This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.mft File: pbnffpj285_iukAi2id9KBmCgCE.mft (raw, json) Hash identifier: ZW/LgLgAIjng1itNuAI1tCTGfr/xjhSIiKriFsiSDF4= Subject key identifier: 1B:92:16:69:31:C2:BE:B9:91:E7:31:FA:49:37:E3:CB:A6:60:D8:50 Authority key identifier: A5:B9:DF:7E:98:F6:F3:9F:E2:BA:40:22:DA:27:7D:28:19:82:80:21 Certificate issuer: /CN=a5b9df7e98f6f39fe2ba4022da277d2819828021 Certificate serial: 019AF31B834844078665213961D7BE75AEAD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pbnffpj285_iukAi2id9KBmCgCE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.mft Manifest number: 0F20 Signing time: Sat 06 Dec 2025 10:00:57 +0000 Manifest this update: Sat 06 Dec 2025 10:00:57 +0000 Manifest next update: Sun 07 Dec 2025 10:00:57 +0000 Files and hashes: 1: 1h7x7glo7raaLY2_2McusPDR_aM.roa (hash: HMpq5ZxT3KuTaqPuHxdfR/p2+y/DB0HiuZsEYPl7Agw=) 2: OGo9fBtswLdwnS7x4PLyvgfblhc.roa (hash: YfRWTX+R7heO/+Oj3o5jtwp1kOciqeFbXjDX1mTE1h8=) 3: ouICw0nyK_0-5jscxv12aq634vw.roa (hash: ZpjXF6V0UreF7p2IPTzGzZ30r7TGS05jqHG074BeOko=) 4: pbnffpj285_iukAi2id9KBmCgCE.crl (hash: +y7irOtsW5gAH0rwyJ+55+qmBpTMFjAZSPd03CB6B94=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.mft rsync://rpki.ripe.net/repository/DEFAULT/pbnffpj285_iukAi2id9KBmCgCE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:83:48:44:07:86:65:21:39:61:d7:be:75:ae:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5b9df7e98f6f39fe2ba4022da277d2819828021 Validity Not Before: Dec 6 10:00:57 2025 GMT Not After : Dec 7 10:00:57 2025 GMT Subject: CN=1b92166931c2beb991e731fa4937e3cba660d850 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:41:d1:ec:f2:c8:ad:86:48:60:6c:3f:38:3d: 74:bc:a8:ee:a4:2e:69:d0:9f:e9:d5:2d:36:70:11: 0c:90:db:65:d5:70:82:50:ed:64:2d:73:bd:86:08: 84:58:5c:a5:37:28:f8:29:ad:e3:48:5a:44:10:e0: 63:bb:ff:01:5c:2f:16:39:20:ed:4c:7c:8a:97:32: a5:52:17:7f:1c:4c:af:3e:2f:12:de:70:42:00:66: 4e:cf:45:9b:ce:e4:f5:b9:a6:75:6f:26:e0:d1:6c: a5:d8:29:6b:ce:58:47:32:a9:d2:61:9f:02:b0:2e: f5:40:d3:8a:8d:33:3c:28:a1:dd:12:40:a8:a8:59: 61:a7:11:d9:0f:1a:86:cf:9d:7d:c4:8d:6f:97:8c: 8f:08:81:9a:6f:d3:6e:1b:6e:9c:30:7e:3c:2c:63: 30:c5:38:8e:ab:f1:a1:25:49:a9:58:5a:34:8a:9d: a2:6e:84:12:4b:89:e8:c6:b9:0c:e4:e5:10:7e:bf: 7b:5d:f8:eb:ad:44:5c:93:97:e8:8b:92:3c:bb:74: 84:41:32:dd:01:7d:ff:75:f4:2d:b9:42:2c:d4:77: 63:84:6b:fa:7f:46:dc:55:79:4a:80:69:c8:26:9b: 84:0d:43:27:41:4c:b5:21:d5:bf:67:26:2e:b1:f8: 85:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:92:16:69:31:C2:BE:B9:91:E7:31:FA:49:37:E3:CB:A6:60:D8:50 X509v3 Authority Key Identifier: