This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.mft File: pbnffpj285_iukAi2id9KBmCgCE.mft (raw, json) Hash identifier: 0MSDJobzcItx19qdwGZc13lEt7wOcf+UZDSCsgnzqQo= Subject key identifier: 30:A4:BD:BD:57:B4:63:87:7A:E0:9B:EB:B3:67:FB:A9:E8:E6:75:1A Authority key identifier: A5:B9:DF:7E:98:F6:F3:9F:E2:BA:40:22:DA:27:7D:28:19:82:80:21 Certificate issuer: /CN=a5b9df7e98f6f39fe2ba4022da277d2819828021 Certificate serial: 019B1F86F6E18BADE56DBBCF5CD94D9223AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pbnffpj285_iukAi2id9KBmCgCE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.mft Manifest number: 0F37 Signing time: Mon 15 Dec 2025 01:01:37 +0000 Manifest this update: Mon 15 Dec 2025 01:01:37 +0000 Manifest next update: Tue 16 Dec 2025 01:01:37 +0000 Files and hashes: 1: 1h7x7glo7raaLY2_2McusPDR_aM.roa (hash: HMpq5ZxT3KuTaqPuHxdfR/p2+y/DB0HiuZsEYPl7Agw=) 2: OGo9fBtswLdwnS7x4PLyvgfblhc.roa (hash: YfRWTX+R7heO/+Oj3o5jtwp1kOciqeFbXjDX1mTE1h8=) 3: ouICw0nyK_0-5jscxv12aq634vw.roa (hash: ZpjXF6V0UreF7p2IPTzGzZ30r7TGS05jqHG074BeOko=) 4: pbnffpj285_iukAi2id9KBmCgCE.crl (hash: EEFCfsEnUGJyd6sHCeJpgYrRbZglm+loAs3272SXDKQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.mft rsync://rpki.ripe.net/repository/DEFAULT/pbnffpj285_iukAi2id9KBmCgCE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1f:86:f6:e1:8b:ad:e5:6d:bb:cf:5c:d9:4d:92:23:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5b9df7e98f6f39fe2ba4022da277d2819828021 Validity Not Before: Dec 15 01:01:37 2025 GMT Not After : Dec 16 01:01:37 2025 GMT Subject: CN=30a4bdbd57b463877ae09bebb367fba9e8e6751a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:28:89:c0:72:80:7d:4d:09:9d:96:b2:7e:2e: 5a:e9:b9:14:9b:37:55:61:2a:58:12:c7:d5:aa:73: 7a:ab:72:87:a5:31:5b:27:76:e4:4e:ba:1d:70:38: 66:09:fd:12:f0:15:77:f6:0f:59:1e:bb:d8:0e:c7: fb:45:dd:14:a2:b5:c2:59:2a:fe:7d:e0:a6:e4:bb: 0c:d8:1a:d7:ba:aa:ba:c1:6b:65:4d:e6:3d:4d:fd: c5:18:f4:fe:d2:2b:c9:ed:a3:f3:23:fa:b3:d0:b1: 7b:f6:67:10:b3:76:90:70:72:9f:80:10:61:7b:62: 2b:bc:fd:bb:9b:f5:9b:35:a9:84:dc:a6:1e:02:1b: ae:27:c5:3e:28:d9:7e:4f:5a:12:aa:38:73:4e:46: 83:20:15:fa:e8:97:34:f1:1c:45:55:3e:19:e3:bb: cd:69:05:92:f5:60:da:4a:5b:f1:e2:4c:60:b3:38: 48:d6:32:40:92:86:82:8f:4c:69:35:16:eb:d3:7c: 9f:fa:9a:7c:7c:ee:8e:85:29:9c:6b:25:b6:ef:8b: 90:09:aa:1d:92:2d:18:0c:21:cc:4b:70:2c:15:33: 01:cd:20:72:51:f4:9d:33:6b:b2:a5:ad:d6:c6:e5: 0d:e5:57:52:5a:e3:76:d8:1b:20:ad:ba:a0:a0:58: e7:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:A4:BD:BD:57:B4:63:87:7A:E0:9B:EB:B3:67:FB:A9:E8:E6:75:1A X509v3 Authority Key Identifier: