This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.mft File: psb8p1JpxrAQpvpxCeQxXgagg9w.mft (raw, json) Hash identifier: uoBhIDOjCeUGn97M/TqroDnrGTuaiZmXBPfcVtnDICE= Subject key identifier: FA:9B:71:56:27:A0:64:99:BB:F0:EB:46:15:60:E0:33:B3:43:A9:5D Authority key identifier: A6:C6:FC:A7:52:69:C6:B0:10:A6:FA:71:09:E4:31:5E:06:A0:83:DC Certificate issuer: /CN=a6c6fca75269c6b010a6fa7109e4315e06a083dc Certificate serial: 019B2364BFB9530764C2115014FB490D9001 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/psb8p1JpxrAQpvpxCeQxXgagg9w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.mft Manifest number: 177E Signing time: Mon 15 Dec 2025 19:02:43 +0000 Manifest this update: Mon 15 Dec 2025 19:02:43 +0000 Manifest next update: Tue 16 Dec 2025 19:02:43 +0000 Files and hashes: 1: okAV_h5VY2rYZdeinC81X0hRA2Y.roa (hash: Qv1PPO81VnI1ltfb9vhPQi4AdxGUBWm2X2BZUx+f7S0=) 2: psb8p1JpxrAQpvpxCeQxXgagg9w.crl (hash: 8HoGd3mMoQuizhWKZIN6p+RT+rmIDu70sTvYu9yy+1g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.crl rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.mft rsync://rpki.ripe.net/repository/DEFAULT/psb8p1JpxrAQpvpxCeQxXgagg9w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:64:bf:b9:53:07:64:c2:11:50:14:fb:49:0d:90:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6c6fca75269c6b010a6fa7109e4315e06a083dc Validity Not Before: Dec 15 19:02:43 2025 GMT Not After : Dec 16 19:02:43 2025 GMT Subject: CN=fa9b715627a06499bbf0eb461560e033b343a95d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:9a:63:84:54:50:34:b8:9c:ed:0c:63:ed:01: 41:ad:99:85:dc:5b:76:56:a6:36:11:c7:ac:09:8e: ca:06:a6:e3:33:1f:2d:08:79:a7:8b:aa:35:98:05: f1:1d:f6:50:6a:a9:c4:ad:93:90:e8:4f:ec:ae:b8: 36:c2:ef:e4:58:1f:c4:76:00:6c:07:f4:10:bf:74: 6e:ae:cb:6c:e6:e2:db:65:cf:24:9e:19:2e:30:a6: 62:c2:1b:da:2d:d2:4e:2b:d5:8f:2f:5e:aa:45:ea: 2d:3e:bd:5e:b8:0b:63:e4:c6:76:14:f6:c8:75:28: bb:d2:ca:bd:c6:0e:96:78:88:61:c6:a5:82:e3:de: da:4d:49:8b:40:99:d5:84:73:ae:8d:9d:ac:21:e5: ea:1b:c5:a4:7c:6f:a8:95:f7:5b:77:f6:36:46:b5: b1:c6:77:b2:ac:9d:16:8f:9e:6a:5a:d1:7b:4d:74: 92:3d:bf:3f:d4:16:6f:35:1c:ae:d6:f6:34:4c:5f: 6b:dd:03:c9:3c:8b:6d:30:02:f5:f4:24:63:2d:c7: 5a:4f:a9:84:53:d0:b7:cf:62:a0:4c:62:c5:18:26: 05:0a:10:2a:f4:61:9a:10:71:fc:ba:77:7e:d3:80: 72:77:72:7b:dc:ee:32:07:fb:47:84:f0:64:49:ef: e6:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:9B:71:56:27:A0:64:99:BB:F0:EB:46:15:60:E0:33:B3:43:A9:5D X509v3 Authority Key Identifier: keyid:A6:C6:FC:A7:52:69:C6:B0:10:A6:FA:71:09:E4:31:5E:06:A0:83:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/psb8p1JpxrAQpvpxCeQxXgagg9w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:a0:95:4e:50:71:ee:0b:27:cb:ec:e2:38:8b:0b:c4:4d:e3: 97:72:2b:94:58:5f:ac:30:14:3d:a0:fa:84:2e:4d:cd:ed:ac: c9:a0:07:b2:e3:6d:1c:e5:c6:9b:4f:7c:5c:6e:40:39:c9:c4: 5a:bf:fe:ff:1f:80:f8:7b:6e:0f:45:5b:d0:81:24:da:23:99: 25:6f:a5:e5:af:3a:e2:3f:22:90:e9:27:3b:98:12:8e:00:4a: a2:bf:b9:f4:70:03:52:c9:1f:92:88:53:88:32:21:01:2d:af: c7:9e:b3:ee:a2:97:7d:1b:17:ad:cc:fe:d8:8e:1d:6f:f9:4a: 5f:84:b3:be:e9:3a:2e:02:db:b0:20:fb:ea:81:d4:31:ef:fe: 83:b4:03:34:ec:4d:6c:d4:06:b9:ab:14:6e:d7:70:28:bc:8f: b0:71:d7:39:42:e0:f1:17:e0:a0:7f:d9:af:95:d5:39:e1:ff: 38:e6:5f:20:1c:4e:0b:9a:c9:75:cf:dd:71:04:36:7a:fd:d4: 51:0a:b1:af:46:db:dd:48:25:38:75:b1:cf:cc:a7:f1:a1:b1: fd:9a:c4:d6:cb:1a:c9:97:e8:32:99:eb:c2:31:aa:53:16:5c: 68:6a:1d:5d:77:41:51:17:11:59:b3:b9:45:a3:fc:dd:04:25: 16:0d:63:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsjZL+5UwdkwhFQFPtJDZABMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2YzZmY2E3NTI2OWM2YjAxMGE2ZmE3MTA5ZTQzMTVlMDZh MDgzZGMwHhcNMjUxMjE1MTkwMjQzWhcNMjUxMjE2MTkwMjQzWjAzMTEwLwYDVQQD EyhmYTliNzE1NjI3YTA2NDk5YmJmMGViNDYxNTYwZTAzM2IzNDNhOTVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyppjhFRQNLic7Qxj7QFBrZmF3Ft2 VqY2EcesCY7KBqbjMx8tCHmni6o1mAXxHfZQaqnErZOQ6E/srrg2wu/kWB/EdgBs B/QQv3Rursts5uLbZc8knhkuMKZiwhvaLdJOK9WPL16qReotPr1euAtj5MZ2FPbI dSi70sq9xg6WeIhhxqWC497aTUmLQJnVhHOujZ2sIeXqG8WkfG+olfdbd/Y2RrWx xneyrJ0Wj55qWtF7TXSSPb8/1BZvNRyu1vY0TF9r3QPJPIttMAL19CRjLcdaT6mE U9C3z2KgTGLFGCYFChAq9GGaEHH8und+04Byd3J73O4yB/tHhPBkSe/m3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPqbcVYnoGSZu/DrRhVg4DOzQ6ldMB8GA1UdIwQY MBaAFKbG/KdSacawEKb6cQnkMV4GoIPcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHNiOHAxSnB4ckFRcHZweENlUXhYZ2FnZzl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9lYWI3ZWYtOGNkNi00ZGZlLThmMWUt ODZlMjlmMDVlYjk3LzEvcHNiOHAxSnB4ckFRcHZweENlUXhYZ2FnZzl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9lYWI3ZWYtOGNkNi00ZGZlLThmMWUtODZlMjlmMDVlYjk3 LzEvcHNiOHAxSnB4ckFRcHZweENlUXhYZ2FnZzl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMaCVTlBx 7gsny+ziOIsLxE3jl3IrlFhfrDAUPaD6hC5Nze2syaAHsuNtHOXGm098XG5AOcnE Wr/+/x+A+HtuD0Vb0IEk2iOZJW+l5a864j8ikOknO5gSjgBKor+59HADUskfkohT iDIhAS2vx56z7qKXfRsXrcz+2I4db/lKX4Szvuk6LgLbsCD76oHUMe/+g7QDNOxN bNQGuasUbtdwKLyPsHHXOULg8RfgoH/Zr5XVOeH/OOZfIBxOC5rJdc/dcQQ2ev3U UQqxr0bb3UglOHWxz8yn8aGx/ZrE1ssayZfoMpnrwjGqUxZcaGodXXdBURcRWbO5 RaP83QQlFg1jwA== -----END CERTIFICATE-----Generated at Tue Dec 16 00:51:07 2025 by rpki-client