This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/6bbce4-c7d6-4418-9368-247a86b40d5d/1/PbRBy1aafHmaEFn_VzI7g3yqpU4.mft File: PbRBy1aafHmaEFn_VzI7g3yqpU4.mft (raw, json) Hash identifier: jGrNWoxJz00ylSNTBF0CU9hF553gfe49a0UCBdMOGbU= Subject key identifier: 2F:05:32:67:FB:0A:B5:B2:C2:01:D5:99:75:1B:7B:4C:F1:19:43:5F Authority key identifier: 3D:B4:41:CB:56:9A:7C:79:9A:10:59:FF:57:32:3B:83:7C:AA:A5:4E Certificate issuer: /CN=3db441cb569a7c799a1059ff57323b837caaa54e Certificate serial: 019B6E0F566BA8E86C8F89B43FA88D2F025A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PbRBy1aafHmaEFn_VzI7g3yqpU4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/6bbce4-c7d6-4418-9368-247a86b40d5d/1/PbRBy1aafHmaEFn_VzI7g3yqpU4.mft Manifest number: 04FE Signing time: Tue 30 Dec 2025 07:00:57 +0000 Manifest this update: Tue 30 Dec 2025 07:00:57 +0000 Manifest next update: Wed 31 Dec 2025 07:00:57 +0000 Files and hashes: 1: PbRBy1aafHmaEFn_VzI7g3yqpU4.crl (hash: cX8yWmBEF2tDEEuRXFC2t1Ol71Wh9XVaeRTfkTMNDCA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/6bbce4-c7d6-4418-9368-247a86b40d5d/1/PbRBy1aafHmaEFn_VzI7g3yqpU4.crl rsync://rpki.ripe.net/repository/DEFAULT/08/6bbce4-c7d6-4418-9368-247a86b40d5d/1/PbRBy1aafHmaEFn_VzI7g3yqpU4.mft rsync://rpki.ripe.net/repository/DEFAULT/PbRBy1aafHmaEFn_VzI7g3yqpU4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6e:0f:56:6b:a8:e8:6c:8f:89:b4:3f:a8:8d:2f:02:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3db441cb569a7c799a1059ff57323b837caaa54e Validity Not Before: Dec 30 07:00:57 2025 GMT Not After : Dec 31 07:00:57 2025 GMT Subject: CN=2f053267fb0ab5b2c201d599751b7b4cf119435f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:40:7b:25:32:ba:1e:53:6f:40:18:f9:73:66: d9:9d:69:d7:f6:2e:61:e8:ae:2c:1e:6f:cc:81:4c: 7c:3d:fc:f4:85:69:a9:15:55:f4:d3:93:9f:d4:ae: 99:3b:bb:40:0f:08:21:b1:37:a1:a9:01:b7:88:c0: d3:f4:8f:5a:06:67:3c:95:7c:d9:ac:b0:7c:26:fb: 37:b1:02:46:bc:90:12:5e:f8:88:4e:05:0d:ac:0e: f7:fc:36:0b:63:b8:19:6f:c7:f7:4a:ae:84:0f:9d: bf:8c:97:f9:2b:e0:84:72:82:28:e6:d8:c4:47:a4: a7:79:e9:9b:04:c2:18:24:b4:ca:f5:42:9a:80:86: 02:79:9f:7c:0f:d8:98:b8:b6:ed:34:e1:c9:b7:21: 6c:d8:06:0c:d0:01:3c:d6:69:16:9c:84:9b:cc:ec: 42:72:c8:e7:0c:35:f3:c9:2d:4b:60:12:9b:67:15: 22:83:89:a7:cc:d0:7d:c4:3b:da:4d:33:59:20:0d: f1:9b:61:e1:18:f5:82:34:d2:53:9a:0b:64:93:80: 48:ba:76:85:d9:23:87:60:a5:a2:29:ca:b1:70:b7: ba:6a:29:45:a5:77:84:d2:67:e8:6e:7f:9c:cc:74: 27:a0:27:64:f5:1f:cf:f4:2f:df:cc:7c:f0:77:46: a8:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:05:32:67:FB:0A:B5:B2:C2:01:D5:99:75:1B:7B:4C:F1:19:43:5F X509v3 Authority Key Identifier: keyid:3D:B4:41:CB:56:9A:7C:79:9A:10:59:FF:57:32:3B:83:7C:AA:A5:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PbRBy1aafHmaEFn_VzI7g3yqpU4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6bbce4-c7d6-4418-9368-247a86b40d5d/1/PbRBy1aafHmaEFn_VzI7g3yqpU4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6bbce4-c7d6-4418-9368-247a86b40d5d/1/PbRBy1aafHmaEFn_VzI7g3yqpU4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:a6:da:76:54:79:a4:16:80:ae:ab:d4:3f:2c:8c:c8:8c:97: 79:3b:ee:27:7e:ba:a4:e0:e8:43:4c:62:d2:79:29:50:9e:61: d2:7c:5a:f3:5c:95:cf:58:d4:be:d2:5d:20:04:28:cd:70:b1: a9:46:e8:20:35:65:49:8f:c1:08:46:23:2f:35:92:05:64:46: 85:75:f9:3c:94:8d:da:b0:05:c2:1e:dc:89:88:5c:59:dd:dd: e9:0a:bf:38:70:1a:da:7b:7a:81:7c:f3:5b:5d:24:f4:16:70: 2f:9d:87:3d:3f:f9:f3:dd:33:78:51:b2:a2:f5:97:c2:e9:d8: 22:5a:e3:b3:d1:c7:5c:fc:a4:60:e0:c8:56:f6:48:79:8a:ca: da:af:3a:1b:90:59:df:ef:86:ee:b8:4c:bd:2e:01:31:dc:c7: 13:87:0a:7c:0d:ff:94:2d:df:b7:5f:75:37:b6:ad:b3:05:cf: 66:3c:69:1e:6d:e3:1d:61:d4:ea:24:1b:97:55:04:4e:f2:e1: 89:ca:dc:53:2d:d2:99:a9:06:f4:06:f0:31:5c:ba:f3:11:0a: 6a:bc:26:5a:32:6e:5e:a9:c6:e2:ba:7a:24:2b:bb:9a:d1:85: f5:96:e3:d6:23:05:4c:34:58:6d:9a:f4:bc:a9:b4:28:bd:22: 1c:3a:a2:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtuD1ZrqOhsj4m0P6iNLwJaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkYjQ0MWNiNTY5YTdjNzk5YTEwNTlmZjU3MzIzYjgzN2Nh YWE1NGUwHhcNMjUxMjMwMDcwMDU3WhcNMjUxMjMxMDcwMDU3WjAzMTEwLwYDVQQD EygyZjA1MzI2N2ZiMGFiNWIyYzIwMWQ1OTk3NTFiN2I0Y2YxMTk0MzVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2UB7JTK6HlNvQBj5c2bZnWnX9i5h 6K4sHm/MgUx8Pfz0hWmpFVX005Of1K6ZO7tADwghsTehqQG3iMDT9I9aBmc8lXzZ rLB8Jvs3sQJGvJASXviITgUNrA73/DYLY7gZb8f3Sq6ED52/jJf5K+CEcoIo5tjE R6SneembBMIYJLTK9UKagIYCeZ98D9iYuLbtNOHJtyFs2AYM0AE81mkWnISbzOxC csjnDDXzyS1LYBKbZxUig4mnzNB9xDvaTTNZIA3xm2HhGPWCNNJTmgtkk4BIunaF 2SOHYKWiKcqxcLe6ailFpXeE0mfobn+czHQnoCdk9R/P9C/fzHzwd0ao9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC8FMmf7CrWywgHVmXUbe0zxGUNfMB8GA1UdIwQY MBaAFD20QctWmnx5mhBZ/1cyO4N8qqVOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGJSQnkxYWFmSG1hRUZuX1Z6STdnM3lxcFU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC82YmJjZTQtYzdkNi00NDE4LTkzNjgt MjQ3YTg2YjQwZDVkLzEvUGJSQnkxYWFmSG1hRUZuX1Z6STdnM3lxcFU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC82YmJjZTQtYzdkNi00NDE4LTkzNjgtMjQ3YTg2YjQwZDVk LzEvUGJSQnkxYWFmSG1hRUZuX1Z6STdnM3lxcFU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh6badlR5 pBaArqvUPyyMyIyXeTvuJ366pODoQ0xi0nkpUJ5h0nxa81yVz1jUvtJdIAQozXCx qUboIDVlSY/BCEYjLzWSBWRGhXX5PJSN2rAFwh7ciYhcWd3d6Qq/OHAa2nt6gXzz W10k9BZwL52HPT/5890zeFGyovWXwunYIlrjs9HHXPykYODIVvZIeYrK2q86G5BZ 3++G7rhMvS4BMdzHE4cKfA3/lC3ft191N7atswXPZjxpHm3jHWHU6iQbl1UETvLh icrcUy3SmakG9AbwMVy68xEKarwmWjJuXqnG4rp6JCu7mtGF9Zbj1iMFTDRYbZr0 vKm0KL0iHDqiTw== -----END CERTIFICATE-----Generated at Tue Dec 30 08:51:45 2025 by rpki-client