This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft File: pbIQYaPq10EOBFDbvyFw_gyTi7E.mft (raw, json) Hash identifier: iRlkRMkoIs2HUj+Ma88MhFdPJIdVQQae4lALf0xyZN8= Subject key identifier: 32:2D:43:97:D1:18:CE:22:D1:40:1D:D2:06:02:B6:8A:C9:81:D6:E8 Authority key identifier: A5:B2:10:61:A3:EA:D7:41:0E:04:50:DB:BF:21:70:FE:0C:93:8B:B1 Certificate issuer: /CN=a5b21061a3ead7410e0450dbbf2170fe0c938bb1 Certificate serial: 019B2BF8B5CBEBD62AD9E04BA23BB686BC81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pbIQYaPq10EOBFDbvyFw_gyTi7E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft Manifest number: 177F Signing time: Wed 17 Dec 2025 11:01:18 +0000 Manifest this update: Wed 17 Dec 2025 11:01:18 +0000 Manifest next update: Thu 18 Dec 2025 11:01:18 +0000 Files and hashes: 1: pbIQYaPq10EOBFDbvyFw_gyTi7E.crl (hash: EUBk22ix+htnwR6w4E3Ztx1yx+cAxnvR6Ek+f/0vgAQ=) 2: q9uMRJMivdNIUmR3cIXWE4hBpI0.roa (hash: k+Mam0ND2lwJk85PckjyzqHvxu7FYX4bMXDwNQs3Kx0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.crl rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft rsync://rpki.ripe.net/repository/DEFAULT/pbIQYaPq10EOBFDbvyFw_gyTi7E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:f8:b5:cb:eb:d6:2a:d9:e0:4b:a2:3b:b6:86:bc:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5b21061a3ead7410e0450dbbf2170fe0c938bb1 Validity Not Before: Dec 17 11:01:18 2025 GMT Not After : Dec 18 11:01:18 2025 GMT Subject: CN=322d4397d118ce22d1401dd20602b68ac981d6e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:70:29:61:01:11:3d:3c:52:f4:d8:73:d6:89: d8:05:28:e9:43:f3:ab:46:bd:41:67:4e:31:a1:87: 09:a6:7c:a2:8f:3c:95:e6:1f:ba:73:5e:c0:1b:b1: db:13:94:c6:b9:2c:8e:43:49:7b:56:88:af:00:02: e9:82:24:50:12:1b:a0:21:4d:3f:ae:d8:ed:28:61: 7d:e0:f3:03:12:df:4d:c8:93:5e:ec:0c:27:64:a7: cc:c3:81:24:58:c6:41:88:35:79:71:4f:5f:0e:80: 8f:70:53:18:52:8f:2f:c0:cc:d0:87:1b:35:f5:e7: 8d:9d:27:9a:74:bd:c0:51:77:1d:9c:b8:57:0f:06: 93:10:03:dc:19:0d:43:6e:26:41:2f:58:54:00:bf: 35:dd:17:cf:89:ae:28:64:e9:b2:e0:a3:b0:8f:cf: 49:bc:5d:2e:a5:20:f7:6a:5b:12:e2:68:6d:0b:f9: 3d:20:f0:87:72:e1:d1:2c:7e:71:69:5c:d8:bb:46: 1e:33:80:7c:76:fe:09:d9:b8:59:3e:d5:e1:51:f3: de:b2:23:c2:b1:7d:04:75:f2:5a:5b:af:85:7f:e7: cb:a7:46:b0:97:30:f5:d9:98:79:70:e1:88:6f:dc: 74:01:e0:49:f0:7f:49:93:72:82:35:2b:67:ad:ff: 06:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:2D:43:97:D1:18:CE:22:D1:40:1D:D2:06:02:B6:8A:C9:81:D6:E8 X509v3 Authority Key Identifier: keyid:A5:B2:10:61:A3:EA:D7:41:0E:04:50:DB:BF:21:70:FE:0C:93:8B:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbIQYaPq10EOBFDbvyFw_gyTi7E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:89:e6:00:83:17:75:e1:9d:6d:ed:6a:6c:82:56:96:b2:f9: 6a:d6:01:d1:4e:89:c6:f7:47:97:d8:f6:2e:a2:d0:b9:e5:23: 2f:49:05:05:f1:e4:e0:7b:a6:39:7a:96:fb:63:59:f3:87:72: 47:5f:9b:c9:57:9c:28:6d:0d:5d:b1:dc:6e:d9:71:0a:d2:37: 93:fc:06:df:c1:8e:9b:9b:e9:70:e7:45:b5:51:94:38:07:9c: 16:9b:79:42:17:7c:15:44:ff:7f:5b:27:03:01:d7:1e:9c:5e: b9:fd:90:6c:0b:4d:a6:81:11:85:35:49:04:6b:b7:de:a4:a5: d7:a9:ba:2c:dd:57:ea:8c:e8:64:dd:72:53:cd:05:30:b5:13: fc:55:94:a2:c4:73:a0:1b:a7:8f:d8:da:ca:c8:cd:fc:8d:93: bc:ed:1b:69:82:2f:4f:71:c4:fe:85:6b:fd:c7:3b:75:73:bd: ff:1f:57:d0:e7:4a:52:91:c1:e8:4b:42:31:46:82:6a:7c:56: 48:10:a3:22:b9:8a:8d:59:a2:c7:41:50:72:89:38:db:35:c8: c5:a0:05:d4:93:98:4f:8a:52:23:de:1c:66:6b:32:2a:dd:75: b7:46:ac:f8:01:36:c6:06:7b:4e:dc:16:3d:78:83:f6:54:8f: 8c:11:4a:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsr+LXL69Yq2eBLoju2hryBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1YjIxMDYxYTNlYWQ3NDEwZTA0NTBkYmJmMjE3MGZlMGM5 MzhiYjEwHhcNMjUxMjE3MTEwMTE4WhcNMjUxMjE4MTEwMTE4WjAzMTEwLwYDVQQD EygzMjJkNDM5N2QxMThjZTIyZDE0MDFkZDIwNjAyYjY4YWM5ODFkNmU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3ApYQERPTxS9Nhz1onYBSjpQ/Or Rr1BZ04xoYcJpnyijzyV5h+6c17AG7HbE5TGuSyOQ0l7VoivAALpgiRQEhugIU0/ rtjtKGF94PMDEt9NyJNe7AwnZKfMw4EkWMZBiDV5cU9fDoCPcFMYUo8vwMzQhxs1 9eeNnSeadL3AUXcdnLhXDwaTEAPcGQ1DbiZBL1hUAL813RfPia4oZOmy4KOwj89J vF0upSD3alsS4mhtC/k9IPCHcuHRLH5xaVzYu0YeM4B8dv4J2bhZPtXhUfPesiPC sX0EdfJaW6+Ff+fLp0awlzD12Zh5cOGIb9x0AeBJ8H9Jk3KCNStnrf8GgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDItQ5fRGM4i0UAd0gYCtorJgdboMB8GA1UdIwQY MBaAFKWyEGGj6tdBDgRQ278hcP4Mk4uxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGJJUVlhUHExMEVPQkZEYnZ5RndfZ3lUaTdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9mZmFjNGQtYTI3Mi00ZTZjLTk0MzEt YTA4ODNjMGIwOTViLzEvcGJJUVlhUHExMEVPQkZEYnZ5RndfZ3lUaTdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC9mZmFjNGQtYTI3Mi00ZTZjLTk0MzEtYTA4ODNjMGIwOTVi LzEvcGJJUVlhUHExMEVPQkZEYnZ5RndfZ3lUaTdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgYnmAIMX deGdbe1qbIJWlrL5atYB0U6JxvdHl9j2LqLQueUjL0kFBfHk4HumOXqW+2NZ84dy R1+byVecKG0NXbHcbtlxCtI3k/wG38GOm5vpcOdFtVGUOAecFpt5Qhd8FUT/f1sn AwHXHpxeuf2QbAtNpoERhTVJBGu33qSl16m6LN1X6ozoZN1yU80FMLUT/FWUosRz oBunj9jaysjN/I2TvO0baYIvT3HE/oVr/cc7dXO9/x9X0OdKUpHB6EtCMUaCanxW SBCjIrmKjVmix0FQcok42zXIxaAF1JOYT4pSI94cZmsyKt11t0as+AE2xgZ7TtwW PXiD9lSPjBFKJQ== -----END CERTIFICATE-----Generated at Wed Dec 17 16:39:21 2025 by rpki-client