeCGdVcCt9p4ikFrikbW/RjL1G5NlftHwN+wlctU d782/40PhhUuZlYw/DoXM9zXHZ96oxhqujCPGFe/8/yWRW90Q52nXe77oCqiA9e6 ZACd462QCnBAXrzN3P7QKzUA/241wGg/xdiQJMg4VwewHeDCkpn9DhWbypbzQf9t i+lYhX7Yqw0NwNWuk+DijVsAFOt4LdAy17mYF38KOdIdACLHlO261kfygzGS/Fjg nwJntSTnvyvhJ4hLlW8I9dA1h8TbA0F8QZ9CXtXlDqb6LzHWYEoCXICBOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDJigXiKDOpIh/ZBVJmb/TUgpy41MB8GA1UdIwQY MBaAFKWyZU5DK3TcjaZtgWsmDP/IFzF1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGJKbFRrTXJkTnlOcG0yQmF5WU1fOGdYTVhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9iNjk4MTEtY2YzZi00OWJjLTgyYWUt ZTU1ZjlmOTE2OWRiLzEvcGJKbFRrTXJkTnlOcG0yQmF5WU1fOGdYTVhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi9iNjk4MTEtY2YzZi00OWJjLTgyYWUtZTU1ZjlmOTE2OWRi LzEvcGJKbFRrTXJkTnlOcG0yQmF5WU1fOGdYTVhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFUQuk2D/ 77LUJxymTsgke0ieJziYwi4BhnzFHsRnmbxAEQiQ4v/HyMR0sBjNzcpqQALgLN15 bBLwGeZY8UsdkWlHk0eb7267etmm/zL/k74c42a9pCZcWM7ND3fBHjqrY/fpwzxK x72rAJp2YqrFIxM66+UEj5TsPI3aX7o6YnRDlEHi9v2NZJfZhf8E3YOc/zqf0lxl r6oB3crA4AOKiaeLDnhf+3mw1cixywsg8OpyY34mL0CgMJ/rI21RWIZIARcyVusz 8t0PC7Uh/cUnRgTSpoBuh/Paf81GWg8wEmv7q5HqXuCeZWWEY7BbVmKxdA/D//TP ZBdtSuF3tqMUEg== -----END CERTIFICATE-----Generated at Sat Dec 6 15:45:07 2025 by rpki-client