This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/PB8U03-9yHrnyce5FT6updTFVJs.mft File: PB8U03-9yHrnyce5FT6updTFVJs.mft (raw, json) Hash identifier: 0+RX9MXyFuMavVY0gPjzVSTyiD5qhe3az5aeDyeQf8Q= Subject key identifier: DB:12:35:28:44:56:55:77:77:33:89:FC:C6:D5:6E:54:9C:A8:30:A4 Authority key identifier: 3C:1F:14:D3:7F:BD:C8:7A:E7:C9:C7:B9:15:3E:AE:A5:D4:C5:54:9B Certificate issuer: /CN=3c1f14d37fbdc87ae7c9c7b9153eaea5d4c5549b Certificate serial: 019B26D1FEAA8DFCDDCE0FAC875B12E15BCE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PB8U03-9yHrnyce5FT6updTFVJs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/PB8U03-9yHrnyce5FT6updTFVJs.mft Manifest number: 044B Signing time: Tue 16 Dec 2025 11:00:54 +0000 Manifest this update: Tue 16 Dec 2025 11:00:54 +0000 Manifest next update: Wed 17 Dec 2025 11:00:54 +0000 Files and hashes: 1: PB8U03-9yHrnyce5FT6updTFVJs.crl (hash: EuaIdEpZfIG1P5N9uic0oObhyQBuQOitp5g1Yny9s8A=) 2: auXGFmJDUvgSHGS6wCLf4_shLvQ.roa (hash: bP/kmgpM7rHsmWvx92KHgSs4SseixSL39Od8mT5RIQ4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/PB8U03-9yHrnyce5FT6updTFVJs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/PB8U03-9yHrnyce5FT6updTFVJs.mft rsync://rpki.ripe.net/repository/DEFAULT/PB8U03-9yHrnyce5FT6updTFVJs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 11:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:d1:fe:aa:8d:fc:dd:ce:0f:ac:87:5b:12:e1:5b:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c1f14d37fbdc87ae7c9c7b9153eaea5d4c5549b Validity Not Before: Dec 16 11:00:54 2025 GMT Not After : Dec 17 11:00:54 2025 GMT Subject: CN=db12352844565577773389fcc6d56e549ca830a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:53:3d:df:cf:a7:2a:80:f0:fe:a8:a7:49:8c: ab:f2:99:0b:bb:17:73:e1:15:f9:f4:65:9f:18:e3: 86:a3:7c:44:82:38:0d:17:c9:b0:fa:6a:0c:cd:7f: 29:03:91:65:3b:eb:66:32:9f:08:a1:6e:c3:3b:72: e8:94:52:e1:20:aa:ef:fc:43:80:2d:2c:de:d1:56: 4a:73:fa:86:20:16:7b:98:9d:74:0d:f3:ac:e7:52: 78:72:66:bc:c7:4f:99:d6:ff:47:ef:eb:8d:14:36: 24:bb:93:25:de:4d:25:88:74:ef:02:2d:15:3a:0e: f1:41:26:21:49:b1:32:bc:12:d1:78:18:7a:a7:91: b3:90:8b:fa:8c:3f:ff:2b:a1:b6:1f:20:97:47:0c: 48:36:b8:e4:35:fa:2e:1e:41:2e:b1:b4:5d:51:c3: 98:64:08:ba:a9:2d:79:13:f6:52:d2:04:ae:6b:03: 21:59:36:f8:cd:45:16:e6:49:96:b2:2e:68:64:53: 17:35:52:2b:32:12:63:9f:5a:a7:55:4a:f5:4c:bd: 2e:6a:ff:c3:9e:30:d4:62:91:75:70:d7:f9:19:f6: 3b:6a:18:48:fb:98:e4:e3:12:57:44:53:79:c7:44: 0d:25:dc:94:44:9d:e3:cd:85:af:e3:02:aa:b7:2b: b1:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:12:35:28:44:56:55:77:77:33:89:FC:C6:D5:6E:54:9C:A8:30:A4 X509v3 Authority Key Identifier: keyid:3C:1F:14:D3:7F:BD:C8:7A:E7:C9:C7:B9:15:3E:AE:A5:D4:C5:54:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PB8U03-9yHrnyce5FT6updTFVJs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/PB8U03-9yHrnyce5FT6updTFVJs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/PB8U03-9yHrnyce5FT6updTFVJs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:8a:2c:9d:74:41:22:5e:89:a1:65:0f:ca:5f:fd:c5:2f:3a: 44:41:14:83:50:d1:54:0b:62:cc:e9:f3:9a:db:19:69:77:8c: 2e:53:8d:9a:29:7d:a6:55:5a:67:98:2a:a1:be:38:c8:65:94: f8:8f:b5:07:34:f2:19:b5:15:2f:62:87:f5:13:29:4a:77:3e: a4:62:05:5f:a1:34:a5:81:f7:5d:61:4f:d0:71:8b:de:6e:a8: 6e:93:f4:3f:8a:ac:af:ba:a1:c8:ed:4d:4e:59:12:65:e3:cf: a1:72:40:9d:be:ad:b9:c8:e7:59:fe:2e:af:a9:61:9d:88:cd: b8:e3:3d:04:74:dc:06:45:b7:d0:00:f7:50:9e:16:98:1b:ab: 9a:02:5b:58:18:49:9e:d7:bf:cc:ae:d1:12:ea:3d:e8:a6:b2: 6b:3f:cd:c6:21:89:92:3e:0b:0e:81:fb:34:6d:15:71:b7:83: ca:04:c2:bc:dd:86:5c:33:58:59:3e:ab:2f:2a:fa:7c:16:5a: 89:5f:c6:a6:6e:ec:00:a2:1c:aa:68:75:92:7a:d9:d0:20:4b: e9:46:72:e6:dc:f2:4c:e2:df:57:b5:8f:53:5d:99:a9:32:8b: 98:f6:06:4b:4d:ff:51:93:fd:55:ef:83:14:90:30:cc:71:7e: d3:a7:99:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsm0f6qjfzdzg+sh1sS4VvOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjMWYxNGQzN2ZiZGM4N2FlN2M5YzdiOTE1M2VhZWE1ZDRj NTU0OWIwHhcNMjUxMjE2MTEwMDU0WhcNMjUxMjE3MTEwMDU0WjAzMTEwLwYDVQQD EyhkYjEyMzUyODQ0NTY1NTc3NzczMzg5ZmNjNmQ1NmU1NDljYTgzMGE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8FM938+nKoDw/qinSYyr8pkLuxdz 4RX59GWfGOOGo3xEgjgNF8mw+moMzX8pA5FlO+tmMp8IoW7DO3LolFLhIKrv/EOA LSze0VZKc/qGIBZ7mJ10DfOs51J4cma8x0+Z1v9H7+uNFDYku5Ml3k0liHTvAi0V Og7xQSYhSbEyvBLReBh6p5GzkIv6jD//K6G2HyCXRwxINrjkNfouHkEusbRdUcOY ZAi6qS15E/ZS0gSuawMhWTb4zUUW5kmWsi5oZFMXNVIrMhJjn1qnVUr1TL0uav/D njDUYpF1cNf5GfY7ahhI+5jk4xJXRFN5x0QNJdyURJ3jzYWv4wKqtyuxiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNsSNShEVlV3dzOJ/MbVblScqDCkMB8GA1UdIwQY MBaAFDwfFNN/vch658nHuRU+rqXUxVSbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEI4VTAzLTl5SHJueWNlNUZUNnVwZFRGVkpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9mMWI3NGMtMTZhYy00ODMxLWI2YzUt ZjFjNmJmMWU0YmE3LzEvUEI4VTAzLTl5SHJueWNlNUZUNnVwZFRGVkpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9mMWI3NGMtMTZhYy00ODMxLWI2YzUtZjFjNmJmMWU0YmE3 LzEvUEI4VTAzLTl5SHJueWNlNUZUNnVwZFRGVkpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvoosnXRB Il6JoWUPyl/9xS86REEUg1DRVAtizOnzmtsZaXeMLlONmil9plVaZ5gqob44yGWU +I+1BzTyGbUVL2KH9RMpSnc+pGIFX6E0pYH3XWFP0HGL3m6obpP0P4qsr7qhyO1N TlkSZePPoXJAnb6tucjnWf4ur6lhnYjNuOM9BHTcBkW30AD3UJ4WmBurmgJbWBhJ nte/zK7REuo96Kayaz/NxiGJkj4LDoH7NG0VcbeDygTCvN2GXDNYWT6rLyr6fBZa iV/Gpm7sAKIcqmh1knrZ0CBL6UZy5tzyTOLfV7WPU12ZqTKLmPYGS03/UZP9Ve+D FJAwzHF+06eZIw== -----END CERTIFICATE-----Generated at Tue Dec 16 17:54:30 2025 by rpki-client