This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/35adb1-67ed-492d-ba89-2e6791694aeb/1/PqbtMfl_N8XlxVBzL4XSRpCWLO8.mft File: PqbtMfl_N8XlxVBzL4XSRpCWLO8.mft (raw, json) Hash identifier: hvVnGpRQXpVVK4b8OzE2g+HwgquVO1KieJ3dmwyGDso= Subject key identifier: C7:BD:76:BD:E9:13:A4:48:43:C9:DF:D6:7C:CE:25:BF:D8:7C:C4:13 Authority key identifier: 3E:A6:ED:31:F9:7F:37:C5:E5:C5:50:73:2F:85:D2:46:90:96:2C:EF Certificate issuer: /CN=3ea6ed31f97f37c5e5c550732f85d24690962cef Certificate serial: 019B2552487C3A8F9B0B6BD8C8DFACCA95BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PqbtMfl_N8XlxVBzL4XSRpCWLO8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/35adb1-67ed-492d-ba89-2e6791694aeb/1/PqbtMfl_N8XlxVBzL4XSRpCWLO8.mft Manifest number: 1777 Signing time: Tue 16 Dec 2025 04:01:47 +0000 Manifest this update: Tue 16 Dec 2025 04:01:47 +0000 Manifest next update: Wed 17 Dec 2025 04:01:47 +0000 Files and hashes: 1: PqbtMfl_N8XlxVBzL4XSRpCWLO8.crl (hash: yDOeHEdR2Qhcr1jIZ4+FB3Oh3v55gLRstgRpk9IGF9U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/35adb1-67ed-492d-ba89-2e6791694aeb/1/PqbtMfl_N8XlxVBzL4XSRpCWLO8.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/35adb1-67ed-492d-ba89-2e6791694aeb/1/PqbtMfl_N8XlxVBzL4XSRpCWLO8.mft rsync://rpki.ripe.net/repository/DEFAULT/PqbtMfl_N8XlxVBzL4XSRpCWLO8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 04:01:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:52:48:7c:3a:8f:9b:0b:6b:d8:c8:df:ac:ca:95:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ea6ed31f97f37c5e5c550732f85d24690962cef Validity Not Before: Dec 16 04:01:47 2025 GMT Not After : Dec 17 04:01:47 2025 GMT Subject: CN=c7bd76bde913a44843c9dfd67cce25bfd87cc413 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:4f:6c:34:c4:5e:5d:a5:d1:fe:62:f0:bf:68: 05:0f:81:cf:70:6c:2e:a0:8f:c8:6b:f8:ff:65:fc: 22:fe:92:b6:b6:33:c7:36:b4:ac:a7:b1:82:bf:ca: 0d:ac:a4:2c:35:99:65:81:20:f0:d1:1d:22:71:c0: 3f:4b:96:1f:f0:47:c2:66:45:37:d9:a9:bd:3c:37: ec:89:4a:ef:74:64:89:2e:e8:cf:50:b4:42:aa:8e: 6c:b7:aa:eb:4e:ee:0e:21:f3:05:d6:33:67:d1:3e: c8:ea:da:9c:8b:53:a2:1a:e2:c4:d3:03:a1:f1:a9: 7b:74:1d:72:83:a4:cc:7a:de:3c:33:d1:98:5f:06: c1:8a:4f:b9:57:50:a6:ce:24:76:05:7a:d6:e3:9f: ee:31:f2:f2:08:03:2a:6f:58:84:83:44:32:ef:1b: f6:7c:db:03:36:d7:d1:d8:3c:da:ff:21:25:53:ea: ba:3f:db:81:5a:34:6a:1f:35:ab:6b:ef:00:1e:81: bb:fe:d4:a0:52:f0:43:fc:5d:89:cc:d4:1d:69:4b: 02:d1:00:ea:ce:01:5f:a9:d3:50:93:25:e1:72:52: cd:1d:5f:d7:08:78:d2:83:62:40:7e:24:b3:86:e4: 3e:eb:b2:ce:96:83:f3:24:9e:25:c0:ac:7e:e8:a0: ab:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:BD:76:BD:E9:13:A4:48:43:C9:DF:D6:7C:CE:25:BF:D8:7C:C4:13 X509v3 Authority Key Identifier: keyid:3E:A6:ED:31:F9:7F:37:C5:E5:C5:50:73:2F:85:D2:46:90:96:2C:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqbtMfl_N8XlxVBzL4XSRpCWLO8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/35adb1-67ed-492d-ba89-2e6791694aeb/1/PqbtMfl_N8XlxVBzL4XSRpCWLO8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/35adb1-67ed-492d-ba89-2e6791694aeb/1/PqbtMfl_N8XlxVBzL4XSRpCWLO8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:ba:95:d7:cb:5d:bc:f8:d5:79:13:3d:39:0f:93:f2:c9:bd: f3:4d:59:da:85:fb:87:c0:30:b3:6d:f7:1b:4b:2a:91:bf:20: 93:e0:63:fd:31:f5:f7:b7:f4:14:ce:e4:f4:9b:77:c7:6f:20: e5:62:2d:55:d0:d1:15:04:2f:98:4d:94:fa:e8:fb:d7:10:72: 80:f2:ab:b4:cc:3d:d2:15:e0:fb:ff:d6:97:42:a1:4d:7b:f3: 8e:6b:cb:b1:0b:26:02:2e:70:bc:8f:c3:fc:9a:dc:00:e5:8d: 32:ff:dc:0b:fd:1f:ea:2d:0c:81:1a:e0:f7:5f:0c:9c:52:bd: 0f:97:63:74:f7:e3:b5:5a:4f:08:63:99:43:25:e7:f0:b0:ac: 73:51:e6:68:67:02:40:d3:2d:92:5e:ea:43:76:f1:ef:15:ae: e1:5f:e9:41:84:b3:f6:91:c5:cb:bb:b3:2f:ea:e3:e8:98:fb: 59:f0:8d:2b:00:2e:52:5e:72:8a:5e:4f:09:6e:63:fa:63:64: ae:5b:93:16:89:0f:fe:71:d4:ba:40:51:b5:19:96:2c:1f:28: 0c:b4:2c:f7:a8:48:ca:e6:66:ec:f7:6c:f7:ac:f2:51:73:33: 0f:b0:27:d4:7c:a8:b0:14:ea:ed:49:1f:fe:fc:0e:76:ce:0a: d5:53:af:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslUkh8Oo+bC2vYyN+sypW8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlYTZlZDMxZjk3ZjM3YzVlNWM1NTA3MzJmODVkMjQ2OTA5 NjJjZWYwHhcNMjUxMjE2MDQwMTQ3WhcNMjUxMjE3MDQwMTQ3WjAzMTEwLwYDVQQD EyhjN2JkNzZiZGU5MTNhNDQ4NDNjOWRmZDY3Y2NlMjViZmQ4N2NjNDEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw09sNMReXaXR/mLwv2gFD4HPcGwu oI/Ia/j/Zfwi/pK2tjPHNrSsp7GCv8oNrKQsNZllgSDw0R0iccA/S5Yf8EfCZkU3 2am9PDfsiUrvdGSJLujPULRCqo5st6rrTu4OIfMF1jNn0T7I6tqci1OiGuLE0wOh 8al7dB1yg6TMet48M9GYXwbBik+5V1CmziR2BXrW45/uMfLyCAMqb1iEg0Qy7xv2 fNsDNtfR2Dza/yElU+q6P9uBWjRqHzWra+8AHoG7/tSgUvBD/F2JzNQdaUsC0QDq zgFfqdNQkyXhclLNHV/XCHjSg2JAfiSzhuQ+67LOloPzJJ4lwKx+6KCrIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMe9dr3pE6RIQ8nf1nzOJb/YfMQTMB8GA1UdIwQY MBaAFD6m7TH5fzfF5cVQcy+F0kaQlizvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHFidE1mbF9OOFhseFZCekw0WFNScENXTE84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi8zNWFkYjEtNjdlZC00OTJkLWJhODkt MmU2NzkxNjk0YWViLzEvUHFidE1mbF9OOFhseFZCekw0WFNScENXTE84Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi8zNWFkYjEtNjdlZC00OTJkLWJhODktMmU2NzkxNjk0YWVi LzEvUHFidE1mbF9OOFhseFZCekw0WFNScENXTE84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFLqV18td vPjVeRM9OQ+T8sm9801Z2oX7h8Aws233G0sqkb8gk+Bj/TH197f0FM7k9Jt3x28g 5WItVdDRFQQvmE2U+uj71xBygPKrtMw90hXg+//Wl0KhTXvzjmvLsQsmAi5wvI/D /JrcAOWNMv/cC/0f6i0MgRrg918MnFK9D5djdPfjtVpPCGOZQyXn8LCsc1HmaGcC QNMtkl7qQ3bx7xWu4V/pQYSz9pHFy7uzL+rj6Jj7WfCNKwAuUl5yil5PCW5j+mNk rluTFokP/nHUukBRtRmWLB8oDLQs96hIyuZm7Pds96zyUXMzD7An1HyosBTq7Ukf /vwOds4K1VOviw== -----END CERTIFICATE-----Generated at Tue Dec 16 14:22:32 2025 by rpki-client