This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.mft File: PB4_3feITXhacI_U5mS2LekQ6-g.mft (raw, json) Hash identifier: vQVn+PhrG44GlVqxZXvCuOjjo0PYhipKWUKCpMQ2wEY= Subject key identifier: 58:E1:BA:78:DD:23:55:7F:CA:3E:53:9D:D7:D5:36:84:6E:89:D3:78 Authority key identifier: 3C:1E:3F:DD:F7:88:4D:78:5A:70:8F:D4:E6:64:B6:2D:E9:10:EB:E8 Certificate issuer: /CN=3c1e3fddf7884d785a708fd4e664b62de910ebe8 Certificate serial: 019B6FFD8991C9AE61314BB4FC1FBBD5CBF8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PB4_3feITXhacI_U5mS2LekQ6-g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.mft Manifest number: 17A5 Signing time: Tue 30 Dec 2025 16:00:45 +0000 Manifest this update: Tue 30 Dec 2025 16:00:45 +0000 Manifest next update: Wed 31 Dec 2025 16:00:45 +0000 Files and hashes: 1: PB4_3feITXhacI_U5mS2LekQ6-g.crl (hash: yYvLSwHUhdqp8wGzAHeHbq6wTN4qd/TIyZI0LyeTIPY=) 2: rVIEtQUeZ960hMeEwx6AF679dhM.roa (hash: s8qUIneeKVi7X6yParz6sZwUc96D/kko1q8RujoMkJ4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.crl rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.mft rsync://rpki.ripe.net/repository/DEFAULT/PB4_3feITXhacI_U5mS2LekQ6-g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 16:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6f:fd:89:91:c9:ae:61:31:4b:b4:fc:1f:bb:d5:cb:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c1e3fddf7884d785a708fd4e664b62de910ebe8 Validity Not Before: Dec 30 16:00:45 2025 GMT Not After : Dec 31 16:00:45 2025 GMT Subject: CN=58e1ba78dd23557fca3e539dd7d536846e89d378 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:0b:ae:a9:3b:d3:f1:f6:08:eb:4c:be:a4:8e: a9:c5:56:ff:f5:d7:52:0a:bb:d7:60:c2:5c:10:38: dd:21:c4:75:e1:bc:b2:63:2d:26:bc:37:d5:de:9a: 2c:20:db:b1:c6:54:31:f8:30:ff:a1:ef:17:ad:d4: bc:42:4f:4d:86:e4:18:43:2c:7b:82:97:5b:e8:01: 17:af:99:36:1a:94:78:6f:8c:8f:11:29:ba:62:d1: 66:6d:b5:95:ba:b9:3c:70:65:3c:72:41:86:e8:97: 42:fd:dc:13:26:8f:b5:b5:54:c9:71:b6:73:15:f2: 5b:35:f8:55:1b:8c:74:e9:35:bb:2e:ec:cb:d5:a6: fe:85:ad:c0:0c:15:ca:53:66:37:b5:f5:ea:bb:1f: cf:bd:cb:94:47:85:8c:36:8a:89:88:95:a5:27:77: de:a8:75:ac:b0:30:30:90:12:e5:92:5d:37:a9:bc: 30:aa:ea:6c:65:d3:6e:2a:af:51:35:a4:0d:57:5b: 85:ac:eb:f2:1f:8b:ea:ff:64:0b:d5:64:a3:55:38: b7:07:94:b4:f3:71:67:71:ed:bb:4c:3b:a6:19:08: f4:78:f8:73:a6:7e:3d:1f:09:d2:fd:60:a2:a5:e3: fb:7f:f7:ca:84:16:73:71:c9:79:94:8a:58:9f:43: a6:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:E1:BA:78:DD:23:55:7F:CA:3E:53:9D:D7:D5:36:84:6E:89:D3:78 X509v3 Authority Key Identifier: keyid:3C:1E:3F:DD:F7:88:4D:78:5A:70:8F:D4:E6:64:B6:2D:E9:10:EB:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PB4_3feITXhacI_U5mS2LekQ6-g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d9:b1:cb:92:14:98:8d:80:ae:38:db:3d:26:55:aa:ff:60:8d: 68:eb:28:62:96:4f:74:40:34:89:96:92:0e:9d:23:c0:de:53: 63:f1:6e:5d:fc:0b:6f:21:4c:6d:34:28:c7:52:38:77:76:47: e2:6e:62:9d:d2:cf:5a:ef:a1:8a:de:b7:90:e3:d6:ee:e7:60: 6b:24:ab:56:c3:41:da:69:4a:36:12:53:0e:82:15:2d:89:9e: eb:f7:57:6a:77:5c:8a:f4:9e:81:4c:dd:7f:9f:b1:72:1c:ff: 83:2a:4d:bd:92:0d:22:ed:75:0a:fb:d8:ed:df:b4:26:ff:15: 55:90:2a:be:cb:bb:52:f5:8d:80:da:03:08:d1:77:36:9a:ab: e4:a3:24:a1:14:46:f1:23:1a:ed:2c:b8:12:a4:5b:84:fa:67: 3a:22:05:04:bb:0a:e2:e4:b8:64:ed:08:56:d9:9b:93:79:ae: f2:03:ad:8a:a0:15:6f:c7:c7:c4:ed:92:70:71:b9:03:06:7b: 14:c0:b2:79:37:8e:6a:e3:dc:61:3e:82:4f:2b:b7:24:02:0e: 90:b5:80:7b:d1:f9:1e:88:2d:2c:85:17:8a:7c:98:5f:06:3f: 4e:d7:5c:86:04:98:03:53:d2:6b:7b:6a:15:25:a7:50:3d:be: 15:9a:c9:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtv/YmRya5hMUu0/B+71cv4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjMWUzZmRkZjc4ODRkNzg1YTcwOGZkNGU2NjRiNjJkZTkx MGViZTgwHhcNMjUxMjMwMTYwMDQ1WhcNMjUxMjMxMTYwMDQ1WjAzMTEwLwYDVQQD Eyg1OGUxYmE3OGRkMjM1NTdmY2EzZTUzOWRkN2Q1MzY4NDZlODlkMzc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAuuqTvT8fYI60y+pI6pxVb/9ddS CrvXYMJcEDjdIcR14byyYy0mvDfV3posINuxxlQx+DD/oe8XrdS8Qk9NhuQYQyx7 gpdb6AEXr5k2GpR4b4yPESm6YtFmbbWVurk8cGU8ckGG6JdC/dwTJo+1tVTJcbZz FfJbNfhVG4x06TW7LuzL1ab+ha3ADBXKU2Y3tfXqux/PvcuUR4WMNoqJiJWlJ3fe qHWssDAwkBLlkl03qbwwqupsZdNuKq9RNaQNV1uFrOvyH4vq/2QL1WSjVTi3B5S0 83Fnce27TDumGQj0ePhzpn49HwnS/WCipeP7f/fKhBZzccl5lIpYn0OmDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFjhunjdI1V/yj5TndfVNoRuidN4MB8GA1UdIwQY MBaAFDweP933iE14WnCP1OZkti3pEOvoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEI0XzNmZUlUWGhhY0lfVTVtUzJMZWtRNi1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS80ZThlNzQtNzdlNi00MWViLTkwNDct NTljMThhZGEzNTJmLzEvUEI0XzNmZUlUWGhhY0lfVTVtUzJMZWtRNi1nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS80ZThlNzQtNzdlNi00MWViLTkwNDctNTljMThhZGEzNTJm LzEvUEI0XzNmZUlUWGhhY0lfVTVtUzJMZWtRNi1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2bHLkhSY jYCuONs9JlWq/2CNaOsoYpZPdEA0iZaSDp0jwN5TY/FuXfwLbyFMbTQox1I4d3ZH 4m5indLPWu+hit63kOPW7udgaySrVsNB2mlKNhJTDoIVLYme6/dXandcivSegUzd f5+xchz/gypNvZINIu11CvvY7d+0Jv8VVZAqvsu7UvWNgNoDCNF3Npqr5KMkoRRG 8SMa7Sy4EqRbhPpnOiIFBLsK4uS4ZO0IVtmbk3mu8gOtiqAVb8fHxO2ScHG5AwZ7 FMCyeTeOauPcYT6CTyu3JAIOkLWAe9H5HogtLIUXinyYXwY/TtdchgSYA1PSa3tq FSWnUD2+FZrJbQ== -----END CERTIFICATE-----Generated at Wed Dec 31 01:58:58 2025 by rpki-client