This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/2d43c2-3b2e-4f2e-a6ad-a0a72a733c02/1/Pbiird2wAoUIVJlqlLcrh_Snsw8.mft File: Pbiird2wAoUIVJlqlLcrh_Snsw8.mft (raw, json) Hash identifier: 7ERqpQkA4MJZHVcsZKlPrHxRTq7z/MSUTok9R7B8Ob8= Subject key identifier: 96:B2:FE:04:6D:2B:39:40:2E:32:D1:8E:27:21:DA:95:DD:06:A7:E0 Authority key identifier: 3D:B8:A2:AD:DD:B0:02:85:08:54:99:6A:94:B7:2B:87:F4:A7:B3:0F Certificate issuer: /CN=3db8a2adddb002850854996a94b72b87f4a7b30f Certificate serial: 019AF388F9A45A6363F6087CBE4FFD070928 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pbiird2wAoUIVJlqlLcrh_Snsw8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/2d43c2-3b2e-4f2e-a6ad-a0a72a733c02/1/Pbiird2wAoUIVJlqlLcrh_Snsw8.mft Manifest number: 100F Signing time: Sat 06 Dec 2025 12:00:31 +0000 Manifest this update: Sat 06 Dec 2025 12:00:31 +0000 Manifest next update: Sun 07 Dec 2025 12:00:31 +0000 Files and hashes: 1: Pbiird2wAoUIVJlqlLcrh_Snsw8.crl (hash: /AaGPwEmPXETMOpwKRd4uTbd7zlTayrBz/L64GDybzY=) 2: gt9goB76oJJ9IidA_tfxI6lWDIw.roa (hash: q0BFU46k9v4mjBVsSe1ZjIuLriX+JzS+b+gMagD0YfA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/2d43c2-3b2e-4f2e-a6ad-a0a72a733c02/1/Pbiird2wAoUIVJlqlLcrh_Snsw8.crl rsync://rpki.ripe.net/repository/DEFAULT/df/2d43c2-3b2e-4f2e-a6ad-a0a72a733c02/1/Pbiird2wAoUIVJlqlLcrh_Snsw8.mft rsync://rpki.ripe.net/repository/DEFAULT/Pbiird2wAoUIVJlqlLcrh_Snsw8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:88:f9:a4:5a:63:63:f6:08:7c:be:4f:fd:07:09:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3db8a2adddb002850854996a94b72b87f4a7b30f Validity Not Before: Dec 6 12:00:31 2025 GMT Not After : Dec 7 12:00:31 2025 GMT Subject: CN=96b2fe046d2b39402e32d18e2721da95dd06a7e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:4a:31:91:77:68:00:c7:c7:2f:92:fe:9b:8c: 63:20:9d:9f:6f:c0:2e:fc:8b:5e:09:66:e9:de:6b: e1:e0:ed:8d:94:dc:6c:9c:62:e2:79:0b:97:cc:c5: 56:8d:24:fb:41:9b:c9:2b:b2:17:f6:75:67:b1:e4: a6:ae:10:07:09:31:4f:8b:c4:45:11:5d:e7:f8:29: 4d:34:8f:46:d9:cd:90:cb:e7:2b:93:ef:54:7e:0e: ed:f9:45:77:4b:56:40:d8:10:5b:f0:c6:10:da:43: 1e:35:47:4d:b3:9e:1d:01:f8:b7:a5:81:fc:13:93: 47:f3:5c:fe:51:8f:fa:ff:e6:61:eb:23:a9:b1:b9: 1b:5a:f8:a1:bf:a3:bc:d5:99:f8:10:21:f5:ed:f3: ff:78:75:13:1b:7f:11:30:3a:97:ed:00:17:ed:10: 29:0a:05:33:04:ed:97:b7:60:af:0a:33:e1:d5:09: ca:d9:22:37:68:c3:96:c9:9b:4f:a3:02:58:a0:11: 05:40:3c:94:d7:ea:98:fe:bc:48:9c:0f:7f:be:33: 82:fe:fc:0a:0f:de:58:eb:48:ef:70:68:4d:5c:a4: 30:70:a5:ad:ec:ca:19:f4:e3:16:e3:7e:53:a0:7e: a8:5c:f1:a3:f9:cb:92:1c:4c:43:60:cc:7d:ae:e6: 47:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:B2:FE:04:6D:2B:39:40:2E:32:D1:8E:27:21:DA:95:DD:06:A7:E0 X509v3 Authority Key Identifier: