This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/0/0BCF853E803055C859EF10545EB1D58071242ACC.mft File: 0BCF853E803055C859EF10545EB1D58071242ACC.mft (raw, json) Hash identifier: EX64K+2O2TViIMURKmfBwLAoeoA2oUu2KHrxdgt8HdM= Subject key identifier: 10:4E:FA:60:D9:FA:C5:DF:E3:92:44:00:BC:6B:98:4B:29:A1:18:DD Authority key identifier: 0B:CF:85:3E:80:30:55:C8:59:EF:10:54:5E:B1:D5:80:71:24:2A:CC Certificate issuer: /CN=0bcf853e803055c859ef10545eb1d58071242acc Certificate serial: 41E2F11EFF694E889E0F798C5280DDCF5691F7B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8-FPoAwVchZ7xBUXrHVgHEkKsw.cer Subject info access: rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/0/0BCF853E803055C859EF10545EB1D58071242ACC.mft Manifest number: 06A5 Signing time: Fri 26 Dec 2025 12:00:01 +0000 Manifest this update: Fri 26 Dec 2025 11:55:01 +0000 Manifest next update: Sat 27 Dec 2025 15:19:01 +0000 Files and hashes: 1: AS52025.asa (hash: WrQOZoXW9XpF+3296oKtRS8KKfSGfK/Fs8AR2+7y+fI=) 2: 0BCF853E803055C859EF10545EB1D58071242ACC.crl (hash: C1WnxPW93hznVqX45J/fQuc/IKvt8Osz1FU3kkQWvm4=) Validation: OK Signature path: rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/0/0BCF853E803055C859EF10545EB1D58071242ACC.crl rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/0/0BCF853E803055C859EF10545EB1D58071242ACC.mft rsync://rpki.ripe.net/repository/DEFAULT/C8-FPoAwVchZ7xBUXrHVgHEkKsw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:e2:f1:1e:ff:69:4e:88:9e:0f:79:8c:52:80:dd:cf:56:91:f7:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0bcf853e803055c859ef10545eb1d58071242acc Validity Not Before: Dec 26 11:55:01 2025 GMT Not After : Dec 27 15:19:01 2025 GMT Subject: CN=104EFA60D9FAC5DFE3924400BC6B984B29A118DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:4b:41:f5:94:c4:c8:d2:c8:49:bb:7a:18:39: 2a:52:66:b2:e2:4f:72:0c:5a:4a:6b:fd:68:c8:98: ff:1c:4c:58:56:5a:01:70:0c:fd:12:f8:17:bb:13: f4:11:c4:9a:c7:fd:3c:6c:17:a5:d0:93:1a:fa:35: a0:59:26:8c:d4:9a:54:c1:61:f4:44:8a:f3:d8:97: c4:a2:eb:d4:0b:65:26:72:31:96:a4:8b:e2:52:7f: ff:d8:55:63:9f:ad:fd:87:cf:ff:29:8e:68:cb:aa: 99:49:40:49:3a:48:42:3c:7f:40:03:ee:ca:fa:cb: 85:2e:65:cb:c4:0f:41:43:3d:e7:a3:07:65:79:60: 8a:20:4f:43:72:58:eb:4c:7b:2f:ce:e1:c7:05:99: de:31:9d:86:58:e2:6d:9b:2d:43:19:69:aa:ba:95: 94:4f:e5:f8:4c:fc:c2:42:02:e7:82:ac:7a:24:60: fe:1f:75:63:5d:3e:f0:a4:d0:29:45:8d:22:3e:2b: 00:d4:e2:2d:49:19:af:b7:ce:a6:b6:4e:48:b1:4c: d6:06:00:9b:88:df:22:30:29:31:7d:e5:87:c9:d7: e9:96:61:37:35:25:eb:9d:5b:05:94:5c:04:86:ad: 3c:bc:3b:bc:12:a7:ed:60:84:86:e0:81:b9:82:a1: d6:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:4E:FA:60:D9:FA:C5:DF:E3:92:44:00:BC:6B:98:4B:29:A1:18:DD X509v3 Authority Key Identifier: keyid:0B:CF:85:3E:80:30:55:C8:59:EF:10:54:5E:B1:D5:80:71:24:2A:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/0/0BCF853E803055C859EF10545EB1D58071242ACC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8-FPoAwVchZ7xBUXrHVgHEkKsw.cer