This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft File: pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft (raw, json) Hash identifier: livsGBh28VoDiKmz5Zjnx0Pp/PEcHjqK3yN/+k4oK8c= Subject key identifier: 04:C1:72:FA:74:67:42:67:86:2A:06:FF:EF:A0:04:DE:AF:7E:8E:27 Authority key identifier: A5:B0:C0:57:31:EF:A4:BB:E5:C2:A3:0A:E5:18:9F:77:85:D2:D4:99 Certificate issuer: /CN=a5b0c05731efa4bbe5c2a30ae5189f7785d2d499 Certificate serial: 019B2364A2CB9F5EAA6C572759F643D9DEEB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft Manifest number: 1728 Signing time: Mon 15 Dec 2025 19:02:36 +0000 Manifest this update: Mon 15 Dec 2025 19:02:36 +0000 Manifest next update: Tue 16 Dec 2025 19:02:36 +0000 Files and hashes: 1: DuTLHmPWVWziogaT97oFAa9mDRE.roa (hash: PMtNyjUzQWlQv3rVcKbrWnO8Vocq0JKKdYATvPbNA78=) 2: X3CBuLjI2iLdZV3cmRV8Xr8zH-8.roa (hash: nRhR1UBTZd6YJqMwitmIM+7shNJ21X2SOgFJgRIoWfs=) 3: pbDAVzHvpLvlwqMK5Rifd4XS1Jk.crl (hash: NAYU+hRNeegbotefPKOnytMYNvLDUgjOmIkyQO6C2Uo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft rsync://rpki.ripe.net/repository/DEFAULT/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 19:02:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:64:a2:cb:9f:5e:aa:6c:57:27:59:f6:43:d9:de:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5b0c05731efa4bbe5c2a30ae5189f7785d2d499 Validity Not Before: Dec 15 19:02:36 2025 GMT Not After : Dec 16 19:02:36 2025 GMT Subject: CN=04c172fa74674267862a06ffefa004deaf7e8e27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:08:9e:f2:8b:64:c3:61:df:1b:f1:12:30:5c: 05:9a:bb:c8:4b:19:e2:35:da:c4:e0:c1:7d:19:c5: 1c:8e:9f:3d:3c:75:39:9e:63:95:8f:b6:09:f2:ae: cf:8e:c2:d8:1f:29:e1:d6:2c:a3:66:7e:ab:83:c4: 71:95:c7:cd:34:d2:dd:4e:3d:f2:41:07:c1:5f:64: ec:99:a3:b1:61:ca:c1:e5:a9:5d:93:ec:c7:9e:aa: b3:12:e3:7f:39:f6:2a:4c:28:db:de:24:c1:3c:21: 6e:ff:e0:2e:80:78:8c:39:95:c8:11:2f:bf:9a:7b: 22:9a:2e:df:9b:2b:19:db:b4:a4:e5:4a:78:5d:c6: 2d:dc:03:ae:1f:76:7d:94:5f:69:19:4e:05:e8:8e: 2e:63:3d:b1:4a:f6:df:fa:cf:e3:8d:78:8e:fb:4e: 73:4f:06:ba:1e:e9:1e:f2:71:ae:49:b7:e6:c5:08: bc:15:65:98:d9:04:6e:aa:40:42:8a:23:5f:98:2e: 03:e6:aa:9f:16:80:1c:31:69:cb:df:ce:b3:d1:b7: ba:e5:b3:a3:87:4c:d3:89:26:0b:df:64:bc:55:51: d0:aa:1f:00:f5:5a:8d:4f:b4:ae:e1:ca:cd:2d:9b: 43:cc:52:24:23:21:5f:00:1d:a6:96:57:d6:e7:b1: 03:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:C1:72:FA:74:67:42:67:86:2A:06:FF:EF:A0:04:DE:AF:7E:8E:27 X509v3 Authority Key Identifier: keyid:A5:B0:C0:57:31:EF:A4:BB:E5:C2:A3:0A:E5:18:9F:77:85:D2:D4:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:e1:0e:68:e1:4c:88:8f:64:fe:8b:63:d8:18:df:63:5c:d9: 98:1f:75:ec:bb:e1:c1:28:b2:2b:e7:12:6e:1f:96:1a:19:7b: d4:93:85:5e:1e:de:17:6f:17:a7:21:dc:14:18:44:c3:42:55: f1:7b:84:22:37:42:55:6f:da:7f:5d:0c:bc:30:df:b7:d0:7c: 93:ec:96:9b:eb:49:4e:58:5c:1b:b9:44:35:79:08:d6:8a:5c: 43:35:c6:a7:83:b6:9f:0b:0f:b2:29:1d:98:0c:d8:86:d8:63: b7:e3:13:24:2c:7d:06:49:4b:06:1b:a3:b3:05:1e:da:7c:03: 7f:ce:53:ab:09:57:9c:eb:9a:df:2e:a3:78:4d:8e:ae:c1:2a: 62:cc:73:a8:30:b3:7f:83:71:de:2a:48:c8:fb:85:6f:b0:ef: ed:15:ef:60:8c:db:42:a6:f2:cf:1d:6b:cc:28:d9:d2:32:ec: 6a:d9:fa:77:34:4d:58:0e:65:64:34:ed:5f:47:cd:f4:0d:7a: 47:c4:32:f8:6d:45:b7:99:91:67:00:22:5c:ab:5d:79:34:cb: 1d:ab:9c:84:ba:5b:f5:21:d3:f0:37:6e:e6:9a:11:4a:2a:93: df:e0:00:99:0d:1a:0c:16:04:fe:0c:10:42:d4:40:29:f4:73: ae:56:62:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsjZKLLn16qbFcnWfZD2d7rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1YjBjMDU3MzFlZmE0YmJlNWMyYTMwYWU1MTg5Zjc3ODVk MmQ0OTkwHhcNMjUxMjE1MTkwMjM2WhcNMjUxMjE2MTkwMjM2WjAzMTEwLwYDVQQD EygwNGMxNzJmYTc0Njc0MjY3ODYyYTA2ZmZlZmEwMDRkZWFmN2U4ZTI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAie8otkw2HfG/ESMFwFmrvISxni NdrE4MF9GcUcjp89PHU5nmOVj7YJ8q7PjsLYHynh1iyjZn6rg8RxlcfNNNLdTj3y QQfBX2TsmaOxYcrB5aldk+zHnqqzEuN/OfYqTCjb3iTBPCFu/+AugHiMOZXIES+/ mnsimi7fmysZ27Sk5Up4XcYt3AOuH3Z9lF9pGU4F6I4uYz2xSvbf+s/jjXiO+05z Twa6Huke8nGuSbfmxQi8FWWY2QRuqkBCiiNfmC4D5qqfFoAcMWnL386z0be65bOj h0zTiSYL32S8VVHQqh8A9VqNT7Su4crNLZtDzFIkIyFfAB2mllfW57EDlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFATBcvp0Z0JnhioG/++gBN6vfo4nMB8GA1UdIwQY MBaAFKWwwFcx76S75cKjCuUYn3eF0tSZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGJEQVZ6SHZwTHZsd3FNSzVSaWZkNFhTMUprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8yNTE0OWMtMDkzMi00NjgzLThhYjgt ZDE1ZmViZGY1ZWNmLzEvcGJEQVZ6SHZwTHZsd3FNSzVSaWZkNFhTMUprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8yNTE0OWMtMDkzMi00NjgzLThhYjgtZDE1ZmViZGY1ZWNm LzEvcGJEQVZ6SHZwTHZsd3FNSzVSaWZkNFhTMUprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGuEOaOFM iI9k/otj2BjfY1zZmB917LvhwSiyK+cSbh+WGhl71JOFXh7eF28XpyHcFBhEw0JV 8XuEIjdCVW/af10MvDDft9B8k+yWm+tJTlhcG7lENXkI1opcQzXGp4O2nwsPsikd mAzYhthjt+MTJCx9BklLBhujswUe2nwDf85TqwlXnOua3y6jeE2OrsEqYsxzqDCz f4Nx3ipIyPuFb7Dv7RXvYIzbQqbyzx1rzCjZ0jLsatn6dzRNWA5lZDTtX0fN9A16 R8Qy+G1Ft5mRZwAiXKtdeTTLHauchLpb9SHT8Ddu5poRSiqT3+AAmQ0aDBYE/gwQ QtRAKfRzrlZibQ== -----END CERTIFICATE-----Generated at Tue Dec 16 04:57:29 2025 by rpki-client