This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.mft File: PvLDEpButnNhK6502i3RigNoJLE.mft (raw, json) Hash identifier: c5NoRMBUuajRxwTTYed/E+S3YmKu0YsNo+Tx6CDXe54= Subject key identifier: B6:A5:FA:20:07:52:38:92:E5:94:D0:0E:D4:F2:55:EC:F9:BC:EF:85 Authority key identifier: 3E:F2:C3:12:90:6E:B6:73:61:2B:AE:74:DA:2D:D1:8A:03:68:24:B1 Certificate issuer: /CN=3ef2c312906eb673612bae74da2dd18a036824b1 Certificate serial: 019B0F6E3B733E894A4596AF0E967401AD7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PvLDEpButnNhK6502i3RigNoJLE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.mft Manifest number: 0BF1 Signing time: Thu 11 Dec 2025 22:00:40 +0000 Manifest this update: Thu 11 Dec 2025 22:00:40 +0000 Manifest next update: Fri 12 Dec 2025 22:00:40 +0000 Files and hashes: 1: 9qEL2pFi8GcNKTnAwY3D31I1-18.roa (hash: kRwBp+rZmhG6iafwWEWyexpHApyotJ76NYZuUZZ35QQ=) 2: PvLDEpButnNhK6502i3RigNoJLE.crl (hash: HTjEIQoJduXToYL28E6ZUw30CmeWRtPstpC8p95Sms4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.mft rsync://rpki.ripe.net/repository/DEFAULT/PvLDEpButnNhK6502i3RigNoJLE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:6e:3b:73:3e:89:4a:45:96:af:0e:96:74:01:ad:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ef2c312906eb673612bae74da2dd18a036824b1 Validity Not Before: Dec 11 22:00:40 2025 GMT Not After : Dec 12 22:00:40 2025 GMT Subject: CN=b6a5fa2007523892e594d00ed4f255ecf9bcef85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b8:e1:cc:71:0e:ec:10:c3:16:50:6c:54:92: 9f:dc:c6:74:33:ec:2b:a5:ae:12:ab:ec:13:5d:55: 0f:ba:91:08:27:a0:45:2d:b9:5f:ed:18:2b:35:a4: da:33:eb:a3:44:de:c5:92:69:10:64:6d:0e:7a:04: 21:de:8b:c9:0d:41:b7:13:42:8a:ff:58:a9:bf:32: 52:c3:62:9d:00:0a:c7:6e:56:22:a7:bb:21:58:9e: 3c:76:3d:10:45:9e:f5:31:14:49:1d:2f:4d:e8:e9: ff:00:81:0b:dd:0e:ed:ee:e0:cd:f9:b4:80:f2:e2: e0:15:15:c4:f5:5e:25:82:8f:b6:53:ca:b1:94:a6: 56:e3:e2:8d:c2:cf:3b:cf:13:6e:95:cf:ca:8d:fc: 3b:40:00:75:1d:3c:55:1e:ea:af:e6:d4:8c:2f:d8: a0:09:66:9b:bb:e3:be:d3:bb:54:01:ea:98:56:92: 06:a7:0b:f6:b4:29:a1:ee:e3:31:03:13:38:b7:d0: 6d:b0:c9:9e:8f:bf:8e:57:10:94:0a:2b:68:8e:7c: 54:7e:ad:ed:c6:01:41:ee:63:e9:4c:c1:45:e6:22: a2:36:8f:44:45:ff:9c:c7:79:c7:86:10:a8:b4:09: dd:a6:c2:e4:45:5c:09:a5:bd:05:bd:c5:2e:e9:79: 6a:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:A5:FA:20:07:52:38:92:E5:94:D0:0E:D4:F2:55:EC:F9:BC:EF:85 X509v3 Authority Key Identifier: keyid:3E:F2:C3:12:90:6E:B6:73:61:2B:AE:74:DA:2D:D1:8A:03:68:24:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PvLDEpButnNhK6502i3RigNoJLE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:3a:10:74:76:29:25:13:93:98:40:22:7e:53:bd:c7:59:f0: 10:19:99:f2:11:83:51:db:b9:60:b5:75:2d:11:88:34:6f:eb: 61:ef:cf:39:3d:31:e2:41:04:4a:9f:9a:bf:56:7d:93:bc:cb: d6:3c:fe:0a:67:50:9c:37:75:9d:f0:dd:96:cc:b2:f7:ac:fc: 2a:3e:69:50:e1:7e:5e:82:55:21:73:c2:93:d9:9c:c7:c7:e0: 92:31:34:f6:77:6b:85:5f:0a:16:55:f8:76:c5:71:b9:26:df: 41:e4:07:cb:71:5b:cd:fa:bc:b0:d2:76:1d:3f:56:38:91:ea: 9a:4c:7b:e9:ed:b2:ea:e0:76:3a:39:8b:0c:0a:d9:09:e0:fe: 9f:e4:2f:7e:24:5a:ff:b3:00:65:80:d9:75:e7:74:c8:1d:cb: 35:33:cf:74:35:20:9c:9b:01:5f:fa:a4:d6:c9:59:19:a9:b6: 86:19:41:58:24:60:74:dc:b1:44:f7:19:5e:bd:f3:cd:40:08: 67:13:d8:d8:a6:47:c2:e1:9a:6f:35:d1:54:26:29:97:0d:9e: d1:e5:51:50:58:8c:da:54:28:0d:0f:07:3c:97:0d:95:0a:c5: 1a:cd:3c:3f:87:fd:2c:c4:fe:72:d3:fb:03:93:54:c1:a8:fc: ca:ed:05:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPbjtzPolKRZavDpZ0Aa17MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlZjJjMzEyOTA2ZWI2NzM2MTJiYWU3NGRhMmRkMThhMDM2 ODI0YjEwHhcNMjUxMjExMjIwMDQwWhcNMjUxMjEyMjIwMDQwWjAzMTEwLwYDVQQD EyhiNmE1ZmEyMDA3NTIzODkyZTU5NGQwMGVkNGYyNTVlY2Y5YmNlZjg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbjhzHEO7BDDFlBsVJKf3MZ0M+wr pa4Sq+wTXVUPupEIJ6BFLblf7RgrNaTaM+ujRN7FkmkQZG0OegQh3ovJDUG3E0KK /1ipvzJSw2KdAArHblYip7shWJ48dj0QRZ71MRRJHS9N6On/AIEL3Q7t7uDN+bSA 8uLgFRXE9V4lgo+2U8qxlKZW4+KNws87zxNulc/Kjfw7QAB1HTxVHuqv5tSML9ig CWabu+O+07tUAeqYVpIGpwv2tCmh7uMxAxM4t9BtsMmej7+OVxCUCitojnxUfq3t xgFB7mPpTMFF5iKiNo9ERf+cx3nHhhCotAndpsLkRVwJpb0FvcUu6XlqVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLal+iAHUjiS5ZTQDtTyVez5vO+FMB8GA1UdIwQY MBaAFD7ywxKQbrZzYSuudNot0YoDaCSxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHZMREVwQnV0bk5oSzY1MDJpM1JpZ05vSkxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC83ODgyZTMtZGU4Zi00NzUxLTliNmYt YzlmZmJlOWI5NGQzLzEvUHZMREVwQnV0bk5oSzY1MDJpM1JpZ05vSkxFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC83ODgyZTMtZGU4Zi00NzUxLTliNmYtYzlmZmJlOWI5NGQz LzEvUHZMREVwQnV0bk5oSzY1MDJpM1JpZ05vSkxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALToQdHYp JROTmEAiflO9x1nwEBmZ8hGDUdu5YLV1LRGING/rYe/POT0x4kEESp+av1Z9k7zL 1jz+CmdQnDd1nfDdlsyy96z8Kj5pUOF+XoJVIXPCk9mcx8fgkjE09ndrhV8KFlX4 dsVxuSbfQeQHy3Fbzfq8sNJ2HT9WOJHqmkx76e2y6uB2OjmLDArZCeD+n+QvfiRa /7MAZYDZded0yB3LNTPPdDUgnJsBX/qk1slZGam2hhlBWCRgdNyxRPcZXr3zzUAI ZxPY2KZHwuGabzXRVCYplw2e0eVRUFiM2lQoDQ8HPJcNlQrFGs08P4f9LMT+ctP7 A5NUwaj8yu0FBA== -----END CERTIFICATE-----Generated at Thu Dec 11 23:53:15 2025 by rpki-client