This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/PBuDiIaW_ERHjGk9bngD6VFiUOY.mft File: PBuDiIaW_ERHjGk9bngD6VFiUOY.mft (raw, json) Hash identifier: LrHqmFRVGkn809lFyIvRWYlGfQdi+MplueTTpU7x5nw= Subject key identifier: D5:FF:56:45:69:2F:E9:08:0E:55:CB:16:98:EB:16:86:D2:69:85:A5 Authority key identifier: 3C:1B:83:88:86:96:FC:44:47:8C:69:3D:6E:78:03:E9:51:62:50:E6 Certificate issuer: /CN=3c1b83888696fc44478c693d6e7803e9516250e6 Certificate serial: 019AF0BF0FAF65AF99C962CF90E017F4021B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBuDiIaW_ERHjGk9bngD6VFiUOY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/PBuDiIaW_ERHjGk9bngD6VFiUOY.mft Manifest number: 0E6F Signing time: Fri 05 Dec 2025 23:00:44 +0000 Manifest this update: Fri 05 Dec 2025 23:00:44 +0000 Manifest next update: Sat 06 Dec 2025 23:00:44 +0000 Files and hashes: 1: 1-PRouHcN36iLzwy9uNqLaIiV2X0.roa (hash: 4hehSvfv8sJqIC+vHja2uEOG+73HXBFbIDrIN8bH3vg=) 2: 67RGYz7m7xWKzUB6-JO6U9Kw4Oo.roa (hash: Iy7s2Aw6gINY7MrIIhsJrkKAANHoHyCQ2Dm8An5q6ps=) 3: PBuDiIaW_ERHjGk9bngD6VFiUOY.crl (hash: zdKFJkI7WlNJHuln01aJxcZ3mL/nnhfpKQZMBPc0rhY=) 4: rTI3MC_cflVKmz4QHcC39TCJNIM.roa (hash: Gn7Y1Iho0e2nKKiZXGFb+cFXQIXgua4De8STjxaheIw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/PBuDiIaW_ERHjGk9bngD6VFiUOY.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/PBuDiIaW_ERHjGk9bngD6VFiUOY.mft rsync://rpki.ripe.net/repository/DEFAULT/PBuDiIaW_ERHjGk9bngD6VFiUOY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:0f:af:65:af:99:c9:62:cf:90:e0:17:f4:02:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c1b83888696fc44478c693d6e7803e9516250e6 Validity Not Before: Dec 5 23:00:44 2025 GMT Not After : Dec 6 23:00:44 2025 GMT Subject: CN=d5ff5645692fe9080e55cb1698eb1686d26985a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:4b:ef:4f:68:00:2f:50:2e:fd:70:d8:0f:aa: 19:9f:d5:36:7c:80:43:c5:ab:f0:64:d7:5f:14:63: 73:1e:50:c9:31:75:70:97:96:de:81:62:c9:90:84: 8d:83:85:6a:b1:c6:47:91:90:37:69:e9:8a:fa:a7: 04:be:f8:d7:7a:6f:3d:92:a0:d0:e4:ec:43:a8:a4: 4d:d4:fa:7d:9a:2a:b4:04:ba:33:23:3c:c2:43:da: 4d:30:ed:86:76:c9:0e:b0:e5:2e:b7:90:3c:49:6e: 5d:b3:5b:42:6d:4c:12:46:5a:d7:76:b5:49:4b:9f: 32:b3:a0:25:0e:2b:7f:26:d4:c9:54:e4:86:96:0a: 02:f7:ba:ca:97:d8:e6:7e:89:57:c7:b8:0c:fa:49: 2d:12:f8:af:ba:f9:88:ce:98:15:8d:fb:42:79:ac: 7a:23:e7:e4:6c:a9:ad:c5:16:e7:0d:54:17:93:38: bc:0b:0f:96:c7:32:d8:3b:8f:c5:2e:9f:de:dc:33: c8:34:1b:3c:4c:39:a5:6e:2a:e3:9e:31:db:ae:f5: 71:9b:72:c7:8b:d9:5e:e6:d3:4c:86:4b:08:d0:01: e4:cb:e8:61:76:6e:ea:1b:2f:f1:3c:5a:c0:e9:22: cf:b1:2f:6b:a8:b1:c4:45:a3:99:bd:40:64:68:fc: 42:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:FF:56:45:69:2F:E9:08:0E:55:CB:16:98:EB:16:86:D2:69:85:A5 X509v3 Authority Key Identifier: