This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.mft File: PB4_3feITXhacI_U5mS2LekQ6-g.mft (raw, json) Hash identifier: 5oCZPAx5M+sFgLmTavDCT1zfPxuMBiYnwotGhmlLfH8= Subject key identifier: 2B:59:1C:BD:AC:E4:2F:E7:76:3B:7B:14:28:2E:27:25:E9:D7:FA:04 Authority key identifier: 3C:1E:3F:DD:F7:88:4D:78:5A:70:8F:D4:E6:64:B6:2D:E9:10:EB:E8 Certificate issuer: /CN=3c1e3fddf7884d785a708fd4e664b62de910ebe8 Certificate serial: 019B6E0F2F08FCE07D1277766098F3C80772 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PB4_3feITXhacI_U5mS2LekQ6-g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.mft Manifest number: 17A4 Signing time: Tue 30 Dec 2025 07:00:47 +0000 Manifest this update: Tue 30 Dec 2025 07:00:47 +0000 Manifest next update: Wed 31 Dec 2025 07:00:47 +0000 Files and hashes: 1: PB4_3feITXhacI_U5mS2LekQ6-g.crl (hash: Hs7Mwx5eIqOmKu6gpq726+yLMXheaP7klz78R7raXkM=) 2: rVIEtQUeZ960hMeEwx6AF679dhM.roa (hash: s8qUIneeKVi7X6yParz6sZwUc96D/kko1q8RujoMkJ4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.crl rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.mft rsync://rpki.ripe.net/repository/DEFAULT/PB4_3feITXhacI_U5mS2LekQ6-g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6e:0f:2f:08:fc:e0:7d:12:77:76:60:98:f3:c8:07:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c1e3fddf7884d785a708fd4e664b62de910ebe8 Validity Not Before: Dec 30 07:00:47 2025 GMT Not After : Dec 31 07:00:47 2025 GMT Subject: CN=2b591cbdace42fe7763b7b14282e2725e9d7fa04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:08:6d:35:70:3d:ea:5b:6a:0c:d2:de:69:82: fe:bf:21:95:73:d9:65:9e:d4:bb:75:ef:c4:cd:0f: db:c7:81:0f:c0:9a:e6:88:87:17:dc:e0:5f:17:3b: ee:c3:a7:65:f4:66:4d:c3:44:0c:df:3b:b3:24:89: f1:b9:ff:55:d9:46:75:c7:63:06:3e:0b:07:f0:0b: ec:40:8d:9e:e9:fe:96:de:81:25:13:4c:46:70:d0: 7a:1e:a8:cf:ab:46:49:1e:7a:be:0c:d1:98:e5:cd: e8:b8:25:46:cb:67:c7:cf:e7:94:6c:2e:2f:67:43: f6:49:cc:69:e5:41:c3:60:28:53:ea:6f:26:8e:dc: 2b:8e:a4:d4:4f:f0:94:da:aa:a3:13:56:0b:c2:10: 3b:f9:6e:51:3b:80:3e:ff:2c:a1:48:0c:9b:84:eb: 42:5d:df:30:a8:51:e2:27:c3:ee:08:25:84:45:a2: b8:56:4b:9a:c8:3b:08:eb:a4:0b:31:29:84:db:55: 9f:4e:4e:00:ba:c9:b6:86:5e:a1:2d:e7:b2:13:b6: e2:36:24:a8:48:f0:df:ff:29:db:7a:9b:d0:f1:b4: ae:3d:94:e6:9e:b8:e6:e8:56:42:45:1f:0d:fd:2f: 77:34:7b:23:32:42:13:7e:78:34:bf:4a:3b:64:b8: 6e:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:59:1C:BD:AC:E4:2F:E7:76:3B:7B:14:28:2E:27:25:E9:D7:FA:04 X509v3 Authority Key Identifier: