This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.mft File: psb8p1JpxrAQpvpxCeQxXgagg9w.mft (raw, json) Hash identifier: RFQZa6zaZeEAzt2D7ykl+PEhDt17Uc2GtlRxXAU7kE0= Subject key identifier: 56:FB:4A:06:DA:DF:CD:B7:B8:A8:0C:95:5C:B6:FC:54:EC:8A:56:60 Authority key identifier: A6:C6:FC:A7:52:69:C6:B0:10:A6:FA:71:09:E4:31:5E:06:A0:83:DC Certificate issuer: /CN=a6c6fca75269c6b010a6fa7109e4315e06a083dc Certificate serial: 019B66FB10E2FA2705FCAFFE8191FCD8AD2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/psb8p1JpxrAQpvpxCeQxXgagg9w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.mft Manifest number: 17A1 Signing time: Sun 28 Dec 2025 22:01:28 +0000 Manifest this update: Sun 28 Dec 2025 22:01:28 +0000 Manifest next update: Mon 29 Dec 2025 22:01:28 +0000 Files and hashes: 1: okAV_h5VY2rYZdeinC81X0hRA2Y.roa (hash: Qv1PPO81VnI1ltfb9vhPQi4AdxGUBWm2X2BZUx+f7S0=) 2: psb8p1JpxrAQpvpxCeQxXgagg9w.crl (hash: yqOGQwOtuPT5LIVlIWFPSuAo2N6uSf3hhsrhotd8uaI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.crl rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.mft rsync://rpki.ripe.net/repository/DEFAULT/psb8p1JpxrAQpvpxCeQxXgagg9w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 20:59:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:66:fb:10:e2:fa:27:05:fc:af:fe:81:91:fc:d8:ad:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6c6fca75269c6b010a6fa7109e4315e06a083dc Validity Not Before: Dec 28 22:01:28 2025 GMT Not After : Dec 29 22:01:28 2025 GMT Subject: CN=56fb4a06dadfcdb7b8a80c955cb6fc54ec8a5660 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:97:1e:8c:59:a4:11:d2:b8:9b:dc:cc:9d:82: 91:24:c2:d7:1d:2d:d8:98:8d:b5:34:54:09:fe:8e: 32:91:3a:39:25:04:cd:e1:fa:5e:57:38:40:be:7e: c1:13:32:48:42:8b:59:10:e3:a6:0d:fb:6e:52:32: 69:f6:6e:dd:95:31:99:9a:37:7c:89:b0:52:1e:1f: 6d:4e:1c:e8:2e:76:e3:6c:1b:5d:7a:f8:40:28:3c: dc:84:84:71:0a:05:4a:be:0a:d0:35:69:31:b1:68: 69:7d:34:88:e1:86:23:f2:2a:cb:a2:11:be:51:cf: f1:1a:4a:e2:97:44:28:16:ca:e4:91:29:5d:15:51: 6c:0f:84:0a:dd:5e:bd:61:27:e4:62:66:db:0a:42: 97:cd:fc:64:e2:64:70:1e:13:5e:c5:29:ef:bf:8b: 1e:cf:64:bd:83:a6:b7:d6:b8:af:75:2c:05:bf:67: 76:90:11:50:7b:21:61:d9:f3:46:30:04:ae:bc:1a: dd:d8:62:f1:e7:13:b0:17:c3:23:2e:f8:6f:db:6b: 1e:33:5a:8d:72:d8:14:a5:d4:f8:c5:9f:55:48:90: 80:fb:f5:a9:0d:1e:65:92:b5:71:9b:2a:c5:29:14: 9a:ea:f0:a9:7a:b2:cf:8e:2d:a7:57:25:eb:71:32: 73:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:FB:4A:06:DA:DF:CD:B7:B8:A8:0C:95:5C:B6:FC:54:EC:8A:56:60 X509v3 Authority Key Identifier: