This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.mft File: pb7DLWxk_7YB4nDO280-__XOekA.mft (raw, json) Hash identifier: BcL4SqAZ0kZ/C4uTIhnAhLgmCHSLi1ZsFWNGL7hvnO4= Subject key identifier: 1D:87:31:2F:23:27:13:9F:A4:5B:C6:BB:94:3C:F5:D7:87:57:8A:64 Authority key identifier: A5:BE:C3:2D:6C:64:FF:B6:01:E2:70:CE:DB:CD:3E:FF:F5:CE:7A:40 Certificate issuer: /CN=a5bec32d6c64ffb601e270cedbcd3efff5ce7a40 Certificate serial: 019AF3C01F4722BE58DEB7D39718499E032D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pb7DLWxk_7YB4nDO280-__XOekA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 13:00:45 +0000 Manifest this update: Sat 06 Dec 2025 13:00:45 +0000 Manifest next update: Sun 07 Dec 2025 13:00:45 +0000 Files and hashes: 1: pb7DLWxk_7YB4nDO280-__XOekA.crl (hash: IQwbdFDU92Xq5e/XL5d+IoO3DNY+lnI7M6fqBP1zBx4=) 2: qjNgLrezTzPzPZHoRa0PyC-9c_E.roa (hash: gjQzNWtyWkBxUXT4We5fyARX6Waght/4yDMrIeCr6j8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.crl rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.mft rsync://rpki.ripe.net/repository/DEFAULT/pb7DLWxk_7YB4nDO280-__XOekA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:1f:47:22:be:58:de:b7:d3:97:18:49:9e:03:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5bec32d6c64ffb601e270cedbcd3efff5ce7a40 Validity Not Before: Dec 6 13:00:45 2025 GMT Not After : Dec 7 13:00:45 2025 GMT Subject: CN=1d87312f2327139fa45bc6bb943cf5d787578a64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:4a:7c:ff:22:9d:13:a8:15:af:01:34:d5:f3: 4e:b5:32:ef:4f:6a:0b:ad:15:0b:4a:6d:44:1b:4d: 7d:ac:98:3c:41:18:40:80:01:af:55:2f:e9:45:ee: 2a:23:ae:7c:b2:99:13:f1:e8:7b:b2:c3:b9:10:a5: b6:d7:4f:80:bf:28:36:b7:94:5b:a2:eb:9c:95:74: b2:3b:8b:7c:10:db:7d:f8:82:28:b0:2c:cf:cb:2d: 7e:d0:8a:d8:5d:4b:d2:f4:42:1c:e5:8a:ba:14:3d: e1:d4:6e:48:d5:f6:16:e1:df:59:56:9e:c0:36:84: a2:ca:27:01:22:f1:9c:3b:ef:31:6d:aa:4c:ff:2c: e8:28:67:71:e9:f2:30:8f:6a:cd:37:32:b3:79:f3: 44:9d:48:b1:31:86:c6:c8:c7:88:90:65:89:b3:92: 7c:06:d1:8c:5d:5e:33:cc:cb:18:1f:c5:53:55:37: 41:75:ad:6e:bc:6b:8d:85:e5:e5:68:69:9d:1e:97: 4b:cd:14:d2:71:96:5d:0d:1a:27:cd:b4:94:81:3a: ac:bd:33:ee:6e:6d:f3:24:21:0e:df:e1:2a:6e:1d: f7:ab:ad:96:08:9f:67:18:82:c4:e0:40:0f:67:20: 64:ca:14:00:6d:6e:62:95:88:59:9a:1c:e0:e1:03: e4:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:87:31:2F:23:27:13:9F:A4:5B:C6:BB:94:3C:F5:D7:87:57:8A:64 X509v3 Authority Key Identifier: keyid:A5:BE:C3:2D:6C:64:FF:B6:01:E2:70:CE:DB:CD:3E:FF:F5:CE:7A:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pb7DLWxk_7YB4nDO280-__XOekA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:a6:90:cf:1c:69:c8:28:21:9a:94:04:ef:bc:14:74:ba:0a: a3:87:93:e4:e0:de:a5:3a:4f:24:29:66:1e:45:72:5a:43:88: 5f:1a:2a:a0:65:2f:8f:32:01:e2:79:84:a4:63:00:f9:b1:7e: 02:8e:fc:9c:c9:bb:96:8a:18:9b:61:59:25:0e:96:d4:37:f9: 07:f9:eb:7e:4a:4d:87:ca:23:97:5a:c1:88:47:a7:21:12:df: 7f:ce:1e:b2:10:5c:d8:5a:df:a8:50:06:5c:f5:e4:d7:45:b1: e9:ba:11:ad:a9:87:f6:15:3a:ed:bc:74:98:8d:36:b9:59:c4: f0:7e:54:a2:29:35:cb:03:0d:ff:e2:29:f8:31:c0:25:23:0e: e8:d1:ae:25:6d:d9:3d:b4:f5:fb:53:8d:6f:d9:5a:38:13:5d: 39:ec:75:ae:98:a0:8d:01:02:50:eb:c8:5d:37:ec:67:60:76: 0c:ff:ba:fe:c7:e7:ff:49:2f:a6:dc:47:78:b6:16:c8:e5:5f: db:c0:36:5a:af:08:9d:a7:1f:10:fb:fe:fe:06:0a:45:b5:e9: 21:26:05:72:ae:34:41:f8:67:0c:63:16:98:36:11:c3:e1:4b: be:08:08:ad:61:e2:95:d7:cc:82:a7:ba:fb:08:38:55:bf:9b: e4:95:ce:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwB9HIr5Y3rfTlxhJngMtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1YmVjMzJkNmM2NGZmYjYwMWUyNzBjZWRiY2QzZWZmZjVj ZTdhNDAwHhcNMjUxMjA2MTMwMDQ1WhcNMjUxMjA3MTMwMDQ1WjAzMTEwLwYDVQQD EygxZDg3MzEyZjIzMjcxMzlmYTQ1YmM2YmI5NDNjZjVkNzg3NTc4YTY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0p8/yKdE6gVrwE01fNOtTLvT2oL rRULSm1EG019rJg8QRhAgAGvVS/pRe4qI658spkT8eh7ssO5EKW210+Avyg2t5Rb ouuclXSyO4t8ENt9+IIosCzPyy1+0IrYXUvS9EIc5Yq6FD3h1G5I1fYW4d9ZVp7A NoSiyicBIvGcO+8xbapM/yzoKGdx6fIwj2rNNzKzefNEnUixMYbGyMeIkGWJs5J8 BtGMXV4zzMsYH8VTVTdBda1uvGuNheXlaGmdHpdLzRTScZZdDRonzbSUgTqsvTPu bm3zJCEO3+Eqbh33q62WCJ9nGILE4EAPZyBkyhQAbW5ilYhZmhzg4QPkhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB2HMS8jJxOfpFvGu5Q89deHV4pkMB8GA1UdIwQY MBaAFKW+wy1sZP+2AeJwztvNPv/1znpAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGI3RExXeGtfN1lCNG5ETzI4MC1fX1hPZWtBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi83ZDY0ZjEtM2Q2NC00MmViLWEyNzUt MjE3OTY0NGYzNzg4LzEvcGI3RExXeGtfN1lCNG5ETzI4MC1fX1hPZWtBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi83ZDY0ZjEtM2Q2NC00MmViLWEyNzUtMjE3OTY0NGYzNzg4 LzEvcGI3RExXeGtfN1lCNG5ETzI4MC1fX1hPZWtBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ6aQzxxp yCghmpQE77wUdLoKo4eT5ODepTpPJClmHkVyWkOIXxoqoGUvjzIB4nmEpGMA+bF+ Ao78nMm7looYm2FZJQ6W1Df5B/nrfkpNh8ojl1rBiEenIRLff84eshBc2FrfqFAG XPXk10Wx6boRramH9hU67bx0mI02uVnE8H5Uoik1ywMN/+Ip+DHAJSMO6NGuJW3Z PbT1+1ONb9laOBNdOex1rpigjQECUOvIXTfsZ2B2DP+6/sfn/0kvptxHeLYWyOVf 28A2Wq8InacfEPv+/gYKRbXpISYFcq40QfhnDGMWmDYRw+FLvggIrWHildfMgqe6 +wg4Vb+b5JXOaw== -----END CERTIFICATE-----Generated at Sat Dec 6 17:46:23 2025 by rpki-client