This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/ee958c-c8c8-447b-829a-1df4cfd7ab77/1/PBr_5Z1YYh2UW4l_5reUfVYlKbg.mft File: PBr_5Z1YYh2UW4l_5reUfVYlKbg.mft (raw, json) Hash identifier: x9HQe6uoMgxpajQ8shtY//pWV9ADscjclb8o9UjhTpY= Subject key identifier: F9:AA:43:1C:29:CF:25:0E:B6:FC:DF:69:2F:6C:91:D0:9B:2B:8F:FD Authority key identifier: 3C:1A:FF:E5:9D:58:62:1D:94:5B:89:7F:E6:B7:94:7D:56:25:29:B8 Certificate issuer: /CN=3c1affe59d58621d945b897fe6b7947d562529b8 Certificate serial: 019B33E8FF77BCEE88E66807600B1D60372D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBr_5Z1YYh2UW4l_5reUfVYlKbg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/ee958c-c8c8-447b-829a-1df4cfd7ab77/1/PBr_5Z1YYh2UW4l_5reUfVYlKbg.mft Manifest number: 07 Signing time: Fri 19 Dec 2025 00:01:06 +0000 Manifest this update: Fri 19 Dec 2025 00:01:06 +0000 Manifest next update: Sat 20 Dec 2025 00:01:06 +0000 Files and hashes: 1: AmfEdzSNiIaUyE9kjKWdw8wez0c.roa (hash: vq0oBZ5uLCFVx07CNofWY4tR5A83hhnnOOhh+V4vUU0=) 2: PBr_5Z1YYh2UW4l_5reUfVYlKbg.crl (hash: 3/aVnOEam4QWQ5xPlo5PetygmpC1nbkeDbg82S1Fh1s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/ee958c-c8c8-447b-829a-1df4cfd7ab77/1/PBr_5Z1YYh2UW4l_5reUfVYlKbg.crl rsync://rpki.ripe.net/repository/DEFAULT/08/ee958c-c8c8-447b-829a-1df4cfd7ab77/1/PBr_5Z1YYh2UW4l_5reUfVYlKbg.mft rsync://rpki.ripe.net/repository/DEFAULT/PBr_5Z1YYh2UW4l_5reUfVYlKbg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:e8:ff:77:bc:ee:88:e6:68:07:60:0b:1d:60:37:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c1affe59d58621d945b897fe6b7947d562529b8 Validity Not Before: Dec 19 00:01:06 2025 GMT Not After : Dec 20 00:01:06 2025 GMT Subject: CN=f9aa431c29cf250eb6fcdf692f6c91d09b2b8ffd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:cd:7a:0c:93:2b:d3:4a:25:2a:20:3b:99:4d: bb:ff:89:79:73:0e:00:c0:8b:ed:be:85:a4:ff:2a: a2:9d:f9:da:af:b4:e2:30:27:e0:7b:ae:27:ca:81: 5b:69:a4:c2:c3:df:4a:b8:2f:23:e7:69:87:69:8c: 4e:a6:a6:92:2c:93:c5:a9:d3:2b:9d:9f:b7:9d:fe: 1b:de:fa:96:8f:2c:79:c2:cd:ac:d2:55:8a:7c:c9: a1:9e:b0:b0:5a:cc:8b:0a:ff:a5:ab:59:1f:34:62: c0:0c:22:38:42:16:d6:d5:db:ea:52:bf:ea:2e:87: 2c:2c:ec:07:29:de:fa:80:6e:a1:e7:8c:06:ec:79: b5:ed:12:15:7a:2c:88:e9:a4:4f:85:c4:95:98:e5: 8c:bc:67:81:32:4b:29:93:d8:eb:c3:53:bf:9e:cf: b7:09:39:86:d1:f3:70:1b:07:af:30:0b:4c:8e:43: 3a:81:0c:f4:a7:2a:7f:b8:7f:ab:84:fe:54:ff:f7: 95:da:79:04:43:a8:6f:97:af:b0:6a:ad:cc:b2:71: be:c5:6b:20:07:c3:ba:f7:5d:e9:86:b4:76:e1:74: ad:02:14:60:6d:30:e3:c1:f7:e2:6b:59:c1:87:54: 41:c6:0e:56:73:44:84:44:30:44:1c:a5:79:43:7e: 3e:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:AA:43:1C:29:CF:25:0E:B6:FC:DF:69:2F:6C:91:D0:9B:2B:8F:FD X509v3 Authority Key Identifier: keyid:3C:1A:FF:E5:9D:58:62:1D:94:5B:89:7F:E6:B7:94:7D:56:25:29:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBr_5Z1YYh2UW4l_5reUfVYlKbg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ee958c-c8c8-447b-829a-1df4cfd7ab77/1/PBr_5Z1YYh2UW4l_5reUfVYlKbg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ee958c-c8c8-447b-829a-1df4cfd7ab77/1/PBr_5Z1YYh2UW4l_5reUfVYlKbg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:cd:ea:52:18:76:33:c2:46:a9:bc:96:0a:e1:1b:97:51:1b: 60:03:f3:7b:86:8b:e5:e9:ad:e4:23:96:de:19:0f:96:bc:f1: cd:5a:4a:6b:a7:d6:92:79:5c:18:97:d0:7e:6f:eb:a4:c4:4f: 41:d6:cd:b2:4b:5d:03:d0:8c:89:56:04:c0:12:5d:46:c7:42: b0:09:af:2e:9d:13:73:d4:28:7e:f7:82:cb:06:23:ae:29:b9: 53:21:a8:9f:a2:ee:ee:ff:63:c1:74:75:33:17:9d:47:fc:c2: c3:46:08:fb:50:2c:c6:bc:a6:96:08:1c:a8:2c:bb:95:e7:d5: c3:6b:96:cf:9f:dd:a2:33:87:67:c5:c5:06:82:28:86:96:96: aa:b4:0b:8f:7c:c8:2d:09:15:38:6a:c6:ca:0b:85:9d:77:80: 60:72:45:6a:85:3a:86:4b:b5:cc:63:1d:75:5f:13:cb:ba:a7: bb:bf:15:20:e0:01:4c:29:d0:c0:ec:43:0a:ae:e9:5d:d4:b5: 7a:e7:3d:92:e9:1e:86:61:7c:a1:09:43:c2:a9:6a:6c:c2:cc: a1:6a:97:b4:da:9b:33:7d:04:67:82:cd:c5:85:91:a3:47:14: 4f:e9:a2:f9:d1:d6:e9:88:29:90:94:aa:de:4e:d4:20:a7:e2: 58:76:4e:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsz6P93vO6I5mgHYAsdYDctMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjMWFmZmU1OWQ1ODYyMWQ5NDViODk3ZmU2Yjc5NDdkNTYy NTI5YjgwHhcNMjUxMjE5MDAwMTA2WhcNMjUxMjIwMDAwMTA2WjAzMTEwLwYDVQQD EyhmOWFhNDMxYzI5Y2YyNTBlYjZmY2RmNjkyZjZjOTFkMDliMmI4ZmZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArc16DJMr00olKiA7mU27/4l5cw4A wIvtvoWk/yqinfnar7TiMCfge64nyoFbaaTCw99KuC8j52mHaYxOpqaSLJPFqdMr nZ+3nf4b3vqWjyx5ws2s0lWKfMmhnrCwWsyLCv+lq1kfNGLADCI4QhbW1dvqUr/q LocsLOwHKd76gG6h54wG7Hm17RIVeiyI6aRPhcSVmOWMvGeBMkspk9jrw1O/ns+3 CTmG0fNwGwevMAtMjkM6gQz0pyp/uH+rhP5U//eV2nkEQ6hvl6+waq3MsnG+xWsg B8O6913phrR24XStAhRgbTDjwffia1nBh1RBxg5Wc0SERDBEHKV5Q34+yQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPmqQxwpzyUOtvzfaS9skdCbK4/9MB8GA1UdIwQY MBaAFDwa/+WdWGIdlFuJf+a3lH1WJSm4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEJyXzVaMVlZaDJVVzRsXzVyZVVmVllsS2JnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9lZTk1OGMtYzhjOC00NDdiLTgyOWEt MWRmNGNmZDdhYjc3LzEvUEJyXzVaMVlZaDJVVzRsXzVyZVVmVllsS2JnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9lZTk1OGMtYzhjOC00NDdiLTgyOWEtMWRmNGNmZDdhYjc3 LzEvUEJyXzVaMVlZaDJVVzRsXzVyZVVmVllsS2JnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAs3qUhh2 M8JGqbyWCuEbl1EbYAPze4aL5emt5COW3hkPlrzxzVpKa6fWknlcGJfQfm/rpMRP QdbNsktdA9CMiVYEwBJdRsdCsAmvLp0Tc9QofveCywYjrim5UyGon6Lu7v9jwXR1 MxedR/zCw0YI+1AsxrymlggcqCy7lefVw2uWz5/dojOHZ8XFBoIohpaWqrQLj3zI LQkVOGrGyguFnXeAYHJFaoU6hku1zGMddV8Ty7qnu78VIOABTCnQwOxDCq7pXdS1 euc9kukehmF8oQlDwqlqbMLMoWqXtNqbM30EZ4LNxYWRo0cUT+mi+dHW6YgpkJSq 3k7UIKfiWHZOuw== -----END CERTIFICATE-----Generated at Fri Dec 19 02:12:52 2025 by rpki-client