keyid:A5:B9:DF:7E:98:F6:F3:9F:E2:BA:40:22:DA:27:7D:28:19:82:80:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbnffpj285_iukAi2id9KBmCgCE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:d5:ee:4e:27:ee:1e:4a:53:c1:1c:16:b8:95:49:c4:2e:84: 80:9c:75:6d:f3:27:63:26:a5:44:e2:87:86:3d:64:e4:e7:d1: d1:b3:69:8c:f7:89:72:71:a4:93:16:27:7e:1e:f0:87:0a:6c: 13:48:70:7e:05:b8:6a:bc:e4:0b:32:c8:c3:df:7a:e9:89:65: e7:af:3c:67:e2:27:e5:97:d9:ed:09:55:03:66:19:b9:37:69: fb:32:0e:80:3b:83:f7:5a:bc:3c:db:cd:e5:80:da:8b:5c:2f: 4a:02:46:d6:12:68:06:47:81:db:98:4d:81:83:3a:74:c5:27: 16:e9:56:71:af:6c:b1:9c:31:b9:0f:14:b6:70:5b:7a:47:d6: c9:7d:9c:ac:ae:9f:d9:14:7d:f3:20:d3:6e:eb:db:29:e8:6e: 7d:63:71:6f:d4:70:59:83:0c:a9:24:60:0a:5c:22:c7:73:51: 6f:98:4b:86:ab:5c:68:f3:69:dd:c8:64:33:7a:87:7d:3e:b4: 16:cd:29:00:66:b6:a2:88:46:60:d9:c7:d2:df:32:fe:51:1d: e8:ab:5c:c3:96:3d:46:2c:fb:57:44:ba:2f:3c:1c:0c:73:44: 0a:7c:d1:2b:8d:9b:82:aa:45:79:c4:d9:cd:a7:29:ca:e9:0b: e3:63:8a:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsfhvbhi63lbbvPXNlNkiOrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1YjlkZjdlOThmNmYzOWZlMmJhNDAyMmRhMjc3ZDI4MTk4 MjgwMjEwHhcNMjUxMjE1MDEwMTM3WhcNMjUxMjE2MDEwMTM3WjAzMTEwLwYDVQQD EygzMGE0YmRiZDU3YjQ2Mzg3N2FlMDliZWJiMzY3ZmJhOWU4ZTY3NTFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSiJwHKAfU0JnZayfi5a6bkUmzdV YSpYEsfVqnN6q3KHpTFbJ3bkTrodcDhmCf0S8BV39g9ZHrvYDsf7Rd0UorXCWSr+ feCm5LsM2BrXuqq6wWtlTeY9Tf3FGPT+0ivJ7aPzI/qz0LF79mcQs3aQcHKfgBBh e2IrvP27m/WbNamE3KYeAhuuJ8U+KNl+T1oSqjhzTkaDIBX66Jc08RxFVT4Z47vN aQWS9WDaSlvx4kxgszhI1jJAkoaCj0xpNRbr03yf+pp8fO6OhSmcayW274uQCaod ki0YDCHMS3AsFTMBzSByUfSdM2uypa3WxuUN5VdSWuN22BsgrbqgoFjnCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDCkvb1XtGOHeuCb67Nn+6no5nUaMB8GA1UdIwQY MBaAFKW5336Y9vOf4rpAItonfSgZgoAhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGJuZmZwajI4NV9pdWtBaTJpZDlLQm1DZ0NFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC85NzMwNDctODkxNC00MWM2LWExZTAt MGFjN2I3ZWRlNDJiLzEvcGJuZmZwajI4NV9pdWtBaTJpZDlLQm1DZ0NFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC85NzMwNDctODkxNC00MWM2LWExZTAtMGFjN2I3ZWRlNDJi LzEvcGJuZmZwajI4NV9pdWtBaTJpZDlLQm1DZ0NFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARNXuTifu HkpTwRwWuJVJxC6EgJx1bfMnYyalROKHhj1k5OfR0bNpjPeJcnGkkxYnfh7whwps E0hwfgW4arzkCzLIw9966Yll5688Z+In5ZfZ7QlVA2YZuTdp+zIOgDuD91q8PNvN 5YDai1wvSgJG1hJoBkeB25hNgYM6dMUnFulWca9ssZwxuQ8UtnBbekfWyX2crK6f 2RR98yDTbuvbKehufWNxb9RwWYMMqSRgClwix3NRb5hLhqtcaPNp3chkM3qHfT60 Fs0pAGa2oohGYNnH0t8y/lEd6Ktcw5Y9Riz7V0S6LzwcDHNECnzRK42bgqpFecTZ zacpyukL42OKNQ== -----END CERTIFICATE-----Generated at Mon Dec 15 08:13:03 2025 by rpki-client