This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/PIbsMh5y_UbJjcwM18cLytVX1Zw.mft File: PIbsMh5y_UbJjcwM18cLytVX1Zw.mft (raw, json) Hash identifier: 5Fp25+dVFDJZAXSsw0iBQ5uxNs5CDyKhiY6uIe/yeog= Subject key identifier: CB:3E:90:E4:D7:5E:A9:F1:4C:25:73:49:62:F3:2F:E0:F6:1F:29:C9 Authority key identifier: 3C:86:EC:32:1E:72:FD:46:C9:8D:CC:0C:D7:C7:0B:CA:D5:57:D5:9C Certificate issuer: /CN=3c86ec321e72fd46c98dcc0cd7c70bcad557d59c Certificate serial: 019B34C510ECFB9A2FD6121D773AF633FB47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PIbsMh5y_UbJjcwM18cLytVX1Zw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/PIbsMh5y_UbJjcwM18cLytVX1Zw.mft Manifest number: 1787 Signing time: Fri 19 Dec 2025 04:01:28 +0000 Manifest this update: Fri 19 Dec 2025 04:01:28 +0000 Manifest next update: Sat 20 Dec 2025 04:01:28 +0000 Files and hashes: 1: PIbsMh5y_UbJjcwM18cLytVX1Zw.crl (hash: KmL+N7cSIozQ3/Ufxj/0Dvr6dGVBnk0QWATXFuyX8xo=) 2: XgpSQjhhfxwk9vZfnDmQ4hugM38.roa (hash: 0VqbQTYbejzGPg6sOJbQNqmXP31XYN5qUoi8IUVN5jw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/PIbsMh5y_UbJjcwM18cLytVX1Zw.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/PIbsMh5y_UbJjcwM18cLytVX1Zw.mft rsync://rpki.ripe.net/repository/DEFAULT/PIbsMh5y_UbJjcwM18cLytVX1Zw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c5:10:ec:fb:9a:2f:d6:12:1d:77:3a:f6:33:fb:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c86ec321e72fd46c98dcc0cd7c70bcad557d59c Validity Not Before: Dec 19 04:01:28 2025 GMT Not After : Dec 20 04:01:28 2025 GMT Subject: CN=cb3e90e4d75ea9f14c25734962f32fe0f61f29c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e7:17:b0:c7:1b:99:16:fa:16:de:21:3e:c8: 45:03:86:7c:7a:8e:25:a4:e3:66:0f:c6:9b:2a:b9: 8e:85:e9:5d:40:2f:40:09:b7:bf:1f:82:0a:40:01: 9a:b7:00:1a:29:4c:c7:3c:4e:f5:e4:bd:e0:9b:c4: 58:45:df:07:6f:7a:4e:ca:93:8b:95:4c:cd:13:b2: c2:e3:cd:8d:2d:89:61:19:87:37:af:f8:2e:68:2a: 59:e0:26:28:59:40:af:1b:06:00:cd:a2:80:dc:cf: 6b:4c:51:06:29:17:4c:78:22:7a:06:8f:c7:9b:cf: 73:95:c9:05:d5:b5:ba:ed:52:04:3e:b1:45:c2:f1: f2:8e:d9:e4:65:40:a8:50:d7:49:f2:3f:44:aa:7e: 4c:97:04:88:47:b1:15:5a:09:54:20:32:2c:00:52: 8a:2e:46:ae:45:78:43:c1:94:42:18:92:63:02:cf: e3:c6:11:0d:06:82:3d:83:ce:07:3f:24:6d:be:83: 6d:31:d9:1e:bf:20:24:af:d8:f7:6c:f3:d1:88:4c: a2:9f:8a:50:92:7d:74:a8:25:7e:0e:13:33:a1:cc: 4a:26:65:a2:12:3c:e8:d2:ee:42:e8:9d:a2:d2:ed: 95:07:af:f1:d4:10:0d:16:51:68:b5:63:04:a8:15: 68:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:3E:90:E4:D7:5E:A9:F1:4C:25:73:49:62:F3:2F:E0:F6:1F:29:C9 X509v3 Authority Key Identifier: keyid:3C:86:EC:32:1E:72:FD:46:C9:8D:CC:0C:D7:C7:0B:CA:D5:57:D5:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PIbsMh5y_UbJjcwM18cLytVX1Zw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/PIbsMh5y_UbJjcwM18cLytVX1Zw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/PIbsMh5y_UbJjcwM18cLytVX1Zw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:bf:c2:f8:f5:a4:c6:05:00:16:dc:66:a0:db:a7:2d:00:65: 03:54:ec:77:02:6f:6e:99:7a:ca:47:b3:db:9b:57:bd:01:4d: 4c:5e:c1:f6:a9:c4:a5:96:50:f5:80:02:cf:a9:29:ea:e2:de: af:a2:c4:0c:dc:d8:ac:52:5b:30:ef:c1:cf:ff:5e:3f:05:d2: 3e:e0:52:91:c8:d4:c3:87:4a:38:37:ae:1e:0f:6e:26:d9:48: c3:db:ee:4f:1e:84:7d:a5:cf:5f:a5:59:a0:03:aa:63:ca:60: 33:16:63:06:37:4d:fa:49:6d:f6:c6:bf:8a:34:43:9b:3d:f9: fd:3b:39:66:a9:5a:54:26:2f:3c:d2:e5:4f:de:6b:e6:2b:6c: c4:54:13:e6:f2:60:8b:ce:b0:6b:0e:d0:f0:dd:db:c9:58:02: 1b:43:03:04:0e:77:a9:79:aa:6a:02:7f:92:f9:96:63:99:4e: df:c1:17:9c:21:01:95:88:59:60:6c:2c:6c:30:9e:71:e3:dc: 4e:52:60:e0:2a:d5:6b:ed:9d:fb:40:cd:23:a7:2b:26:c9:00: 79:7e:ef:86:25:06:5e:06:b1:a4:ce:da:84:d1:6c:21:3d:0c: fc:b1:5f:35:c2:af:6b:cc:14:d5:2e:da:88:00:48:a6:c4:8d: c5:82:f3:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xRDs+5ov1hIddzr2M/tHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjODZlYzMyMWU3MmZkNDZjOThkY2MwY2Q3YzcwYmNhZDU1 N2Q1OWMwHhcNMjUxMjE5MDQwMTI4WhcNMjUxMjIwMDQwMTI4WjAzMTEwLwYDVQQD EyhjYjNlOTBlNGQ3NWVhOWYxNGMyNTczNDk2MmYzMmZlMGY2MWYyOWM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyucXsMcbmRb6Ft4hPshFA4Z8eo4l pONmD8abKrmOheldQC9ACbe/H4IKQAGatwAaKUzHPE715L3gm8RYRd8Hb3pOypOL lUzNE7LC482NLYlhGYc3r/guaCpZ4CYoWUCvGwYAzaKA3M9rTFEGKRdMeCJ6Bo/H m89zlckF1bW67VIEPrFFwvHyjtnkZUCoUNdJ8j9Eqn5MlwSIR7EVWglUIDIsAFKK LkauRXhDwZRCGJJjAs/jxhENBoI9g84HPyRtvoNtMdkevyAkr9j3bPPRiEyin4pQ kn10qCV+DhMzocxKJmWiEjzo0u5C6J2i0u2VB6/x1BANFlFotWMEqBVo/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMs+kOTXXqnxTCVzSWLzL+D2HynJMB8GA1UdIwQY MBaAFDyG7DIecv1GyY3MDNfHC8rVV9WcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUElic01oNXlfVWJKamN3TTE4Y0x5dFZYMVp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi81YzBmZDItNjc0My00NjgyLTk2N2It NWYxNWJlYWZhOWIxLzEvUElic01oNXlfVWJKamN3TTE4Y0x5dFZYMVp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi81YzBmZDItNjc0My00NjgyLTk2N2ItNWYxNWJlYWZhOWIx LzEvUElic01oNXlfVWJKamN3TTE4Y0x5dFZYMVp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbb/C+PWk xgUAFtxmoNunLQBlA1TsdwJvbpl6ykez25tXvQFNTF7B9qnEpZZQ9YACz6kp6uLe r6LEDNzYrFJbMO/Bz/9ePwXSPuBSkcjUw4dKODeuHg9uJtlIw9vuTx6EfaXPX6VZ oAOqY8pgMxZjBjdN+klt9sa/ijRDmz35/Ts5ZqlaVCYvPNLlT95r5itsxFQT5vJg i86waw7Q8N3byVgCG0MDBA53qXmqagJ/kvmWY5lO38EXnCEBlYhZYGwsbDCecePc TlJg4CrVa+2d+0DNI6crJskAeX7vhiUGXgaxpM7ahNFsIT0M/LFfNcKva8wU1S7a iABIpsSNxYLzJg== -----END CERTIFICATE-----Generated at Fri Dec 19 05:47:33 2025 by rpki-client