This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.mft File: pPbWV8D6IYKNMTUHNU3sFIFYDtY.mft (raw, json) Hash identifier: OU1ojI4zjX0xIw2jVYE0UAasc6kkSNE0DzKVm2ML7Fw= Subject key identifier: B0:E9:A8:D1:D5:3E:C7:20:2A:A2:5C:97:0C:00:78:15:07:CA:2A:44 Authority key identifier: A4:F6:D6:57:C0:FA:21:82:8D:31:35:07:35:4D:EC:14:81:58:0E:D6 Certificate issuer: /CN=a4f6d657c0fa21828d313507354dec1481580ed6 Certificate serial: 019B0F37B15929FF382C4CB3A9A001EF6E0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPbWV8D6IYKNMTUHNU3sFIFYDtY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.mft Manifest number: 010B Signing time: Thu 11 Dec 2025 21:01:06 +0000 Manifest this update: Thu 11 Dec 2025 21:01:06 +0000 Manifest next update: Fri 12 Dec 2025 21:01:06 +0000 Files and hashes: 1: alAqnpdWmlZswzu0_tz6FMnDdhY.roa (hash: M7Rrc8n9kYkHNkPjYV4H2sgmRO3YC2Zds6sffNzRLow=) 2: nDjykDgCRY5PJeZrLhezjP3d1sg.roa (hash: f6z3v4pV6tnSGxv48rgOnvHwC9qgyyjVMA6AIzAEA7k=) 3: pPbWV8D6IYKNMTUHNU3sFIFYDtY.crl (hash: pTNGUpezz0fyHyzDPY3RTqw/9/PmdJ+BumN/WQkNGvI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.crl rsync://rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.mft rsync://rpki.ripe.net/repository/DEFAULT/pPbWV8D6IYKNMTUHNU3sFIFYDtY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:37:b1:59:29:ff:38:2c:4c:b3:a9:a0:01:ef:6e:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4f6d657c0fa21828d313507354dec1481580ed6 Validity Not Before: Dec 11 21:01:06 2025 GMT Not After : Dec 12 21:01:06 2025 GMT Subject: CN=b0e9a8d1d53ec7202aa25c970c00781507ca2a44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:66:22:0b:e2:36:a9:52:f7:cd:3c:d4:3c:01: ab:07:21:00:0f:1f:3f:68:e3:27:5f:fc:a6:74:3f: 55:8f:ad:ab:4c:21:9a:80:d8:16:86:83:0a:a8:54: ab:69:84:a7:9a:78:17:07:b0:1a:b3:12:4c:f6:e7: 82:ef:b0:6a:91:96:f2:92:01:9a:21:99:41:6e:4e: c1:12:13:d3:9d:73:65:15:c0:3b:b5:3c:81:8d:f3: c0:b1:2b:05:40:77:08:c3:5d:5d:df:33:f6:ac:39: f1:01:d5:6c:66:6f:e1:6d:f7:66:db:da:59:62:56: 73:5e:36:af:80:3c:83:03:12:88:36:b3:9c:c1:e7: 95:46:95:f5:33:96:84:50:fa:6f:a3:dd:f1:61:13: c2:4a:33:64:29:90:aa:ff:f6:3e:c7:58:88:18:8b: ff:d8:f8:1f:3d:27:22:7a:db:7f:8a:08:6a:0d:0c: 08:9d:2e:28:0c:b2:8d:6d:1c:ca:a6:ae:e4:8e:84: d4:6e:d0:4f:46:b4:cc:db:b1:b3:6d:87:90:99:72: 52:99:bb:65:1a:85:ab:89:22:28:d4:07:65:54:ec: 6f:db:28:87:f4:53:b9:37:1f:0a:21:22:6b:f0:74: 58:26:09:6b:f5:2b:28:1a:67:80:4f:9c:eb:3b:bd: f9:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:E9:A8:D1:D5:3E:C7:20:2A:A2:5C:97:0C:00:78:15:07:CA:2A:44 X509v3 Authority Key Identifier: keyid:A4:F6:D6:57:C0:FA:21:82:8D:31:35:07:35:4D:EC:14:81:58:0E:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPbWV8D6IYKNMTUHNU3sFIFYDtY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:e9:5a:3e:6f:86:52:e6:19:c4:3f:09:99:2b:89:26:dc:6e: 9b:62:e0:d5:15:49:b1:24:18:4c:7f:64:fa:3a:91:db:db:ee: f7:c6:ff:ed:f9:a1:25:c4:01:2b:12:ff:32:96:c3:d6:8a:af: 24:d2:b2:24:21:db:b5:28:f7:55:14:ef:51:f0:38:79:c7:f6: e2:b0:77:8d:a5:06:62:b2:e4:10:ef:52:10:7a:ff:3f:49:98: 49:00:ee:92:54:6b:42:ae:4c:26:9c:fe:46:bc:21:e0:0e:67: 6d:85:97:a5:8c:2d:56:9c:67:63:c6:80:c3:40:42:4b:68:68: dc:57:f5:3f:6c:e8:c9:a2:c3:b8:ca:42:ac:37:a5:41:6d:ac: 98:b2:42:c3:50:17:43:95:a4:bb:77:bb:ed:96:e1:37:9b:61: b7:f0:77:89:f9:77:2e:d4:58:06:2d:bd:48:09:30:56:e3:74: 3e:4f:5e:fe:4e:1f:cb:da:12:41:9d:e8:24:44:8b:27:ee:4d: 5f:57:da:ad:33:7a:d5:6c:98:e6:37:ad:89:56:7c:de:f2:ab: a4:61:f7:20:dc:66:8f:b6:1c:8a:44:c6:33:c1:73:ed:a1:09: ba:54:3b:16:fb:ae:0c:c3:c2:ab:23:57:62:13:20:97:e3:90: 2e:49:13:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPN7FZKf84LEyzqaAB724PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0ZjZkNjU3YzBmYTIxODI4ZDMxMzUwNzM1NGRlYzE0ODE1 ODBlZDYwHhcNMjUxMjExMjEwMTA2WhcNMjUxMjEyMjEwMTA2WjAzMTEwLwYDVQQD EyhiMGU5YThkMWQ1M2VjNzIwMmFhMjVjOTcwYzAwNzgxNTA3Y2EyYTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGYiC+I2qVL3zTzUPAGrByEADx8/ aOMnX/ymdD9Vj62rTCGagNgWhoMKqFSraYSnmngXB7AasxJM9ueC77BqkZbykgGa IZlBbk7BEhPTnXNlFcA7tTyBjfPAsSsFQHcIw11d3zP2rDnxAdVsZm/hbfdm29pZ YlZzXjavgDyDAxKINrOcweeVRpX1M5aEUPpvo93xYRPCSjNkKZCq//Y+x1iIGIv/ 2PgfPSciett/ighqDQwInS4oDLKNbRzKpq7kjoTUbtBPRrTM27GzbYeQmXJSmbtl GoWriSIo1AdlVOxv2yiH9FO5Nx8KISJr8HRYJglr9SsoGmeAT5zrO735swIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLDpqNHVPscgKqJclwwAeBUHyipEMB8GA1UdIwQY MBaAFKT21lfA+iGCjTE1BzVN7BSBWA7WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFBiV1Y4RDZJWUtOTVRVSE5VM3NGSUZZRHRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8yMzkzOTctMzQ3Ny00Mzc5LWFjNDYt NWMyNzYzNjQ4ZjFjLzEvcFBiV1Y4RDZJWUtOTVRVSE5VM3NGSUZZRHRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My8yMzkzOTctMzQ3Ny00Mzc5LWFjNDYtNWMyNzYzNjQ4ZjFj LzEvcFBiV1Y4RDZJWUtOTVRVSE5VM3NGSUZZRHRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvulaPm+G UuYZxD8JmSuJJtxum2Lg1RVJsSQYTH9k+jqR29vu98b/7fmhJcQBKxL/MpbD1oqv JNKyJCHbtSj3VRTvUfA4ecf24rB3jaUGYrLkEO9SEHr/P0mYSQDuklRrQq5MJpz+ Rrwh4A5nbYWXpYwtVpxnY8aAw0BCS2ho3Ff1P2zoyaLDuMpCrDelQW2smLJCw1AX Q5Wku3e77ZbhN5tht/B3ifl3LtRYBi29SAkwVuN0Pk9e/k4fy9oSQZ3oJESLJ+5N X1farTN61WyY5jetiVZ83vKrpGH3INxmj7YcikTGM8Fz7aEJulQ7FvuuDMPCqyNX YhMgl+OQLkkTvw== -----END CERTIFICATE-----Generated at Fri Dec 12 01:26:16 2025 by rpki-client