This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.mft File: pb7DLWxk_7YB4nDO280-__XOekA.mft (raw, json) Hash identifier: DaKKW3UEYqPIE0qrhMW5Zvw9exi/YBaPKkl3L5LRTxE= Subject key identifier: 34:0B:94:3C:81:B9:C6:23:1C:D4:53:F8:D1:E5:3F:92:BB:03:39:48 Authority key identifier: A5:BE:C3:2D:6C:64:FF:B6:01:E2:70:CE:DB:CD:3E:FF:F5:CE:7A:40 Certificate issuer: /CN=a5bec32d6c64ffb601e270cedbcd3efff5ce7a40 Certificate serial: 019B77122D26D4A5602BAED7AC1D3A28BCFB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pb7DLWxk_7YB4nDO280-__XOekA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.mft Manifest number: 17A8 Signing time: Thu 01 Jan 2026 01:00:38 +0000 Manifest this update: Thu 01 Jan 2026 01:00:38 +0000 Manifest next update: Fri 02 Jan 2026 01:00:38 +0000 Files and hashes: 1: pb7DLWxk_7YB4nDO280-__XOekA.crl (hash: XBFzt77t+pmZZfVlpYT+TiU6yv79Xn0qLtiJdz/9Jas=) 2: qjNgLrezTzPzPZHoRa0PyC-9c_E.roa (hash: gjQzNWtyWkBxUXT4We5fyARX6Waght/4yDMrIeCr6j8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.crl rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.mft rsync://rpki.ripe.net/repository/DEFAULT/pb7DLWxk_7YB4nDO280-__XOekA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 00:18:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:12:2d:26:d4:a5:60:2b:ae:d7:ac:1d:3a:28:bc:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5bec32d6c64ffb601e270cedbcd3efff5ce7a40 Validity Not Before: Jan 1 01:00:38 2026 GMT Not After : Jan 2 01:00:38 2026 GMT Subject: CN=340b943c81b9c6231cd453f8d1e53f92bb033948 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:1f:5c:f6:10:98:bc:11:55:6d:36:9c:ac:0a: 3c:2a:52:5b:2d:da:0b:1d:ab:fe:e4:93:cf:16:66: 45:e7:97:7b:e3:22:c6:c9:70:91:f3:38:72:e6:5b: b5:18:d1:41:03:9e:20:e3:fa:0c:2a:04:ce:36:dc: cb:e3:c4:8c:e9:22:04:d8:99:3c:76:7b:1a:93:a6: 3d:d0:99:f7:83:92:2e:db:5c:16:c7:5b:f0:bf:c0: 26:b8:e8:e9:e9:ab:86:27:73:6e:c4:b9:54:75:05: 68:1e:06:a7:6b:64:1d:4f:a6:8e:88:2e:ff:ba:1d: 04:d7:8c:af:75:fe:e2:a2:09:b7:ff:dc:71:cc:b1: d7:77:2b:66:f8:0a:1d:8c:64:3d:40:5f:08:3f:de: 72:03:97:74:97:0a:84:6b:63:1c:9f:1f:ee:6e:78: 8f:af:8e:96:ff:55:da:59:1a:f3:93:c7:6e:8f:e4: 13:dd:71:17:1c:ac:54:ec:21:35:e4:99:f3:e7:c6: 07:46:91:18:f2:65:d7:25:61:ed:2b:a9:8e:fe:24: 4c:b7:4e:3d:ca:ef:44:22:5c:6d:e1:a0:af:1c:41: a9:83:98:df:f8:1c:60:05:0e:af:ed:f3:8d:67:a3: 3c:61:eb:7b:87:09:3f:fe:47:d7:7a:82:49:46:96: 8e:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:0B:94:3C:81:B9:C6:23:1C:D4:53:F8:D1:E5:3F:92:BB:03:39:48 X509v3 Authority Key Identifier: keyid:A5:BE:C3:2D:6C:64:FF:B6:01:E2:70:CE:DB:CD:3E:FF:F5:CE:7A:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pb7DLWxk_7YB4nDO280-__XOekA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:9c:03:b7:3a:60:ca:4e:70:d0:63:7a:99:bf:2a:ec:45:45: a9:6f:8d:5e:b2:2d:87:78:2a:e2:5d:c1:72:67:72:fb:94:cd: 18:4f:ab:86:51:44:69:e3:07:08:73:38:17:5c:11:14:2c:fe: f9:cb:6f:94:3c:67:c0:fc:f1:e6:7a:f7:17:b0:db:7e:44:c4: ea:a1:ac:2a:78:c9:e4:7d:9e:10:ef:df:c3:4a:bd:e0:8e:ed: 73:a4:f9:e7:dd:b0:2c:5e:7a:cd:0d:83:ac:0d:eb:4c:6a:4a: 71:3e:bd:cb:18:c0:f9:d5:05:c5:cd:97:69:ae:ac:af:7b:7d: 4b:29:cd:0e:ab:49:f2:ce:24:ef:34:41:a6:81:94:47:1e:98: 2c:17:20:8a:46:2e:ef:b4:ad:83:69:0a:c9:5f:0f:90:46:35: 66:87:ba:40:85:31:4b:7f:83:96:da:64:b5:df:54:f6:e5:35: 66:b4:a7:4d:2c:53:6b:58:bf:08:88:c0:e1:71:72:cf:88:88: 7d:65:d6:5b:8f:42:17:ad:45:bd:62:3b:5e:29:73:11:93:46: f3:e9:df:27:05:7a:4c:76:35:ba:2f:db:e8:2a:42:7d:3c:7b: ba:7a:fc:f2:d8:7a:39:88:5d:2b:c1:b1:7c:84:ff:52:5f:b8: bb:70:57:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt3Ei0m1KVgK67XrB06KLz7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1YmVjMzJkNmM2NGZmYjYwMWUyNzBjZWRiY2QzZWZmZjVj ZTdhNDAwHhcNMjYwMTAxMDEwMDM4WhcNMjYwMTAyMDEwMDM4WjAzMTEwLwYDVQQD EygzNDBiOTQzYzgxYjljNjIzMWNkNDUzZjhkMWU1M2Y5MmJiMDMzOTQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxB9c9hCYvBFVbTacrAo8KlJbLdoL Hav+5JPPFmZF55d74yLGyXCR8zhy5lu1GNFBA54g4/oMKgTONtzL48SM6SIE2Jk8 dnsak6Y90Jn3g5Iu21wWx1vwv8AmuOjp6auGJ3NuxLlUdQVoHgana2QdT6aOiC7/ uh0E14yvdf7iogm3/9xxzLHXdytm+AodjGQ9QF8IP95yA5d0lwqEa2Mcnx/ubniP r46W/1XaWRrzk8duj+QT3XEXHKxU7CE15Jnz58YHRpEY8mXXJWHtK6mO/iRMt049 yu9EIlxt4aCvHEGpg5jf+BxgBQ6v7fONZ6M8Yet7hwk//kfXeoJJRpaOmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDQLlDyBucYjHNRT+NHlP5K7AzlIMB8GA1UdIwQY MBaAFKW+wy1sZP+2AeJwztvNPv/1znpAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGI3RExXeGtfN1lCNG5ETzI4MC1fX1hPZWtBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi83ZDY0ZjEtM2Q2NC00MmViLWEyNzUt MjE3OTY0NGYzNzg4LzEvcGI3RExXeGtfN1lCNG5ETzI4MC1fX1hPZWtBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi83ZDY0ZjEtM2Q2NC00MmViLWEyNzUtMjE3OTY0NGYzNzg4 LzEvcGI3RExXeGtfN1lCNG5ETzI4MC1fX1hPZWtBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa5wDtzpg yk5w0GN6mb8q7EVFqW+NXrIth3gq4l3Bcmdy+5TNGE+rhlFEaeMHCHM4F1wRFCz+ +ctvlDxnwPzx5nr3F7DbfkTE6qGsKnjJ5H2eEO/fw0q94I7tc6T5592wLF56zQ2D rA3rTGpKcT69yxjA+dUFxc2Xaa6sr3t9SynNDqtJ8s4k7zRBpoGURx6YLBcgikYu 77Stg2kKyV8PkEY1Zoe6QIUxS3+Dltpktd9U9uU1ZrSnTSxTa1i/CIjA4XFyz4iI fWXWW49CF61FvWI7XilzEZNG8+nfJwV6THY1ui/b6CpCfTx7unr88th6OYhdK8Gx fIT/Ul+4u3BXOw== -----END CERTIFICATE-----Generated at Thu Jan 1 02:36:51 2026 by rpki-client