This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/0/0BCF853E803055C859EF10545EB1D58071242ACC.mft File: 0BCF853E803055C859EF10545EB1D58071242ACC.mft (raw, json) Hash identifier: HPqcEKG9dRghKHn94uMRfNvk/wQjivnnaIyhnch6quQ= Subject key identifier: A5:2A:4C:C8:57:47:48:56:2B:69:6A:58:6B:E3:7C:F9:A1:61:9E:77 Authority key identifier: 0B:CF:85:3E:80:30:55:C8:59:EF:10:54:5E:B1:D5:80:71:24:2A:CC Certificate issuer: /CN=0bcf853e803055c859ef10545eb1d58071242acc Certificate serial: 67B20144B0948154B3F6F6B3E1D156B24BB4EAD7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8-FPoAwVchZ7xBUXrHVgHEkKsw.cer Subject info access: rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/0/0BCF853E803055C859EF10545EB1D58071242ACC.mft Manifest number: 06A7 Signing time: Sun 28 Dec 2025 06:00:01 +0000 Manifest this update: Sun 28 Dec 2025 05:55:01 +0000 Manifest next update: Mon 29 Dec 2025 09:03:01 +0000 Files and hashes: 1: 0BCF853E803055C859EF10545EB1D58071242ACC.crl (hash: +U2/w4Lj42GG/tsVUyfwfGAUz2sekytuGbslEgPcrbU=) 2: AS52025.asa (hash: WrQOZoXW9XpF+3296oKtRS8KKfSGfK/Fs8AR2+7y+fI=) Validation: OK Signature path: rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/0/0BCF853E803055C859EF10545EB1D58071242ACC.crl rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/0/0BCF853E803055C859EF10545EB1D58071242ACC.mft rsync://rpki.ripe.net/repository/DEFAULT/C8-FPoAwVchZ7xBUXrHVgHEkKsw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 09:03:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:b2:01:44:b0:94:81:54:b3:f6:f6:b3:e1:d1:56:b2:4b:b4:ea:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0bcf853e803055c859ef10545eb1d58071242acc Validity Not Before: Dec 28 05:55:01 2025 GMT Not After : Dec 29 09:03:01 2025 GMT Subject: CN=A52A4CC8574748562B696A586BE37CF9A1619E77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a3:6b:08:da:59:16:16:76:27:03:82:32:32: ad:61:35:5a:b3:53:ba:05:62:86:d7:45:29:a8:98: 56:46:7e:43:d5:d6:79:d6:53:b5:8c:04:56:3b:65: 4c:32:fa:f9:ad:74:c7:4e:4f:e7:fd:17:31:4f:ec: e6:d9:df:50:e6:e4:db:ff:31:72:a6:bf:e1:2f:b3: ca:de:d7:5e:c4:19:6d:35:ee:44:8d:c5:e3:de:5c: ca:96:b8:33:d6:b5:0b:6a:c9:48:67:a4:ec:18:2c: 15:db:84:3b:15:57:ec:b2:d4:94:1f:da:6e:0f:b2: ff:e7:dc:2b:db:4d:5d:37:73:05:4d:f2:69:87:21: a3:b8:21:84:fd:d9:d1:ef:46:84:1d:8d:1d:c1:75: 12:9e:ad:5e:e7:d7:e7:54:b4:73:bc:4c:02:0a:ea: f7:c8:a5:2e:80:a2:47:b2:a0:11:9e:fc:98:f7:fb: 05:41:d7:6f:9f:f4:15:f4:6a:24:a0:c2:2b:d8:8f: 5b:93:70:4b:45:f7:a0:01:03:c7:0f:1d:7c:cc:55: 6c:b2:f0:9c:6d:1e:f0:cf:d7:12:9f:a5:f9:dd:00: 98:23:b3:6b:84:03:fb:b6:18:f8:94:b1:0f:66:f8: 1d:4a:d1:cb:94:f0:03:e1:35:cf:26:21:0e:90:56: c2:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:2A:4C:C8:57:47:48:56:2B:69:6A:58:6B:E3:7C:F9:A1:61:9E:77 X509v3 Authority Key Identifier: keyid:0B:CF:85:3E:80:30:55:C8:59:EF:10:54:5E:B1:D5:80:71:24:2A:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/0/0BCF853E803055C859EF10545EB1D58071242ACC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8-FPoAwVchZ7xBUXrHVgHEkKsw.cer Subject Information Access: Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/0/0BCF853E803055C859EF10545EB1D58071242ACC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:58:4b:52:03:f6:e8:c2:9b:19:0c:b4:d5:4c:e6:5d:2f:8a: e4:3c:05:47:28:f4:7e:59:f4:8d:f8:f0:f0:70:7a:e0:b6:28: d3:db:fc:a1:ee:79:30:46:d0:4f:dd:ae:0c:7a:98:8c:6a:01: c3:a6:b2:93:3f:3b:25:6e:5b:0b:39:c9:60:91:f6:b3:ff:fe: 10:3b:b3:6b:3a:3e:f4:a8:fe:69:50:1e:fe:ef:64:49:4b:70: d1:68:c7:1a:34:46:f9:61:64:b3:dd:4f:f0:43:b1:db:62:0e: be:80:5a:ca:d2:c1:15:fe:e2:f7:6f:76:37:e9:49:6d:8a:da: eb:d1:53:96:ab:e6:f5:9a:77:7a:5b:33:66:a7:2f:7d:af:3c: b5:4c:3f:00:c0:06:03:c6:e1:f5:f1:00:91:73:c2:f4:11:67: 36:d4:22:a0:13:38:e4:a5:f1:49:f6:d5:11:e8:74:82:1d:d2: 32:21:cb:16:9a:48:87:9a:a4:b0:f2:0c:29:f3:f5:8d:88:bc: 96:b5:e4:9a:c3:b4:1b:bc:80:e1:28:2c:ce:7a:16:62:92:90: 8a:8d:51:c3:cd:67:86:6b:d8:04:48:f0:a0:38:7c:b2:3f:8c: 78:af:a8:76:6b:52:b9:89:8b:7b:bb:a1:ae:30:86:19:d7:f1: 28:ac:2e:06 -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgIUZ7IBRLCUgVSz9vaz4dFWsku06tcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMGJjZjg1M2U4MDMwNTVjODU5ZWYxMDU0NWViMWQ1ODA3 MTI0MmFjYzAeFw0yNTEyMjgwNTU1MDFaFw0yNTEyMjkwOTAzMDFaMDMxMTAvBgNV BAMTKEE1MkE0Q0M4NTc0NzQ4NTYyQjY5NkE1ODZCRTM3Q0Y5QTE2MTlFNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpo2sI2lkWFnYnA4IyMq1hNVqz U7oFYobXRSmomFZGfkPV1nnWU7WMBFY7ZUwy+vmtdMdOT+f9FzFP7ObZ31Dm5Nv/ MXKmv+Evs8re117EGW017kSNxePeXMqWuDPWtQtqyUhnpOwYLBXbhDsVV+yy1JQf 2m4Psv/n3CvbTV03cwVN8mmHIaO4IYT92dHvRoQdjR3BdRKerV7n1+dUtHO8TAIK 6vfIpS6AokeyoBGe/Jj3+wVB12+f9BX0aiSgwivYj1uTcEtF96ABA8cPHXzMVWyy 8JxtHvDP1xKfpfndAJgjs2uEA/u2GPiUsQ9m+B1K0cuU8APhNc8mIQ6QVsKxAgMB AAGjggH5MIIB9TAdBgNVHQ4EFgQUpSpMyFdHSFYraWpYa+N8+aFhnncwHwYDVR0j BBgwFoAUC8+FPoAwVchZ7xBUXrHVgHEkKswwDgYDVR0PAQH/BAQDAgeAMG4GA1Ud HwRnMGUwY6BhoF+GXXJzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJh ZG94bmV0d29ya3MvMC8wQkNGODUzRTgwMzA1NUM4NTlFRjEwNTQ1RUIxRDU4MDcx MjQyQUNDLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8v cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvQzgtRlBvQXdWY2haN3hC VVhySFZnSEVrS3N3LmNlcjB5BggrBgEFBQcBCwRtMGswaQYIKwYBBQUHMAuGXXJz eW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJhZG94bmV0d29ya3MvMC8w QkNGODUzRTgwMzA1NUM4NTlFRjEwNTQ1RUIxRDU4MDcxMjQyQUNDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhlhLUgP26MKbGQy01UzmXS+K5DwFRyj0fln0jfjw8HB64LYo09v8oe55MEbQ T92uDHqYjGoBw6aykz87JW5bCznJYJH2s//+EDuzazo+9Kj+aVAe/u9kSUtw0WjH GjRG+WFks91P8EOx22IOvoBaytLBFf7i9292N+lJbYra69FTlqvm9Zp3elszZqcv fa88tUw/AMAGA8bh9fEAkXPC9BFnNtQioBM45KXxSfbVEeh0gh3SMiHLFppIh5qk sPIMKfP1jYi8lrXkmsO0G7yA4SgsznoWYpKQio1Rw81nhmvYBEjwoDh8sj+MeK+o dmtSuYmLe7uhrjCGGdfxKKwuBg== -----END CERTIFICATE-----Generated at Sun Dec 28 18:58:43 2025 by rpki-client