This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/f7bbc4-562a-4e79-a8ee-9380e5cc0580/1/PbbiTPwA0i9O-jmkIdr7e7HaS4M.mft File: PbbiTPwA0i9O-jmkIdr7e7HaS4M.mft (raw, json) Hash identifier: UmtQz2jOK0x7RJ9Z6VA6Fe3mXYDfBkNmLSRIPJIuCTs= Subject key identifier: 46:40:41:8E:D2:A5:10:47:FB:56:F4:88:03:D4:59:87:18:F0:D8:0E Authority key identifier: 3D:B6:E2:4C:FC:00:D2:2F:4E:FA:39:A4:21:DA:FB:7B:B1:DA:4B:83 Certificate issuer: /CN=3db6e24cfc00d22f4efa39a421dafb7bb1da4b83 Certificate serial: 019AF19B4F965B7857DE057990DB10637CBF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PbbiTPwA0i9O-jmkIdr7e7HaS4M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/f7bbc4-562a-4e79-a8ee-9380e5cc0580/1/PbbiTPwA0i9O-jmkIdr7e7HaS4M.mft Manifest number: 10A6 Signing time: Sat 06 Dec 2025 03:01:18 +0000 Manifest this update: Sat 06 Dec 2025 03:01:18 +0000 Manifest next update: Sun 07 Dec 2025 03:01:18 +0000 Files and hashes: 1: PbbiTPwA0i9O-jmkIdr7e7HaS4M.crl (hash: Kv6o+vuM2FIJImMdRTnlRi07eW8Jcw4DPdx47YJGDjg=) 2: he1zzqscDQVrqbAH6ruuBRGptHQ.roa (hash: pIEmG6D6JQGwEUn6Yp/QlQoXb08gkZ0Iha980hmaQQ8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/f7bbc4-562a-4e79-a8ee-9380e5cc0580/1/PbbiTPwA0i9O-jmkIdr7e7HaS4M.crl rsync://rpki.ripe.net/repository/DEFAULT/98/f7bbc4-562a-4e79-a8ee-9380e5cc0580/1/PbbiTPwA0i9O-jmkIdr7e7HaS4M.mft rsync://rpki.ripe.net/repository/DEFAULT/PbbiTPwA0i9O-jmkIdr7e7HaS4M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:4f:96:5b:78:57:de:05:79:90:db:10:63:7c:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3db6e24cfc00d22f4efa39a421dafb7bb1da4b83 Validity Not Before: Dec 6 03:01:18 2025 GMT Not After : Dec 7 03:01:18 2025 GMT Subject: CN=4640418ed2a51047fb56f48803d4598718f0d80e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:86:32:a6:3c:fc:95:d0:9e:71:ef:d0:a0:e7: 21:19:40:5e:f0:dc:e4:e1:77:87:4a:fc:5c:2e:d6: 64:ef:ad:b2:42:59:dd:cb:ca:57:8f:82:64:ba:59: ac:57:86:f2:ed:1e:59:52:91:14:6d:09:1d:62:4e: ad:0b:68:dd:31:cb:65:02:c9:51:69:af:be:6d:81: 30:1c:38:f7:2d:88:17:03:ef:f1:da:6e:b8:19:8b: 52:f8:a8:30:11:0f:59:a9:22:fb:12:84:d2:e1:13: 4f:f2:10:cb:d5:06:55:df:7e:9b:e9:3f:b6:52:86: 87:39:b9:51:7a:cf:aa:b0:8b:65:73:8b:3d:c7:5f: ff:26:ce:da:bb:fc:87:4f:4a:0b:d0:35:46:da:eb: 7f:cd:36:8b:01:77:34:c5:cc:37:85:3b:60:8b:7c: ef:fd:da:00:d2:8e:a8:8d:1f:c1:7c:43:71:c8:d8: 6d:ae:ef:75:6b:b5:bf:3b:3f:a7:e5:0d:5b:da:14: 04:f7:83:dc:97:60:e4:b1:56:b4:5b:9a:76:26:d8: 9b:37:8a:b7:f0:b2:f3:c2:22:e4:7f:27:70:5d:f4: 10:46:2f:b5:9a:67:85:82:92:83:64:04:cd:d6:9e: 1e:fc:c4:2e:ca:57:3b:18:03:7c:4f:38:d2:10:95: d3:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:40:41:8E:D2:A5:10:47:FB:56:F4:88:03:D4:59:87:18:F0:D8:0E X509v3 Authority Key Identifier: keyid:3D:B6:E2:4C:FC:00:D2:2F:4E:FA:39:A4:21:DA:FB:7B:B1:DA:4B:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PbbiTPwA0i9O-jmkIdr7e7HaS4M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/f7bbc4-562a-4e79-a8ee-9380e5cc0580/1/PbbiTPwA0i9O-jmkIdr7e7HaS4M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/f7bbc4-562a-4e79-a8ee-9380e5cc0580/1/PbbiTPwA0i9O-jmkIdr7e7HaS4M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:da:ae:f5:d9:89:34:02:b3:12:71:24:56:0f:ad:f8:e9:1d: 18:6b:0d:1e:1e:3d:32:79:3e:45:cb:36:56:be:63:6f:01:95: a7:a1:75:e9:5a:15:a7:23:02:d9:9c:8b:89:cd:2b:28:1d:44: b5:73:3b:35:07:28:b3:d9:be:1a:61:dd:f5:af:31:73:04:3a: 89:a0:bc:75:6d:4e:86:28:34:aa:46:90:c5:01:d7:f5:84:59: d1:ad:f1:de:ba:13:c0:66:ea:06:dc:5c:39:5c:59:35:10:6c: c8:ef:09:98:17:24:e0:2f:b8:fa:a6:bf:bb:3c:aa:af:db:04: 50:a5:ee:bf:c8:b7:db:b7:ba:4c:38:3d:1a:8c:da:c2:86:52: 0c:c2:02:68:4b:7e:ab:73:b4:54:99:c8:97:0f:13:0a:a7:13: 3e:22:29:72:a3:b8:1c:f7:42:fd:c7:c5:66:ae:60:5b:60:ad: 50:e9:96:98:22:07:06:6d:9f:be:c8:8c:8f:de:40:61:61:9d: 1e:c7:26:29:c2:b3:89:86:5e:40:69:f0:74:1e:95:c8:cc:a3: ed:fa:81:14:0d:29:74:02:b3:59:1c:b2:48:48:93:18:89:7b: f8:4e:91:7d:77:72:69:b4:6f:a7:e6:24:91:2b:26:e9:df:51: 06:aa:0f:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm0+WW3hX3gV5kNsQY3y/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkYjZlMjRjZmMwMGQyMmY0ZWZhMzlhNDIxZGFmYjdiYjFk YTRiODMwHhcNMjUxMjA2MDMwMTE4WhcNMjUxMjA3MDMwMTE4WjAzMTEwLwYDVQQD Eyg0NjQwNDE4ZWQyYTUxMDQ3ZmI1NmY0ODgwM2Q0NTk4NzE4ZjBkODBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYYypjz8ldCece/QoOchGUBe8Nzk 4XeHSvxcLtZk762yQlndy8pXj4JkulmsV4by7R5ZUpEUbQkdYk6tC2jdMctlAslR aa++bYEwHDj3LYgXA+/x2m64GYtS+KgwEQ9ZqSL7EoTS4RNP8hDL1QZV336b6T+2 UoaHOblRes+qsItlc4s9x1//Js7au/yHT0oL0DVG2ut/zTaLAXc0xcw3hTtgi3zv /doA0o6ojR/BfENxyNhtru91a7W/Oz+n5Q1b2hQE94Pcl2DksVa0W5p2JtibN4q3 8LLzwiLkfydwXfQQRi+1mmeFgpKDZATN1p4e/MQuylc7GAN8TzjSEJXTSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEZAQY7SpRBH+1b0iAPUWYcY8NgOMB8GA1UdIwQY MBaAFD224kz8ANIvTvo5pCHa+3ux2kuDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGJiaVRQd0EwaTlPLWpta0lkcjdlN0hhUzRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9mN2JiYzQtNTYyYS00ZTc5LWE4ZWUt OTM4MGU1Y2MwNTgwLzEvUGJiaVRQd0EwaTlPLWpta0lkcjdlN0hhUzRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC9mN2JiYzQtNTYyYS00ZTc5LWE4ZWUtOTM4MGU1Y2MwNTgw LzEvUGJiaVRQd0EwaTlPLWpta0lkcjdlN0hhUzRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUdqu9dmJ NAKzEnEkVg+t+OkdGGsNHh49Mnk+Rcs2Vr5jbwGVp6F16VoVpyMC2ZyLic0rKB1E tXM7NQcos9m+GmHd9a8xcwQ6iaC8dW1Ohig0qkaQxQHX9YRZ0a3x3roTwGbqBtxc OVxZNRBsyO8JmBck4C+4+qa/uzyqr9sEUKXuv8i327e6TDg9GozawoZSDMICaEt+ q3O0VJnIlw8TCqcTPiIpcqO4HPdC/cfFZq5gW2CtUOmWmCIHBm2fvsiMj95AYWGd HscmKcKziYZeQGnwdB6VyMyj7fqBFA0pdAKzWRyySEiTGIl7+E6RfXdyabRvp+Yk kSsm6d9RBqoPOA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:19:24 2025 by rpki-client