This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft File: pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft (raw, json) Hash identifier: NVxRYj1rbGt9U2aH5CmA6V/brLV5O9XbMaSToQBF2uA= Subject key identifier: 72:13:CE:D4:61:60:E9:19:92:77:27:97:DC:85:DB:C1:D7:65:1C:6E Authority key identifier: A5:B0:C0:57:31:EF:A4:BB:E5:C2:A3:0A:E5:18:9F:77:85:D2:D4:99 Certificate issuer: /CN=a5b0c05731efa4bbe5c2a30ae5189f7785d2d499 Certificate serial: 019B38A181BE7BAC2C69A86E52B2DF70CB1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft Manifest number: 1733 Signing time: Fri 19 Dec 2025 22:01:07 +0000 Manifest this update: Fri 19 Dec 2025 22:01:07 +0000 Manifest next update: Sat 20 Dec 2025 22:01:07 +0000 Files and hashes: 1: DuTLHmPWVWziogaT97oFAa9mDRE.roa (hash: PMtNyjUzQWlQv3rVcKbrWnO8Vocq0JKKdYATvPbNA78=) 2: X3CBuLjI2iLdZV3cmRV8Xr8zH-8.roa (hash: nRhR1UBTZd6YJqMwitmIM+7shNJ21X2SOgFJgRIoWfs=) 3: pbDAVzHvpLvlwqMK5Rifd4XS1Jk.crl (hash: CoqvN0pB1wTpEHKx0EDuTP5Ex7jDVdlNVtbfkyIEHEY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft rsync://rpki.ripe.net/repository/DEFAULT/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a1:81:be:7b:ac:2c:69:a8:6e:52:b2:df:70:cb:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5b0c05731efa4bbe5c2a30ae5189f7785d2d499 Validity Not Before: Dec 19 22:01:07 2025 GMT Not After : Dec 20 22:01:07 2025 GMT Subject: CN=7213ced46160e91992772797dc85dbc1d7651c6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:b5:81:ee:95:4c:1d:8d:72:73:99:66:6b:f5: a1:89:36:85:c9:af:54:af:60:9b:f9:47:03:5f:81: 9c:d9:26:e4:b4:b8:81:8d:d9:b1:22:90:8a:bc:e1: cd:a8:d2:39:ce:8d:13:fa:8c:57:39:07:c3:8b:48: 8e:8d:73:fd:36:eb:df:41:2b:a4:b6:43:6c:71:43: 18:74:68:c5:d0:be:63:f8:ec:9e:74:57:60:de:21: 34:ca:02:f1:d9:00:bb:8f:cf:f2:df:30:e3:c3:9d: fd:3c:b4:f0:b2:fa:76:3f:8c:2a:a2:37:0e:f3:98: 5a:fb:e8:56:fe:8a:9e:81:c2:f7:d1:3b:e9:cb:89: 80:3c:8e:d2:85:5c:e9:8a:c5:96:b3:a4:17:fc:ab: 58:57:18:61:02:ef:fb:76:61:4a:64:e3:6e:a4:2d: 27:b5:dc:99:e6:f8:98:1c:d5:21:6b:12:fa:a1:16: 8f:18:c5:5a:d4:99:da:94:99:88:85:67:bf:df:77: b8:fa:df:44:e6:a0:2d:bd:fb:b0:d0:44:24:7c:af: 1d:80:0c:84:76:f0:62:78:11:fa:52:f1:b4:4c:07: f3:46:2d:6c:da:a7:9a:08:a8:53:56:98:22:dc:87: 39:d8:04:69:14:0e:75:10:39:e0:3d:4b:30:2e:6e: e0:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:13:CE:D4:61:60:E9:19:92:77:27:97:DC:85:DB:C1:D7:65:1C:6E X509v3 Authority Key Identifier: keyid:A5:B0:C0:57:31:EF:A4:BB:E5:C2:A3:0A:E5:18:9F:77:85:D2:D4:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:39:50:0e:08:6e:73:15:f0:52:5f:0e:7c:0d:d9:a8:69:fe: 82:a1:45:8a:4f:0a:a3:cc:b4:b6:76:ce:ac:c5:ae:df:23:b5: ce:e8:70:7e:a1:d7:6c:4f:5f:97:57:81:fd:7c:39:70:e8:c4: 58:d2:90:3f:14:cf:95:d2:e7:3d:e9:28:82:91:c2:da:2d:d6: db:e5:57:44:12:55:4c:8f:c1:07:d1:71:fe:cd:40:44:e1:90: 6d:72:ee:05:e8:06:3c:84:dc:cd:c2:55:d0:1d:e1:61:fe:da: ca:b3:0b:c2:de:ba:89:f8:21:6a:c6:bf:61:53:ba:21:c4:8e: 6e:be:3c:04:81:e2:fa:80:68:cc:25:bc:fc:cb:0d:fb:f8:71: 3e:6f:98:b1:7f:f4:14:af:a6:69:eb:99:a1:e8:15:4f:7a:98: 85:ea:1c:1b:bc:fc:31:8c:01:d1:16:1e:b1:c9:7f:59:2d:39: 53:5b:7e:84:b6:a1:c4:77:5a:98:e6:ec:ce:d6:be:69:fd:04: 1e:50:a6:e4:ae:e2:48:ed:a9:3c:46:0b:43:3a:22:c1:0f:04: 1b:0f:a3:08:d4:3c:07:fa:d4:10:3f:a3:b4:65:46:5d:d1:b0: 85:ab:90:95:7c:d3:ea:88:14:ca:b0:e9:32:e5:84:be:8c:f5: 43:2c:11:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4oYG+e6wsaahuUrLfcMseMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1YjBjMDU3MzFlZmE0YmJlNWMyYTMwYWU1MTg5Zjc3ODVk MmQ0OTkwHhcNMjUxMjE5MjIwMTA3WhcNMjUxMjIwMjIwMTA3WjAzMTEwLwYDVQQD Eyg3MjEzY2VkNDYxNjBlOTE5OTI3NzI3OTdkYzg1ZGJjMWQ3NjUxYzZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLWB7pVMHY1yc5lma/WhiTaFya9U r2Cb+UcDX4Gc2SbktLiBjdmxIpCKvOHNqNI5zo0T+oxXOQfDi0iOjXP9NuvfQSuk tkNscUMYdGjF0L5j+OyedFdg3iE0ygLx2QC7j8/y3zDjw539PLTwsvp2P4wqojcO 85ha++hW/oqegcL30Tvpy4mAPI7ShVzpisWWs6QX/KtYVxhhAu/7dmFKZONupC0n tdyZ5viYHNUhaxL6oRaPGMVa1JnalJmIhWe/33e4+t9E5qAtvfuw0EQkfK8dgAyE dvBieBH6UvG0TAfzRi1s2qeaCKhTVpgi3Ic52ARpFA51EDngPUswLm7gRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHITztRhYOkZkncnl9yF28HXZRxuMB8GA1UdIwQY MBaAFKWwwFcx76S75cKjCuUYn3eF0tSZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGJEQVZ6SHZwTHZsd3FNSzVSaWZkNFhTMUprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8yNTE0OWMtMDkzMi00NjgzLThhYjgt ZDE1ZmViZGY1ZWNmLzEvcGJEQVZ6SHZwTHZsd3FNSzVSaWZkNFhTMUprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8yNTE0OWMtMDkzMi00NjgzLThhYjgtZDE1ZmViZGY1ZWNm LzEvcGJEQVZ6SHZwTHZsd3FNSzVSaWZkNFhTMUprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARzlQDghu cxXwUl8OfA3ZqGn+gqFFik8Ko8y0tnbOrMWu3yO1zuhwfqHXbE9fl1eB/Xw5cOjE WNKQPxTPldLnPekogpHC2i3W2+VXRBJVTI/BB9Fx/s1AROGQbXLuBegGPITczcJV 0B3hYf7ayrMLwt66ifghasa/YVO6IcSObr48BIHi+oBozCW8/MsN+/hxPm+YsX/0 FK+maeuZoegVT3qYheocG7z8MYwB0RYescl/WS05U1t+hLahxHdamObszta+af0E HlCm5K7iSO2pPEYLQzoiwQ8EGw+jCNQ8B/rUED+jtGVGXdGwhauQlXzT6ogUyrDp MuWEvoz1QywRVQ== -----END CERTIFICATE-----Generated at Fri Dec 19 23:54:51 2025 by rpki-client