This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/0/0BCF853E803055C859EF10545EB1D58071242ACC.mft File: 0BCF853E803055C859EF10545EB1D58071242ACC.mft (raw, json) Hash identifier: H4AW++b51lL/ZXFxX4GXYH1v8tFNmJsfPhICfxFoJ4o= Subject key identifier: D0:19:C9:49:15:E6:77:1E:0B:EC:42:AE:10:CB:31:53:18:96:32:DE Authority key identifier: 0B:CF:85:3E:80:30:55:C8:59:EF:10:54:5E:B1:D5:80:71:24:2A:CC Certificate issuer: /CN=0bcf853e803055c859ef10545eb1d58071242acc Certificate serial: 46CF5CA41DD3DAA5A1D7D3C1C1628D3DD0292719 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8-FPoAwVchZ7xBUXrHVgHEkKsw.cer Subject info access: rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/0/0BCF853E803055C859EF10545EB1D58071242ACC.mft Manifest number: 069D Signing time: Sat 20 Dec 2025 06:00:02 +0000 Manifest this update: Sat 20 Dec 2025 05:55:02 +0000 Manifest next update: Sun 21 Dec 2025 07:10:02 +0000 Files and hashes: 1: 0BCF853E803055C859EF10545EB1D58071242ACC.crl (hash: s78lfK9knLSSBfv49sWpTaZf2pZpfW6AJUv88VKchCc=) 2: AS52025.asa (hash: WrQOZoXW9XpF+3296oKtRS8KKfSGfK/Fs8AR2+7y+fI=) Validation: OK Signature path: rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/0/0BCF853E803055C859EF10545EB1D58071242ACC.crl rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/0/0BCF853E803055C859EF10545EB1D58071242ACC.mft rsync://rpki.ripe.net/repository/DEFAULT/C8-FPoAwVchZ7xBUXrHVgHEkKsw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:10:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:cf:5c:a4:1d:d3:da:a5:a1:d7:d3:c1:c1:62:8d:3d:d0:29:27:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0bcf853e803055c859ef10545eb1d58071242acc Validity Not Before: Dec 20 05:55:02 2025 GMT Not After : Dec 21 07:10:02 2025 GMT Subject: CN=D019C94915E6771E0BEC42AE10CB3153189632DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:38:51:86:87:c5:58:df:63:43:fc:71:03:88: 6c:9c:89:ca:7a:55:f0:d6:74:f7:6f:c6:78:2d:92: 25:5c:64:39:56:34:88:b9:f8:4b:57:38:57:20:11: b6:74:24:62:d7:07:8b:8f:69:db:7f:a4:13:4b:f3: 00:98:5b:3d:35:df:c4:5c:3f:fa:37:52:2c:0a:94: cc:63:fb:e8:f3:98:bb:12:8f:ac:8a:3c:49:b7:61: 0d:e9:d3:f4:56:15:8c:a5:c7:2e:db:ce:dc:01:76: a6:c9:6b:8c:4e:83:47:25:72:9a:e3:be:e3:6b:55: ad:6a:48:3a:54:0b:5c:61:2e:41:5d:cf:6b:28:e8: fe:64:ad:e1:c8:4c:4f:e6:90:53:25:03:2e:e9:8e: 00:89:93:d6:00:34:c3:f1:99:9e:b8:36:39:d9:11: 1d:31:92:ec:69:75:63:d8:a5:16:93:c5:1a:67:f4: 47:0e:9c:78:2b:7c:0b:90:99:7f:78:6d:fb:98:2d: 4e:72:71:ea:87:51:de:0f:cb:69:2b:69:77:3a:a9: d6:c7:45:ab:ca:06:db:46:f3:e5:e0:24:a9:35:c6: d5:ab:c6:6f:db:90:cc:ce:be:05:66:4d:c5:57:9c: d5:73:2e:00:0c:f3:0e:1a:e4:f8:ad:3e:5f:a3:d6: f1:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:19:C9:49:15:E6:77:1E:0B:EC:42:AE:10:CB:31:53:18:96:32:DE X509v3 Authority Key Identifier: keyid:0B:CF:85:3E:80:30:55:C8:59:EF:10:54:5E:B1:D5:80:71:24:2A:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/0/0BCF853E803055C859EF10545EB1D58071242ACC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8-FPoAwVchZ7xBUXrHVgHEkKsw.cer Subject Information Access: Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/0/0BCF853E803055C859EF10545EB1D58071242ACC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:15:10:27:9c:b6:5f:99:57:b5:ac:ab:29:cc:f7:d9:ef:5e: ba:eb:1c:3a:8e:b6:bf:9b:21:23:8c:81:d9:46:1f:c1:16:f3: 79:bc:c4:03:44:b7:e1:ef:a9:4e:a5:e0:54:56:e9:28:a9:67: bc:74:c4:c2:0e:b6:2c:01:3a:83:f6:fa:21:54:ea:9a:c1:2d: ad:1a:5d:0b:36:4d:9d:c0:0c:60:5a:23:5b:d6:e8:59:e2:a3: b3:d3:b5:8f:b6:cf:48:fb:9d:d0:3f:00:48:d0:7e:99:b2:51: 8b:40:b0:d8:ed:a3:94:13:38:47:4f:77:7c:f2:5e:8b:c2:47: 0a:81:cc:61:c0:a3:9f:af:9e:de:10:9e:79:5a:40:ec:f0:4d: 12:b1:84:3b:11:3c:de:38:5b:92:6d:56:64:43:ad:4e:db:2b: 99:8d:9f:7f:24:c5:aa:ef:f7:db:03:75:9a:d5:51:87:4c:9d: fd:3c:35:b8:f3:c3:a9:21:fd:e0:d2:76:e7:00:4c:1f:7d:14: 97:7d:b5:a2:ae:79:f7:ba:71:a7:be:f6:73:2d:75:34:89:d1: e3:c2:fa:54:d3:ee:18:a6:93:b0:f5:11:bb:9b:58:e0:36:3c: ad:e4:50:31:3f:9e:13:0b:b8:4e:29:8f:2e:e1:8e:03:0c:52: 24:a3:66:0d -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgIURs9cpB3T2qWh19PBwWKNPdApJxkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMGJjZjg1M2U4MDMwNTVjODU5ZWYxMDU0NWViMWQ1ODA3 MTI0MmFjYzAeFw0yNTEyMjAwNTU1MDJaFw0yNTEyMjEwNzEwMDJaMDMxMTAvBgNV BAMTKEQwMTlDOTQ5MTVFNjc3MUUwQkVDNDJBRTEwQ0IzMTUzMTg5NjMyREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJOFGGh8VY32ND/HEDiGycicp6 VfDWdPdvxngtkiVcZDlWNIi5+EtXOFcgEbZ0JGLXB4uPadt/pBNL8wCYWz0138Rc P/o3UiwKlMxj++jzmLsSj6yKPEm3YQ3p0/RWFYylxy7bztwBdqbJa4xOg0clcprj vuNrVa1qSDpUC1xhLkFdz2so6P5kreHITE/mkFMlAy7pjgCJk9YANMPxmZ64NjnZ ER0xkuxpdWPYpRaTxRpn9EcOnHgrfAuQmX94bfuYLU5yceqHUd4Py2kraXc6qdbH RavKBttG8+XgJKk1xtWrxm/bkMzOvgVmTcVXnNVzLgAM8w4a5PitPl+j1vEnAgMB AAGjggH5MIIB9TAdBgNVHQ4EFgQU0BnJSRXmdx4L7EKuEMsxUxiWMt4wHwYDVR0j BBgwFoAUC8+FPoAwVchZ7xBUXrHVgHEkKswwDgYDVR0PAQH/BAQDAgeAMG4GA1Ud HwRnMGUwY6BhoF+GXXJzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJh ZG94bmV0d29ya3MvMC8wQkNGODUzRTgwMzA1NUM4NTlFRjEwNTQ1RUIxRDU4MDcx MjQyQUNDLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8v cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvQzgtRlBvQXdWY2haN3hC VVhySFZnSEVrS3N3LmNlcjB5BggrBgEFBQcBCwRtMGswaQYIKwYBBQUHMAuGXXJz eW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJhZG94bmV0d29ya3MvMC8w QkNGODUzRTgwMzA1NUM4NTlFRjEwNTQ1RUIxRDU4MDcxMjQyQUNDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEArRUQJ5y2X5lXtayrKcz32e9euuscOo62v5shI4yB2UYfwRbzebzEA0S34e+p TqXgVFbpKKlnvHTEwg62LAE6g/b6IVTqmsEtrRpdCzZNncAMYFojW9boWeKjs9O1 j7bPSPud0D8ASNB+mbJRi0Cw2O2jlBM4R093fPJei8JHCoHMYcCjn6+e3hCeeVpA 7PBNErGEOxE83jhbkm1WZEOtTtsrmY2ffyTFqu/32wN1mtVRh0yd/Tw1uPPDqSH9 4NJ25wBMH30Ul321oq5597pxp772cy11NInR48L6VNPuGKaTsPURu5tY4DY8reRQ MT+eEwu4TimPLuGOAwxSJKNmDQ== -----END CERTIFICATE-----Generated at Sat Dec 20 21:48:04 2025 by rpki-client