This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft File: pbIQYaPq10EOBFDbvyFw_gyTi7E.mft (raw, json) Hash identifier: Cmw9bCtyL2OtU4tbZd9YW6ZOvv9TCC4kHV6j2ey9x1I= Subject key identifier: 33:6F:09:8A:60:0E:F5:F7:82:EF:47:A3:4E:A5:66:6E:FF:40:BB:68 Authority key identifier: A5:B2:10:61:A3:EA:D7:41:0E:04:50:DB:BF:21:70:FE:0C:93:8B:B1 Certificate issuer: /CN=a5b21061a3ead7410e0450dbbf2170fe0c938bb1 Certificate serial: 019AF208BAAC79942A082CB3745A17838248 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pbIQYaPq10EOBFDbvyFw_gyTi7E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 05:00:49 +0000 Manifest this update: Sat 06 Dec 2025 05:00:49 +0000 Manifest next update: Sun 07 Dec 2025 05:00:49 +0000 Files and hashes: 1: pbIQYaPq10EOBFDbvyFw_gyTi7E.crl (hash: Pn6Gw9zLoN+pHOB/eLA6avchnmLroBuDs3EvghmrfTM=) 2: q9uMRJMivdNIUmR3cIXWE4hBpI0.roa (hash: k+Mam0ND2lwJk85PckjyzqHvxu7FYX4bMXDwNQs3Kx0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.crl rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft rsync://rpki.ripe.net/repository/DEFAULT/pbIQYaPq10EOBFDbvyFw_gyTi7E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:ba:ac:79:94:2a:08:2c:b3:74:5a:17:83:82:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5b21061a3ead7410e0450dbbf2170fe0c938bb1 Validity Not Before: Dec 6 05:00:49 2025 GMT Not After : Dec 7 05:00:49 2025 GMT Subject: CN=336f098a600ef5f782ef47a34ea5666eff40bb68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:55:a3:3a:eb:c1:6f:b6:c8:27:cf:ad:1c:05: 4d:da:27:c3:6b:cf:49:65:ff:62:ab:bc:e6:f0:13: 01:68:32:6f:f4:2a:30:d4:2d:c9:03:e2:00:c6:52: eb:96:4a:94:25:46:a9:fd:50:87:73:2b:73:6c:0f: d4:e9:4e:69:a5:12:41:46:75:f0:75:1b:3b:99:92: 43:00:a3:ae:2b:be:0c:06:e8:3f:ba:5f:17:5b:ba: 2b:58:6e:d4:be:1b:49:3a:e7:7c:4d:3b:7b:61:f8: bd:ff:22:6c:33:e1:e8:d5:c5:c3:1a:60:99:0c:24: 7e:ba:9e:93:3e:8b:21:35:33:f4:8c:6c:5f:12:08: 59:08:b7:b9:f4:3f:6b:20:52:2b:29:e6:ee:87:11: b2:e9:f6:cf:f7:f2:1f:27:c5:89:c2:30:10:29:35: a6:77:cb:48:1e:ab:f8:ec:ef:ff:c6:0b:85:43:c3: 7e:fc:29:76:7c:b7:06:ba:ae:91:0e:f8:40:16:97: ff:43:66:e2:45:0f:f1:61:05:2b:80:90:26:b8:03: 65:21:e5:37:37:62:31:8f:7e:1c:49:cd:84:66:fa: 9b:ff:1e:fb:57:cc:3f:f2:83:e1:64:88:8b:c2:74: 61:4a:ee:af:86:49:74:91:cb:9a:a4:ea:68:06:1d: 9f:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:6F:09:8A:60:0E:F5:F7:82:EF:47:A3:4E:A5:66:6E:FF:40:BB:68 X509v3 Authority Key Identifier: keyid:A5:B2:10:61:A3:EA:D7:41:0E:04:50:DB:BF:21:70:FE:0C:93:8B:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbIQYaPq10EOBFDbvyFw_gyTi7E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:0e:05:3f:27:d1:bf:9c:4b:b7:14:35:3e:ca:4e:4e:f7:85: 0d:1c:8f:7a:68:2c:c5:2c:8b:16:5a:7b:55:43:cf:5d:15:ea: 14:0b:c6:d9:10:f8:f4:40:41:a3:eb:dc:70:fe:11:a1:13:eb: 77:72:47:15:bf:77:58:e6:6f:78:f7:16:f4:82:39:1e:d8:89: c7:67:96:aa:16:d6:84:82:2f:93:87:7d:91:3c:0c:af:b2:e7: cf:04:1e:2f:73:15:86:64:68:0a:d9:31:45:2c:9a:d7:d8:46: f6:2e:44:83:d9:0e:b7:dd:7d:7b:76:c9:7a:49:fb:8d:a8:cb: 17:68:6f:39:e0:47:80:5a:3e:89:6a:b6:9c:3d:74:9a:d9:6e: a3:cf:76:f6:48:1a:94:d3:cd:4c:f8:a9:1d:5d:26:c0:78:2f: f5:e3:f4:d6:38:0a:c8:ab:e7:76:04:d6:8b:77:ca:a8:bf:ab: bf:d5:54:7a:d7:36:70:6c:9a:65:b9:76:1d:5e:da:e3:c3:6c: 33:46:17:46:52:ba:a1:c9:12:a6:74:87:f7:0d:93:1e:2d:72: 1a:aa:ed:e9:16:fc:fc:e5:9e:17:da:dd:5e:63:ef:e7:e4:3e: 5f:74:e0:61:2c:c2:51:32:6f:b3:31:76:43:6b:58:e6:99:d3: 97:76:c8:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCLqseZQqCCyzdFoXg4JIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1YjIxMDYxYTNlYWQ3NDEwZTA0NTBkYmJmMjE3MGZlMGM5 MzhiYjEwHhcNMjUxMjA2MDUwMDQ5WhcNMjUxMjA3MDUwMDQ5WjAzMTEwLwYDVQQD EygzMzZmMDk4YTYwMGVmNWY3ODJlZjQ3YTM0ZWE1NjY2ZWZmNDBiYjY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0VWjOuvBb7bIJ8+tHAVN2ifDa89J Zf9iq7zm8BMBaDJv9Cow1C3JA+IAxlLrlkqUJUap/VCHcytzbA/U6U5ppRJBRnXw dRs7mZJDAKOuK74MBug/ul8XW7orWG7UvhtJOud8TTt7Yfi9/yJsM+Ho1cXDGmCZ DCR+up6TPoshNTP0jGxfEghZCLe59D9rIFIrKebuhxGy6fbP9/IfJ8WJwjAQKTWm d8tIHqv47O//xguFQ8N+/Cl2fLcGuq6RDvhAFpf/Q2biRQ/xYQUrgJAmuANlIeU3 N2Ixj34cSc2EZvqb/x77V8w/8oPhZIiLwnRhSu6vhkl0kcuapOpoBh2fpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDNvCYpgDvX3gu9Ho06lZm7/QLtoMB8GA1UdIwQY MBaAFKWyEGGj6tdBDgRQ278hcP4Mk4uxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGJJUVlhUHExMEVPQkZEYnZ5RndfZ3lUaTdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9mZmFjNGQtYTI3Mi00ZTZjLTk0MzEt YTA4ODNjMGIwOTViLzEvcGJJUVlhUHExMEVPQkZEYnZ5RndfZ3lUaTdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC9mZmFjNGQtYTI3Mi00ZTZjLTk0MzEtYTA4ODNjMGIwOTVi LzEvcGJJUVlhUHExMEVPQkZEYnZ5RndfZ3lUaTdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFA4FPyfR v5xLtxQ1PspOTveFDRyPemgsxSyLFlp7VUPPXRXqFAvG2RD49EBBo+vccP4RoRPr d3JHFb93WOZvePcW9II5HtiJx2eWqhbWhIIvk4d9kTwMr7LnzwQeL3MVhmRoCtkx RSya19hG9i5Eg9kOt919e3bJekn7jajLF2hvOeBHgFo+iWq2nD10mtluo8929kga lNPNTPipHV0mwHgv9eP01jgKyKvndgTWi3fKqL+rv9VUetc2cGyaZbl2HV7a48Ns M0YXRlK6ockSpnSH9w2THi1yGqrt6Rb8/OWeF9rdXmPv5+Q+X3TgYSzCUTJvszF2 Q2tY5pnTl3bIdA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:26:08 2025 by rpki-client