keyid:3D:B8:A2:AD:DD:B0:02:85:08:54:99:6A:94:B7:2B:87:F4:A7:B3:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pbiird2wAoUIVJlqlLcrh_Snsw8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2d43c2-3b2e-4f2e-a6ad-a0a72a733c02/1/Pbiird2wAoUIVJlqlLcrh_Snsw8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2d43c2-3b2e-4f2e-a6ad-a0a72a733c02/1/Pbiird2wAoUIVJlqlLcrh_Snsw8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:9a:73:6a:f5:25:b7:91:a2:8b:aa:48:12:a9:6c:c7:50:e8: 60:ce:57:ee:1c:e2:00:76:23:78:82:a8:4c:0c:ac:f5:17:65: 2f:f4:f9:af:c7:e5:b9:7a:2f:5e:fa:ad:3a:9d:16:f0:29:61: 66:85:b6:f1:c6:50:50:02:da:84:0b:7d:a2:b1:ac:0a:83:0e: e3:21:16:a0:97:b1:67:e4:d2:60:ce:16:40:6d:03:fb:a5:6d: 50:72:f3:47:6c:85:a4:91:f9:e4:44:21:22:7e:57:1d:90:38: 53:c7:52:d9:74:c1:f8:b8:ee:9d:85:ea:e0:c3:95:4e:6c:7d: ef:9c:f1:98:2f:81:2a:c4:f1:41:21:f2:4d:3b:5b:33:15:12: 54:40:ac:5c:30:64:ab:b8:a4:64:1f:8d:01:0f:14:bf:e1:1e: f6:24:49:36:4a:be:34:f8:02:c3:5e:46:c2:6b:21:a9:65:45: be:8a:14:9f:7d:50:e8:98:0d:de:e5:ea:dd:1f:54:90:7e:5b: 05:fd:a0:9f:af:ab:cf:45:df:63:16:2a:63:4f:cd:ea:d2:55: b2:d1:17:fc:26:1a:b4:d1:01:f6:c3:ff:43:3a:94:bc:a5:53: 08:25:85:54:a6:65:31:bf:da:e5:4e:db:9c:53:77:8b:40:80: 36:6f:be:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziPmkWmNj9gh8vk/9BwkoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkYjhhMmFkZGRiMDAyODUwODU0OTk2YTk0YjcyYjg3ZjRh N2IzMGYwHhcNMjUxMjA2MTIwMDMxWhcNMjUxMjA3MTIwMDMxWjAzMTEwLwYDVQQD Eyg5NmIyZmUwNDZkMmIzOTQwMmUzMmQxOGUyNzIxZGE5NWRkMDZhN2UwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkoxkXdoAMfHL5L+m4xjIJ2fb8Au /IteCWbp3mvh4O2NlNxsnGLieQuXzMVWjST7QZvJK7IX9nVnseSmrhAHCTFPi8RF EV3n+ClNNI9G2c2Qy+crk+9Ufg7t+UV3S1ZA2BBb8MYQ2kMeNUdNs54dAfi3pYH8 E5NH81z+UY/6/+Zh6yOpsbkbWvihv6O81Zn4ECH17fP/eHUTG38RMDqX7QAX7RAp CgUzBO2Xt2CvCjPh1QnK2SI3aMOWyZtPowJYoBEFQDyU1+qY/rxInA9/vjOC/vwK D95Y60jvcGhNXKQwcKWt7MoZ9OMW435ToH6oXPGj+cuSHExDYMx9ruZH6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJay/gRtKzlALjLRjich2pXdBqfgMB8GA1UdIwQY MBaAFD24oq3dsAKFCFSZapS3K4f0p7MPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGJpaXJkMndBb1VJVkpscWxMY3JoX1Nuc3c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8yZDQzYzItM2IyZS00ZjJlLWE2YWQt YTBhNzJhNzMzYzAyLzEvUGJpaXJkMndBb1VJVkpscWxMY3JoX1Nuc3c4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi8yZDQzYzItM2IyZS00ZjJlLWE2YWQtYTBhNzJhNzMzYzAy LzEvUGJpaXJkMndBb1VJVkpscWxMY3JoX1Nuc3c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH5pzavUl t5Gii6pIEqlsx1DoYM5X7hziAHYjeIKoTAys9RdlL/T5r8fluXovXvqtOp0W8Clh ZoW28cZQUALahAt9orGsCoMO4yEWoJexZ+TSYM4WQG0D+6VtUHLzR2yFpJH55EQh In5XHZA4U8dS2XTB+LjunYXq4MOVTmx975zxmC+BKsTxQSHyTTtbMxUSVECsXDBk q7ikZB+NAQ8Uv+Ee9iRJNkq+NPgCw15GwmshqWVFvooUn31Q6JgN3uXq3R9UkH5b Bf2gn6+rz0XfYxYqY0/N6tJVstEX/CYatNEB9sP/QzqUvKVTCCWFVKZlMb/a5U7b nFN3i0CANm++wQ== -----END CERTIFICATE-----Generated at Sat Dec 6 14:56:34 2025 by rpki-client