This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.mft File: pb7DLWxk_7YB4nDO280-__XOekA.mft (raw, json) Hash identifier: J8TtLQARUW6vvhQMCVESlP8SEdTV86P5ZAzUTjkhZEA= Subject key identifier: 25:7D:2F:5B:C3:46:75:91:B1:CE:6E:60:FE:B0:4B:19:0B:0E:39:FC Authority key identifier: A5:BE:C3:2D:6C:64:FF:B6:01:E2:70:CE:DB:CD:3E:FF:F5:CE:7A:40 Certificate issuer: /CN=a5bec32d6c64ffb601e270cedbcd3efff5ce7a40 Certificate serial: 019B3D23057B0B124C7D5FC00CBFCE3A8FCB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pb7DLWxk_7YB4nDO280-__XOekA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.mft Manifest number: 178A Signing time: Sat 20 Dec 2025 19:01:03 +0000 Manifest this update: Sat 20 Dec 2025 19:01:03 +0000 Manifest next update: Sun 21 Dec 2025 19:01:03 +0000 Files and hashes: 1: pb7DLWxk_7YB4nDO280-__XOekA.crl (hash: j+2KdbWPSVUY9ncyYuEhHHJd5Y2rpFXIhUj4TuFDmco=) 2: qjNgLrezTzPzPZHoRa0PyC-9c_E.roa (hash: gjQzNWtyWkBxUXT4We5fyARX6Waght/4yDMrIeCr6j8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.crl rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.mft rsync://rpki.ripe.net/repository/DEFAULT/pb7DLWxk_7YB4nDO280-__XOekA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:23:05:7b:0b:12:4c:7d:5f:c0:0c:bf:ce:3a:8f:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5bec32d6c64ffb601e270cedbcd3efff5ce7a40 Validity Not Before: Dec 20 19:01:03 2025 GMT Not After : Dec 21 19:01:03 2025 GMT Subject: CN=257d2f5bc3467591b1ce6e60feb04b190b0e39fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b9:3d:01:7b:b8:ed:79:a8:86:1b:fb:65:04: 45:5a:87:bf:54:e4:5f:54:6d:6f:8a:f1:5b:05:d4: 21:11:02:38:5d:6b:01:f2:0a:ed:29:5f:53:52:3f: 5c:ff:ae:db:e4:95:cc:62:8f:44:e6:d3:f3:98:77: b7:12:56:03:a9:ae:6c:25:1d:a4:fa:76:27:04:89: 9d:92:51:d6:f6:2d:8e:85:96:95:7d:5a:0d:92:64: 88:29:81:d3:48:5c:a5:7c:a6:4f:e7:e1:e7:ae:1d: f7:6f:60:7b:9d:36:cc:80:83:6c:d5:df:4a:a8:2b: 4d:01:7b:e7:4a:ac:70:51:38:e9:fe:dc:f2:bf:ff: 27:55:34:fd:8b:b3:b1:52:36:16:4d:90:78:f9:2c: 8d:de:8f:5a:ad:ac:da:c0:f5:e0:fb:f2:1d:87:03: 41:25:3d:b7:13:20:36:22:b8:0b:fe:1d:9c:d1:51: 22:9f:9f:76:1d:e4:cc:40:83:ea:c2:6a:da:bc:6c: cc:ef:78:19:19:fe:a9:7a:db:cd:d1:51:72:dc:79: 4b:35:90:a3:0a:31:42:5c:14:da:36:02:99:56:c4: 1d:a2:60:93:28:9c:cb:9f:0f:2e:d4:f4:ea:c0:94: 6b:a9:83:e5:88:f6:98:85:b3:f6:73:f5:9b:d9:4d: 92:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:7D:2F:5B:C3:46:75:91:B1:CE:6E:60:FE:B0:4B:19:0B:0E:39:FC X509v3 Authority Key Identifier: keyid:A5:BE:C3:2D:6C:64:FF:B6:01:E2:70:CE:DB:CD:3E:FF:F5:CE:7A:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pb7DLWxk_7YB4nDO280-__XOekA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:e3:6c:aa:e3:51:87:1d:a5:81:6f:44:37:c7:92:2e:17:06: 71:e6:17:40:e5:70:bb:e3:b1:2f:7b:63:ae:e0:7f:81:2a:3f: ea:0c:8e:ea:bc:3a:53:0c:54:80:40:00:d8:0b:0b:e0:42:a0: 09:58:5d:00:ff:82:a5:95:17:9d:cb:8d:97:71:c6:02:f0:6c: b9:b0:06:71:62:9f:22:30:f4:db:4e:88:0a:30:69:48:bd:96: 74:da:17:9b:83:6b:a7:f9:27:56:ce:ca:50:86:03:ba:8c:f6: 64:dd:bc:8a:86:fa:de:5b:24:db:59:cc:84:69:94:88:43:d5: a3:66:f4:1e:a4:3e:68:90:74:a2:54:03:53:53:a9:a9:12:2f: 56:00:77:6d:92:d6:d9:db:d7:d7:30:25:5c:54:2a:ac:36:04: cb:b3:09:21:a0:37:e0:dd:a0:fe:fd:3e:fa:24:e9:92:dd:18: 7a:af:7b:17:a4:af:4d:90:a3:2f:a2:79:d0:e5:86:a8:95:fa: 92:a0:f8:60:ae:df:e0:f6:c9:48:9b:39:21:36:87:41:e2:7e: b6:e8:14:fe:1b:2a:17:43:59:7e:d1:f5:a5:a1:4e:09:a3:08: 1f:cf:5d:38:40:35:c6:fc:19:98:fe:64:0d:7c:ee:ff:31:ec: 10:7e:b5:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9IwV7CxJMfV/ADL/OOo/LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1YmVjMzJkNmM2NGZmYjYwMWUyNzBjZWRiY2QzZWZmZjVj ZTdhNDAwHhcNMjUxMjIwMTkwMTAzWhcNMjUxMjIxMTkwMTAzWjAzMTEwLwYDVQQD EygyNTdkMmY1YmMzNDY3NTkxYjFjZTZlNjBmZWIwNGIxOTBiMGUzOWZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7k9AXu47Xmohhv7ZQRFWoe/VORf VG1vivFbBdQhEQI4XWsB8grtKV9TUj9c/67b5JXMYo9E5tPzmHe3ElYDqa5sJR2k +nYnBImdklHW9i2OhZaVfVoNkmSIKYHTSFylfKZP5+Hnrh33b2B7nTbMgINs1d9K qCtNAXvnSqxwUTjp/tzyv/8nVTT9i7OxUjYWTZB4+SyN3o9arazawPXg+/IdhwNB JT23EyA2IrgL/h2c0VEin592HeTMQIPqwmravGzM73gZGf6petvN0VFy3HlLNZCj CjFCXBTaNgKZVsQdomCTKJzLnw8u1PTqwJRrqYPliPaYhbP2c/Wb2U2StwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCV9L1vDRnWRsc5uYP6wSxkLDjn8MB8GA1UdIwQY MBaAFKW+wy1sZP+2AeJwztvNPv/1znpAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGI3RExXeGtfN1lCNG5ETzI4MC1fX1hPZWtBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi83ZDY0ZjEtM2Q2NC00MmViLWEyNzUt MjE3OTY0NGYzNzg4LzEvcGI3RExXeGtfN1lCNG5ETzI4MC1fX1hPZWtBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi83ZDY0ZjEtM2Q2NC00MmViLWEyNzUtMjE3OTY0NGYzNzg4 LzEvcGI3RExXeGtfN1lCNG5ETzI4MC1fX1hPZWtBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUuNsquNR hx2lgW9EN8eSLhcGceYXQOVwu+OxL3tjruB/gSo/6gyO6rw6UwxUgEAA2AsL4EKg CVhdAP+CpZUXncuNl3HGAvBsubAGcWKfIjD0206ICjBpSL2WdNoXm4Nrp/knVs7K UIYDuoz2ZN28iob63lsk21nMhGmUiEPVo2b0HqQ+aJB0olQDU1OpqRIvVgB3bZLW 2dvX1zAlXFQqrDYEy7MJIaA34N2g/v0++iTpkt0Yeq97F6SvTZCjL6J50OWGqJX6 kqD4YK7f4PbJSJs5ITaHQeJ+tugU/hsqF0NZftH1paFOCaMIH89dOEA1xvwZmP5k DXzu/zHsEH611Q== -----END CERTIFICATE-----Generated at Sun Dec 21 00:56:51 2025 by rpki-client