This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.mft File: PB4_3feITXhacI_U5mS2LekQ6-g.mft (raw, json) Hash identifier: rCUFg3cZr14BBY0ZHL9V/dW8wQiwFkRIPTIA4VJkYfk= Subject key identifier: 2E:C6:2C:F7:41:D7:D9:EB:08:C7:92:4F:F5:6C:D4:3B:B4:4F:67:B3 Authority key identifier: 3C:1E:3F:DD:F7:88:4D:78:5A:70:8F:D4:E6:64:B6:2D:E9:10:EB:E8 Certificate issuer: /CN=3c1e3fddf7884d785a708fd4e664b62de910ebe8 Certificate serial: 019B5ABFDCBD83D39B69EEB792D05CB3DB63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PB4_3feITXhacI_U5mS2LekQ6-g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.mft Manifest number: 179A Signing time: Fri 26 Dec 2025 13:01:21 +0000 Manifest this update: Fri 26 Dec 2025 13:01:21 +0000 Manifest next update: Sat 27 Dec 2025 13:01:21 +0000 Files and hashes: 1: PB4_3feITXhacI_U5mS2LekQ6-g.crl (hash: NFbIQWK4vmfjp3m4/lkAo0ODnOla1HeL+ghCmS5/QfU=) 2: rVIEtQUeZ960hMeEwx6AF679dhM.roa (hash: s8qUIneeKVi7X6yParz6sZwUc96D/kko1q8RujoMkJ4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.crl rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.mft rsync://rpki.ripe.net/repository/DEFAULT/PB4_3feITXhacI_U5mS2LekQ6-g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:dc:bd:83:d3:9b:69:ee:b7:92:d0:5c:b3:db:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c1e3fddf7884d785a708fd4e664b62de910ebe8 Validity Not Before: Dec 26 13:01:21 2025 GMT Not After : Dec 27 13:01:21 2025 GMT Subject: CN=2ec62cf741d7d9eb08c7924ff56cd43bb44f67b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:e7:f2:f2:3d:02:a1:8b:e2:ad:8e:5c:2c:17: 41:89:3e:ab:9c:f1:5d:e1:8e:93:dd:3a:d7:d0:b6: 29:50:a1:16:ef:34:53:63:6b:5f:d3:86:b3:92:10: 5d:02:47:8d:0b:a5:55:fe:03:b9:f1:62:1b:e2:8c: 4b:2a:98:40:dc:c5:41:3c:2d:10:d1:c3:b0:9e:60: dd:06:04:ff:c4:7d:0a:9e:8e:79:cc:28:96:c2:10: 83:5c:8b:06:f4:86:0e:66:70:8c:26:33:e5:2e:99: b5:8f:0d:20:ee:b7:4a:cf:9b:b8:cd:3c:19:40:6a: 23:34:0c:16:38:18:4a:5d:4c:86:d7:bc:ea:86:b3: f6:f6:1e:af:d1:74:28:2d:06:96:a2:b5:99:8c:9e: 64:a9:d0:95:06:64:d5:ab:c5:c8:8d:e3:a1:36:6d: 1f:38:6c:5f:6e:ac:76:f6:12:0b:15:f1:f8:13:7c: 5e:9d:f4:00:89:62:90:b3:88:9f:31:35:d2:66:90: c5:33:3f:83:63:1b:4e:49:ea:65:e4:5a:be:65:b5: bc:dd:bb:2c:c0:b4:2b:2a:75:ed:58:14:45:7b:d3: 2d:e8:8a:b3:c7:8e:16:76:96:23:41:9d:b7:a6:6c: a0:6d:a0:d1:e6:5f:1a:62:14:3f:f9:28:1f:45:e5: ab:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:C6:2C:F7:41:D7:D9:EB:08:C7:92:4F:F5:6C:D4:3B:B4:4F:67:B3 X509v3 Authority Key Identifier: keyid:3C:1E:3F:DD:F7:88:4D:78:5A:70:8F:D4:E6:64:B6:2D:E9:10:EB:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PB4_3feITXhacI_U5mS2LekQ6-g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:d3:c1:6b:ae:c5:a1:c8:74:68:6e:ba:77:aa:b9:1f:67:45: e9:69:b9:c7:31:b6:fa:1a:ec:5e:65:a8:8e:c2:e5:75:0a:33: 4b:8c:33:38:02:1f:6a:e3:cc:96:c7:b9:0e:fd:77:12:b8:a3: 21:38:02:10:92:47:5b:07:0b:7d:20:cf:71:a3:6c:e0:96:33: 00:2b:20:9f:91:59:de:83:a0:e2:c6:84:5b:60:bb:fa:00:5a: f2:d7:d8:e5:1f:52:75:11:2b:09:d7:2d:0e:e9:9c:14:0e:f5: 53:3a:89:2d:ab:93:5b:f4:c8:cc:85:ed:fd:64:ec:b7:9e:ae: be:bb:67:34:1c:78:6d:57:23:56:45:da:c4:83:50:55:43:2a: 04:06:0f:27:02:0f:2a:61:56:76:5d:5b:7b:4c:cd:a9:64:96: 0a:48:ba:14:4e:20:0f:a1:d2:c3:05:c0:a8:9d:8e:27:5d:a2: dd:b7:55:eb:cb:00:32:02:e0:1e:fe:fd:28:43:54:5b:87:72: b3:de:55:51:c0:56:be:ba:eb:ed:26:93:04:4b:90:18:95:bf: 25:f0:7e:41:b8:8c:5c:0f:9a:c3:18:32:d2:08:df:41:45:25: 4c:23:e4:b2:2f:f0:e0:f2:3e:db:e0:13:3a:29:43:80:fb:55: 8c:29:28:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtav9y9g9Obae63ktBcs9tjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjMWUzZmRkZjc4ODRkNzg1YTcwOGZkNGU2NjRiNjJkZTkx MGViZTgwHhcNMjUxMjI2MTMwMTIxWhcNMjUxMjI3MTMwMTIxWjAzMTEwLwYDVQQD EygyZWM2MmNmNzQxZDdkOWViMDhjNzkyNGZmNTZjZDQzYmI0NGY2N2IzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+fy8j0CoYvirY5cLBdBiT6rnPFd 4Y6T3TrX0LYpUKEW7zRTY2tf04azkhBdAkeNC6VV/gO58WIb4oxLKphA3MVBPC0Q 0cOwnmDdBgT/xH0Kno55zCiWwhCDXIsG9IYOZnCMJjPlLpm1jw0g7rdKz5u4zTwZ QGojNAwWOBhKXUyG17zqhrP29h6v0XQoLQaWorWZjJ5kqdCVBmTVq8XIjeOhNm0f OGxfbqx29hILFfH4E3xenfQAiWKQs4ifMTXSZpDFMz+DYxtOSepl5Fq+ZbW83bss wLQrKnXtWBRFe9Mt6Iqzx44WdpYjQZ23pmygbaDR5l8aYhQ/+SgfReWrFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC7GLPdB19nrCMeST/Vs1Du0T2ezMB8GA1UdIwQY MBaAFDweP933iE14WnCP1OZkti3pEOvoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEI0XzNmZUlUWGhhY0lfVTVtUzJMZWtRNi1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS80ZThlNzQtNzdlNi00MWViLTkwNDct NTljMThhZGEzNTJmLzEvUEI0XzNmZUlUWGhhY0lfVTVtUzJMZWtRNi1nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS80ZThlNzQtNzdlNi00MWViLTkwNDctNTljMThhZGEzNTJm LzEvUEI0XzNmZUlUWGhhY0lfVTVtUzJMZWtRNi1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdtPBa67F och0aG66d6q5H2dF6Wm5xzG2+hrsXmWojsLldQozS4wzOAIfauPMlse5Dv13Erij ITgCEJJHWwcLfSDPcaNs4JYzACsgn5FZ3oOg4saEW2C7+gBa8tfY5R9SdRErCdct DumcFA71UzqJLauTW/TIzIXt/WTst56uvrtnNBx4bVcjVkXaxINQVUMqBAYPJwIP KmFWdl1be0zNqWSWCki6FE4gD6HSwwXAqJ2OJ12i3bdV68sAMgLgHv79KENUW4dy s95VUcBWvrrr7SaTBEuQGJW/JfB+QbiMXA+awxgy0gjfQUUlTCPksi/w4PI+2+AT OilDgPtVjCkoQQ== -----END CERTIFICATE-----Generated at Fri Dec 26 14:15:52 2025 by rpki-client