keyid:3C:1B:83:88:86:96:FC:44:47:8C:69:3D:6E:78:03:E9:51:62:50:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBuDiIaW_ERHjGk9bngD6VFiUOY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/PBuDiIaW_ERHjGk9bngD6VFiUOY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/PBuDiIaW_ERHjGk9bngD6VFiUOY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:f5:2c:8f:27:12:c5:9e:26:72:3e:a0:ef:5f:90:83:2e:1b: 99:0b:66:df:88:99:82:0a:a1:8d:b1:8d:86:78:a9:44:f5:ed: 9a:c3:a1:3e:7c:d2:3f:ee:bb:39:b4:42:a5:fa:71:9e:d6:c7: 70:16:a4:29:af:f4:9c:e0:28:5c:e5:a8:be:8f:72:8e:7e:e9: 2c:35:11:d8:ea:91:63:db:46:a0:b7:59:f6:bb:5d:04:39:ae: b6:09:4a:d7:a3:d3:12:2f:27:68:a9:93:2e:e0:29:63:a9:84: 96:ba:44:62:47:41:df:00:b0:d5:0f:79:fd:2d:f8:34:11:94: 75:42:02:8e:42:ed:2e:ce:9c:ec:4d:8a:31:01:5f:7c:f1:08: bd:6f:ae:52:df:0b:2f:76:f9:91:cd:50:84:2e:ee:b0:9c:b1: ca:d0:95:20:c4:81:e4:4e:91:a4:fb:4d:99:02:1d:78:b2:4b: 9b:ce:81:9d:e6:d6:59:02:00:ae:79:83:35:fa:43:3a:cb:ed: ad:e6:43:1e:c6:2f:a5:c8:1a:15:8f:b3:fd:6b:13:11:a3:f8: ff:21:6c:b4:12:7a:fe:e1:ed:9e:92:3a:af:7d:53:69:f5:f2: ca:f4:fe:d4:19:c7:fe:3b:a7:ed:75:e8:50:53:c0:41:b1:d8: 6b:3d:73:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvw+vZa+ZyWLPkOAX9AIbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjMWI4Mzg4ODY5NmZjNDQ0NzhjNjkzZDZlNzgwM2U5NTE2 MjUwZTYwHhcNMjUxMjA1MjMwMDQ0WhcNMjUxMjA2MjMwMDQ0WjAzMTEwLwYDVQQD EyhkNWZmNTY0NTY5MmZlOTA4MGU1NWNiMTY5OGViMTY4NmQyNjk4NWE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7kvvT2gAL1Au/XDYD6oZn9U2fIBD xavwZNdfFGNzHlDJMXVwl5begWLJkISNg4VqscZHkZA3aemK+qcEvvjXem89kqDQ 5OxDqKRN1Pp9miq0BLozIzzCQ9pNMO2GdskOsOUut5A8SW5ds1tCbUwSRlrXdrVJ S58ys6AlDit/JtTJVOSGlgoC97rKl9jmfolXx7gM+kktEvivuvmIzpgVjftCeax6 I+fkbKmtxRbnDVQXkzi8Cw+WxzLYO4/FLp/e3DPINBs8TDmlbirjnjHbrvVxm3LH i9le5tNMhksI0AHky+hhdm7qGy/xPFrA6SLPsS9rqLHERaOZvUBkaPxCMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNX/VkVpL+kIDlXLFpjrFobSaYWlMB8GA1UdIwQY MBaAFDwbg4iGlvxER4xpPW54A+lRYlDmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEJ1RGlJYVdfRVJIakdrOWJuZ0Q2VkZpVU9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9kNTU2ODMtZmVjMi00N2ZkLWFjNmUt OWU4MmRhNzMxNWNmLzEvUEJ1RGlJYVdfRVJIakdrOWJuZ0Q2VkZpVU9ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9kNTU2ODMtZmVjMi00N2ZkLWFjNmUtOWU4MmRhNzMxNWNm LzEvUEJ1RGlJYVdfRVJIakdrOWJuZ0Q2VkZpVU9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACvUsjycS xZ4mcj6g71+Qgy4bmQtm34iZggqhjbGNhnipRPXtmsOhPnzSP+67ObRCpfpxntbH cBakKa/0nOAoXOWovo9yjn7pLDUR2OqRY9tGoLdZ9rtdBDmutglK16PTEi8naKmT LuApY6mElrpEYkdB3wCw1Q95/S34NBGUdUICjkLtLs6c7E2KMQFffPEIvW+uUt8L L3b5kc1QhC7usJyxytCVIMSB5E6RpPtNmQIdeLJLm86BnebWWQIArnmDNfpDOsvt reZDHsYvpcgaFY+z/WsTEaP4/yFstBJ6/uHtnpI6r31TafXyyvT+1BnH/jun7XXo UFPAQbHYaz1zHQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:11:21 2025 by rpki-client