keyid:A5:B9:DF:7E:98:F6:F3:9F:E2:BA:40:22:DA:27:7D:28:19:82:80:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbnffpj285_iukAi2id9KBmCgCE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:39:9c:0e:db:c4:fc:47:57:1b:fe:ae:2a:20:1a:12:74:a3: 6a:7f:b2:72:e3:24:26:df:75:d6:ae:29:95:76:c1:05:db:8b: ad:62:4c:06:15:24:51:61:27:db:32:6e:87:ba:e5:c4:ab:b0: 7c:f9:b4:62:ef:06:e6:d8:c8:d2:97:a0:00:1b:f1:d4:37:4c: 36:8b:f6:f2:2e:3d:3a:5e:53:69:2a:ec:dc:27:7a:85:28:90: ad:5f:36:d3:5f:f3:8b:dc:3c:c5:01:d4:11:6f:6e:72:1d:0d: f7:35:8b:ca:8a:95:a9:6b:7c:53:15:d0:a7:e7:d4:dc:29:e9: f3:67:87:be:94:a0:dc:13:21:13:d1:87:00:65:4a:84:4a:09: ec:d5:d9:c3:e9:e0:73:2f:7f:a7:70:2a:9a:7c:d7:30:0a:18: 46:86:aa:fe:23:87:9f:b9:d8:15:d2:b2:28:bc:62:14:0a:57: f6:56:7e:bd:50:3a:ca:88:a8:f2:2c:e8:2f:ce:11:7a:63:a4: a8:05:64:e8:5c:4b:cc:69:2a:b6:6e:2f:4a:46:92:36:1f:04: 70:1b:e4:ec:36:ad:34:09:cb:f8:32:d8:6d:d0:77:89:d5:12: c6:eb:1f:f4:68:3c:61:e5:c4:3d:ea:ae:6c:9a:07:b3:c9:30: 15:cd:0a:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG4NIRAeGZSE5Yde+da6tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1YjlkZjdlOThmNmYzOWZlMmJhNDAyMmRhMjc3ZDI4MTk4 MjgwMjEwHhcNMjUxMjA2MTAwMDU3WhcNMjUxMjA3MTAwMDU3WjAzMTEwLwYDVQQD EygxYjkyMTY2OTMxYzJiZWI5OTFlNzMxZmE0OTM3ZTNjYmE2NjBkODUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUHR7PLIrYZIYGw/OD10vKjupC5p 0J/p1S02cBEMkNtl1XCCUO1kLXO9hgiEWFylNyj4Ka3jSFpEEOBju/8BXC8WOSDt THyKlzKlUhd/HEyvPi8S3nBCAGZOz0WbzuT1uaZ1bybg0Wyl2ClrzlhHMqnSYZ8C sC71QNOKjTM8KKHdEkCoqFlhpxHZDxqGz519xI1vl4yPCIGab9NuG26cMH48LGMw xTiOq/GhJUmpWFo0ip2iboQSS4noxrkM5OUQfr97XfjrrURck5foi5I8u3SEQTLd AX3/dfQtuUIs1HdjhGv6f0bcVXlKgGnIJpuEDUMnQUy1IdW/ZyYusfiF/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBuSFmkxwr65kecx+kk348umYNhQMB8GA1UdIwQY MBaAFKW5336Y9vOf4rpAItonfSgZgoAhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGJuZmZwajI4NV9pdWtBaTJpZDlLQm1DZ0NFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC85NzMwNDctODkxNC00MWM2LWExZTAt MGFjN2I3ZWRlNDJiLzEvcGJuZmZwajI4NV9pdWtBaTJpZDlLQm1DZ0NFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC85NzMwNDctODkxNC00MWM2LWExZTAtMGFjN2I3ZWRlNDJi LzEvcGJuZmZwajI4NV9pdWtBaTJpZDlLQm1DZ0NFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACTmcDtvE /EdXG/6uKiAaEnSjan+ycuMkJt911q4plXbBBduLrWJMBhUkUWEn2zJuh7rlxKuw fPm0Yu8G5tjI0pegABvx1DdMNov28i49Ol5TaSrs3Cd6hSiQrV8201/zi9w8xQHU EW9uch0N9zWLyoqVqWt8UxXQp+fU3Cnp82eHvpSg3BMhE9GHAGVKhEoJ7NXZw+ng cy9/p3AqmnzXMAoYRoaq/iOHn7nYFdKyKLxiFApX9lZ+vVA6yoio8izoL84RemOk qAVk6FxLzGkqtm4vSkaSNh8EcBvk7DatNAnL+DLYbdB3idUSxusf9Gg8YeXEPequ bJoHs8kwFc0KtA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:48:32 2025 by rpki-client