This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/1a40f5-b9c9-4856-83c6-ef040aebea60/1/pBdnGZEpiZeeCGEloqQaEz__3CQ.mft File: pBdnGZEpiZeeCGEloqQaEz__3CQ.mft (raw, json) Hash identifier: KVv6TMKYD5z2uSPjpRGq2OvYUBQVYdQcuEGKo14xpwk= Subject key identifier: 1C:09:3E:AB:54:44:FA:15:D4:8F:41:A7:FB:1B:FA:90:84:27:AF:CD Authority key identifier: A4:17:67:19:91:29:89:97:9E:08:61:25:A2:A4:1A:13:3F:FF:DC:24 Certificate issuer: /CN=a4176719912989979e086125a2a41a133fffdc24 Certificate serial: 019AF49BB4458BE73DCE84B8EDFEF5441489 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pBdnGZEpiZeeCGEloqQaEz__3CQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/1a40f5-b9c9-4856-83c6-ef040aebea60/1/pBdnGZEpiZeeCGEloqQaEz__3CQ.mft Manifest number: 034D Signing time: Sat 06 Dec 2025 17:00:36 +0000 Manifest this update: Sat 06 Dec 2025 17:00:36 +0000 Manifest next update: Sun 07 Dec 2025 17:00:36 +0000 Files and hashes: 1: cbfaYBjluJFGRHIZotfNKfL5QOM.roa (hash: hnnwP5hTMZNnGccOJwmbq229la5aF88t7OiSZXiU/mU=) 2: pBdnGZEpiZeeCGEloqQaEz__3CQ.crl (hash: zPHLDC4/+apWNxJBePospo4+bTo6pWByNCRWng4sttQ=) 3: zwNxRZCXOiLKuZa_7Wmh9NcuOqQ.roa (hash: 6xxBkLaHc1up/veCbZl0eXM5uTf3B1SDA3dM0Oft33U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/1a40f5-b9c9-4856-83c6-ef040aebea60/1/pBdnGZEpiZeeCGEloqQaEz__3CQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/1a40f5-b9c9-4856-83c6-ef040aebea60/1/pBdnGZEpiZeeCGEloqQaEz__3CQ.mft rsync://rpki.ripe.net/repository/DEFAULT/pBdnGZEpiZeeCGEloqQaEz__3CQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 17:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9b:b4:45:8b:e7:3d:ce:84:b8:ed:fe:f5:44:14:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4176719912989979e086125a2a41a133fffdc24 Validity Not Before: Dec 6 17:00:36 2025 GMT Not After : Dec 7 17:00:36 2025 GMT Subject: CN=1c093eab5444fa15d48f41a7fb1bfa908427afcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:41:36:c1:5b:cc:22:6f:b5:e1:4c:d6:7d:3e: b8:a1:e7:36:aa:d7:8d:e5:9c:d3:82:78:1a:20:5e: e8:b7:59:45:5f:f9:c3:93:76:56:06:18:ca:db:a6: 8d:6b:f0:fc:57:62:25:02:3e:b6:c0:62:8b:a5:7f: 27:60:5f:90:82:40:3f:39:a5:80:3d:bd:ba:9f:1d: b9:6c:ef:43:b8:97:05:1e:d5:4c:30:2a:15:8f:13: 90:21:ba:ac:a9:1d:9b:eb:3f:bf:b5:a6:a6:fc:3f: 85:3c:40:c8:4b:5a:7b:41:bc:9a:46:05:cf:df:09: e3:54:97:ce:cd:a5:e1:4b:08:36:8d:ed:01:69:c6: 7c:7d:89:d6:4c:aa:17:56:73:2b:ea:30:97:d6:42: 83:e6:ba:78:bd:dc:49:07:03:f2:60:54:1a:64:3e: 35:63:b9:a0:d2:97:ce:c5:cc:b7:6b:d9:d0:ac:71: 5c:d1:a0:6e:59:d7:92:29:82:61:de:56:f1:34:f4: 18:5a:c3:b5:2d:d2:f9:a3:9f:7f:76:cb:7e:9b:7d: 5e:bd:a7:0f:e6:4d:49:01:5e:96:43:ac:a8:66:cd: 8c:59:4e:94:f4:69:6b:38:6e:32:61:92:87:cc:d9: 06:7b:be:e2:a8:dd:1d:19:ea:10:30:26:18:59:c2: 89:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:09:3E:AB:54:44:FA:15:D4:8F:41:A7:FB:1B:FA:90:84:27:AF:CD X509v3 Authority Key Identifier: keyid:A4:17:67:19:91:29:89:97:9E:08:61:25:A2:A4:1A:13:3F:FF:DC:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pBdnGZEpiZeeCGEloqQaEz__3CQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/1a40f5-b9c9-4856-83c6-ef040aebea60/1/pBdnGZEpiZeeCGEloqQaEz__3CQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/1a40f5-b9c9-4856-83c6-ef040aebea60/1/pBdnGZEpiZeeCGEloqQaEz__3CQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:27:cd:b7:09:f3:7f:b0:5c:11:58:af:47:5c:73:10:fe:7c: a2:1c:6b:65:34:75:1d:22:00:4f:73:41:66:9a:d2:6a:d9:3b: c9:23:2e:e8:6f:7a:0c:6e:fc:89:2e:89:57:2a:68:57:ce:18: e2:a0:4c:ef:dd:17:db:1e:9f:f4:3b:56:0e:e3:fd:ff:5d:e0: d4:1e:db:5c:b3:64:80:63:18:1b:39:4f:06:96:b0:15:f6:5d: 36:9b:70:93:37:50:69:1f:27:c2:b6:0e:c5:c6:d4:0f:d9:a5: 07:9d:cc:20:39:0c:42:51:ec:95:23:5f:4c:c0:00:df:6d:ed: d6:15:af:57:13:e0:01:32:e2:ab:36:1f:b7:d3:a9:99:ce:c7: 8f:32:55:0b:f9:ce:d9:cf:ee:d5:17:b4:3c:71:62:c6:23:d7: 2f:cb:bd:c1:ea:fa:9d:cd:6a:f6:80:38:b5:6b:1a:73:85:3f: 41:22:e6:74:17:0e:9d:1b:fb:05:59:f8:a7:2c:d0:ac:37:61: 09:48:e5:9c:83:e7:2b:9d:43:14:d0:cd:b4:24:df:a7:db:1e: 3c:4b:5b:15:1c:bc:49:3e:50:03:b8:d6:53:9d:4c:42:1f:08: eb:59:d7:82:78:c3:f0:bd:70:0b:31:1a:da:35:69:46:5d:94: 9a:e7:77:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0m7RFi+c9zoS47f71RBSJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0MTc2NzE5OTEyOTg5OTc5ZTA4NjEyNWEyYTQxYTEzM2Zm ZmRjMjQwHhcNMjUxMjA2MTcwMDM2WhcNMjUxMjA3MTcwMDM2WjAzMTEwLwYDVQQD EygxYzA5M2VhYjU0NDRmYTE1ZDQ4ZjQxYTdmYjFiZmE5MDg0MjdhZmNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkE2wVvMIm+14UzWfT64oec2qteN 5ZzTgngaIF7ot1lFX/nDk3ZWBhjK26aNa/D8V2IlAj62wGKLpX8nYF+QgkA/OaWA Pb26nx25bO9DuJcFHtVMMCoVjxOQIbqsqR2b6z+/taam/D+FPEDIS1p7QbyaRgXP 3wnjVJfOzaXhSwg2je0BacZ8fYnWTKoXVnMr6jCX1kKD5rp4vdxJBwPyYFQaZD41 Y7mg0pfOxcy3a9nQrHFc0aBuWdeSKYJh3lbxNPQYWsO1LdL5o59/dst+m31evacP 5k1JAV6WQ6yoZs2MWU6U9GlrOG4yYZKHzNkGe77iqN0dGeoQMCYYWcKJFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBwJPqtURPoV1I9Bp/sb+pCEJ6/NMB8GA1UdIwQY MBaAFKQXZxmRKYmXnghhJaKkGhM//9wkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEJkbkdaRXBpWmVlQ0dFbG9xUWFFel9fM0NRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8xYTQwZjUtYjljOS00ODU2LTgzYzYt ZWYwNDBhZWJlYTYwLzEvcEJkbkdaRXBpWmVlQ0dFbG9xUWFFel9fM0NRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy8xYTQwZjUtYjljOS00ODU2LTgzYzYtZWYwNDBhZWJlYTYw LzEvcEJkbkdaRXBpWmVlQ0dFbG9xUWFFel9fM0NRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABCfNtwnz f7BcEVivR1xzEP58ohxrZTR1HSIAT3NBZprSatk7ySMu6G96DG78iS6JVypoV84Y 4qBM790X2x6f9DtWDuP9/13g1B7bXLNkgGMYGzlPBpawFfZdNptwkzdQaR8nwrYO xcbUD9mlB53MIDkMQlHslSNfTMAA323t1hWvVxPgATLiqzYft9Opmc7HjzJVC/nO 2c/u1Re0PHFixiPXL8u9wer6nc1q9oA4tWsac4U/QSLmdBcOnRv7BVn4pyzQrDdh CUjlnIPnK51DFNDNtCTfp9sePEtbFRy8ST5QA7jWU51MQh8I61nXgnjD8L1wCzEa 2jVpRl2Umud3og== -----END CERTIFICATE-----Generated at Sun Dec 7 02:09:44 2025 by rpki-client