This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/239b73-7aa7-4b58-b12c-7927de539364/1/PBnm8n2SgJXlYN52ePKONFnVWUc.mft File: PBnm8n2SgJXlYN52ePKONFnVWUc.mft (raw, json) Hash identifier: X91QSeokfSFQB7U5y/veX2DLuLexRUSHDceUyn4OE/c= Subject key identifier: C0:0C:49:D6:AB:1C:FF:BC:84:28:9A:3C:62:21:F8:AE:33:E3:15:06 Authority key identifier: 3C:19:E6:F2:7D:92:80:95:E5:60:DE:76:78:F2:8E:34:59:D5:59:47 Certificate issuer: /CN=3c19e6f27d928095e560de7678f28e3459d55947 Certificate serial: 019AF31CE5EA1F902FB001ACDBC64372E588 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBnm8n2SgJXlYN52ePKONFnVWUc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/239b73-7aa7-4b58-b12c-7927de539364/1/PBnm8n2SgJXlYN52ePKONFnVWUc.mft Manifest number: 0275 Signing time: Sat 06 Dec 2025 10:02:28 +0000 Manifest this update: Sat 06 Dec 2025 10:02:28 +0000 Manifest next update: Sun 07 Dec 2025 10:02:28 +0000 Files and hashes: 1: PBnm8n2SgJXlYN52ePKONFnVWUc.crl (hash: dqKfbqy86+0BrUkfDT7TXFiutxJjKu87uEq3tMMImws=) 2: QmVb0SoXYnlMedY0w_3_iXHpV1g.roa (hash: a3gXOD/NjdWHnE6P9SQzEQhqDOtbuugfMMDorP0aI2g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/239b73-7aa7-4b58-b12c-7927de539364/1/PBnm8n2SgJXlYN52ePKONFnVWUc.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/239b73-7aa7-4b58-b12c-7927de539364/1/PBnm8n2SgJXlYN52ePKONFnVWUc.mft rsync://rpki.ripe.net/repository/DEFAULT/PBnm8n2SgJXlYN52ePKONFnVWUc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:e5:ea:1f:90:2f:b0:01:ac:db:c6:43:72:e5:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c19e6f27d928095e560de7678f28e3459d55947 Validity Not Before: Dec 6 10:02:28 2025 GMT Not After : Dec 7 10:02:28 2025 GMT Subject: CN=c00c49d6ab1cffbc84289a3c6221f8ae33e31506 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ca:04:6a:7e:74:6c:1e:74:bc:dd:cf:2b:85: 80:c7:35:f1:d2:ab:d7:01:2b:57:68:4f:f1:18:2b: 7d:2a:92:6f:9c:20:a7:8f:e6:93:24:65:88:5e:fb: e4:38:9c:9b:4a:bb:5d:ab:5c:19:ea:a7:45:54:f8: 16:35:1e:42:5e:84:7c:44:02:fb:0d:f1:90:52:64: ce:b1:f6:52:62:28:87:bd:a7:c2:af:4e:59:ac:43: 71:e7:14:d5:46:86:e8:1a:b5:9d:1b:1c:15:2e:a5: 7f:75:c3:00:c9:f6:e8:18:27:a9:d8:3c:43:58:86: 15:14:9f:8a:2c:73:bc:45:cd:14:ef:5b:89:42:1a: 78:c3:96:5e:36:d0:0c:5e:c8:d8:00:d7:37:95:e2: a0:6e:e0:a4:5e:8c:d2:3e:46:52:a0:3f:6d:dd:12: 6b:98:0f:d2:9d:a6:2a:27:61:85:d6:fd:39:9f:27: 16:b7:3f:bd:8c:05:19:0b:ce:cf:23:c1:b4:d0:a5: 03:64:08:a1:bc:3b:2d:8b:36:39:bb:d0:4f:45:09: 9a:95:7b:de:e2:61:cd:c1:a1:5d:63:76:83:85:73: aa:b7:14:43:98:fc:b6:3e:3d:a2:9a:dd:e5:8c:75: 0e:90:2f:32:16:35:10:ca:14:ec:52:d7:0e:b7:c7: 6a:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:0C:49:D6:AB:1C:FF:BC:84:28:9A:3C:62:21:F8:AE:33:E3:15:06 X509v3 Authority Key Identifier: keyid:3C:19:E6:F2:7D:92:80:95:E5:60:DE:76:78:F2:8E:34:59:D5:59:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBnm8n2SgJXlYN52ePKONFnVWUc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/239b73-7aa7-4b58-b12c-7927de539364/1/PBnm8n2SgJXlYN52ePKONFnVWUc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/239b73-7aa7-4b58-b12c-7927de539364/1/PBnm8n2SgJXlYN52ePKONFnVWUc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:b4:d6:ba:82:98:1c:4c:db:a3:00:ce:82:eb:a6:82:4f:36: da:5f:8f:28:87:3b:bb:3f:05:45:80:eb:52:f1:27:ce:aa:97: 3f:2f:2b:1d:27:fa:0f:60:b7:22:b3:ab:51:06:04:84:60:00: 5c:9e:cf:66:2f:0d:68:9a:97:1b:27:c3:c3:76:84:a9:71:71: 2c:9a:cf:7f:19:8c:c4:7f:fb:ef:2c:7f:e3:d6:f8:07:89:a0: f9:d7:65:f0:e4:8a:85:57:17:0e:85:1c:1c:11:a6:94:d4:95: 66:a0:57:56:62:7e:63:18:e9:4b:8d:4e:4a:80:75:3e:ed:96: f5:f7:3f:0c:f1:49:82:14:0a:2f:52:64:45:9d:90:10:1c:b8: e9:4b:c3:5b:78:b2:d9:84:ce:ac:67:9b:01:f9:2c:75:be:18: 74:19:81:4e:3c:8e:f0:0a:5e:4f:a7:d6:8a:28:70:99:e5:c1: 7a:ac:a6:50:01:72:0a:e5:28:93:cc:6a:89:e6:b9:53:9c:d3: 3d:41:64:a9:36:55:e6:78:48:bf:ea:49:7a:1c:78:0c:2b:b0: 3e:ba:8f:37:b4:f1:26:e0:f1:9b:89:6b:11:af:3d:0f:d0:ea: 67:81:5e:e9:5b:f2:7c:c9:38:7b:5b:82:4d:f6:f1:5e:eb:11: 87:40:43:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHOXqH5AvsAGs28ZDcuWIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjMTllNmYyN2Q5MjgwOTVlNTYwZGU3Njc4ZjI4ZTM0NTlk NTU5NDcwHhcNMjUxMjA2MTAwMjI4WhcNMjUxMjA3MTAwMjI4WjAzMTEwLwYDVQQD EyhjMDBjNDlkNmFiMWNmZmJjODQyODlhM2M2MjIxZjhhZTMzZTMxNTA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMoEan50bB50vN3PK4WAxzXx0qvX AStXaE/xGCt9KpJvnCCnj+aTJGWIXvvkOJybSrtdq1wZ6qdFVPgWNR5CXoR8RAL7 DfGQUmTOsfZSYiiHvafCr05ZrENx5xTVRoboGrWdGxwVLqV/dcMAyfboGCep2DxD WIYVFJ+KLHO8Rc0U71uJQhp4w5ZeNtAMXsjYANc3leKgbuCkXozSPkZSoD9t3RJr mA/SnaYqJ2GF1v05nycWtz+9jAUZC87PI8G00KUDZAihvDstizY5u9BPRQmalXve 4mHNwaFdY3aDhXOqtxRDmPy2Pj2imt3ljHUOkC8yFjUQyhTsUtcOt8dq3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMAMSdarHP+8hCiaPGIh+K4z4xUGMB8GA1UdIwQY MBaAFDwZ5vJ9koCV5WDednjyjjRZ1VlHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEJubThuMlNnSlhsWU41MmVQS09ORm5WV1VjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8yMzliNzMtN2FhNy00YjU4LWIxMmMt NzkyN2RlNTM5MzY0LzEvUEJubThuMlNnSlhsWU41MmVQS09ORm5WV1VjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS8yMzliNzMtN2FhNy00YjU4LWIxMmMtNzkyN2RlNTM5MzY0 LzEvUEJubThuMlNnSlhsWU41MmVQS09ORm5WV1VjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnbTWuoKY HEzbowDOguumgk822l+PKIc7uz8FRYDrUvEnzqqXPy8rHSf6D2C3IrOrUQYEhGAA XJ7PZi8NaJqXGyfDw3aEqXFxLJrPfxmMxH/77yx/49b4B4mg+ddl8OSKhVcXDoUc HBGmlNSVZqBXVmJ+YxjpS41OSoB1Pu2W9fc/DPFJghQKL1JkRZ2QEBy46UvDW3iy 2YTOrGebAfksdb4YdBmBTjyO8ApeT6fWiihwmeXBeqymUAFyCuUok8xqiea5U5zT PUFkqTZV5nhIv+pJehx4DCuwPrqPN7TxJuDxm4lrEa89D9DqZ4Fe6VvyfMk4e1uC TfbxXusRh0BDEg== -----END CERTIFICATE-----Generated at Sat Dec 6 17:46:42 2025 by rpki-client