This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.mft File: PbBJ2l4SBk7P4TnhIL7vbxeL_fM.mft (raw, json) Hash identifier: 272+w3YdMtZJ0pDyLrk7ZQk60sqkjui8+JawqiICcXs= Subject key identifier: 53:37:90:56:04:30:28:17:32:B0:94:36:56:96:82:49:3B:67:53:0C Authority key identifier: 3D:B0:49:DA:5E:12:06:4E:CF:E1:39:E1:20:BE:EF:6F:17:8B:FD:F3 Certificate issuer: /CN=3db049da5e12064ecfe139e120beef6f178bfdf3 Certificate serial: 019B3CEBD197E3ACED7FDAFA7C280DA2C1D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.mft Manifest number: 02BF Signing time: Sat 20 Dec 2025 18:00:46 +0000 Manifest this update: Sat 20 Dec 2025 18:00:46 +0000 Manifest next update: Sun 21 Dec 2025 18:00:46 +0000 Files and hashes: 1: ArxWoIoACVsuecj6oH-B8iFComg.roa (hash: rlcyNszToJSApviKpB6wzSvDYhbI3eJligCvoVuiSks=) 2: PbBJ2l4SBk7P4TnhIL7vbxeL_fM.crl (hash: eletX/3ihr6xfboWa4EqSvoMt5zpdE1BEalZRSYgCf8=) 3: ar9nZIGwi2DhhokEeZ0Cb06cevE.roa (hash: Z0Bly0p6G10RTWfWyE9HNHAJ9d6Fob4NgEePaV17UE8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.mft rsync://rpki.ripe.net/repository/DEFAULT/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:eb:d1:97:e3:ac:ed:7f:da:fa:7c:28:0d:a2:c1:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3db049da5e12064ecfe139e120beef6f178bfdf3 Validity Not Before: Dec 20 18:00:46 2025 GMT Not After : Dec 21 18:00:46 2025 GMT Subject: CN=533790560430281732b09436569682493b67530c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c6:fb:26:7c:d7:87:ec:53:87:d7:74:07:a8: bb:09:11:b9:79:6d:1a:d0:49:71:fa:33:ad:91:33: 01:8a:12:08:ad:b1:20:7c:16:7c:12:f6:4b:06:34: 8d:49:ca:23:c5:8b:dc:43:d2:12:d1:63:90:65:0f: 74:3f:98:0c:48:d8:2d:a3:d5:63:f1:53:de:37:05: 09:38:7d:8f:c7:e7:ea:f0:2d:f1:d8:b0:60:bc:c0: cd:20:46:cc:b0:ad:c5:2a:5f:6e:a1:fc:05:93:da: 8a:6b:ea:1c:29:07:da:96:03:8c:53:a4:78:b2:d4: 3a:4c:de:b5:f3:f5:53:f3:75:96:63:e9:6b:a9:df: 48:21:da:e1:07:ec:c9:83:1d:47:e9:20:e1:bc:3d: b6:4c:43:4b:6c:66:2b:b4:41:7e:3f:e3:00:66:1d: eb:28:73:f8:8c:93:f1:16:8a:c6:e6:06:6e:7c:a9: ea:b2:ab:07:4c:d5:b1:27:cc:4a:b4:5b:44:da:af: b5:38:d4:fa:3c:13:83:48:a2:bf:c0:90:fd:35:65: 0f:6e:af:a0:c2:bc:58:40:e2:ce:9e:6a:ed:db:da: 7b:94:19:30:28:a6:61:c4:fa:f8:3e:68:9f:2e:df: 12:15:70:50:f9:ab:29:c3:b3:67:3e:7b:5b:3a:01: 5c:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:37:90:56:04:30:28:17:32:B0:94:36:56:96:82:49:3B:67:53:0C X509v3 Authority Key Identifier: keyid:3D:B0:49:DA:5E:12:06:4E:CF:E1:39:E1:20:BE:EF:6F:17:8B:FD:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:93:07:aa:d7:45:fe:96:36:0f:5c:6a:bc:2a:27:9c:1c:26: