This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/PB8U03-9yHrnyce5FT6updTFVJs.mft File: PB8U03-9yHrnyce5FT6updTFVJs.mft (raw, json) Hash identifier: 36/Jwv9vHKoqf2GETVGp5eL9FVMY6qj7KmgPZ/gUdII= Subject key identifier: F4:DB:47:CD:07:9E:FE:F9:E9:B7:5D:F6:D6:76:BF:75:67:C1:CF:B1 Authority key identifier: 3C:1F:14:D3:7F:BD:C8:7A:E7:C9:C7:B9:15:3E:AE:A5:D4:C5:54:9B Certificate issuer: /CN=3c1f14d37fbdc87ae7c9c7b9153eaea5d4c5549b Certificate serial: 019B7AC9E19DF296642AC8A0863DB712A892 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PB8U03-9yHrnyce5FT6updTFVJs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/PB8U03-9yHrnyce5FT6updTFVJs.mft Manifest number: 0477 Signing time: Thu 01 Jan 2026 18:20:09 +0000 Manifest this update: Thu 01 Jan 2026 18:20:09 +0000 Manifest next update: Fri 02 Jan 2026 18:20:09 +0000 Files and hashes: 1: PB8U03-9yHrnyce5FT6updTFVJs.crl (hash: rTGndpGX4+3hneZnEkSI2rYwUREi4bBY+7rlnaR+pnU=) 2: vItSctoJ56AtMslWFOG7l89nmfU.roa (hash: Z/6U0iSnVEMndZtAodw8IhLqKEmm432yqbxgy/MWKqY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/PB8U03-9yHrnyce5FT6updTFVJs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/PB8U03-9yHrnyce5FT6updTFVJs.mft rsync://rpki.ripe.net/repository/DEFAULT/PB8U03-9yHrnyce5FT6updTFVJs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:e1:9d:f2:96:64:2a:c8:a0:86:3d:b7:12:a8:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c1f14d37fbdc87ae7c9c7b9153eaea5d4c5549b Validity Not Before: Jan 1 18:20:09 2026 GMT Not After : Jan 2 18:20:09 2026 GMT Subject: CN=f4db47cd079efef9e9b75df6d676bf7567c1cfb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e5:24:4d:56:bb:00:ad:8d:72:4a:62:c1:97: c1:d5:ea:0f:4a:63:9d:8a:46:c8:52:8c:62:10:83: db:88:b7:70:7b:35:2f:f8:62:87:3f:9d:63:79:9f: 8c:14:61:61:76:29:f7:52:38:f2:cc:07:cf:15:ab: 47:99:a5:ff:19:fb:93:5f:8b:c7:a2:4c:1c:75:0b: 81:59:73:7c:ad:82:48:da:c8:73:8d:06:d1:ab:32: 9c:6a:4a:dd:d4:f7:63:18:29:4f:98:26:4b:6c:27: 43:21:ea:8d:3b:49:6c:29:4d:55:f5:d6:d8:e6:db: bc:d7:d1:02:c1:ef:87:e3:6f:c9:52:26:b7:64:55: 7a:f6:4d:bd:28:ea:0d:74:e8:b5:38:24:69:00:14: b1:ff:2c:18:3f:84:b3:d7:ae:5e:98:99:d8:99:1e: 1e:a0:f6:ef:68:93:dc:44:1c:8e:fb:b0:c3:c1:f3: 3b:d1:bb:03:f0:04:9e:32:22:b2:3c:2b:26:71:45: 2b:2e:15:ce:d6:46:e4:ea:28:f2:b3:ac:13:be:c1: ff:10:f3:05:79:a1:46:d6:76:39:ee:83:f7:5c:f7: f2:68:e0:ed:c8:43:0a:66:91:b9:1a:f5:8e:06:8f: 60:a2:e4:b2:35:20:03:95:63:fc:09:58:38:31:de: 77:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:DB:47:CD:07:9E:FE:F9:E9:B7:5D:F6:D6:76:BF:75:67:C1:CF:B1 X509v3 Authority Key Identifier: keyid:3C:1F:14:D3:7F:BD:C8:7A:E7:C9:C7:B9:15:3E:AE:A5:D4:C5:54:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PB8U03-9yHrnyce5FT6updTFVJs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/PB8U03-9yHrnyce5FT6updTFVJs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/PB8U03-9yHrnyce5FT6updTFVJs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:fe:b3:38:a7:6d:00:9a:b4:cf:28:61:55:fb:fe:34:39:ab: 03:69:3f:76:71:19:22:15:1b:50:74:36:27:8f:57:40:50:88: 44:fb:88:c3:40:d9:21:83:4f:7a:2d:14:5e:eb:a9:18:de:8c: d4:c8:eb:60:d9:83:69:76:4a:c3:f5:80:58:43:ac:71:b2:4a: 00:29:25:b5:23:85:86:10:92:2c:05:58:20:73:56:71:fe:93: a1:90:ea:e6:73:18:4f:10:f7:08:66:cc:9d:99:eb:97:21:5b: 68:f2:36:f0:ff:e4:9c:e1:56:c8:5d:2d:f3:11:39:4f:cf:2b: c7:b1:85:e4:33:4b:fc:fd:2c:9e:70:a4:ad:53:7d:bd:92:97: b2:80:bc:f5:88:71:57:8f:3e:14:e6:b2:4e:5c:8a:e6:78:2b: e2:32:6c:88:76:fe:2d:0c:18:2a:d2:b6:5c:a7:de:51:e0:c6: 91:0f:db:67:26:34:3e:ed:ac:0a:ce:79:91:c8:fc:27:cf:63: 48:53:f1:e9:ec:6e:a3:b2:38:96:bf:24:a0:20:1e:34:c8:f5: d6:24:04:14:5d:1c:5c:fc:8f:05:6b:e6:fc:39:c0:27:bb:1b: d6:fb:55:90:5e:ad:3e:e7:ed:ab:22:bc:0f:a1:5e:8a:5c:d4: 20:88:9e:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt6yeGd8pZkKsighj23EqiSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjMWYxNGQzN2ZiZGM4N2FlN2M5YzdiOTE1M2VhZWE1ZDRj NTU0OWIwHhcNMjYwMTAxMTgyMDA5WhcNMjYwMTAyMTgyMDA5WjAzMTEwLwYDVQQD EyhmNGRiNDdjZDA3OWVmZWY5ZTliNzVkZjZkNjc2YmY3NTY3YzFjZmIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOUkTVa7AK2NckpiwZfB1eoPSmOd ikbIUoxiEIPbiLdwezUv+GKHP51jeZ+MFGFhdin3UjjyzAfPFatHmaX/GfuTX4vH okwcdQuBWXN8rYJI2shzjQbRqzKcakrd1PdjGClPmCZLbCdDIeqNO0lsKU1V9dbY 5tu819ECwe+H42/JUia3ZFV69k29KOoNdOi1OCRpABSx/ywYP4Sz165emJnYmR4e oPbvaJPcRByO+7DDwfM70bsD8ASeMiKyPCsmcUUrLhXO1kbk6ijys6wTvsH/EPMF eaFG1nY57oP3XPfyaODtyEMKZpG5GvWOBo9gouSyNSADlWP8CVg4Md53dQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPTbR80Hnv756bdd9tZ2v3Vnwc+xMB8GA1UdIwQY MBaAFDwfFNN/vch658nHuRU+rqXUxVSbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEI4VTAzLTl5SHJueWNlNUZUNnVwZFRGVkpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9mMWI3NGMtMTZhYy00ODMxLWI2YzUt ZjFjNmJmMWU0YmE3LzEvUEI4VTAzLTl5SHJueWNlNUZUNnVwZFRGVkpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9mMWI3NGMtMTZhYy00ODMxLWI2YzUtZjFjNmJmMWU0YmE3 LzEvUEI4VTAzLTl5SHJueWNlNUZUNnVwZFRGVkpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs/6zOKdt AJq0zyhhVfv+NDmrA2k/dnEZIhUbUHQ2J49XQFCIRPuIw0DZIYNPei0UXuupGN6M 1MjrYNmDaXZKw/WAWEOscbJKACkltSOFhhCSLAVYIHNWcf6ToZDq5nMYTxD3CGbM nZnrlyFbaPI28P/knOFWyF0t8xE5T88rx7GF5DNL/P0snnCkrVN9vZKXsoC89Yhx V48+FOayTlyK5ngr4jJsiHb+LQwYKtK2XKfeUeDGkQ/bZyY0Pu2sCs55kcj8J89j SFPx6exuo7I4lr8koCAeNMj11iQEFF0cXPyPBWvm/DnAJ7sb1vtVkF6tPuftqyK8 D6FeilzUIIieMQ== -----END CERTIFICATE-----Generated at Fri Jan 2 00:20:12 2026 by rpki-client