This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft File: pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft (raw, json) Hash identifier: zIlTSwcu+RV1Uv6dg/FiNX54o67F8iv4lbhbPWe2EwU= Subject key identifier: 60:8C:9B:4D:27:F8:CA:D4:AF:D0:71:4A:82:E9:68:C4:57:6F:6A:D3 Authority key identifier: A5:B0:C0:57:31:EF:A4:BB:E5:C2:A3:0A:E5:18:9F:77:85:D2:D4:99 Certificate issuer: /CN=a5b0c05731efa4bbe5c2a30ae5189f7785d2d499 Certificate serial: 019AF31D8860D06B5D971497E595334FA884 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft Manifest number: 170F Signing time: Sat 06 Dec 2025 10:03:10 +0000 Manifest this update: Sat 06 Dec 2025 10:03:10 +0000 Manifest next update: Sun 07 Dec 2025 10:03:10 +0000 Files and hashes: 1: DuTLHmPWVWziogaT97oFAa9mDRE.roa (hash: PMtNyjUzQWlQv3rVcKbrWnO8Vocq0JKKdYATvPbNA78=) 2: X3CBuLjI2iLdZV3cmRV8Xr8zH-8.roa (hash: nRhR1UBTZd6YJqMwitmIM+7shNJ21X2SOgFJgRIoWfs=) 3: pbDAVzHvpLvlwqMK5Rifd4XS1Jk.crl (hash: IUFxBJJEt4Y6e1chDZtSwSNuvEAddHyc+dtmjrigdnM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft rsync://rpki.ripe.net/repository/DEFAULT/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:88:60:d0:6b:5d:97:14:97:e5:95:33:4f:a8:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5b0c05731efa4bbe5c2a30ae5189f7785d2d499 Validity Not Before: Dec 6 10:03:10 2025 GMT Not After : Dec 7 10:03:10 2025 GMT Subject: CN=608c9b4d27f8cad4afd0714a82e968c4576f6ad3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:18:a3:ee:ad:e6:9a:c6:f1:04:94:6d:86:5c: 93:43:9d:82:06:8a:08:c1:dc:c4:1c:ec:d9:a6:08: b3:ec:17:e3:e0:f9:85:d6:31:3d:47:84:c7:d6:65: c3:41:cd:94:19:26:c6:d1:75:98:e6:ca:bf:00:0d: 48:5d:2f:f8:c2:c1:66:ba:09:20:08:38:5e:91:ff: a4:5b:2d:ea:2a:29:62:9a:d3:45:6a:4b:f3:35:97: 4f:24:99:cb:9a:db:80:c2:23:7f:be:1b:dc:1b:55: c4:c8:77:ae:46:8a:b0:3d:7b:9c:c3:c0:cc:64:f8: 58:74:0d:6b:e0:03:5f:4b:6a:30:ca:10:dd:be:80: 5d:db:d2:b3:16:24:e9:61:4d:60:f4:c9:48:60:ad: fd:d3:96:36:07:f9:43:0f:52:d4:76:21:68:0e:d6: 39:f7:e5:80:b8:74:10:65:b2:1b:9d:15:0c:25:07: 5d:f2:bc:d0:7c:2d:c5:ad:1b:52:44:c5:7c:37:d8: 76:0d:ac:7b:97:39:c4:3a:b4:fc:02:45:64:72:56: 5f:ee:db:83:e2:61:eb:28:86:e0:b4:90:61:ad:a0: 85:7d:34:84:5f:7c:4e:cf:a9:0e:2d:95:88:45:00: 49:a9:af:1f:ce:68:28:7e:38:b9:43:c7:16:33:bb: 4d:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:8C:9B:4D:27:F8:CA:D4:AF:D0:71:4A:82:E9:68:C4:57:6F:6A:D3 X509v3 Authority Key Identifier: