This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/PBuDiIaW_ERHjGk9bngD6VFiUOY.mft File: PBuDiIaW_ERHjGk9bngD6VFiUOY.mft (raw, json) Hash identifier: cB6ZLrnthvOSXZKb7kzJ7lIbRaat9cTvnAkfdDpAM3o= Subject key identifier: 6C:D2:05:8C:6D:63:1E:7D:60:26:3A:9D:1B:26:D4:CB:38:50:2F:24 Authority key identifier: 3C:1B:83:88:86:96:FC:44:47:8C:69:3D:6E:78:03:E9:51:62:50:E6 Certificate issuer: /CN=3c1b83888696fc44478c693d6e7803e9516250e6 Certificate serial: 019B07EBB201A15580CF7D846C7ACF3EA4EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBuDiIaW_ERHjGk9bngD6VFiUOY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/PBuDiIaW_ERHjGk9bngD6VFiUOY.mft Manifest number: 0E7B Signing time: Wed 10 Dec 2025 11:00:45 +0000 Manifest this update: Wed 10 Dec 2025 11:00:45 +0000 Manifest next update: Thu 11 Dec 2025 11:00:45 +0000 Files and hashes: 1: 1-PRouHcN36iLzwy9uNqLaIiV2X0.roa (hash: 4hehSvfv8sJqIC+vHja2uEOG+73HXBFbIDrIN8bH3vg=) 2: 67RGYz7m7xWKzUB6-JO6U9Kw4Oo.roa (hash: Iy7s2Aw6gINY7MrIIhsJrkKAANHoHyCQ2Dm8An5q6ps=) 3: PBuDiIaW_ERHjGk9bngD6VFiUOY.crl (hash: SG3iatdGjt3sI1jvJYsC33mg+6j+dRC9GhSMgui5x8s=) 4: rTI3MC_cflVKmz4QHcC39TCJNIM.roa (hash: Gn7Y1Iho0e2nKKiZXGFb+cFXQIXgua4De8STjxaheIw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/PBuDiIaW_ERHjGk9bngD6VFiUOY.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/PBuDiIaW_ERHjGk9bngD6VFiUOY.mft rsync://rpki.ripe.net/repository/DEFAULT/PBuDiIaW_ERHjGk9bngD6VFiUOY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:eb:b2:01:a1:55:80:cf:7d:84:6c:7a:cf:3e:a4:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c1b83888696fc44478c693d6e7803e9516250e6 Validity Not Before: Dec 10 11:00:45 2025 GMT Not After : Dec 11 11:00:45 2025 GMT Subject: CN=6cd2058c6d631e7d60263a9d1b26d4cb38502f24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:a5:4e:a4:06:1f:ba:93:32:b3:a7:57:f3:88: ce:92:29:c8:72:18:93:ce:87:ca:de:5d:6e:9f:d0: 1c:ea:0c:9a:bf:b8:28:c9:31:20:e6:8e:ef:11:21: e9:25:b3:d0:5a:f7:b5:50:09:99:18:a5:cc:21:e8: 97:22:0c:b6:f2:d7:6d:65:8a:f9:44:f0:f7:4e:b3: bd:c3:a7:b7:ae:ca:69:79:77:b3:bd:7b:73:19:97: 20:13:dc:b4:b3:13:dd:c2:e9:62:28:6e:ae:52:38: 92:7c:d2:ca:0a:0e:84:96:ca:79:cf:15:f6:1a:46: 8a:ea:61:0e:ea:51:0a:38:50:3e:21:b2:5f:cb:e8: ea:a2:21:ee:7c:a2:3d:1f:b1:4d:14:ea:ca:67:11: 52:41:12:bf:94:a5:f1:d4:df:b4:d1:43:71:5a:e7: 73:95:62:df:84:6c:06:48:06:58:99:bd:5e:17:22: 75:75:5e:af:79:96:66:da:97:ba:1b:25:01:05:30: 5f:85:c8:d2:c0:8c:5f:e0:9f:98:e4:e5:2a:b0:2e: 69:21:bc:b8:4d:f6:b8:88:1c:8b:5a:24:7e:bc:6c: 9d:2f:90:55:f6:17:81:42:41:77:de:e9:ff:38:0c: a7:af:44:9c:98:d2:63:05:42:73:34:e8:d2:5d:b0: f0:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:D2:05:8C:6D:63:1E:7D:60:26:3A:9D:1B:26:D4:CB:38:50:2F:24 X509v3 Authority Key Identifier: