This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.mft File: psb8p1JpxrAQpvpxCeQxXgagg9w.mft (raw, json) Hash identifier: cMLlJQL1o8gkuqm72+BFC0WLaCncA3Zo+mpxEL37Tp4= Subject key identifier: 23:24:44:3E:A4:4C:F9:30:15:33:BD:4F:40:67:91:62:3F:BE:45:84 Authority key identifier: A6:C6:FC:A7:52:69:C6:B0:10:A6:FA:71:09:E4:31:5E:06:A0:83:DC Certificate issuer: /CN=a6c6fca75269c6b010a6fa7109e4315e06a083dc Certificate serial: 019AF12EC162D8675332EED4A03E9BA753E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/psb8p1JpxrAQpvpxCeQxXgagg9w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 01:02:44 +0000 Manifest this update: Sat 06 Dec 2025 01:02:44 +0000 Manifest next update: Sun 07 Dec 2025 01:02:44 +0000 Files and hashes: 1: okAV_h5VY2rYZdeinC81X0hRA2Y.roa (hash: Qv1PPO81VnI1ltfb9vhPQi4AdxGUBWm2X2BZUx+f7S0=) 2: psb8p1JpxrAQpvpxCeQxXgagg9w.crl (hash: Ef4TYUohS/vlfaHY9Brr0DJN+8NEJR/RCqzW3v9OtZI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.crl rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.mft rsync://rpki.ripe.net/repository/DEFAULT/psb8p1JpxrAQpvpxCeQxXgagg9w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:c1:62:d8:67:53:32:ee:d4:a0:3e:9b:a7:53:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6c6fca75269c6b010a6fa7109e4315e06a083dc Validity Not Before: Dec 6 01:02:44 2025 GMT Not After : Dec 7 01:02:44 2025 GMT Subject: CN=2324443ea44cf9301533bd4f406791623fbe4584 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0e:ea:d3:31:d1:51:04:a6:f2:35:60:75:48: 65:70:49:d4:c3:1b:eb:d2:1a:56:2b:7f:04:18:5b: be:84:4f:d8:bf:80:ee:63:c1:c7:76:1d:34:60:e0: ba:91:25:80:6c:73:d5:5a:d3:4a:fe:b0:77:1a:9c: 4c:0c:dd:e9:1b:00:54:d4:09:8f:c2:ee:bf:f1:e6: 8a:81:05:93:c0:8b:e9:a6:76:6b:23:21:6f:57:d0: ba:8d:d9:d5:0d:b3:dd:72:48:1a:6a:6d:44:56:ab: 50:5b:9a:5f:dd:38:75:8b:3f:99:45:e8:03:3d:ca: 13:97:1f:b0:3e:59:a4:2c:ee:46:be:b8:19:ed:f5: 2d:58:af:a3:05:b4:f9:47:ef:f6:97:bb:34:5d:b7: dc:f6:e9:e1:4f:96:e0:03:e9:58:81:59:3f:ce:a6: d0:b0:9f:d3:73:64:e6:1d:7c:15:55:f1:12:b0:81: 06:45:7d:9a:0d:16:88:1a:94:cd:31:33:53:39:33: e4:8e:25:22:f7:c8:3b:7f:ea:94:03:21:b8:f8:83: 99:98:7a:f6:9e:81:57:c6:27:2f:80:db:95:31:46: 8c:99:3d:07:58:a5:94:b4:c2:e3:5f:3f:57:28:00: fc:bb:00:97:fe:56:a3:b1:22:81:af:be:35:97:94: 5b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:24:44:3E:A4:4C:F9:30:15:33:BD:4F:40:67:91:62:3F:BE:45:84 X509v3 Authority Key Identifier: keyid:A6:C6:FC:A7:52:69:C6:B0:10:A6:FA:71:09:E4:31:5E:06:A0:83:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/psb8p1JpxrAQpvpxCeQxXgagg9w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:9f:6a:4f:57:d3:67:86:53:5c:13:e7:ce:03:c0:cf:ca:02: 6c:62:95:9e:72:e8:a3:66:f1:16:05:98:40:8e:78:4a:1a:2c: 04:86:4c:60:eb:2e:46:f3:eb:64:86:26:54:b3:13:fe:46:3e: 63:ce:80:28:59:d7:c0:c3:1f:a9:37:22:f0:a9:6a:5b:56:b9: 3b:af:4d:7d:f5:29:ee:87:66:0f:b6:e6:35:f3:5e:fa:27:84: d0:f9:82:ed:9f:9d:9e:c8:92:46:81:81:b9:ff:35:df:e4:92: 3a:45:25:b4:d5:79:7e:7d:68:6a:d5:8b:bc:a9:55:2f:45:df: 9a:ef:a3:d2:ee:b8:d1:97:b3:19:75:4c:9e:10:ee:24:4c:b4: c0:2f:94:94:7a:60:57:eb:96:e6:18:be:e5:57:52:2a:54:38: f0:ae:9b:90:29:da:e9:8b:c7:6d:31:af:20:be:bd:c8:b3:fd: da:95:64:a6:c1:0b:f6:25:ef:f6:6b:dc:5a:d0:62:0c:32:9f: 81:c1:af:57:75:0c:fd:c8:be:2e:ab:be:19:27:9a:db:3a:9e: 3d:ac:8e:17:f1:3d:8a:a0:07:13:b8:27:bc:70:8c:1f:f5:53: 81:02:96:71:07:51:31:e3:f8:94:52:c7:d7:67:b7:c6:24:16: 69:7a:3b:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLsFi2GdTMu7UoD6bp1PgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2YzZmY2E3NTI2OWM2YjAxMGE2ZmE3MTA5ZTQzMTVlMDZh MDgzZGMwHhcNMjUxMjA2MDEwMjQ0WhcNMjUxMjA3MDEwMjQ0WjAzMTEwLwYDVQQD EygyMzI0NDQzZWE0NGNmOTMwMTUzM2JkNGY0MDY3OTE2MjNmYmU0NTg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArw7q0zHRUQSm8jVgdUhlcEnUwxvr 0hpWK38EGFu+hE/Yv4DuY8HHdh00YOC6kSWAbHPVWtNK/rB3GpxMDN3pGwBU1AmP wu6/8eaKgQWTwIvppnZrIyFvV9C6jdnVDbPdckgaam1EVqtQW5pf3Th1iz+ZRegD PcoTlx+wPlmkLO5GvrgZ7fUtWK+jBbT5R+/2l7s0Xbfc9unhT5bgA+lYgVk/zqbQ sJ/Tc2TmHXwVVfESsIEGRX2aDRaIGpTNMTNTOTPkjiUi98g7f+qUAyG4+IOZmHr2 noFXxicvgNuVMUaMmT0HWKWUtMLjXz9XKAD8uwCX/lajsSKBr741l5Rb9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCMkRD6kTPkwFTO9T0BnkWI/vkWEMB8GA1UdIwQY MBaAFKbG/KdSacawEKb6cQnkMV4GoIPcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHNiOHAxSnB4ckFRcHZweENlUXhYZ2FnZzl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9lYWI3ZWYtOGNkNi00ZGZlLThmMWUt ODZlMjlmMDVlYjk3LzEvcHNiOHAxSnB4ckFRcHZweENlUXhYZ2FnZzl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9lYWI3ZWYtOGNkNi00ZGZlLThmMWUtODZlMjlmMDVlYjk3 LzEvcHNiOHAxSnB4ckFRcHZweENlUXhYZ2FnZzl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaZ9qT1fT Z4ZTXBPnzgPAz8oCbGKVnnLoo2bxFgWYQI54ShosBIZMYOsuRvPrZIYmVLMT/kY+ Y86AKFnXwMMfqTci8KlqW1a5O69NffUp7odmD7bmNfNe+ieE0PmC7Z+dnsiSRoGB uf813+SSOkUltNV5fn1oatWLvKlVL0Xfmu+j0u640ZezGXVMnhDuJEy0wC+UlHpg V+uW5hi+5VdSKlQ48K6bkCna6YvHbTGvIL69yLP92pVkpsEL9iXv9mvcWtBiDDKf gcGvV3UM/ci+Lqu+GSea2zqePayOF/E9iqAHE7gnvHCMH/VTgQKWcQdRMeP4lFLH 12e3xiQWaXo78w== -----END CERTIFICATE-----Generated at Sat Dec 6 10:21:49 2025 by rpki-client