Subject Information Access: Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/0/0BCF853E803055C859EF10545EB1D58071242ACC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:12:eb:5d:54:51:ad:86:d7:3d:59:21:37:f6:d1:39:cb:68: 33:f9:04:82:b1:52:9d:82:cf:8b:79:90:bc:f1:28:2e:a1:8b: 72:81:ee:b9:bb:cb:9a:14:9f:92:03:ef:98:6d:03:22:68:93: 2c:31:32:58:8a:bd:bb:b1:cc:41:2d:4e:3d:e2:31:91:73:cf: 72:90:72:c8:3e:6d:f4:df:bc:e6:3b:7b:52:66:c9:d3:d5:65: 82:aa:1a:f4:7d:7d:8f:85:9a:d9:55:17:5c:b2:1e:d0:92:16: c0:39:b2:64:2f:e0:44:ba:c6:24:3d:24:9f:f6:7a:36:a6:88: 97:ae:cf:4f:7f:d6:db:7d:f6:42:45:1e:72:1b:f7:03:52:bb: 87:eb:1b:eb:a2:d2:1c:88:57:82:c7:a5:a2:ff:20:c2:e5:d9: e8:c3:69:67:79:fe:01:4a:ad:9e:1b:38:db:3b:27:e5:3e:82: b2:0b:eb:1a:2a:58:1c:25:7f:91:7d:89:b2:b8:e9:da:16:af: 49:c5:6b:c1:cb:b7:c5:b9:9f:cc:25:7b:26:2e:68:f4:03:da: 93:90:b5:7d:49:55:18:6d:9c:eb:45:58:4c:e5:5d:3c:c1:10: 0f:3f:76:4b:3b:47:e1:b1:07:68:64:14:70:8a:78:96:9c:c4: d8:62:bc:49 -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgIUQeLxHv9pToieD3mMUoDdz1aR97AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMGJjZjg1M2U4MDMwNTVjODU5ZWYxMDU0NWViMWQ1ODA3 MTI0MmFjYzAeFw0yNTEyMjYxMTU1MDFaFw0yNTEyMjcxNTE5MDFaMDMxMTAvBgNV BAMTKDEwNEVGQTYwRDlGQUM1REZFMzkyNDQwMEJDNkI5ODRCMjlBMTE4REQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9S0H1lMTI0shJu3oYOSpSZrLi T3IMWkpr/WjImP8cTFhWWgFwDP0S+Be7E/QRxJrH/TxsF6XQkxr6NaBZJozUmlTB YfREivPYl8Si69QLZSZyMZaki+JSf//YVWOfrf2Hz/8pjmjLqplJQEk6SEI8f0AD 7sr6y4UuZcvED0FDPeejB2V5YIogT0NyWOtMey/O4ccFmd4xnYZY4m2bLUMZaaq6 lZRP5fhM/MJCAueCrHokYP4fdWNdPvCk0ClFjSI+KwDU4i1JGa+3zqa2TkixTNYG AJuI3yIwKTF95YfJ1+mWYTc1JeudWwWUXASGrTy8O7wSp+1ghIbggbmCodajAgMB AAGjggH5MIIB9TAdBgNVHQ4EFgQUEE76YNn6xd/jkkQAvGuYSymhGN0wHwYDVR0j BBgwFoAUC8+FPoAwVchZ7xBUXrHVgHEkKswwDgYDVR0PAQH/BAQDAgeAMG4GA1Ud HwRnMGUwY6BhoF+GXXJzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJh ZG94bmV0d29ya3MvMC8wQkNGODUzRTgwMzA1NUM4NTlFRjEwNTQ1RUIxRDU4MDcx MjQyQUNDLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8v cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvQzgtRlBvQXdWY2haN3hC VVhySFZnSEVrS3N3LmNlcjB5BggrBgEFBQcBCwRtMGswaQYIKwYBBQUHMAuGXXJz eW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJhZG94bmV0d29ya3MvMC8w QkNGODUzRTgwMzA1NUM4NTlFRjEwNTQ1RUIxRDU4MDcxMjQyQUNDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeBLrXVRRrYbXPVkhN/bROctoM/kEgrFSnYLPi3mQvPEoLqGLcoHuubvLmhSf kgPvmG0DImiTLDEyWIq9u7HMQS1OPeIxkXPPcpByyD5t9N+85jt7UmbJ09Vlgqoa 9H19j4Wa2VUXXLIe0JIWwDmyZC/gRLrGJD0kn/Z6NqaIl67PT3/W2332QkUechv3 A1K7h+sb66LSHIhXgselov8gwuXZ6MNpZ3n+AUqtnhs42zsn5T6CsgvrGipYHCV/ kX2Jsrjp2havScVrwcu3xbmfzCV7Ji5o9APak5C1fUlVGG2c60VYTOVdPMEQDz92 SztH4bEHaGQUcIp4lpzE2GK8SQ== -----END CERTIFICATE-----Generated at Fri Dec 26 14:19:42 2025 by rpki-client