keyid:3C:1B:83:88:86:96:FC:44:47:8C:69:3D:6E:78:03:E9:51:62:50:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBuDiIaW_ERHjGk9bngD6VFiUOY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/PBuDiIaW_ERHjGk9bngD6VFiUOY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/PBuDiIaW_ERHjGk9bngD6VFiUOY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:9f:f0:73:3c:7a:55:4c:59:40:58:05:b7:6b:de:ff:7f:b8: ad:fc:55:04:21:16:71:bd:9d:28:9d:8d:ef:7d:71:11:2e:5f: 02:32:68:c6:0c:66:fd:f3:8d:b3:2e:07:6b:19:d7:06:4f:cf: ea:0a:2d:91:e2:f7:86:09:86:e8:a3:7f:8a:d4:13:1e:9c:e6: d7:13:e8:6c:cb:b8:25:cb:c3:8e:87:ad:b2:f6:6f:58:45:e5: 7f:ca:03:87:d3:76:0c:61:ce:a9:51:c8:c2:88:05:84:95:bf: 5b:7b:55:7d:c6:6c:12:86:9d:13:63:1f:0e:c2:47:6e:c5:2f: 63:db:e5:a0:99:38:3a:48:42:8e:40:d8:0c:e0:13:6a:88:ed: af:87:6d:c7:79:4e:4b:11:3e:68:32:44:29:1f:c7:f9:70:f5: d6:ce:bf:c3:26:1c:94:a3:80:7d:f3:ea:9c:27:92:0b:d8:59: c9:67:c3:08:65:85:42:5a:a6:81:b0:63:b6:da:0d:0d:e8:0b: 12:53:34:18:8f:21:4c:5c:ae:a7:9d:10:37:d5:06:86:9b:cd: 1f:0f:39:6d:ca:ef:98:01:84:08:5e:3b:c7:ea:a5:97:d5:cb: 26:8f:2b:a9:a3:68:d7:f7:07:18:a0:8f:94:2c:9e:6b:fd:b3: 85:8d:e7:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsH67IBoVWAz32EbHrPPqTsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjMWI4Mzg4ODY5NmZjNDQ0NzhjNjkzZDZlNzgwM2U5NTE2 MjUwZTYwHhcNMjUxMjEwMTEwMDQ1WhcNMjUxMjExMTEwMDQ1WjAzMTEwLwYDVQQD Eyg2Y2QyMDU4YzZkNjMxZTdkNjAyNjNhOWQxYjI2ZDRjYjM4NTAyZjI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+aVOpAYfupMys6dX84jOkinIchiT zofK3l1un9Ac6gyav7goyTEg5o7vESHpJbPQWve1UAmZGKXMIeiXIgy28tdtZYr5 RPD3TrO9w6e3rsppeXezvXtzGZcgE9y0sxPdwuliKG6uUjiSfNLKCg6Elsp5zxX2 GkaK6mEO6lEKOFA+IbJfy+jqoiHufKI9H7FNFOrKZxFSQRK/lKXx1N+00UNxWudz lWLfhGwGSAZYmb1eFyJ1dV6veZZm2pe6GyUBBTBfhcjSwIxf4J+Y5OUqsC5pIby4 Tfa4iByLWiR+vGydL5BV9heBQkF33un/OAynr0ScmNJjBUJzNOjSXbDw3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGzSBYxtYx59YCY6nRsm1Ms4UC8kMB8GA1UdIwQY MBaAFDwbg4iGlvxER4xpPW54A+lRYlDmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEJ1RGlJYVdfRVJIakdrOWJuZ0Q2VkZpVU9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9kNTU2ODMtZmVjMi00N2ZkLWFjNmUt OWU4MmRhNzMxNWNmLzEvUEJ1RGlJYVdfRVJIakdrOWJuZ0Q2VkZpVU9ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9kNTU2ODMtZmVjMi00N2ZkLWFjNmUtOWU4MmRhNzMxNWNm LzEvUEJ1RGlJYVdfRVJIakdrOWJuZ0Q2VkZpVU9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkp/wczx6 VUxZQFgFt2ve/3+4rfxVBCEWcb2dKJ2N731xES5fAjJoxgxm/fONsy4HaxnXBk/P 6gotkeL3hgmG6KN/itQTHpzm1xPobMu4JcvDjoetsvZvWEXlf8oDh9N2DGHOqVHI wogFhJW/W3tVfcZsEoadE2MfDsJHbsUvY9vloJk4OkhCjkDYDOATaojtr4dtx3lO SxE+aDJEKR/H+XD11s6/wyYclKOAffPqnCeSC9hZyWfDCGWFQlqmgbBjttoNDegL ElM0GI8hTFyup50QN9UGhpvNHw85bcrvmAGECF47x+qll9XLJo8rqaNo1/cHGKCP lCyea/2zhY3ngw== -----END CERTIFICATE-----Generated at Wed Dec 10 13:14:56 2025 by rpki-client