This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.mft File: psb8p1JpxrAQpvpxCeQxXgagg9w.mft (raw, json) Hash identifier: hbWqOMQ6IVUz63+TtQlpmVZ2RMH9fVKE+vKD3az7hOo= Subject key identifier: A2:3C:37:40:3F:96:C8:B7:BD:F1:D7:2E:A8:1C:B9:52:DB:9F:8C:51 Authority key identifier: A6:C6:FC:A7:52:69:C6:B0:10:A6:FA:71:09:E4:31:5E:06:A0:83:DC Certificate issuer: /CN=a6c6fca75269c6b010a6fa7109e4315e06a083dc Certificate serial: 019B34C5869AB388B58C04273A4BDDAC2AA2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/psb8p1JpxrAQpvpxCeQxXgagg9w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.mft Manifest number: 1787 Signing time: Fri 19 Dec 2025 04:01:58 +0000 Manifest this update: Fri 19 Dec 2025 04:01:58 +0000 Manifest next update: Sat 20 Dec 2025 04:01:58 +0000 Files and hashes: 1: okAV_h5VY2rYZdeinC81X0hRA2Y.roa (hash: Qv1PPO81VnI1ltfb9vhPQi4AdxGUBWm2X2BZUx+f7S0=) 2: psb8p1JpxrAQpvpxCeQxXgagg9w.crl (hash: K8yjyVbT7rVisI0dKAIaeHEsPBJXupGctUqCLqNbHKc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.crl rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.mft rsync://rpki.ripe.net/repository/DEFAULT/psb8p1JpxrAQpvpxCeQxXgagg9w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:01:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c5:86:9a:b3:88:b5:8c:04:27:3a:4b:dd:ac:2a:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6c6fca75269c6b010a6fa7109e4315e06a083dc Validity Not Before: Dec 19 04:01:58 2025 GMT Not After : Dec 20 04:01:58 2025 GMT Subject: CN=a23c37403f96c8b7bdf1d72ea81cb952db9f8c51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:79:1b:e8:2d:b0:97:73:ed:71:5a:ff:79:a2: b9:cc:5e:5d:b4:7e:1a:5d:a1:a8:7d:bb:68:fb:17: ab:3c:72:80:9e:46:43:59:82:59:e8:50:73:3b:6f: c0:0e:7c:fd:b3:d0:b7:9d:67:d9:3a:75:c5:12:4c: fd:c9:8a:7f:36:1c:cb:db:f2:a6:2b:0a:26:a5:3a: e6:b5:aa:01:27:17:de:da:16:95:99:52:b3:25:cd: 8a:2c:d6:6b:d8:9d:df:12:02:e4:12:11:6f:bd:ee: fe:0a:e7:9f:0b:4b:6d:5b:01:ff:82:4a:63:31:87: 60:2f:fe:f4:fb:47:a1:70:d3:77:a7:78:c5:10:64: 67:32:10:d5:d7:c6:15:73:4e:75:57:09:c0:67:94: 68:e7:96:bb:8e:27:36:4c:ce:bd:41:44:23:08:0a: 13:4d:34:a4:c8:15:90:e3:a4:6b:f1:55:77:7a:ce: 0e:67:11:b1:bb:9b:49:b4:81:15:03:94:30:43:3b: ee:8c:bb:44:2b:9c:fb:d0:f1:66:a3:86:4e:11:7e: 11:76:03:e1:71:f7:08:59:ee:63:8e:16:ec:c6:01: 36:bd:9b:99:02:4a:6d:44:e1:72:2d:c1:27:4b:89: f6:be:e0:47:48:92:80:13:39:71:e9:b3:cd:83:fc: 7e:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:3C:37:40:3F:96:C8:B7:BD:F1:D7:2E:A8:1C:B9:52:DB:9F:8C:51 X509v3 Authority Key Identifier: keyid:A6:C6:FC:A7:52:69:C6:B0:10:A6:FA:71:09:E4:31:5E:06:A0:83:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/psb8p1JpxrAQpvpxCeQxXgagg9w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:7c:d2:b3:8f:e1:f4:f3:4a:d8:fc:0a:6e:39:48:61:3c:9f: 0e:85:f9:b2:fe:4b:64:4f:f8:08:69:f9:11:50:d7:a0:6c:81: 1e:b6:b8:22:5d:12:eb:b4:b3:50:5d:f3:8e:af:92:72:fc:4d: 8c:06:6d:cf:81:e3:3b:ba:4a:54:16:d9:96:c2:16:ac:10:01: 66:fc:7a:f3:da:c4:89:4d:31:be:bf:19:6d:28:4f:ff:f1:1a: d2:a8:07:29:d6:4c:b1:e5:9e:8c:56:5d:2e:60:81:28:20:be: cf:13:a9:cd:a9:6b:4e:3b:99:c5:12:f0:2b:42:7a:ed:b9:3d: ad:c8:31:4b:6f:dc:ac:d9:25:73:86:d3:88:39:7b:ab:71:ff: a9:4e:c7:d3:6d:e1:b4:1c:38:d0:dc:d2:8e:54:8d:69:d5:33: 88:d6:72:fa:37:be:b5:5e:8a:04:88:21:2e:7e:5a:cb:83:a2: 50:cc:27:0e:6c:62:ba:87:f4:f8:f1:3f:ba:64:52:44:bf:58: ed:04:be:f4:2d:cf:ba:a3:30:33:a2:c0:44:38:0a:bd:d4:29: 49:31:4d:a4:63:e7:67:f5:83:70:b5:87:e5:59:21:87:d6:e9: dc:1a:43:a1:61:f4:6e:da:2e:6f:15:af:ab:41:11:00:fd:82: 69:a4:ab:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xYaas4i1jAQnOkvdrCqiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2YzZmY2E3NTI2OWM2YjAxMGE2ZmE3MTA5ZTQzMTVlMDZh MDgzZGMwHhcNMjUxMjE5MDQwMTU4WhcNMjUxMjIwMDQwMTU4WjAzMTEwLwYDVQQD EyhhMjNjMzc0MDNmOTZjOGI3YmRmMWQ3MmVhODFjYjk1MmRiOWY4YzUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHkb6C2wl3PtcVr/eaK5zF5dtH4a XaGofbto+xerPHKAnkZDWYJZ6FBzO2/ADnz9s9C3nWfZOnXFEkz9yYp/NhzL2/Km KwompTrmtaoBJxfe2haVmVKzJc2KLNZr2J3fEgLkEhFvve7+CuefC0ttWwH/gkpj MYdgL/70+0ehcNN3p3jFEGRnMhDV18YVc051VwnAZ5Ro55a7jic2TM69QUQjCAoT TTSkyBWQ46Rr8VV3es4OZxGxu5tJtIEVA5QwQzvujLtEK5z70PFmo4ZOEX4RdgPh cfcIWe5jjhbsxgE2vZuZAkptROFyLcEnS4n2vuBHSJKAEzlx6bPNg/x+ewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKI8N0A/lsi3vfHXLqgcuVLbn4xRMB8GA1UdIwQY MBaAFKbG/KdSacawEKb6cQnkMV4GoIPcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHNiOHAxSnB4ckFRcHZweENlUXhYZ2FnZzl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9lYWI3ZWYtOGNkNi00ZGZlLThmMWUt ODZlMjlmMDVlYjk3LzEvcHNiOHAxSnB4ckFRcHZweENlUXhYZ2FnZzl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9lYWI3ZWYtOGNkNi00ZGZlLThmMWUtODZlMjlmMDVlYjk3 LzEvcHNiOHAxSnB4ckFRcHZweENlUXhYZ2FnZzl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu3zSs4/h 9PNK2PwKbjlIYTyfDoX5sv5LZE/4CGn5EVDXoGyBHra4Il0S67SzUF3zjq+ScvxN jAZtz4HjO7pKVBbZlsIWrBABZvx689rEiU0xvr8ZbShP//Ea0qgHKdZMseWejFZd LmCBKCC+zxOpzalrTjuZxRLwK0J67bk9rcgxS2/crNklc4bTiDl7q3H/qU7H023h tBw40NzSjlSNadUziNZy+je+tV6KBIghLn5ay4OiUMwnDmxiuof0+PE/umRSRL9Y 7QS+9C3PuqMwM6LARDgKvdQpSTFNpGPnZ/WDcLWH5Vkhh9bp3BpDoWH0btoubxWv q0ERAP2CaaSrPg== -----END CERTIFICATE-----Generated at Fri Dec 19 12:59:17 2025 by rpki-client