This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/f763a9-7176-4f32-9760-220165c3e6df/1/PBC7uXtTnGv4MFlZhVZloOeqbZU.mft File: PBC7uXtTnGv4MFlZhVZloOeqbZU.mft (raw, json) Hash identifier: xW5f7ZR+8hBizBstNnjkNNSFr92idOWY6u7kMYJhmUk= Subject key identifier: 9B:1F:0D:DA:AB:E3:C9:26:E8:CF:4C:A7:F7:B8:18:D2:C2:F5:89:AD Authority key identifier: 3C:10:BB:B9:7B:53:9C:6B:F8:30:59:59:85:56:65:A0:E7:AA:6D:95 Certificate issuer: /CN=3c10bbb97b539c6bf8305959855665a0e7aa6d95 Certificate serial: 019AF12EB66739ECDC36843D5F812AF706BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBC7uXtTnGv4MFlZhVZloOeqbZU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/f763a9-7176-4f32-9760-220165c3e6df/1/PBC7uXtTnGv4MFlZhVZloOeqbZU.mft Manifest number: 0B67 Signing time: Sat 06 Dec 2025 01:02:41 +0000 Manifest this update: Sat 06 Dec 2025 01:02:41 +0000 Manifest next update: Sun 07 Dec 2025 01:02:41 +0000 Files and hashes: 1: PBC7uXtTnGv4MFlZhVZloOeqbZU.crl (hash: BsCZ7XzoOFCfjSuMSJ8NTJgaZjvHXNFjILY0dgFp5Io=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/f763a9-7176-4f32-9760-220165c3e6df/1/PBC7uXtTnGv4MFlZhVZloOeqbZU.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/f763a9-7176-4f32-9760-220165c3e6df/1/PBC7uXtTnGv4MFlZhVZloOeqbZU.mft rsync://rpki.ripe.net/repository/DEFAULT/PBC7uXtTnGv4MFlZhVZloOeqbZU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:b6:67:39:ec:dc:36:84:3d:5f:81:2a:f7:06:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c10bbb97b539c6bf8305959855665a0e7aa6d95 Validity Not Before: Dec 6 01:02:41 2025 GMT Not After : Dec 7 01:02:41 2025 GMT Subject: CN=9b1f0ddaabe3c926e8cf4ca7f7b818d2c2f589ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:4f:03:ee:c2:5a:54:20:bc:3a:26:c5:72:e0: b7:54:d1:fe:48:d6:69:65:d4:a9:ac:9a:a1:65:da: 9f:a9:9a:ba:52:02:9a:01:6b:1e:a9:cd:f6:34:53: cd:5d:74:04:73:63:62:73:14:94:5b:f3:29:83:c6: 72:93:34:71:23:ea:dc:03:47:5b:e5:03:96:cc:d9: 10:15:65:44:eb:dd:2a:39:22:fc:ec:b6:0b:ec:aa: 93:71:6e:7f:55:39:25:8e:7b:80:23:ca:2b:80:55: 5a:64:13:65:9b:ad:5a:0f:dc:9f:d1:fe:2e:c0:cd: f0:a5:81:c6:d9:09:62:b8:fa:06:ae:02:29:9c:96: a9:98:99:43:10:20:b1:f2:8e:0e:32:73:63:ec:95: fb:6b:ff:2f:31:f2:25:ee:5e:5a:ad:5f:de:f7:ca: 06:68:99:ab:07:10:63:c0:60:0e:0b:fa:6f:f1:e7: ce:78:f6:90:e7:d1:22:bb:0f:30:74:79:92:8c:ec: 74:35:24:36:94:f4:db:c6:b7:55:bf:55:89:a2:2d: 36:08:f6:ed:da:e8:a6:8a:d9:58:33:55:67:2b:4f: 3b:f7:fe:78:3d:a4:dc:d2:63:61:18:f1:4f:7e:8b: 14:cd:e5:a3:d1:5d:a9:f4:7f:96:5a:01:62:50:b4: 5f:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:1F:0D:DA:AB:E3:C9:26:E8:CF:4C:A7:F7:B8:18:D2:C2:F5:89:AD X509v3 Authority Key Identifier: keyid:3C:10:BB:B9:7B:53:9C:6B:F8:30:59:59:85:56:65:A0:E7:AA:6D:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBC7uXtTnGv4MFlZhVZloOeqbZU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f763a9-7176-4f32-9760-220165c3e6df/1/PBC7uXtTnGv4MFlZhVZloOeqbZU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f763a9-7176-4f32-9760-220165c3e6df/1/PBC7uXtTnGv4MFlZhVZloOeqbZU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:ab:e1:47:52:3c:8e:a8:27:2b:17:69:8f:3e:ed:d0:86:0f: ce:b7:5b:98:1e:7f:9a:e3:e8:69:8b:ff:05:78:87:bf:ab:29: eb:73:5a:34:cd:3e:df:b3:d3:c8:a4:fe:d1:f1:15:73:eb:a9: 8a:61:c3:fd:e3:4d:25:47:5a:91:49:9d:10:dd:f6:17:96:06: 5a:d3:b4:8c:2a:ff:1d:09:a8:bf:6a:17:88:54:ec:31:65:d5: f7:8c:7d:db:f1:ec:0e:f9:7e:17:d6:5b:80:25:2c:9f:12:39: 6b:40:ae:0c:a5:46:03:b8:af:14:86:73:e7:dc:ed:6a:7b:18: 8f:ea:d0:54:f6:bb:c7:bd:3b:d2:55:b2:6d:6c:02:68:aa:ef: 69:36:11:11:d7:2d:ff:d2:b4:d2:e8:04:4c:b6:35:0c:13:5b: 7a:f2:eb:66:d3:9c:d1:2c:4c:ed:2d:f0:37:85:26:9b:a3:56: a4:26:ae:a9:27:98:45:a0:70:c6:c3:35:ec:6d:a6:81:73:98: 0c:5f:61:e9:04:70:a7:58:77:e5:8c:82:2b:53:38:83:45:b0: f0:ed:03:cf:b3:ab:c9:c2:ef:f4:34:4b:75:aa:15:65:3d:db: 04:d7:95:71:be:68:5b:6b:6a:06:43:f2:bd:ed:29:32:d8:72: 2e:34:5b:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLrZnOezcNoQ9X4Eq9wa/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjMTBiYmI5N2I1MzljNmJmODMwNTk1OTg1NTY2NWEwZTdh YTZkOTUwHhcNMjUxMjA2MDEwMjQxWhcNMjUxMjA3MDEwMjQxWjAzMTEwLwYDVQQD Eyg5YjFmMGRkYWFiZTNjOTI2ZThjZjRjYTdmN2I4MThkMmMyZjU4OWFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuk8D7sJaVCC8OibFcuC3VNH+SNZp ZdSprJqhZdqfqZq6UgKaAWseqc32NFPNXXQEc2NicxSUW/Mpg8ZykzRxI+rcA0db 5QOWzNkQFWVE690qOSL87LYL7KqTcW5/VTkljnuAI8orgFVaZBNlm61aD9yf0f4u wM3wpYHG2QliuPoGrgIpnJapmJlDECCx8o4OMnNj7JX7a/8vMfIl7l5arV/e98oG aJmrBxBjwGAOC/pv8efOePaQ59Eiuw8wdHmSjOx0NSQ2lPTbxrdVv1WJoi02CPbt 2uimitlYM1VnK0879/54PaTc0mNhGPFPfosUzeWj0V2p9H+WWgFiULRf1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJsfDdqr48km6M9Mp/e4GNLC9YmtMB8GA1UdIwQY MBaAFDwQu7l7U5xr+DBZWYVWZaDnqm2VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEJDN3VYdFRuR3Y0TUZsWmhWWmxvT2VxYlpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9mNzYzYTktNzE3Ni00ZjMyLTk3NjAt MjIwMTY1YzNlNmRmLzEvUEJDN3VYdFRuR3Y0TUZsWmhWWmxvT2VxYlpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9mNzYzYTktNzE3Ni00ZjMyLTk3NjAtMjIwMTY1YzNlNmRm LzEvUEJDN3VYdFRuR3Y0TUZsWmhWWmxvT2VxYlpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXqvhR1I8 jqgnKxdpjz7t0IYPzrdbmB5/muPoaYv/BXiHv6sp63NaNM0+37PTyKT+0fEVc+up imHD/eNNJUdakUmdEN32F5YGWtO0jCr/HQmov2oXiFTsMWXV94x92/HsDvl+F9Zb gCUsnxI5a0CuDKVGA7ivFIZz59ztansYj+rQVPa7x7070lWybWwCaKrvaTYREdct /9K00ugETLY1DBNbevLrZtOc0SxM7S3wN4Umm6NWpCauqSeYRaBwxsM17G2mgXOY DF9h6QRwp1h35YyCK1M4g0Ww8O0Dz7OrycLv9DRLdaoVZT3bBNeVcb5oW2tqBkPy ve0pMthyLjRbrQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:26:34 2025 by rpki-client