keyid:A5:B0:C0:57:31:EF:A4:BB:E5:C2:A3:0A:E5:18:9F:77:85:D2:D4:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:d1:30:08:0c:7a:6d:98:f0:9e:53:00:93:23:49:10:37:b1: bc:06:6b:60:52:4f:b5:24:b6:b0:c0:09:d2:35:a9:0a:a7:85: 01:44:f9:d0:a9:f5:18:5a:91:80:32:c4:dc:69:f2:9c:46:4d: cb:db:ff:52:18:75:45:03:6e:91:72:b2:7a:61:3a:42:43:68: fc:d3:4e:5d:58:17:c1:27:3a:28:73:6c:5a:cf:73:8d:d0:dc: f0:4d:7c:fd:ee:74:93:4f:0c:0c:51:10:39:7f:18:7c:86:c5: bf:84:62:d6:57:cf:09:07:5f:c8:d1:5a:94:f9:06:f8:2a:87: d9:4a:fe:2e:0b:12:69:17:ca:c2:af:d7:ec:09:95:92:c7:83: 4b:7c:72:ed:a8:6a:a8:9d:04:2c:67:69:18:96:57:90:9a:63: 7b:c0:0a:19:9a:7a:e9:71:29:9a:b5:27:57:34:c2:6a:ab:3c: a4:73:24:71:f5:e1:19:bd:b7:68:74:e0:aa:3a:8f:ff:2e:be: f9:43:be:b9:fd:c1:10:42:41:56:f2:cc:fc:e6:7c:f0:c4:a4: e4:a3:ab:5d:f4:dd:46:fa:ff:8b:01:bb:ff:f5:2b:88:3c:6a: 4d:f4:9f:18:49:2f:02:05:43:f7:84:5e:ff:23:15:bd:bf:1a: f4:4e:88:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHYhg0GtdlxSX5ZUzT6iEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1YjBjMDU3MzFlZmE0YmJlNWMyYTMwYWU1MTg5Zjc3ODVk MmQ0OTkwHhcNMjUxMjA2MTAwMzEwWhcNMjUxMjA3MTAwMzEwWjAzMTEwLwYDVQQD Eyg2MDhjOWI0ZDI3ZjhjYWQ0YWZkMDcxNGE4MmU5NjhjNDU3NmY2YWQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBij7q3mmsbxBJRthlyTQ52CBooI wdzEHOzZpgiz7Bfj4PmF1jE9R4TH1mXDQc2UGSbG0XWY5sq/AA1IXS/4wsFmugkg CDhekf+kWy3qKilimtNFakvzNZdPJJnLmtuAwiN/vhvcG1XEyHeuRoqwPXucw8DM ZPhYdA1r4ANfS2owyhDdvoBd29KzFiTpYU1g9MlIYK3905Y2B/lDD1LUdiFoDtY5 9+WAuHQQZbIbnRUMJQdd8rzQfC3FrRtSRMV8N9h2Dax7lznEOrT8AkVkclZf7tuD 4mHrKIbgtJBhraCFfTSEX3xOz6kOLZWIRQBJqa8fzmgofji5Q8cWM7tNTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGCMm00n+MrUr9BxSoLpaMRXb2rTMB8GA1UdIwQY MBaAFKWwwFcx76S75cKjCuUYn3eF0tSZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGJEQVZ6SHZwTHZsd3FNSzVSaWZkNFhTMUprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8yNTE0OWMtMDkzMi00NjgzLThhYjgt ZDE1ZmViZGY1ZWNmLzEvcGJEQVZ6SHZwTHZsd3FNSzVSaWZkNFhTMUprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8yNTE0OWMtMDkzMi00NjgzLThhYjgtZDE1ZmViZGY1ZWNm LzEvcGJEQVZ6SHZwTHZsd3FNSzVSaWZkNFhTMUprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARdEwCAx6 bZjwnlMAkyNJEDexvAZrYFJPtSS2sMAJ0jWpCqeFAUT50Kn1GFqRgDLE3GnynEZN y9v/Uhh1RQNukXKyemE6QkNo/NNOXVgXwSc6KHNsWs9zjdDc8E18/e50k08MDFEQ OX8YfIbFv4Ri1lfPCQdfyNFalPkG+CqH2Ur+LgsSaRfKwq/X7AmVkseDS3xy7ahq qJ0ELGdpGJZXkJpje8AKGZp66XEpmrUnVzTCaqs8pHMkcfXhGb23aHTgqjqP/y6+ +UO+uf3BEEJBVvLM/OZ88MSk5KOrXfTdRvr/iwG7//UriDxqTfSfGEkvAgVD94Re /yMVvb8a9E6IuA== -----END CERTIFICATE-----Generated at Sat Dec 6 14:59:47 2025 by rpki-client