This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/PB8U03-9yHrnyce5FT6updTFVJs.mft File: PB8U03-9yHrnyce5FT6updTFVJs.mft (raw, json) Hash identifier: tROavP9x7V8yKfo8z6cxIWtiFXiJ4iouFZvyg8RXvqc= Subject key identifier: DB:D1:E5:EB:25:4A:BF:2B:99:94:A1:EE:38:62:45:B7:BA:F2:FE:3D Authority key identifier: 3C:1F:14:D3:7F:BD:C8:7A:E7:C9:C7:B9:15:3E:AE:A5:D4:C5:54:9B Certificate issuer: /CN=3c1f14d37fbdc87ae7c9c7b9153eaea5d4c5549b Certificate serial: 019B3DFE6F0C449CD65403D2E4B8816AB4E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PB8U03-9yHrnyce5FT6updTFVJs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/PB8U03-9yHrnyce5FT6updTFVJs.mft Manifest number: 0457 Signing time: Sat 20 Dec 2025 23:00:43 +0000 Manifest this update: Sat 20 Dec 2025 23:00:43 +0000 Manifest next update: Sun 21 Dec 2025 23:00:43 +0000 Files and hashes: 1: PB8U03-9yHrnyce5FT6updTFVJs.crl (hash: 7tRcznnKK/uGnQ7N152j+dEK2TuYW6VIguv6qJaCPpo=) 2: auXGFmJDUvgSHGS6wCLf4_shLvQ.roa (hash: bP/kmgpM7rHsmWvx92KHgSs4SseixSL39Od8mT5RIQ4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/PB8U03-9yHrnyce5FT6updTFVJs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/PB8U03-9yHrnyce5FT6updTFVJs.mft rsync://rpki.ripe.net/repository/DEFAULT/PB8U03-9yHrnyce5FT6updTFVJs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 23:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:6f:0c:44:9c:d6:54:03:d2:e4:b8:81:6a:b4:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c1f14d37fbdc87ae7c9c7b9153eaea5d4c5549b Validity Not Before: Dec 20 23:00:43 2025 GMT Not After : Dec 21 23:00:43 2025 GMT Subject: CN=dbd1e5eb254abf2b9994a1ee386245b7baf2fe3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e1:c9:1f:25:c9:df:d8:66:f6:83:1a:76:4d: 0e:29:2c:45:d6:6f:8c:4c:64:06:1e:0d:21:2f:f6: dc:e1:6c:ef:3a:4a:3e:b1:c7:77:6d:b4:9f:5c:04: 08:14:b6:5f:db:c1:f7:08:76:8a:50:66:82:30:87: bd:75:a4:f2:72:d1:6a:bb:f2:ed:1c:84:62:39:d0: 51:0f:2c:bb:16:b3:52:24:1f:5f:84:9b:4a:9c:b9: 40:2b:05:9c:fd:6c:ff:5c:e2:4a:6e:f8:ed:12:35: 12:86:9f:79:0d:c1:b4:6a:9e:ef:c1:da:37:74:9b: 0b:d5:20:ac:45:69:c0:5b:84:09:60:0d:5c:98:f5: d5:85:7d:40:ce:da:16:b0:50:60:0c:cd:8f:2f:12: ad:56:d0:83:d4:75:5b:26:a4:11:d6:ff:72:1b:83: a2:82:5d:07:42:e1:68:c6:43:37:4d:82:fb:7e:35: a5:96:d5:6b:44:b4:e0:70:9b:cb:c7:39:fe:42:fa: f4:ff:d9:a3:1d:fc:44:73:88:ff:53:50:96:ef:75: 32:fd:a5:31:b9:dc:4c:c1:c7:c0:e1:7d:8a:9d:df: ad:3a:12:e0:55:53:15:62:55:08:e4:79:91:b5:bc: e2:16:97:0d:93:76:f7:4a:81:fc:58:9b:ed:3d:59: bc:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:D1:E5:EB:25:4A:BF:2B:99:94:A1:EE:38:62:45:B7:BA:F2:FE:3D X509v3 Authority Key Identifier: keyid:3C:1F:14:D3:7F:BD:C8:7A:E7:C9:C7:B9:15:3E:AE:A5:D4:C5:54:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PB8U03-9yHrnyce5FT6updTFVJs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/PB8U03-9yHrnyce5FT6updTFVJs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/PB8U03-9yHrnyce5FT6updTFVJs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:98:49:9f:bc:e8:06:8f:17:76:0d:42:0b:ef:21:2b:71:36: 43:08:f5:27:6e:37:c8:9c:57:a2:9c:48:0c:6c:33:aa:aa:0a: e1:96:03:97:e9:29:5b:09:05:a9:d3:1f:2e:70:79:e4:4e:9b: 66:c6:a2:27:9d:ac:7f:80:b8:48:95:4f:3b:5b:93:b2:db:31: bc:fe:4b:50:85:f2:a6:d3:5a:49:c3:f2:c7:47:c4:b3:a3:41: 9b:ca:9f:f2:7d:cf:63:d6:00:b1:c9:01:7a:5c:b1:42:c5:87: a4:89:3e:e4:f1:5d:79:cd:81:10:b7:eb:93:ea:5e:0b:3d:b7: 56:05:f6:f2:4a:f8:c5:e2:78:cc:8e:05:3b:e8:86:07:78:e8: 69:c4:12:d0:f9:9f:1a:ff:a7:22:e6:db:fd:1c:94:ac:65:13: dc:fa:ae:95:67:09:db:aa:e8:0d:fa:77:98:fa:0a:10:53:fa: 84:02:ed:0d:c1:fc:56:4a:48:5c:26:26:0d:99:35:ce:61:fd: be:2c:76:45:6a:f4:3d:cc:a8:bb:ba:70:80:59:86:90:19:14: 54:45:5c:77:49:2a:93:1d:1a:e1:ea:8e:eb:14:50:3a:71:07: e6:1f:49:ce:22:dc:89:f8:0d:f4:e6:de:2f:f6:d3:19:ce:a8: 70:0c:e6:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/m8MRJzWVAPS5LiBarTnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjMWYxNGQzN2ZiZGM4N2FlN2M5YzdiOTE1M2VhZWE1ZDRj NTU0OWIwHhcNMjUxMjIwMjMwMDQzWhcNMjUxMjIxMjMwMDQzWjAzMTEwLwYDVQQD EyhkYmQxZTVlYjI1NGFiZjJiOTk5NGExZWUzODYyNDViN2JhZjJmZTNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOHJHyXJ39hm9oMadk0OKSxF1m+M TGQGHg0hL/bc4WzvOko+scd3bbSfXAQIFLZf28H3CHaKUGaCMIe9daTyctFqu/Lt HIRiOdBRDyy7FrNSJB9fhJtKnLlAKwWc/Wz/XOJKbvjtEjUShp95DcG0ap7vwdo3 dJsL1SCsRWnAW4QJYA1cmPXVhX1AztoWsFBgDM2PLxKtVtCD1HVbJqQR1v9yG4Oi gl0HQuFoxkM3TYL7fjWlltVrRLTgcJvLxzn+Qvr0/9mjHfxEc4j/U1CW73Uy/aUx udxMwcfA4X2Knd+tOhLgVVMVYlUI5HmRtbziFpcNk3b3SoH8WJvtPVm8nQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNvR5eslSr8rmZSh7jhiRbe68v49MB8GA1UdIwQY MBaAFDwfFNN/vch658nHuRU+rqXUxVSbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEI4VTAzLTl5SHJueWNlNUZUNnVwZFRGVkpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9mMWI3NGMtMTZhYy00ODMxLWI2YzUt ZjFjNmJmMWU0YmE3LzEvUEI4VTAzLTl5SHJueWNlNUZUNnVwZFRGVkpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9mMWI3NGMtMTZhYy00ODMxLWI2YzUtZjFjNmJmMWU0YmE3 LzEvUEI4VTAzLTl5SHJueWNlNUZUNnVwZFRGVkpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALJhJn7zo Bo8Xdg1CC+8hK3E2Qwj1J243yJxXopxIDGwzqqoK4ZYDl+kpWwkFqdMfLnB55E6b ZsaiJ52sf4C4SJVPO1uTstsxvP5LUIXyptNaScPyx0fEs6NBm8qf8n3PY9YAsckB elyxQsWHpIk+5PFdec2BELfrk+peCz23VgX28kr4xeJ4zI4FO+iGB3joacQS0Pmf Gv+nIubb/RyUrGUT3PqulWcJ26roDfp3mPoKEFP6hALtDcH8VkpIXCYmDZk1zmH9 vix2RWr0Pcyou7pwgFmGkBkUVEVcd0kqkx0a4eqO6xRQOnEH5h9JziLcifgN9Obe L/bTGc6ocAzmPQ== -----END CERTIFICATE-----Generated at Sun Dec 21 08:41:51 2025 by rpki-client