This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/ee958c-c8c8-447b-829a-1df4cfd7ab77/1/PBr_5Z1YYh2UW4l_5reUfVYlKbg.mft File: PBr_5Z1YYh2UW4l_5reUfVYlKbg.mft (raw, json) Hash identifier: t2RmS1E4hgtGB2SyhIeLlYYTT5TKjNdeXzb6Py9y9U8= Subject key identifier: 4F:CA:2E:C4:32:F0:92:14:1C:D1:23:76:E8:7E:31:EF:1D:F0:75:A6 Authority key identifier: 3C:1A:FF:E5:9D:58:62:1D:94:5B:89:7F:E6:B7:94:7D:56:25:29:B8 Certificate issuer: /CN=3c1affe59d58621d945b897fe6b7947d562529b8 Certificate serial: 019B5A88C8A477DEBF8372136AFFB3AC9435 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBr_5Z1YYh2UW4l_5reUfVYlKbg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/ee958c-c8c8-447b-829a-1df4cfd7ab77/1/PBr_5Z1YYh2UW4l_5reUfVYlKbg.mft Manifest number: 1B Signing time: Fri 26 Dec 2025 12:01:12 +0000 Manifest this update: Fri 26 Dec 2025 12:01:12 +0000 Manifest next update: Sat 27 Dec 2025 12:01:12 +0000 Files and hashes: 1: AmfEdzSNiIaUyE9kjKWdw8wez0c.roa (hash: vq0oBZ5uLCFVx07CNofWY4tR5A83hhnnOOhh+V4vUU0=) 2: PBr_5Z1YYh2UW4l_5reUfVYlKbg.crl (hash: avyoY3pTwzVjpX1MgcxRerKfQ7BqQZNstUwO7tPj8H8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/ee958c-c8c8-447b-829a-1df4cfd7ab77/1/PBr_5Z1YYh2UW4l_5reUfVYlKbg.crl rsync://rpki.ripe.net/repository/DEFAULT/08/ee958c-c8c8-447b-829a-1df4cfd7ab77/1/PBr_5Z1YYh2UW4l_5reUfVYlKbg.mft rsync://rpki.ripe.net/repository/DEFAULT/PBr_5Z1YYh2UW4l_5reUfVYlKbg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:c8:a4:77:de:bf:83:72:13:6a:ff:b3:ac:94:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c1affe59d58621d945b897fe6b7947d562529b8 Validity Not Before: Dec 26 12:01:12 2025 GMT Not After : Dec 27 12:01:12 2025 GMT Subject: CN=4fca2ec432f092141cd12376e87e31ef1df075a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:bc:b8:ad:1d:af:f5:32:98:61:7c:f2:90:84: c1:22:2a:f3:3c:e3:6c:39:a7:b9:78:21:7c:99:40: 10:17:5f:32:0c:fb:17:9e:7c:ef:ae:1b:9b:37:03: 70:ba:94:d2:1e:49:e4:8e:e1:32:42:13:ca:d1:2c: 3a:dc:bb:6e:4d:d5:1d:be:b1:e1:a4:50:ae:ba:9d: 4e:b9:83:cf:e7:62:39:95:91:53:2e:49:39:a1:c0: c6:26:b5:74:1e:7e:ba:cd:f2:fb:16:9c:97:2b:e5: 5e:58:97:2d:fb:31:70:de:88:bb:94:60:f9:9b:5d: 52:57:b4:b2:b3:5f:4d:6a:a6:be:1c:78:05:c7:64: 0a:ad:08:3d:33:74:63:84:5b:e2:81:05:0b:fd:0e: cb:f3:de:75:d8:24:15:16:81:65:9d:8b:38:88:53: 3a:0d:7c:3c:8b:69:15:b2:e3:96:70:96:f3:9d:5d: 7f:fc:35:3c:56:2d:49:ca:66:bb:5a:81:fe:50:01: 44:d7:cb:b5:9c:c3:b5:08:fd:51:56:e6:c8:42:0d: 2b:6c:1b:e6:b0:c2:26:ff:df:64:b0:5c:a9:19:86: 52:fd:01:27:14:4a:c9:3d:ee:ef:b6:02:cd:5b:cf: 90:02:a3:2c:72:1e:86:08:67:46:76:ac:6a:04:e5: 0e:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:CA:2E:C4:32:F0:92:14:1C:D1:23:76:E8:7E:31:EF:1D:F0:75:A6 X509v3 Authority Key Identifier: keyid:3C:1A:FF:E5:9D:58:62:1D:94:5B:89:7F:E6:B7:94:7D:56:25:29:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBr_5Z1YYh2UW4l_5reUfVYlKbg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ee958c-c8c8-447b-829a-1df4cfd7ab77/1/PBr_5Z1YYh2UW4l_5reUfVYlKbg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ee958c-c8c8-447b-829a-1df4cfd7ab77/1/PBr_5Z1YYh2UW4l_5reUfVYlKbg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:77:56:78:33:5a:43:c1:ea:33:ba:88:95:67:8f:d8:07:09: fa:d6:3c:81:45:d5:d6:fb:9c:54:3b:80:82:a8:12:17:c4:cd: 3f:14:06:86:23:e4:41:2e:db:70:07:c9:76:8b:cc:b9:6b:d2: dc:f7:f4:05:02:24:79:31:0d:1a:ec:fd:8a:96:b6:b3:71:b2: 82:e7:8e:af:1d:c7:98:98:58:1d:7f:97:35:95:d4:bf:b2:10: 06:1c:33:34:1d:a8:ba:4e:df:e2:19:0b:7c:b5:c6:45:fd:66: e8:9f:56:fd:ea:e1:6a:b9:09:1d:78:e2:e7:44:9f:72:7e:59: 87:18:2e:ec:b4:43:11:24:2a:ba:e4:d9:78:db:84:4b:86:4f: c5:1b:cd:9b:38:9f:c4:b5:4d:74:1a:53:96:75:0a:93:6c:9d: dc:6f:c8:c0:8a:ad:d7:7c:03:78:40:98:16:59:0d:47:4d:e1: bb:76:df:93:19:4d:8b:f9:73:8c:ac:2f:ed:f5:ab:87:59:e7: 06:ce:b4:a3:28:db:11:0f:65:91:db:d2:84:ef:8a:7b:1b:b5: a3:cf:8b:0c:22:36:8e:3f:0f:5e:3c:01:25:65:93:0a:21:8e: 3f:89:8c:91:5f:70:65:38:07:13:10:ee:31:96:71:d7:d0:93: 0a:68:c1:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiMikd96/g3ITav+zrJQ1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjMWFmZmU1OWQ1ODYyMWQ5NDViODk3ZmU2Yjc5NDdkNTYy NTI5YjgwHhcNMjUxMjI2MTIwMTEyWhcNMjUxMjI3MTIwMTEyWjAzMTEwLwYDVQQD Eyg0ZmNhMmVjNDMyZjA5MjE0MWNkMTIzNzZlODdlMzFlZjFkZjA3NWE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7y4rR2v9TKYYXzykITBIirzPONs Oae5eCF8mUAQF18yDPsXnnzvrhubNwNwupTSHknkjuEyQhPK0Sw63LtuTdUdvrHh pFCuup1OuYPP52I5lZFTLkk5ocDGJrV0Hn66zfL7FpyXK+VeWJct+zFw3oi7lGD5 m11SV7Sys19Naqa+HHgFx2QKrQg9M3RjhFvigQUL/Q7L89512CQVFoFlnYs4iFM6 DXw8i2kVsuOWcJbznV1//DU8Vi1Jyma7WoH+UAFE18u1nMO1CP1RVubIQg0rbBvm sMIm/99ksFypGYZS/QEnFErJPe7vtgLNW8+QAqMsch6GCGdGdqxqBOUOsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE/KLsQy8JIUHNEjduh+Me8d8HWmMB8GA1UdIwQY MBaAFDwa/+WdWGIdlFuJf+a3lH1WJSm4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEJyXzVaMVlZaDJVVzRsXzVyZVVmVllsS2JnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9lZTk1OGMtYzhjOC00NDdiLTgyOWEt MWRmNGNmZDdhYjc3LzEvUEJyXzVaMVlZaDJVVzRsXzVyZVVmVllsS2JnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9lZTk1OGMtYzhjOC00NDdiLTgyOWEtMWRmNGNmZDdhYjc3 LzEvUEJyXzVaMVlZaDJVVzRsXzVyZVVmVllsS2JnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtXdWeDNa Q8HqM7qIlWeP2AcJ+tY8gUXV1vucVDuAgqgSF8TNPxQGhiPkQS7bcAfJdovMuWvS 3Pf0BQIkeTENGuz9ipa2s3GygueOrx3HmJhYHX+XNZXUv7IQBhwzNB2ouk7f4hkL fLXGRf1m6J9W/erharkJHXji50Sfcn5Zhxgu7LRDESQquuTZeNuES4ZPxRvNmzif xLVNdBpTlnUKk2yd3G/IwIqt13wDeECYFlkNR03hu3bfkxlNi/lzjKwv7fWrh1nn Bs60oyjbEQ9lkdvShO+Kexu1o8+LDCI2jj8PXjwBJWWTCiGOP4mMkV9wZTgHExDu MZZx19CTCmjBuQ== -----END CERTIFICATE-----Generated at Fri Dec 26 15:43:19 2025 by rpki-client