This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft File: pbIQYaPq10EOBFDbvyFw_gyTi7E.mft (raw, json) Hash identifier: 5HmzjC7mt1CZNWT6DJz+Epz/YAIc3oYvm/zPtKk4oBs= Subject key identifier: F6:14:0C:74:CD:43:7F:9D:B2:DB:40:D8:0D:69:49:25:82:A2:6C:4B Authority key identifier: A5:B2:10:61:A3:EA:D7:41:0E:04:50:DB:BF:21:70:FE:0C:93:8B:B1 Certificate issuer: /CN=a5b21061a3ead7410e0450dbbf2170fe0c938bb1 Certificate serial: 019B1A96FEB84ED742DD11CC0E78A0E9963D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pbIQYaPq10EOBFDbvyFw_gyTi7E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft Manifest number: 1776 Signing time: Sun 14 Dec 2025 02:01:01 +0000 Manifest this update: Sun 14 Dec 2025 02:01:01 +0000 Manifest next update: Mon 15 Dec 2025 02:01:01 +0000 Files and hashes: 1: pbIQYaPq10EOBFDbvyFw_gyTi7E.crl (hash: v2hcNJExyZvmTYWQnvVpLGen52B48ohUpvxx8WD5bz4=) 2: q9uMRJMivdNIUmR3cIXWE4hBpI0.roa (hash: k+Mam0ND2lwJk85PckjyzqHvxu7FYX4bMXDwNQs3Kx0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.crl rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft rsync://rpki.ripe.net/repository/DEFAULT/pbIQYaPq10EOBFDbvyFw_gyTi7E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:96:fe:b8:4e:d7:42:dd:11:cc:0e:78:a0:e9:96:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5b21061a3ead7410e0450dbbf2170fe0c938bb1 Validity Not Before: Dec 14 02:01:01 2025 GMT Not After : Dec 15 02:01:01 2025 GMT Subject: CN=f6140c74cd437f9db2db40d80d69492582a26c4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:09:d8:2d:1c:86:62:d0:4c:33:16:4d:58:5a: 9e:6f:76:b0:6c:0c:73:88:06:87:b0:32:a9:e4:19: 74:e6:62:16:43:37:c2:41:ff:4a:52:d4:7f:c1:a5: 23:16:ea:96:15:50:ff:e0:96:9f:1e:59:17:24:05: 61:f2:a8:51:66:78:4b:af:b3:85:09:c8:2a:6f:d9: cb:8e:6b:15:bd:7f:e8:10:8f:e3:c7:06:24:ee:49: 1c:a6:a1:ee:8c:52:0f:5f:a8:f9:87:6b:ee:2f:1f: f7:bd:b0:2d:63:0f:95:31:72:ce:85:fc:05:ac:73: 58:9f:eb:31:b2:0a:5c:c6:c0:53:af:85:9d:09:0c: 47:c9:0d:74:e0:80:43:38:7e:2f:2c:76:a0:8b:27: ab:13:8a:ab:7e:e6:67:b0:51:a6:7f:92:bb:03:51: 26:dd:59:f3:e9:a4:fc:75:d9:f1:ff:ae:04:fe:b5: 70:a7:de:91:fd:c9:b9:01:48:a7:fd:95:94:88:b5: 05:3f:76:4a:e6:60:aa:35:17:83:ba:7f:fe:93:0d: 1c:ab:26:fe:c7:b4:18:b1:08:d8:2e:01:97:55:16: 2a:d9:34:83:ea:95:21:8c:3c:39:25:0d:22:ef:0d: 43:5b:e0:34:9c:e0:f4:66:9b:a0:c2:97:59:a2:ed: b5:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:14:0C:74:CD:43:7F:9D:B2:DB:40:D8:0D:69:49:25:82:A2:6C:4B X509v3 Authority Key Identifier: keyid:A5:B2:10:61:A3:EA:D7:41:0E:04:50:DB:BF:21:70:FE:0C:93:8B:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbIQYaPq10EOBFDbvyFw_gyTi7E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:41:a0:1f:5a:b0:bb:4d:d7:a9:3e:54:59:e0:55:1b:59:09: 57:e1:f2:70:be:01:ac:78:97:11:bc:90:ce:49:35:41:d9:32: f0:d1:ee:50:77:6c:71:77:17:86:91:68:39:ab:02:aa:56:c5: 81:a6:21:ba:91:30:52:77:69:3d:89:27:0f:71:7a:c0:cb:9a: d2:a2:cf:fc:17:44:a6:c3:95:d8:0e:16:b5:ce:2d:81:2f:c3: a2:86:b8:62:41:30:6e:4b:14:98:bf:b7:97:64:86:bb:12:6e: ef:9e:7c:88:3f:36:33:0c:8b:03:2e:30:77:e0:02:b5:9e:e4: ec:06:8c:25:9b:e9:cb:03:2f:7f:1b:1f:54:17:88:2a:31:04: fe:d7:c9:8a:e8:1e:61:ad:98:c9:4e:79:ed:ed:e2:c6:d5:68: 2e:0d:d9:71:cc:fd:9f:28:5d:b0:20:2d:9f:a4:fe:fa:79:06: c1:a6:da:44:cb:57:f1:5c:f8:7d:a8:a9:fe:c1:70:e9:f7:c0: dc:d8:35:15:d2:b3:f4:de:bd:b1:39:1c:6a:68:95:49:49:ec: 80:1d:a5:d7:78:9c:d9:ee:b7:95:3c:38:5c:e4:e8:ae:70:1e: 8c:e1:77:57:e1:86:e1:80:93:86:de:a2:26:96:c6:92:f0:a6: f0:bb:c9:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsalv64TtdC3RHMDnig6ZY9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1YjIxMDYxYTNlYWQ3NDEwZTA0NTBkYmJmMjE3MGZlMGM5 MzhiYjEwHhcNMjUxMjE0MDIwMTAxWhcNMjUxMjE1MDIwMTAxWjAzMTEwLwYDVQQD EyhmNjE0MGM3NGNkNDM3ZjlkYjJkYjQwZDgwZDY5NDkyNTgyYTI2YzRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7QnYLRyGYtBMMxZNWFqeb3awbAxz iAaHsDKp5Bl05mIWQzfCQf9KUtR/waUjFuqWFVD/4JafHlkXJAVh8qhRZnhLr7OF Ccgqb9nLjmsVvX/oEI/jxwYk7kkcpqHujFIPX6j5h2vuLx/3vbAtYw+VMXLOhfwF rHNYn+sxsgpcxsBTr4WdCQxHyQ104IBDOH4vLHagiyerE4qrfuZnsFGmf5K7A1Em 3Vnz6aT8ddnx/64E/rVwp96R/cm5AUin/ZWUiLUFP3ZK5mCqNReDun/+kw0cqyb+ x7QYsQjYLgGXVRYq2TSD6pUhjDw5JQ0i7w1DW+A0nOD0ZpugwpdZou21MwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPYUDHTNQ3+dsttA2A1pSSWComxLMB8GA1UdIwQY MBaAFKWyEGGj6tdBDgRQ278hcP4Mk4uxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGJJUVlhUHExMEVPQkZEYnZ5RndfZ3lUaTdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9mZmFjNGQtYTI3Mi00ZTZjLTk0MzEt YTA4ODNjMGIwOTViLzEvcGJJUVlhUHExMEVPQkZEYnZ5RndfZ3lUaTdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC9mZmFjNGQtYTI3Mi00ZTZjLTk0MzEtYTA4ODNjMGIwOTVi LzEvcGJJUVlhUHExMEVPQkZEYnZ5RndfZ3lUaTdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE0GgH1qw u03XqT5UWeBVG1kJV+HycL4BrHiXEbyQzkk1Qdky8NHuUHdscXcXhpFoOasCqlbF gaYhupEwUndpPYknD3F6wMua0qLP/BdEpsOV2A4Wtc4tgS/Dooa4YkEwbksUmL+3 l2SGuxJu7558iD82MwyLAy4wd+ACtZ7k7AaMJZvpywMvfxsfVBeIKjEE/tfJiuge Ya2YyU557e3ixtVoLg3Zccz9nyhdsCAtn6T++nkGwabaRMtX8Vz4faip/sFw6ffA 3Ng1FdKz9N69sTkcamiVSUnsgB2l13ic2e63lTw4XOTornAejOF3V+GG4YCTht6i JpbGkvCm8LvJ4g== -----END CERTIFICATE-----Generated at Sun Dec 14 09:36:37 2025 by rpki-client