This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/PB8U03-9yHrnyce5FT6updTFVJs.mft File: PB8U03-9yHrnyce5FT6updTFVJs.mft (raw, json) Hash identifier: Dpl0tMMP1ltsFbujJrZl6QIb/809vkknOpozT8HZq5k= Subject key identifier: 4A:A9:FD:E8:02:A8:F4:B9:FC:F4:3D:7F:2A:DE:48:BB:AB:F2:FA:5C Authority key identifier: 3C:1F:14:D3:7F:BD:C8:7A:E7:C9:C7:B9:15:3E:AE:A5:D4:C5:54:9B Certificate issuer: /CN=3c1f14d37fbdc87ae7c9c7b9153eaea5d4c5549b Certificate serial: 019AF2AD6FDA52D4451642FED9A969FC9376 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PB8U03-9yHrnyce5FT6updTFVJs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/PB8U03-9yHrnyce5FT6updTFVJs.mft Manifest number: 0430 Signing time: Sat 06 Dec 2025 08:00:43 +0000 Manifest this update: Sat 06 Dec 2025 08:00:43 +0000 Manifest next update: Sun 07 Dec 2025 08:00:43 +0000 Files and hashes: 1: PB8U03-9yHrnyce5FT6updTFVJs.crl (hash: et5cpBn5P8O1WqpHiT1/KsRfMWsJ94E2FVR9wenb0pc=) 2: auXGFmJDUvgSHGS6wCLf4_shLvQ.roa (hash: bP/kmgpM7rHsmWvx92KHgSs4SseixSL39Od8mT5RIQ4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/PB8U03-9yHrnyce5FT6updTFVJs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/PB8U03-9yHrnyce5FT6updTFVJs.mft rsync://rpki.ripe.net/repository/DEFAULT/PB8U03-9yHrnyce5FT6updTFVJs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:6f:da:52:d4:45:16:42:fe:d9:a9:69:fc:93:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c1f14d37fbdc87ae7c9c7b9153eaea5d4c5549b Validity Not Before: Dec 6 08:00:43 2025 GMT Not After : Dec 7 08:00:43 2025 GMT Subject: CN=4aa9fde802a8f4b9fcf43d7f2ade48bbabf2fa5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:32:ae:8a:ee:0d:36:19:18:e3:2e:39:07:e1: d0:4f:88:f7:23:51:5e:03:79:ec:f1:4d:b3:ef:6c: 1d:76:df:50:16:8d:df:63:a7:f6:60:08:3b:db:3b: b1:48:dd:8b:1e:fd:bf:1d:c0:4a:a3:31:ea:ca:b2: 47:56:c9:94:c1:2f:49:e6:f2:db:a3:91:c6:b1:b2: 63:7b:da:f9:85:b3:00:1d:58:75:95:8b:a6:b2:40: d7:dc:7a:eb:4f:ef:70:5f:f4:4b:62:60:d0:74:52: e9:7a:77:bd:f2:35:a9:b1:46:14:ff:56:dc:09:7a: b6:84:85:af:52:50:e1:77:13:27:0f:db:f1:dd:f4: 85:a0:a4:18:d3:87:6e:b5:80:b7:16:f1:8a:d0:78: 25:ac:48:18:46:00:00:b6:18:13:90:9c:5d:2b:d1: 73:6c:ef:2a:63:07:e3:ac:6c:18:b9:97:70:3d:12: 9d:58:77:ac:b1:02:aa:f7:b0:27:95:1b:08:b9:88: 9f:40:57:ce:05:82:36:7b:0e:f9:23:f6:54:89:ba: c2:30:74:42:76:49:a8:2a:47:db:7f:5b:3f:e7:c1: cc:a8:e2:0c:97:4d:df:e7:a8:7d:e5:cb:23:79:67: 6b:29:eb:2e:20:2b:35:40:1b:be:b3:e7:fd:af:a6: 45:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:A9:FD:E8:02:A8:F4:B9:FC:F4:3D:7F:2A:DE:48:BB:AB:F2:FA:5C X509v3 Authority Key Identifier: keyid:3C:1F:14:D3:7F:BD:C8:7A:E7:C9:C7:B9:15:3E:AE:A5:D4:C5:54:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PB8U03-9yHrnyce5FT6updTFVJs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/PB8U03-9yHrnyce5FT6updTFVJs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/PB8U03-9yHrnyce5FT6updTFVJs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:47:5d:39:16:d0:80:92:0b:33:8e:26:f7:47:39:99:10:59: 50:bd:89:85:93:e8:41:2d:22:95:30:ec:03:85:08:c9:4f:2b: 8e:67:8d:54:cb:34:e1:58:8c:d0:83:d9:da:3f:91:31:c6:ca: 4d:02:73:e3:a5:2c:85:1b:30:90:82:cc:25:f7:91:fe:c8:79: ad:8b:5b:d2:cf:c2:ed:f7:67:0b:ca:21:70:ad:a9:06:c9:cf: 6a:7b:01:02:b6:23:19:94:e8:e8:74:a5:2b:51:b7:34:8c:f3: 07:71:86:28:2c:87:e3:35:74:c8:76:a1:7f:a9:db:0a:0f:22: 9e:4a:c8:9f:a2:18:ba:7d:9d:5f:9f:31:9f:96:52:e0:86:89: 28:68:e1:ac:db:aa:23:67:5a:e5:51:6d:7d:f0:97:39:52:3b: 3d:a2:51:c7:ff:0a:c0:58:7e:39:47:ec:5b:cc:92:06:5f:64: e4:e8:d4:e6:fe:1b:42:0a:8c:90:6f:01:f5:40:52:25:99:a0: 16:a8:2c:63:4c:4b:e5:45:52:b4:ad:ee:a8:c9:86:28:81:52: 32:11:ad:23:2e:5b:d6:30:f8:07:bd:68:a5:c4:ee:86:de:93: bf:2d:94:e0:37:e2:27:4d:51:1b:3a:cc:51:af:49:e9:f1:11: 53:0a:d0:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrW/aUtRFFkL+2alp/JN2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjMWYxNGQzN2ZiZGM4N2FlN2M5YzdiOTE1M2VhZWE1ZDRj NTU0OWIwHhcNMjUxMjA2MDgwMDQzWhcNMjUxMjA3MDgwMDQzWjAzMTEwLwYDVQQD Eyg0YWE5ZmRlODAyYThmNGI5ZmNmNDNkN2YyYWRlNDhiYmFiZjJmYTVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjKuiu4NNhkY4y45B+HQT4j3I1Fe A3ns8U2z72wddt9QFo3fY6f2YAg72zuxSN2LHv2/HcBKozHqyrJHVsmUwS9J5vLb o5HGsbJje9r5hbMAHVh1lYumskDX3HrrT+9wX/RLYmDQdFLpene98jWpsUYU/1bc CXq2hIWvUlDhdxMnD9vx3fSFoKQY04dutYC3FvGK0HglrEgYRgAAthgTkJxdK9Fz bO8qYwfjrGwYuZdwPRKdWHessQKq97AnlRsIuYifQFfOBYI2ew75I/ZUibrCMHRC dkmoKkfbf1s/58HMqOIMl03f56h95csjeWdrKesuICs1QBu+s+f9r6ZFCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEqp/egCqPS5/PQ9fyreSLur8vpcMB8GA1UdIwQY MBaAFDwfFNN/vch658nHuRU+rqXUxVSbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEI4VTAzLTl5SHJueWNlNUZUNnVwZFRGVkpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9mMWI3NGMtMTZhYy00ODMxLWI2YzUt ZjFjNmJmMWU0YmE3LzEvUEI4VTAzLTl5SHJueWNlNUZUNnVwZFRGVkpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9mMWI3NGMtMTZhYy00ODMxLWI2YzUtZjFjNmJmMWU0YmE3 LzEvUEI4VTAzLTl5SHJueWNlNUZUNnVwZFRGVkpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsUddORbQ gJILM44m90c5mRBZUL2JhZPoQS0ilTDsA4UIyU8rjmeNVMs04ViM0IPZ2j+RMcbK TQJz46UshRswkILMJfeR/sh5rYtb0s/C7fdnC8ohcK2pBsnPansBArYjGZTo6HSl K1G3NIzzB3GGKCyH4zV0yHahf6nbCg8inkrIn6IYun2dX58xn5ZS4IaJKGjhrNuq I2da5VFtffCXOVI7PaJRx/8KwFh+OUfsW8ySBl9k5OjU5v4bQgqMkG8B9UBSJZmg FqgsY0xL5UVStK3uqMmGKIFSMhGtIy5b1jD4B71opcTuht6Tvy2U4DfiJ01RGzrM Ua9J6fERUwrQSw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:08:48 2025 by rpki-client