keyid:3C:1E:3F:DD:F7:88:4D:78:5A:70:8F:D4:E6:64:B6:2D:E9:10:EB:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PB4_3feITXhacI_U5mS2LekQ6-g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:5d:e7:13:70:ac:66:ae:f9:5c:30:3d:41:2c:ac:43:f6:f7: 32:d7:22:25:7d:58:cc:e4:db:02:ef:db:7d:16:ae:5c:b1:05: 09:d6:cc:d2:2e:6d:ee:1d:61:68:8d:8b:11:05:3d:d5:c7:cf: 0d:69:49:2a:a4:98:1d:8e:a6:06:66:7c:d3:40:19:b5:54:0a: dd:e7:9f:2b:60:d0:d0:e0:bc:2f:15:75:ff:a7:70:83:f0:58: 4b:17:ef:a0:df:84:b8:cc:e2:b3:e5:81:66:84:2d:66:b0:64: dc:98:56:58:e8:58:91:c5:bb:e2:dc:dc:3c:ab:1f:62:11:61: 3f:79:58:f8:de:b4:5f:35:e7:d4:1b:7d:34:42:46:aa:2f:eb: 07:01:70:0b:e8:f7:d8:fc:4f:07:42:78:fe:98:24:c6:b9:88: e7:d0:49:86:45:d2:0a:62:f5:49:2b:d7:f3:c6:d6:75:6f:89: 5c:a5:6a:0c:f2:65:6a:33:c7:16:4e:80:98:22:62:23:ff:4f: ee:bc:76:02:34:4b:d9:0c:79:a6:89:f3:bc:20:c6:e8:36:ea: 5c:b2:49:64:3d:a3:7c:09:46:a3:73:2b:0c:07:b3:4d:65:90: 5a:eb:ad:45:23:e6:0a:49:c7:6c:35:a2:2b:2b:f0:a5:09:ab: 60:16:67:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtuDy8I/OB9End2YJjzyAdyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjMWUzZmRkZjc4ODRkNzg1YTcwOGZkNGU2NjRiNjJkZTkx MGViZTgwHhcNMjUxMjMwMDcwMDQ3WhcNMjUxMjMxMDcwMDQ3WjAzMTEwLwYDVQQD EygyYjU5MWNiZGFjZTQyZmU3NzYzYjdiMTQyODJlMjcyNWU5ZDdmYTA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQhtNXA96ltqDNLeaYL+vyGVc9ll ntS7de/EzQ/bx4EPwJrmiIcX3OBfFzvuw6dl9GZNw0QM3zuzJInxuf9V2UZ1x2MG PgsH8AvsQI2e6f6W3oElE0xGcNB6HqjPq0ZJHnq+DNGY5c3ouCVGy2fHz+eUbC4v Z0P2Scxp5UHDYChT6m8mjtwrjqTUT/CU2qqjE1YLwhA7+W5RO4A+/yyhSAybhOtC Xd8wqFHiJ8PuCCWERaK4VkuayDsI66QLMSmE21WfTk4Ausm2hl6hLeeyE7biNiSo SPDf/ynbepvQ8bSuPZTmnrjm6FZCRR8N/S93NHsjMkITfng0v0o7ZLhukQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCtZHL2s5C/ndjt7FCguJyXp1/oEMB8GA1UdIwQY MBaAFDweP933iE14WnCP1OZkti3pEOvoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEI0XzNmZUlUWGhhY0lfVTVtUzJMZWtRNi1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS80ZThlNzQtNzdlNi00MWViLTkwNDct NTljMThhZGEzNTJmLzEvUEI0XzNmZUlUWGhhY0lfVTVtUzJMZWtRNi1nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS80ZThlNzQtNzdlNi00MWViLTkwNDctNTljMThhZGEzNTJm LzEvUEI0XzNmZUlUWGhhY0lfVTVtUzJMZWtRNi1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcl3nE3Cs Zq75XDA9QSysQ/b3MtciJX1YzOTbAu/bfRauXLEFCdbM0i5t7h1haI2LEQU91cfP DWlJKqSYHY6mBmZ800AZtVQK3eefK2DQ0OC8LxV1/6dwg/BYSxfvoN+EuMzis+WB ZoQtZrBk3JhWWOhYkcW74tzcPKsfYhFhP3lY+N60XzXn1Bt9NEJGqi/rBwFwC+j3 2PxPB0J4/pgkxrmI59BJhkXSCmL1SSvX88bWdW+JXKVqDPJlajPHFk6AmCJiI/9P 7rx2AjRL2Qx5ponzvCDG6DbqXLJJZD2jfAlGo3MrDAezTWWQWuutRSPmCknHbDWi KyvwpQmrYBZn+w== -----END CERTIFICATE-----Generated at Tue Dec 30 09:53:59 2025 by rpki-client