This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/3b51c9-b37b-4767-88d9-5df6a463035b/1/pqBZBOyBdGoKZtIH9dNvjZeIig0.mft File: pqBZBOyBdGoKZtIH9dNvjZeIig0.mft (raw, json) Hash identifier: bTLbysi/elCKom9UyLGBZfvBvFTsHM+XUGjgS/YJBmQ= Subject key identifier: 2A:F2:C1:B4:43:7C:51:2B:B2:B8:BF:C3:3A:C7:7B:73:C1:38:1C:CA Authority key identifier: A6:A0:59:04:EC:81:74:6A:0A:66:D2:07:F5:D3:6F:8D:97:88:8A:0D Certificate issuer: /CN=a6a05904ec81746a0a66d207f5d36f8d97888a0d Certificate serial: 019B27417D943D2D04E7EC70ED7D373F5975 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqBZBOyBdGoKZtIH9dNvjZeIig0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/3b51c9-b37b-4767-88d9-5df6a463035b/1/pqBZBOyBdGoKZtIH9dNvjZeIig0.mft Manifest number: 08E0 Signing time: Tue 16 Dec 2025 13:02:41 +0000 Manifest this update: Tue 16 Dec 2025 13:02:41 +0000 Manifest next update: Wed 17 Dec 2025 13:02:41 +0000 Files and hashes: 1: pqBZBOyBdGoKZtIH9dNvjZeIig0.crl (hash: 5+INunzNUaRqlplT6oQfs3GevENXoMDvOpM2gQEatkk=) 2: wcWtJWZdHtQ3MB-JGGb4XgtvRZY.roa (hash: uBYBylJRjDgsdsAh3Gf2WJ38oblmNaRqlj9rvalMb+M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/3b51c9-b37b-4767-88d9-5df6a463035b/1/pqBZBOyBdGoKZtIH9dNvjZeIig0.crl rsync://rpki.ripe.net/repository/DEFAULT/26/3b51c9-b37b-4767-88d9-5df6a463035b/1/pqBZBOyBdGoKZtIH9dNvjZeIig0.mft rsync://rpki.ripe.net/repository/DEFAULT/pqBZBOyBdGoKZtIH9dNvjZeIig0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 13:02:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:41:7d:94:3d:2d:04:e7:ec:70:ed:7d:37:3f:59:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6a05904ec81746a0a66d207f5d36f8d97888a0d Validity Not Before: Dec 16 13:02:41 2025 GMT Not After : Dec 17 13:02:41 2025 GMT Subject: CN=2af2c1b4437c512bb2b8bfc33ac77b73c1381cca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e5:81:1a:d2:37:db:84:e6:b7:be:24:16:93: a5:37:58:85:4f:83:67:bf:34:44:8d:7e:d7:6f:da: 64:aa:fa:bf:67:e3:cd:f8:a2:79:94:a3:47:94:65: 54:2b:0b:c6:9c:b8:14:55:d8:ed:d4:4b:d3:89:ca: 69:9e:5f:f5:d1:3a:96:2c:ed:3a:26:d7:de:fc:fc: 82:1c:8c:a8:10:aa:f4:8a:64:78:00:b3:8c:1d:b2: ff:35:41:62:32:12:54:49:fa:2d:80:c5:99:f0:1a: a4:6f:2f:7a:64:20:b2:fa:14:3d:39:7c:e7:23:98: 0f:90:3c:c3:a5:c7:53:40:9b:46:b2:0b:c2:ea:11: 8e:6d:a8:b6:03:f2:5d:c6:fb:fc:ed:6e:8c:c2:2e: 97:cd:f9:18:03:ba:02:df:f8:57:20:c5:24:72:80: 34:73:cb:14:8e:72:aa:15:fa:bb:f2:14:b3:05:3f: af:cb:e0:d2:5c:69:96:71:aa:f3:fa:8f:76:17:b0: 7d:4f:b6:ae:38:53:76:7f:01:4b:82:30:09:c6:ba: 22:a8:ca:b7:95:d1:da:ab:1d:34:08:71:18:ba:e1: f3:c5:59:92:40:10:22:e8:af:29:56:10:1e:99:64: ac:a6:ea:cc:6d:a7:a3:22:4c:62:ad:82:e2:f5:67: 6b:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:F2:C1:B4:43:7C:51:2B:B2:B8:BF:C3:3A:C7:7B:73:C1:38:1C:CA X509v3 Authority Key Identifier: keyid:A6:A0:59:04:EC:81:74:6A:0A:66:D2:07:F5:D3:6F:8D:97:88:8A:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqBZBOyBdGoKZtIH9dNvjZeIig0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3b51c9-b37b-4767-88d9-5df6a463035b/1/pqBZBOyBdGoKZtIH9dNvjZeIig0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3b51c9-b37b-4767-88d9-5df6a463035b/1/pqBZBOyBdGoKZtIH9dNvjZeIig0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:27:10:89:1c:2c:fe:32:40:7d:29:41:15:08:3a:29:ff:ea: 57:48:f1:25:0f:f2:ce:71:09:0c:56:73:9e:85:b1:7a:fb:87: d2:3d:5a:1b:d3:5e:d8:b2:17:4f:fc:f7:9b:04:39:4d:9d:88: 68:19:1e:3a:5b:7b:e6:d7:c9:bc:53:2b:6e:52:52:ce:93:7c: 2f:a2:01:a4:f2:28:f6:f2:f8:8b:7f:10:02:29:c4:c7:e8:21: 9b:a7:a1:47:b6:18:db:75:8f:c0:81:7c:78:34:d4:b6:95:3f: d5:b2:30:93:d3:ec:47:ff:c7:eb:02:59:3b:d4:b2:f3:1d:3f: 29:a7:95:47:99:4c:70:10:da:bb:a9:75:da:d6:e2:ee:71:be: 76:f2:37:3c:56:bf:86:dc:5a:af:61:55:b7:e8:ff:41:a0:c5: 27:2a:c7:8b:3f:89:c6:83:03:02:bd:e6:49:19:1f:b8:e4:cd: e5:31:6a:5e:83:85:da:44:4c:2f:9c:f7:91:55:b2:21:01:0b: 9c:f4:c8:79:fe:b4:81:03:42:81:14:17:9d:d7:c0:da:e4:5b: 23:42:cb:a9:b1:ba:10:26:a0:8c:9a:ef:a4:aa:ad:73:f4:2d: 18:b6:b2:79:16:6c:31:bd:e0:b9:08:ac:d8:97:d5:d5:b0:16: 37:5e:81:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsnQX2UPS0E5+xw7X03P1l1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2YTA1OTA0ZWM4MTc0NmEwYTY2ZDIwN2Y1ZDM2ZjhkOTc4 ODhhMGQwHhcNMjUxMjE2MTMwMjQxWhcNMjUxMjE3MTMwMjQxWjAzMTEwLwYDVQQD EygyYWYyYzFiNDQzN2M1MTJiYjJiOGJmYzMzYWM3N2I3M2MxMzgxY2NhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeWBGtI324Tmt74kFpOlN1iFT4Nn vzREjX7Xb9pkqvq/Z+PN+KJ5lKNHlGVUKwvGnLgUVdjt1EvTicppnl/10TqWLO06 Jtfe/PyCHIyoEKr0imR4ALOMHbL/NUFiMhJUSfotgMWZ8Bqkby96ZCCy+hQ9OXzn I5gPkDzDpcdTQJtGsgvC6hGObai2A/Jdxvv87W6Mwi6XzfkYA7oC3/hXIMUkcoA0 c8sUjnKqFfq78hSzBT+vy+DSXGmWcarz+o92F7B9T7auOFN2fwFLgjAJxroiqMq3 ldHaqx00CHEYuuHzxVmSQBAi6K8pVhAemWSspurMbaejIkxirYLi9WdriQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCrywbRDfFErsri/wzrHe3PBOBzKMB8GA1UdIwQY MBaAFKagWQTsgXRqCmbSB/XTb42XiIoNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHFCWkJPeUJkR29LWnRJSDlkTnZqWmVJaWcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8zYjUxYzktYjM3Yi00NzY3LTg4ZDkt NWRmNmE0NjMwMzViLzEvcHFCWkJPeUJkR29LWnRJSDlkTnZqWmVJaWcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi8zYjUxYzktYjM3Yi00NzY3LTg4ZDktNWRmNmE0NjMwMzVi LzEvcHFCWkJPeUJkR29LWnRJSDlkTnZqWmVJaWcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALicQiRws /jJAfSlBFQg6Kf/qV0jxJQ/yznEJDFZznoWxevuH0j1aG9Ne2LIXT/z3mwQ5TZ2I aBkeOlt75tfJvFMrblJSzpN8L6IBpPIo9vL4i38QAinEx+ghm6ehR7YY23WPwIF8 eDTUtpU/1bIwk9PsR//H6wJZO9Sy8x0/KaeVR5lMcBDau6l12tbi7nG+dvI3PFa/ htxar2FVt+j/QaDFJyrHiz+JxoMDAr3mSRkfuOTN5TFqXoOF2kRML5z3kVWyIQEL nPTIef60gQNCgRQXndfA2uRbI0LLqbG6ECagjJrvpKqtc/QtGLayeRZsMb3guQis 2JfV1bAWN16BXg== -----END CERTIFICATE-----Generated at Tue Dec 16 22:32:58 2025 by rpki-client