This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft File: pbIQYaPq10EOBFDbvyFw_gyTi7E.mft (raw, json) Hash identifier: 8Hn3rUhu4d0P+TVEUN4CYGrTJCh1c3lqGV5IB4FhBU8= Subject key identifier: A4:C7:E0:A8:0A:58:52:D8:D7:3F:CE:CC:00:83:0C:68:67:8E:09:95 Authority key identifier: A5:B2:10:61:A3:EA:D7:41:0E:04:50:DB:BF:21:70:FE:0C:93:8B:B1 Certificate issuer: /CN=a5b21061a3ead7410e0450dbbf2170fe0c938bb1 Certificate serial: 019B2FD545C3F8AC889DFF815D6A63770D28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pbIQYaPq10EOBFDbvyFw_gyTi7E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft Manifest number: 1781 Signing time: Thu 18 Dec 2025 05:01:04 +0000 Manifest this update: Thu 18 Dec 2025 05:01:04 +0000 Manifest next update: Fri 19 Dec 2025 05:01:04 +0000 Files and hashes: 1: pbIQYaPq10EOBFDbvyFw_gyTi7E.crl (hash: F7nqjTBvQK2eistThAjLyeqrC54HDinF6BphTpTpDkc=) 2: q9uMRJMivdNIUmR3cIXWE4hBpI0.roa (hash: k+Mam0ND2lwJk85PckjyzqHvxu7FYX4bMXDwNQs3Kx0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.crl rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft rsync://rpki.ripe.net/repository/DEFAULT/pbIQYaPq10EOBFDbvyFw_gyTi7E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:d5:45:c3:f8:ac:88:9d:ff:81:5d:6a:63:77:0d:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5b21061a3ead7410e0450dbbf2170fe0c938bb1 Validity Not Before: Dec 18 05:01:04 2025 GMT Not After : Dec 19 05:01:04 2025 GMT Subject: CN=a4c7e0a80a5852d8d73fcecc00830c68678e0995 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:be:dd:8f:96:dc:f4:4a:18:40:11:e5:fb:49: 59:be:69:01:1a:2a:15:ca:40:34:8b:1e:97:ea:ed: 36:bd:f8:85:f7:6f:12:aa:50:db:51:0d:04:38:89: 45:59:54:6e:9a:e3:34:2e:df:ea:b5:64:78:9f:5d: 18:f1:ce:22:9c:2f:2c:c4:67:36:31:bb:fb:c0:16: d9:41:fa:fb:f6:8c:02:50:65:d8:c0:47:6f:43:dc: c3:65:4d:61:4e:9b:d3:20:65:a1:06:3e:ad:3b:61: 3c:c3:6b:5e:54:7d:2c:52:15:91:80:b1:ca:91:cc: ba:77:3d:f6:c6:1b:96:d6:c9:65:91:7c:0f:62:62: 50:09:4f:60:85:f6:2b:88:57:d6:0d:f5:2f:b5:88: bf:f4:b0:d9:bb:04:f7:aa:c7:9e:bb:7b:59:9c:81: 4e:ea:3f:f3:98:7a:87:b3:ea:a1:1f:8b:60:5d:82: c4:76:ed:d0:a6:ed:3c:d1:1d:d0:f3:a3:c6:02:80: 93:c7:72:da:24:b7:fd:ee:9f:26:37:d9:d3:15:e2: 91:34:7b:39:81:f7:af:72:51:22:c6:a1:61:6b:fc: 15:e4:98:b2:5e:b5:59:ae:16:f8:82:48:c9:b9:11: 00:bc:e4:c1:c4:30:b5:73:52:31:07:91:42:bd:24: 61:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:C7:E0:A8:0A:58:52:D8:D7:3F:CE:CC:00:83:0C:68:67:8E:09:95 X509v3 Authority Key Identifier: keyid:A5:B2:10:61:A3:EA:D7:41:0E:04:50:DB:BF:21:70:FE:0C:93:8B:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbIQYaPq10EOBFDbvyFw_gyTi7E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:29:c5:70:05:e5:69:f7:5f:79:10:7d:4d:59:32:95:4f:31: a3:34:10:73:a9:7f:17:0b:79:85:eb:ee:b7:00:43:73:56:21: 99:15:dd:55:8c:5f:a3:81:e8:b3:ac:fb:ea:5a:a6:b0:79:f2: ba:dd:b4:42:ea:12:84:9f:20:7d:6e:1a:0c:89:78:66:b5:b8: d3:b9:a7:b7:d3:a2:2d:a2:ed:80:97:21:ad:bc:aa:6e:d2:3b: 03:c2:b4:3a:ea:6d:d4:89:8a:fa:5e:95:0e:d1:5e:42:66:bb: 3d:37:51:84:9c:95:54:e5:13:d4:1c:bc:06:73:b7:b2:75:e5: ee:7c:06:5e:3c:c8:35:f0:59:13:28:e0:41:6e:bb:bf:3d:35: 7d:ca:a4:5a:06:ff:89:dc:72:f0:06:7c:02:3c:a6:1e:3c:c9: 29:47:2e:16:15:fe:37:01:39:9f:15:36:77:35:8c:0c:76:8f: 05:1d:86:b6:57:99:fa:53:ed:96:8c:20:52:9a:98:04:31:27: 8d:54:3e:21:33:08:a1:8b:79:9b:42:63:36:7b:0a:4b:8e:ad: 13:86:e4:a5:08:ab:e8:ca:8f:b9:99:0a:9d:fa:3c:ff:67:e2: 38:00:8b:e6:93:8c:de:97:25:90:8f:79:12:ee:11:1e:04:08: 04:23:53:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsv1UXD+KyInf+BXWpjdw0oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1YjIxMDYxYTNlYWQ3NDEwZTA0NTBkYmJmMjE3MGZlMGM5 MzhiYjEwHhcNMjUxMjE4MDUwMTA0WhcNMjUxMjE5MDUwMTA0WjAzMTEwLwYDVQQD EyhhNGM3ZTBhODBhNTg1MmQ4ZDczZmNlY2MwMDgzMGM2ODY3OGUwOTk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk77dj5bc9EoYQBHl+0lZvmkBGioV ykA0ix6X6u02vfiF928SqlDbUQ0EOIlFWVRumuM0Lt/qtWR4n10Y8c4inC8sxGc2 Mbv7wBbZQfr79owCUGXYwEdvQ9zDZU1hTpvTIGWhBj6tO2E8w2teVH0sUhWRgLHK kcy6dz32xhuW1sllkXwPYmJQCU9ghfYriFfWDfUvtYi/9LDZuwT3qseeu3tZnIFO 6j/zmHqHs+qhH4tgXYLEdu3Qpu080R3Q86PGAoCTx3LaJLf97p8mN9nTFeKRNHs5 gfevclEixqFha/wV5JiyXrVZrhb4gkjJuREAvOTBxDC1c1IxB5FCvSRhzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKTH4KgKWFLY1z/OzACDDGhnjgmVMB8GA1UdIwQY MBaAFKWyEGGj6tdBDgRQ278hcP4Mk4uxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGJJUVlhUHExMEVPQkZEYnZ5RndfZ3lUaTdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9mZmFjNGQtYTI3Mi00ZTZjLTk0MzEt YTA4ODNjMGIwOTViLzEvcGJJUVlhUHExMEVPQkZEYnZ5RndfZ3lUaTdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC9mZmFjNGQtYTI3Mi00ZTZjLTk0MzEtYTA4ODNjMGIwOTVi LzEvcGJJUVlhUHExMEVPQkZEYnZ5RndfZ3lUaTdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGCnFcAXl afdfeRB9TVkylU8xozQQc6l/Fwt5hevutwBDc1YhmRXdVYxfo4Hos6z76lqmsHny ut20QuoShJ8gfW4aDIl4ZrW407mnt9OiLaLtgJchrbyqbtI7A8K0Oupt1ImK+l6V DtFeQma7PTdRhJyVVOUT1By8BnO3snXl7nwGXjzINfBZEyjgQW67vz01fcqkWgb/ idxy8AZ8AjymHjzJKUcuFhX+NwE5nxU2dzWMDHaPBR2GtleZ+lPtlowgUpqYBDEn jVQ+ITMIoYt5m0JjNnsKS46tE4bkpQir6MqPuZkKnfo8/2fiOACL5pOM3pclkI95 Eu4RHgQIBCNTEQ== -----END CERTIFICATE-----Generated at Thu Dec 18 06:58:15 2025 by rpki-client