keyid:A6:C6:FC:A7:52:69:C6:B0:10:A6:FA:71:09:E4:31:5E:06:A0:83:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/psb8p1JpxrAQpvpxCeQxXgagg9w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:93:de:4b:8e:34:94:6c:dc:66:ac:4c:94:a3:fc:1f:a0:44: f2:93:66:c4:54:34:d7:5b:5e:a6:ab:f3:d4:19:5f:59:89:bf: 2d:d5:96:a9:af:bf:30:f9:be:95:f3:23:66:a6:8b:03:96:9c: b6:f5:2f:8f:6c:ad:db:d9:24:e5:7e:23:1e:16:d6:dc:93:e5: 10:08:be:2a:e2:1d:9f:e7:0d:7b:b4:a8:c0:85:78:0a:6b:b3: 1b:77:8b:a0:d5:24:1e:ee:92:18:77:04:97:6f:44:ef:69:c3: 36:ff:ca:ea:ae:fc:1d:c8:e1:4c:19:7a:79:64:3f:40:a1:3a: 8f:d4:9e:37:0a:b2:cb:14:53:86:7d:d0:e3:e3:0a:5b:fd:82: 52:cc:bc:4b:cf:6e:ff:52:3f:fa:98:0e:3f:b8:3c:b6:99:76: 11:8c:ae:e2:d9:13:5e:59:27:f4:08:38:dd:da:91:c9:ad:e2: 51:49:b2:c9:33:a1:f3:43:b6:e4:06:83:75:12:ce:1e:97:0c: 8a:d7:41:97:b3:72:30:58:d4:fa:8f:76:60:c5:0f:31:d0:9e: 5c:48:ee:47:dc:83:22:5f:93:7e:e2:b2:d8:83:ec:af:41:4b: af:53:02:9c:b4:1c:f7:34:23:0c:ec:b5:8e:73:a7:d6:37:76: 00:a2:ba:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtm+xDi+icF/K/+gZH82K0vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2YzZmY2E3NTI2OWM2YjAxMGE2ZmE3MTA5ZTQzMTVlMDZh MDgzZGMwHhcNMjUxMjI4MjIwMTI4WhcNMjUxMjI5MjIwMTI4WjAzMTEwLwYDVQQD Eyg1NmZiNGEwNmRhZGZjZGI3YjhhODBjOTU1Y2I2ZmM1NGVjOGE1NjYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA75cejFmkEdK4m9zMnYKRJMLXHS3Y mI21NFQJ/o4ykTo5JQTN4fpeVzhAvn7BEzJIQotZEOOmDftuUjJp9m7dlTGZmjd8 ibBSHh9tThzoLnbjbBtdevhAKDzchIRxCgVKvgrQNWkxsWhpfTSI4YYj8irLohG+ Uc/xGkril0QoFsrkkSldFVFsD4QK3V69YSfkYmbbCkKXzfxk4mRwHhNexSnvv4se z2S9g6a31rivdSwFv2d2kBFQeyFh2fNGMASuvBrd2GLx5xOwF8MjLvhv22seM1qN ctgUpdT4xZ9VSJCA+/WpDR5lkrVxmyrFKRSa6vCperLPji2nVyXrcTJzXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFb7Sgba3823uKgMlVy2/FTsilZgMB8GA1UdIwQY MBaAFKbG/KdSacawEKb6cQnkMV4GoIPcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHNiOHAxSnB4ckFRcHZweENlUXhYZ2FnZzl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9lYWI3ZWYtOGNkNi00ZGZlLThmMWUt ODZlMjlmMDVlYjk3LzEvcHNiOHAxSnB4ckFRcHZweENlUXhYZ2FnZzl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9lYWI3ZWYtOGNkNi00ZGZlLThmMWUtODZlMjlmMDVlYjk3 LzEvcHNiOHAxSnB4ckFRcHZweENlUXhYZ2FnZzl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAZPeS440 lGzcZqxMlKP8H6BE8pNmxFQ011tepqvz1BlfWYm/LdWWqa+/MPm+lfMjZqaLA5ac tvUvj2yt29kk5X4jHhbW3JPlEAi+KuIdn+cNe7SowIV4CmuzG3eLoNUkHu6SGHcE l29E72nDNv/K6q78HcjhTBl6eWQ/QKE6j9SeNwqyyxRThn3Q4+MKW/2CUsy8S89u /1I/+pgOP7g8tpl2EYyu4tkTXlkn9Ag43dqRya3iUUmyyTOh80O25AaDdRLOHpcM itdBl7NyMFjU+o92YMUPMdCeXEjuR9yDIl+TfuKy2IPsr0FLr1MCnLQc9zQjDOy1 jnOn1jd2AKK6FA== -----END CERTIFICATE-----Generated at Mon Dec 29 03:27:33 2025 by rpki-client