c2:66:d4:05:d7:10:90:fb:f7:75:1e:97:cb:b6:a4:e3:47:4b: eb:d1:46:46:b5:b6:51:72:14:0c:6e:d3:7c:be:f6:bc:94:c9: 4e:ad:a1:f7:51:24:59:5e:da:ae:06:4b:c4:84:ab:77:29:33: 7e:de:51:0e:fc:2c:95:12:e2:e4:8f:d9:5b:44:a1:87:f0:30: e7:05:66:31:87:48:13:e7:d3:a3:fe:a6:03:5a:a7:2b:6e:f1: eb:f1:a4:db:fd:b9:4b:ac:65:5e:53:5e:ed:8b:b7:14:26:32: b9:29:b6:50:47:8e:22:5a:64:6a:0e:76:a8:67:07:3a:1f:1d: 04:a3:14:ba:58:fa:e9:db:61:e6:f9:0d:b0:e5:eb:f5:c8:d1: a2:5c:b2:bd:c1:de:06:c3:4f:e3:a5:58:47:39:97:2a:5f:f6: 78:e4:70:b8:e0:25:74:53:dc:fc:b8:3c:17:57:12:6f:4c:33: cf:02:b0:a0:f1:d5:7d:cc:da:0a:36:f7:bb:5c:7f:9b:de:d4: 6b:84:e4:28:3b:26:09:e4:58:f7:5e:72:de:e0:44:00:86:45: d4:82:d8:d6:21:1b:4a:ed:60:d4:e4:80:6c:a7:ef:35:9d:f2: 5a:e7:73:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs869GX46ztf9r6fCgNosHQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkYjA0OWRhNWUxMjA2NGVjZmUxMzllMTIwYmVlZjZmMTc4 YmZkZjMwHhcNMjUxMjIwMTgwMDQ2WhcNMjUxMjIxMTgwMDQ2WjAzMTEwLwYDVQQD Eyg1MzM3OTA1NjA0MzAyODE3MzJiMDk0MzY1Njk2ODI0OTNiNjc1MzBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Mb7JnzXh+xTh9d0B6i7CRG5eW0a 0Elx+jOtkTMBihIIrbEgfBZ8EvZLBjSNScojxYvcQ9IS0WOQZQ90P5gMSNgto9Vj 8VPeNwUJOH2Px+fq8C3x2LBgvMDNIEbMsK3FKl9uofwFk9qKa+ocKQfalgOMU6R4 stQ6TN618/VT83WWY+lrqd9IIdrhB+zJgx1H6SDhvD22TENLbGYrtEF+P+MAZh3r KHP4jJPxForG5gZufKnqsqsHTNWxJ8xKtFtE2q+1ONT6PBODSKK/wJD9NWUPbq+g wrxYQOLOnmrt29p7lBkwKKZhxPr4PmifLt8SFXBQ+aspw7NnPntbOgFcJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFM3kFYEMCgXMrCUNlaWgkk7Z1MMMB8GA1UdIwQY MBaAFD2wSdpeEgZOz+E54SC+728Xi/3zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGJCSjJsNFNCazdQNFRuaElMN3ZieGVMX2ZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy81YmM1MTctYzFmNi00ZTRmLWI1Yzct OGU1N2JhZDVjNTI3LzEvUGJCSjJsNFNCazdQNFRuaElMN3ZieGVMX2ZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy81YmM1MTctYzFmNi00ZTRmLWI1YzctOGU1N2JhZDVjNTI3 LzEvUGJCSjJsNFNCazdQNFRuaElMN3ZieGVMX2ZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU5MHqtdF /pY2D1xqvConnBwmwmbUBdcQkPv3dR6Xy7ak40dL69FGRrW2UXIUDG7TfL72vJTJ Tq2h91EkWV7argZLxISrdykzft5RDvwslRLi5I/ZW0Shh/Aw5wVmMYdIE+fTo/6m A1qnK27x6/Gk2/25S6xlXlNe7Yu3FCYyuSm2UEeOIlpkag52qGcHOh8dBKMUulj6 6dth5vkNsOXr9cjRolyyvcHeBsNP46VYRzmXKl/2eORwuOAldFPc/Lg8F1cSb0wz zwKwoPHVfczaCjb3u1x/m97Ua4TkKDsmCeRY915y3uBEAIZF1ILY1iEbSu1g1OSA bKfvNZ3yWudzvQ== -----END CERTIFICATE-----Generated at Sat Dec 20 23:37:41 2025 by rpki-client