This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/0363f0-ec0d-48a6-9ceb-e8bd2dba97ab/1/PBJHYkowBcb89mErrJnKsExgEmo.mft File: PBJHYkowBcb89mErrJnKsExgEmo.mft (raw, json) Hash identifier: jEYIG/kM975Bp9AD1Px3iW//Cee9mWwS9pb7F1Mp1cY= Subject key identifier: D9:B8:85:6F:F4:74:B7:E8:F3:FB:7B:C0:59:16:1A:2B:C1:4A:F1:33 Authority key identifier: 3C:12:47:62:4A:30:05:C6:FC:F6:61:2B:AC:99:CA:B0:4C:60:12:6A Certificate issuer: /CN=3c1247624a3005c6fcf6612bac99cab04c60126a Certificate serial: 019B2CD3D6E80770E3E6D47D5BC4A1C864E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBJHYkowBcb89mErrJnKsExgEmo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/0363f0-ec0d-48a6-9ceb-e8bd2dba97ab/1/PBJHYkowBcb89mErrJnKsExgEmo.mft Manifest number: 13 Signing time: Wed 17 Dec 2025 15:00:39 +0000 Manifest this update: Wed 17 Dec 2025 15:00:39 +0000 Manifest next update: Thu 18 Dec 2025 15:00:39 +0000 Files and hashes: 1: AVCw8DyKkNUiF_I561aHOaiB-yQ.roa (hash: 4jl/bGMpOoT3KaRQ6y+hEQZejpdNRUav6K6qbFOHgsk=) 2: PBJHYkowBcb89mErrJnKsExgEmo.crl (hash: BahH+KouF16jioEncLenV1o5/WqYkMkUVxpWIUNNC8Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/0363f0-ec0d-48a6-9ceb-e8bd2dba97ab/1/PBJHYkowBcb89mErrJnKsExgEmo.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/0363f0-ec0d-48a6-9ceb-e8bd2dba97ab/1/PBJHYkowBcb89mErrJnKsExgEmo.mft rsync://rpki.ripe.net/repository/DEFAULT/PBJHYkowBcb89mErrJnKsExgEmo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:d3:d6:e8:07:70:e3:e6:d4:7d:5b:c4:a1:c8:64:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c1247624a3005c6fcf6612bac99cab04c60126a Validity Not Before: Dec 17 15:00:39 2025 GMT Not After : Dec 18 15:00:39 2025 GMT Subject: CN=d9b8856ff474b7e8f3fb7bc059161a2bc14af133 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ac:c8:9c:35:14:d6:be:18:68:70:0e:20:9b: 5f:b7:a1:53:7a:be:0a:81:1f:ee:2a:f6:e4:2d:f5: 10:98:de:40:1e:f0:1f:b5:42:16:53:84:03:75:f6: 43:53:50:24:e6:15:bf:d4:b7:9b:42:04:b9:4b:6d: 25:c9:23:2d:f3:33:bb:3e:8a:6d:fc:e4:91:ee:bb: f3:f5:5b:ba:22:1a:02:95:18:19:84:61:a5:de:f5: 62:8e:16:d6:c4:f7:f5:fb:85:8b:94:84:e2:31:9e: 02:91:cc:73:55:37:32:6c:5b:0a:f7:bc:94:e9:14: b6:d9:9d:f3:3b:46:2d:f4:1d:52:0e:e7:a4:67:ab: fb:d5:4a:dc:4f:36:79:e4:2c:ff:26:3a:81:2b:c4: df:83:a5:f2:da:70:97:01:50:eb:52:29:af:ee:58: 40:a0:b7:7a:20:d2:a1:be:06:a2:0c:34:ec:39:45: 34:8f:d8:6d:84:7f:00:99:c3:7f:cc:8a:31:71:af: 2e:36:d1:cc:18:fd:43:17:ee:61:74:59:d9:ed:8e: ba:e0:e9:da:31:33:64:fd:cc:29:1e:b8:47:02:47: ab:ad:13:12:7a:5a:bf:e7:ee:0b:67:2d:9c:4b:83: cc:5c:71:1f:44:2d:05:89:04:ef:2e:46:4a:2e:5c: 90:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:B8:85:6F:F4:74:B7:E8:F3:FB:7B:C0:59:16:1A:2B:C1:4A:F1:33 X509v3 Authority Key Identifier: keyid:3C:12:47:62:4A:30:05:C6:FC:F6:61:2B:AC:99:CA:B0:4C:60:12:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBJHYkowBcb89mErrJnKsExgEmo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/0363f0-ec0d-48a6-9ceb-e8bd2dba97ab/1/PBJHYkowBcb89mErrJnKsExgEmo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/0363f0-ec0d-48a6-9ceb-e8bd2dba97ab/1/PBJHYkowBcb89mErrJnKsExgEmo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:13:b7:dd:57:04:73:7a:10:03:7d:79:fe:9f:28:b9:f5:da: 24:41:76:ea:2d:85:ad:75:ae:da:0a:9f:5d:61:ba:59:04:e9: db:36:c9:3b:23:b4:9a:f9:2c:9b:df:1e:cd:1d:1d:87:ee:88: 48:63:4a:72:e3:ed:a4:a2:7f:61:cc:b1:df:ea:63:b5:78:19: 63:c7:93:47:a8:57:ce:e7:ec:50:13:48:a9:05:09:c1:5c:85: 48:39:2a:0e:af:a7:2f:d7:27:fd:f8:3b:85:b6:3a:60:4b:5d: 9d:8d:02:d7:ba:ba:17:28:bc:33:b9:39:29:7a:4c:a0:a1:e2: 03:7e:cd:f1:8b:5b:f9:b7:50:18:62:f7:b7:39:4b:15:86:ce: 8b:3d:f9:9a:e2:07:b4:f9:c9:e8:97:df:a7:7c:39:cd:f3:a1: a5:b7:fb:1e:74:cb:3d:51:05:28:65:69:6f:d9:2e:29:57:57: d7:67:80:e5:9d:b5:d2:44:bf:a6:8c:d0:d5:44:36:38:9e:4b: 76:2c:58:7e:6d:e0:29:f0:fd:66:23:10:5d:8e:82:ec:6f:94: b3:55:b6:65:22:e5:ff:22:92:27:19:26:ee:66:d5:c4:de:ef: 9a:59:b0:c0:f5:c2:54:f3:f1:b5:e5:57:06:d1:d7:33:fc:4d: 0c:f0:fc:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZss09boB3Dj5tR9W8ShyGTlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjMTI0NzYyNGEzMDA1YzZmY2Y2NjEyYmFjOTljYWIwNGM2 MDEyNmEwHhcNMjUxMjE3MTUwMDM5WhcNMjUxMjE4MTUwMDM5WjAzMTEwLwYDVQQD EyhkOWI4ODU2ZmY0NzRiN2U4ZjNmYjdiYzA1OTE2MWEyYmMxNGFmMTMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqzInDUU1r4YaHAOIJtft6FTer4K gR/uKvbkLfUQmN5AHvAftUIWU4QDdfZDU1Ak5hW/1LebQgS5S20lySMt8zO7Popt /OSR7rvz9Vu6IhoClRgZhGGl3vVijhbWxPf1+4WLlITiMZ4CkcxzVTcybFsK97yU 6RS22Z3zO0Yt9B1SDuekZ6v71UrcTzZ55Cz/JjqBK8Tfg6Xy2nCXAVDrUimv7lhA oLd6INKhvgaiDDTsOUU0j9hthH8AmcN/zIoxca8uNtHMGP1DF+5hdFnZ7Y664Ona MTNk/cwpHrhHAkerrRMSelq/5+4LZy2cS4PMXHEfRC0FiQTvLkZKLlyQ7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNm4hW/0dLfo8/t7wFkWGivBSvEzMB8GA1UdIwQY MBaAFDwSR2JKMAXG/PZhK6yZyrBMYBJqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEJKSFlrb3dCY2I4OW1FcnJKbktzRXhnRW1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8wMzYzZjAtZWMwZC00OGE2LTljZWIt ZThiZDJkYmE5N2FiLzEvUEJKSFlrb3dCY2I4OW1FcnJKbktzRXhnRW1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC8wMzYzZjAtZWMwZC00OGE2LTljZWItZThiZDJkYmE5N2Fi LzEvUEJKSFlrb3dCY2I4OW1FcnJKbktzRXhnRW1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaBO33VcE c3oQA315/p8oufXaJEF26i2FrXWu2gqfXWG6WQTp2zbJOyO0mvksm98ezR0dh+6I SGNKcuPtpKJ/Ycyx3+pjtXgZY8eTR6hXzufsUBNIqQUJwVyFSDkqDq+nL9cn/fg7 hbY6YEtdnY0C17q6Fyi8M7k5KXpMoKHiA37N8Ytb+bdQGGL3tzlLFYbOiz35muIH tPnJ6Jffp3w5zfOhpbf7HnTLPVEFKGVpb9kuKVdX12eA5Z210kS/pozQ1UQ2OJ5L dixYfm3gKfD9ZiMQXY6C7G+Us1W2ZSLl/yKSJxkm7mbVxN7vmlmwwPXCVPPxteVX BtHXM/xNDPD8JA== -----END CERTIFICATE-----Generated at Wed Dec 17 18:38:14 2025 by rpki-client