This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/b69811-cf3f-49bc-82ae-e55f9f9169db/1/pbJlTkMrdNyNpm2BayYM_8gXMXU.mft File: pbJlTkMrdNyNpm2BayYM_8gXMXU.mft (raw, json) Hash identifier: /LXJD+IsVXrfAeOYv7+1cniTzth95NdHJlL71gr0ABQ= Subject key identifier: 82:D4:57:AC:59:78:6C:49:D6:93:7A:E9:40:51:C6:AD:1A:65:1F:DA Authority key identifier: A5:B2:65:4E:43:2B:74:DC:8D:A6:6D:81:6B:26:0C:FF:C8:17:31:75 Certificate issuer: /CN=a5b2654e432b74dc8da66d816b260cffc8173175 Certificate serial: 019B1A978F6CD078383EA23690CD9E78EFED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pbJlTkMrdNyNpm2BayYM_8gXMXU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/b69811-cf3f-49bc-82ae-e55f9f9169db/1/pbJlTkMrdNyNpm2BayYM_8gXMXU.mft Manifest number: 1773 Signing time: Sun 14 Dec 2025 02:01:38 +0000 Manifest this update: Sun 14 Dec 2025 02:01:38 +0000 Manifest next update: Mon 15 Dec 2025 02:01:38 +0000 Files and hashes: 1: pbJlTkMrdNyNpm2BayYM_8gXMXU.crl (hash: QdUMjjNOeHcSmOjglK6IJra4SK+TA2tskoD39LWrulc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/b69811-cf3f-49bc-82ae-e55f9f9169db/1/pbJlTkMrdNyNpm2BayYM_8gXMXU.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/b69811-cf3f-49bc-82ae-e55f9f9169db/1/pbJlTkMrdNyNpm2BayYM_8gXMXU.mft rsync://rpki.ripe.net/repository/DEFAULT/pbJlTkMrdNyNpm2BayYM_8gXMXU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:97:8f:6c:d0:78:38:3e:a2:36:90:cd:9e:78:ef:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5b2654e432b74dc8da66d816b260cffc8173175 Validity Not Before: Dec 14 02:01:38 2025 GMT Not After : Dec 15 02:01:38 2025 GMT Subject: CN=82d457ac59786c49d6937ae94051c6ad1a651fda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6f:bb:f0:1d:c4:b6:cb:e0:99:5f:15:26:bb: 2f:b5:fe:d1:63:e3:cd:9e:ff:fa:7c:84:28:d7:7e: c0:6b:d2:7a:c0:fe:1b:d4:5a:cd:7d:86:86:b7:01: 7a:b8:1f:b5:6e:ee:6b:4f:b1:9a:fd:f7:85:23:e3: 2f:2d:57:85:0d:41:00:2d:18:94:5e:75:19:c1:c0: 54:4a:b7:df:b6:2b:64:f8:ae:11:e7:07:cb:fb:17: ef:d7:0e:e9:00:f8:42:46:65:4d:04:c8:62:eb:ef: 15:86:45:5a:41:f6:b3:d0:6a:d0:c4:a0:0f:a0:86: 3b:73:d1:3d:aa:a9:1d:6f:60:32:50:d2:f2:ed:66: b5:c6:c5:40:4c:ff:e8:71:55:89:96:2a:39:9a:11: a8:d1:46:dd:5b:48:c1:64:68:f6:68:08:71:95:40: 62:dd:b6:78:36:b1:86:5d:eb:b4:36:b8:47:9f:2e: 8d:6c:6a:e0:4f:64:8b:27:c9:e9:d1:51:ec:e5:22: 96:e9:5f:18:ad:6d:d7:0b:06:76:c6:4c:a4:6a:7a: 99:57:85:15:c8:21:bb:05:56:88:19:47:73:5e:be: 66:4c:e7:ee:5e:44:a6:52:e3:ef:7f:26:f2:6e:df: 30:95:38:01:e7:94:19:a4:9a:63:47:a9:ed:80:0a: 1c:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:D4:57:AC:59:78:6C:49:D6:93:7A:E9:40:51:C6:AD:1A:65:1F:DA X509v3 Authority Key Identifier: keyid:A5:B2:65:4E:43:2B:74:DC:8D:A6:6D:81:6B:26:0C:FF:C8:17:31:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbJlTkMrdNyNpm2BayYM_8gXMXU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/b69811-cf3f-49bc-82ae-e55f9f9169db/1/pbJlTkMrdNyNpm2BayYM_8gXMXU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/b69811-cf3f-49bc-82ae-e55f9f9169db/1/pbJlTkMrdNyNpm2BayYM_8gXMXU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:04:25:e1:41:00:52:6f:53:17:87:c8:9d:fb:bf:78:eb:f9: 01:cc:92:52:e1:57:9e:53:b4:96:c8:d9:44:28:92:23:66:ff: c4:b1:f1:7f:54:da:a1:51:10:64:ef:15:e8:3c:36:d7:19:29: 1b:eb:27:cd:1e:17:5b:8e:f5:b1:31:4c:e5:38:aa:d6:93:88: 06:c8:50:89:58:14:0c:b9:3a:f6:c0:de:a1:bb:1c:d0:b8:a3: 1d:57:04:c7:79:3d:2e:ae:ca:ef:f3:05:8c:1f:8b:95:5c:97: f0:66:74:23:3a:a6:6a:c1:2b:53:4f:01:3c:89:6e:29:02:ee: 88:15:e5:c4:f6:74:49:28:fb:1b:1f:cd:c0:a9:ae:53:b2:10: 2c:7e:6b:d3:c3:ba:31:9d:b3:a7:20:00:df:7e:2b:cb:7a:53: 67:6f:0a:c3:c3:db:7f:42:9f:1b:a8:e9:e4:ac:03:2d:5c:0c: 44:96:c1:0b:5f:98:53:55:24:3f:c2:0f:36:9e:78:cd:fc:02: 98:31:01:2d:05:e1:de:43:de:c2:32:fa:93:5f:59:09:09:13: de:21:df:0f:d4:f3:f5:6a:a1:9b:5d:91:88:34:d8:44:f6:69: 90:ae:1d:06:e4:c2:09:e1:5e:3b:46:e2:c2:4b:67:f4:5f:f3: 29:cc:2d:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsal49s0Hg4PqI2kM2eeO/tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1YjI2NTRlNDMyYjc0ZGM4ZGE2NmQ4MTZiMjYwY2ZmYzgx NzMxNzUwHhcNMjUxMjE0MDIwMTM4WhcNMjUxMjE1MDIwMTM4WjAzMTEwLwYDVQQD Eyg4MmQ0NTdhYzU5Nzg2YzQ5ZDY5MzdhZTk0MDUxYzZhZDFhNjUxZmRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuG+78B3EtsvgmV8VJrsvtf7RY+PN nv/6fIQo137Aa9J6wP4b1FrNfYaGtwF6uB+1bu5rT7Ga/feFI+MvLVeFDUEALRiU XnUZwcBUSrfftitk+K4R5wfL+xfv1w7pAPhCRmVNBMhi6+8VhkVaQfaz0GrQxKAP oIY7c9E9qqkdb2AyUNLy7Wa1xsVATP/ocVWJlio5mhGo0UbdW0jBZGj2aAhxlUBi 3bZ4NrGGXeu0NrhHny6NbGrgT2SLJ8np0VHs5SKW6V8YrW3XCwZ2xkykanqZV4UV yCG7BVaIGUdzXr5mTOfuXkSmUuPvfybybt8wlTgB55QZpJpjR6ntgAocAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFILUV6xZeGxJ1pN66UBRxq0aZR/aMB8GA1UdIwQY MBaAFKWyZU5DK3TcjaZtgWsmDP/IFzF1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGJKbFRrTXJkTnlOcG0yQmF5WU1fOGdYTVhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9iNjk4MTEtY2YzZi00OWJjLTgyYWUt ZTU1ZjlmOTE2OWRiLzEvcGJKbFRrTXJkTnlOcG0yQmF5WU1fOGdYTVhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi9iNjk4MTEtY2YzZi00OWJjLTgyYWUtZTU1ZjlmOTE2OWRi LzEvcGJKbFRrTXJkTnlOcG0yQmF5WU1fOGdYTVhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdQQl4UEA Um9TF4fInfu/eOv5AcySUuFXnlO0lsjZRCiSI2b/xLHxf1TaoVEQZO8V6Dw21xkp G+snzR4XW471sTFM5Tiq1pOIBshQiVgUDLk69sDeobsc0LijHVcEx3k9Lq7K7/MF jB+LlVyX8GZ0IzqmasErU08BPIluKQLuiBXlxPZ0SSj7Gx/NwKmuU7IQLH5r08O6 MZ2zpyAA334ry3pTZ28Kw8Pbf0KfG6jp5KwDLVwMRJbBC1+YU1UkP8IPNp54zfwC mDEBLQXh3kPewjL6k19ZCQkT3iHfD9Tz9Wqhm12RiDTYRPZpkK4dBuTCCeFeO0bi wktn9F/zKcwtvg== -----END CERTIFICATE-----Generated at Sun Dec 14 09:32:30 2025 by rpki-client