This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.mft File: PB4_3feITXhacI_U5mS2LekQ6-g.mft (raw, json) Hash identifier: HDY8G3hyXjhTDuFaLv6lFcWy6m0Kf2+uvzevFXNAcW8= Subject key identifier: D0:0A:79:5E:9C:1F:70:35:B7:FE:21:6A:C2:9D:B5:D1:BD:28:11:8D Authority key identifier: 3C:1E:3F:DD:F7:88:4D:78:5A:70:8F:D4:E6:64:B6:2D:E9:10:EB:E8 Certificate issuer: /CN=3c1e3fddf7884d785a708fd4e664b62de910ebe8 Certificate serial: 019AF4651BFE1E86A4B90AE555149D2DEA5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PB4_3feITXhacI_U5mS2LekQ6-g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 16:00:58 +0000 Manifest this update: Sat 06 Dec 2025 16:00:58 +0000 Manifest next update: Sun 07 Dec 2025 16:00:58 +0000 Files and hashes: 1: PB4_3feITXhacI_U5mS2LekQ6-g.crl (hash: Ef8V+VGmS8x1J/ZsKHoMJKNBfYI6wj+UdgN4ZvMUtoI=) 2: rVIEtQUeZ960hMeEwx6AF679dhM.roa (hash: s8qUIneeKVi7X6yParz6sZwUc96D/kko1q8RujoMkJ4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.crl rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.mft rsync://rpki.ripe.net/repository/DEFAULT/PB4_3feITXhacI_U5mS2LekQ6-g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:1b:fe:1e:86:a4:b9:0a:e5:55:14:9d:2d:ea:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c1e3fddf7884d785a708fd4e664b62de910ebe8 Validity Not Before: Dec 6 16:00:58 2025 GMT Not After : Dec 7 16:00:58 2025 GMT Subject: CN=d00a795e9c1f7035b7fe216ac29db5d1bd28118d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b1:99:79:64:bd:4f:a5:ff:dc:9d:9a:1a:f7: e9:de:59:5e:58:53:2f:03:67:25:a8:f1:01:b3:9a: c5:91:39:5b:e9:c7:8e:9f:51:17:c9:0e:2a:5b:e2: f1:48:94:12:eb:a8:a2:78:21:00:a8:e6:29:c5:c3: 61:34:c5:03:a4:fd:46:62:c4:9e:17:35:08:6c:d8: 84:28:0f:9d:b5:de:ef:7a:a0:23:03:9a:43:58:fd: ad:e4:be:b5:88:2c:05:e3:27:c7:fb:be:d9:d8:cf: 84:25:08:c2:16:20:e2:10:d7:f5:92:61:a8:a3:a3: 0a:8c:66:01:3c:96:ae:b8:20:9b:b4:96:31:2b:4c: 92:6d:8b:67:8b:ba:56:6c:e2:a8:cd:34:3e:51:fc: b5:47:42:43:c4:d7:0b:66:8d:32:5c:60:49:5b:66: be:4c:75:cd:84:92:d7:9f:e7:cf:43:a7:14:95:02: 0c:44:ba:2e:ce:33:95:bb:a1:2f:3c:1d:ad:2b:71: bc:36:11:c4:8e:69:ca:72:ba:de:82:10:fb:77:ea: 7c:27:c2:9a:2f:b0:68:1e:2c:58:af:48:ab:bf:00: db:ab:d2:12:39:c5:1c:5d:cb:46:4c:35:ab:66:29: 1b:5f:de:97:fc:ad:86:a0:c3:79:49:4f:40:87:56: c6:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:0A:79:5E:9C:1F:70:35:B7:FE:21:6A:C2:9D:B5:D1:BD:28:11:8D X509v3 Authority Key Identifier: keyid:3C:1E:3F:DD:F7:88:4D:78:5A:70:8F:D4:E6:64:B6:2D:E9:10:EB:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PB4_3feITXhacI_U5mS2LekQ6-g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:c2:cb:64:fd:3b:20:60:d0:b4:7d:e7:66:d1:d8:d0:1d:87: de:84:1b:61:eb:f5:89:0e:03:c7:25:7f:39:d6:cf:73:e7:f3: fb:dc:63:8a:20:3c:ee:f7:bd:1d:d6:4a:8a:10:73:62:b3:54: 13:4f:58:de:da:63:9d:2d:78:24:fe:6b:a7:1f:4c:1f:4b:f5: 35:25:aa:d7:c4:39:e7:05:29:72:5c:7c:bf:35:33:f1:08:25: fa:94:75:d7:8f:a0:fe:c5:49:6c:44:6c:e6:bf:11:b7:e1:42: 9a:55:13:6c:63:a5:08:0b:4a:69:08:09:81:68:d1:5d:ce:dc: 4c:78:8a:e1:40:25:cc:4e:18:7e:6c:27:47:b0:d5:a3:ce:89: 4c:04:9c:36:12:b9:24:e4:21:c7:45:a4:fc:93:14:e8:3d:b2: 71:76:22:63:6e:88:99:f5:a3:39:9a:0b:d1:13:3e:3b:ba:de: d1:d0:0c:5a:19:b9:db:f5:19:4c:09:52:ed:6c:cf:0c:06:47: 02:26:32:f9:4d:47:ef:a1:bb:d1:1a:a6:f9:c2:82:21:79:e4: ac:5b:60:9d:cf:a2:6d:2b:c7:b3:02:65:0b:a9:bb:dd:88:39: 69:eb:8d:fd:29:f0:80:6b:1b:c4:18:ec:d4:78:f2:99:6e:c8: 1e:59:05:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZRv+HoakuQrlVRSdLepbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjMWUzZmRkZjc4ODRkNzg1YTcwOGZkNGU2NjRiNjJkZTkx MGViZTgwHhcNMjUxMjA2MTYwMDU4WhcNMjUxMjA3MTYwMDU4WjAzMTEwLwYDVQQD EyhkMDBhNzk1ZTljMWY3MDM1YjdmZTIxNmFjMjlkYjVkMWJkMjgxMThkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLGZeWS9T6X/3J2aGvfp3lleWFMv A2clqPEBs5rFkTlb6ceOn1EXyQ4qW+LxSJQS66iieCEAqOYpxcNhNMUDpP1GYsSe FzUIbNiEKA+dtd7veqAjA5pDWP2t5L61iCwF4yfH+77Z2M+EJQjCFiDiENf1kmGo o6MKjGYBPJauuCCbtJYxK0ySbYtni7pWbOKozTQ+Ufy1R0JDxNcLZo0yXGBJW2a+ THXNhJLXn+fPQ6cUlQIMRLouzjOVu6EvPB2tK3G8NhHEjmnKcrreghD7d+p8J8Ka L7BoHixYr0irvwDbq9ISOcUcXctGTDWrZikbX96X/K2GoMN5SU9Ah1bGZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNAKeV6cH3A1t/4hasKdtdG9KBGNMB8GA1UdIwQY MBaAFDweP933iE14WnCP1OZkti3pEOvoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEI0XzNmZUlUWGhhY0lfVTVtUzJMZWtRNi1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS80ZThlNzQtNzdlNi00MWViLTkwNDct NTljMThhZGEzNTJmLzEvUEI0XzNmZUlUWGhhY0lfVTVtUzJMZWtRNi1nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS80ZThlNzQtNzdlNi00MWViLTkwNDctNTljMThhZGEzNTJm LzEvUEI0XzNmZUlUWGhhY0lfVTVtUzJMZWtRNi1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAucLLZP07 IGDQtH3nZtHY0B2H3oQbYev1iQ4DxyV/OdbPc+fz+9xjiiA87ve9HdZKihBzYrNU E09Y3tpjnS14JP5rpx9MH0v1NSWq18Q55wUpclx8vzUz8Qgl+pR114+g/sVJbERs 5r8Rt+FCmlUTbGOlCAtKaQgJgWjRXc7cTHiK4UAlzE4YfmwnR7DVo86JTAScNhK5 JOQhx0Wk/JMU6D2ycXYiY26ImfWjOZoL0RM+O7re0dAMWhm52/UZTAlS7WzPDAZH AiYy+U1H76G70Rqm+cKCIXnkrFtgnc+ibSvHswJlC6m73Yg5aeuN/SnwgGsbxBjs 1HjymW7IHlkFZw== -----END CERTIFICATE-----Generated at Sat Dec 6 19:14:50 2025 by rpki-client