This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.mft File: PBHQXNKatxkq8DnPXz0AvpIVeTk.mft (raw, json) Hash identifier: 07sXJffNhKiWFzC1E3tmTLLKE+6ariugLTJYO1TDNT4= Subject key identifier: FF:51:D5:EA:8A:D4:7E:A9:34:1F:8A:6C:63:49:25:77:66:3B:01:2A Authority key identifier: 3C:11:D0:5C:D2:9A:B7:19:2A:F0:39:CF:5F:3D:00:BE:92:15:79:39 Certificate issuer: /CN=3c11d05cd29ab7192af039cf5f3d00be92157939 Certificate serial: 019AF3C02A1FE54172A1F6862F7C0BA6C427 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBHQXNKatxkq8DnPXz0AvpIVeTk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.mft Manifest number: 09B1 Signing time: Sat 06 Dec 2025 13:00:48 +0000 Manifest this update: Sat 06 Dec 2025 13:00:48 +0000 Manifest next update: Sun 07 Dec 2025 13:00:48 +0000 Files and hashes: 1: PBHQXNKatxkq8DnPXz0AvpIVeTk.crl (hash: fzQbwwlnRPeXI9PuDiBqVuAPS2gh23tMw5Mjz8ZMMEs=) 2: uXWEOT5kLicjM9eRqYG2MPSav7U.roa (hash: WztCPaYNfJzy3qntVN7a2OFcCyo/yo2zpUp1jJXzcgs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.mft rsync://rpki.ripe.net/repository/DEFAULT/PBHQXNKatxkq8DnPXz0AvpIVeTk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:2a:1f:e5:41:72:a1:f6:86:2f:7c:0b:a6:c4:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c11d05cd29ab7192af039cf5f3d00be92157939 Validity Not Before: Dec 6 13:00:48 2025 GMT Not After : Dec 7 13:00:48 2025 GMT Subject: CN=ff51d5ea8ad47ea9341f8a6c63492577663b012a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:f7:bd:a1:6a:c0:04:b8:48:55:03:b4:18:88: 36:01:1a:22:0d:37:1d:e3:75:78:00:e6:e1:22:67: 36:e8:e6:fe:22:35:14:33:1e:11:5c:05:28:1a:77: 4e:0d:a6:3b:e8:d0:63:0a:d1:06:2b:0a:d0:c7:ae: b7:2c:72:f0:82:f8:65:a3:e3:41:49:53:f2:7f:33: 5a:fb:5e:bf:a7:e2:b0:b1:90:5c:66:d6:34:56:7a: d3:e2:42:3d:26:a7:b7:01:e0:1c:62:23:88:70:d0: eb:ec:f3:3d:38:a8:e6:7e:99:62:ac:aa:2b:34:e8: 79:e8:32:06:9c:c1:6a:b3:6b:12:d0:f8:d8:9d:0d: 62:8e:1d:e0:60:dd:b9:27:73:47:75:13:67:73:60: 34:32:16:db:4f:fa:28:5f:ca:5b:61:05:b7:59:de: 3d:be:dd:6e:ab:79:bd:62:9c:ca:09:00:26:bc:d8: 72:ab:89:f4:25:42:da:61:2c:20:c1:67:18:a1:e8: 87:66:a0:bc:b1:22:32:90:c0:2c:40:39:a3:31:1b: a1:f8:07:f4:fd:3b:2b:68:b0:ae:fe:e1:03:f1:d8: 84:55:44:29:07:54:c6:2f:9d:e3:32:fd:1d:3d:af: a2:6d:9d:65:75:ae:4d:72:62:6b:54:dd:cf:ff:d9: f9:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:51:D5:EA:8A:D4:7E:A9:34:1F:8A:6C:63:49:25:77:66:3B:01:2A X509v3 Authority Key Identifier: keyid:3C:11:D0:5C:D2:9A:B7:19:2A:F0:39:CF:5F:3D:00:BE:92:15:79:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBHQXNKatxkq8DnPXz0AvpIVeTk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:7c:56:49:da:06:d2:3f:85:12:2a:c4:11:01:ed:98:37:5e: 8a:fe:33:ce:d5:5e:42:4e:36:d8:4e:09:54:0e:63:e8:de:6a: 99:43:6d:56:a5:5f:20:b9:22:1b:ab:1a:ca:f3:c3:85:d6:67: 76:7e:43:ca:0c:29:5d:0e:2a:fe:d7:b1:1c:79:85:39:fc:e8: be:9e:ff:e1:04:02:64:17:e4:49:40:b5:4d:d4:d2:f8:b0:62: 3a:29:2a:11:86:a7:b9:7c:5d:1e:46:fd:0b:a5:ad:33:6e:75: e8:9d:6c:98:be:20:fe:ef:72:f7:7f:d5:cd:e9:be:76:77:76: 65:90:25:de:99:bb:b6:84:3d:b7:e6:c8:5b:7a:9c:16:c8:14: 2d:a4:44:11:03:66:89:24:8f:eb:6a:9d:14:d8:99:ed:cf:31: 4a:e3:60:b4:dc:01:37:62:01:a3:29:13:cd:4e:17:27:18:2f: 11:8d:59:15:25:4b:8d:59:ce:54:2f:b6:43:5d:f4:6e:bd:10: 1f:8f:0e:6c:99:d1:2f:3c:06:3a:76:38:4e:c7:ec:53:a9:04: 89:34:5c:32:2b:93:3a:fe:2c:17:88:3a:de:c7:8a:cc:cd:15: 47:e2:4c:a8:e9:d8:8b:6e:ff:d2:65:1f:77:8d:2c:d7:90:30: 1d:17:a0:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwCof5UFyofaGL3wLpsQnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjMTFkMDVjZDI5YWI3MTkyYWYwMzljZjVmM2QwMGJlOTIx NTc5MzkwHhcNMjUxMjA2MTMwMDQ4WhcNMjUxMjA3MTMwMDQ4WjAzMTEwLwYDVQQD EyhmZjUxZDVlYThhZDQ3ZWE5MzQxZjhhNmM2MzQ5MjU3NzY2M2IwMTJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4fe9oWrABLhIVQO0GIg2ARoiDTcd 43V4AObhImc26Ob+IjUUMx4RXAUoGndODaY76NBjCtEGKwrQx663LHLwgvhlo+NB SVPyfzNa+16/p+KwsZBcZtY0VnrT4kI9Jqe3AeAcYiOIcNDr7PM9OKjmfplirKor NOh56DIGnMFqs2sS0PjYnQ1ijh3gYN25J3NHdRNnc2A0MhbbT/ooX8pbYQW3Wd49 vt1uq3m9YpzKCQAmvNhyq4n0JULaYSwgwWcYoeiHZqC8sSIykMAsQDmjMRuh+Af0 /TsraLCu/uED8diEVUQpB1TGL53jMv0dPa+ibZ1lda5NcmJrVN3P/9n54wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP9R1eqK1H6pNB+KbGNJJXdmOwEqMB8GA1UdIwQY MBaAFDwR0FzSmrcZKvA5z189AL6SFXk5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEJIUVhOS2F0eGtxOERuUFh6MEF2cElWZVRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9jZGIxMDQtMDVkYi00Y2RiLWE0MmUt NzA4ZGMwOTdmZmZlLzEvUEJIUVhOS2F0eGtxOERuUFh6MEF2cElWZVRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9jZGIxMDQtMDVkYi00Y2RiLWE0MmUtNzA4ZGMwOTdmZmZl LzEvUEJIUVhOS2F0eGtxOERuUFh6MEF2cElWZVRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHXxWSdoG 0j+FEirEEQHtmDdeiv4zztVeQk422E4JVA5j6N5qmUNtVqVfILkiG6sayvPDhdZn dn5DygwpXQ4q/texHHmFOfzovp7/4QQCZBfkSUC1TdTS+LBiOikqEYanuXxdHkb9 C6WtM2516J1smL4g/u9y93/Vzem+dnd2ZZAl3pm7toQ9t+bIW3qcFsgULaREEQNm iSSP62qdFNiZ7c8xSuNgtNwBN2IBoykTzU4XJxgvEY1ZFSVLjVnOVC+2Q130br0Q H48ObJnRLzwGOnY4TsfsU6kEiTRcMiuTOv4sF4g63seKzM0VR+JMqOnYi27/0mUf d40s15AwHRegZw== -----END CERTIFICATE-----Generated at Sat Dec 6 17:35:13 2025 by rpki-client