This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/f763a9-7176-4f32-9760-220165c3e6df/1/PBC7uXtTnGv4MFlZhVZloOeqbZU.mft File: PBC7uXtTnGv4MFlZhVZloOeqbZU.mft (raw, json) Hash identifier: 8yHF0TmK1hNQGtvNwZ3mf2G1UVEqQCXNjHe01rozVsE= Subject key identifier: 7C:F2:DD:17:0E:CF:4D:16:49:EA:08:CA:68:11:C2:FF:FD:D8:CF:D1 Authority key identifier: 3C:10:BB:B9:7B:53:9C:6B:F8:30:59:59:85:56:65:A0:E7:AA:6D:95 Certificate issuer: /CN=3c10bbb97b539c6bf8305959855665a0e7aa6d95 Certificate serial: 019B6AD86A242AADFDBECB1F743CAF15F5ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBC7uXtTnGv4MFlZhVZloOeqbZU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/f763a9-7176-4f32-9760-220165c3e6df/1/PBC7uXtTnGv4MFlZhVZloOeqbZU.mft Manifest number: 0BA6 Signing time: Mon 29 Dec 2025 16:02:06 +0000 Manifest this update: Mon 29 Dec 2025 16:02:06 +0000 Manifest next update: Tue 30 Dec 2025 16:02:06 +0000 Files and hashes: 1: PBC7uXtTnGv4MFlZhVZloOeqbZU.crl (hash: agzDoL8QV2pYnu8Th6WckusddEdMhvasuPZ0s8uQBxE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/f763a9-7176-4f32-9760-220165c3e6df/1/PBC7uXtTnGv4MFlZhVZloOeqbZU.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/f763a9-7176-4f32-9760-220165c3e6df/1/PBC7uXtTnGv4MFlZhVZloOeqbZU.mft rsync://rpki.ripe.net/repository/DEFAULT/PBC7uXtTnGv4MFlZhVZloOeqbZU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 15:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6a:d8:6a:24:2a:ad:fd:be:cb:1f:74:3c:af:15:f5:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c10bbb97b539c6bf8305959855665a0e7aa6d95 Validity Not Before: Dec 29 16:02:06 2025 GMT Not After : Dec 30 16:02:06 2025 GMT Subject: CN=7cf2dd170ecf4d1649ea08ca6811c2fffdd8cfd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:06:e1:d6:f2:1a:ab:d3:b1:17:a7:fd:e9:37: 9b:fc:0c:0f:66:11:fa:51:b2:f6:bd:3f:91:1f:9f: 53:65:70:21:bc:4c:b8:6b:5e:89:a9:88:5b:f8:79: f4:28:83:27:a3:ce:e0:f0:a8:4b:14:fe:30:17:fa: 80:87:18:b3:dd:eb:a7:48:30:d4:b4:3e:83:12:35: 8a:e1:cc:23:62:02:63:79:76:4a:27:bf:a6:ac:2b: 63:00:4c:ad:89:66:7a:f3:e1:a7:ca:86:71:9e:ac: 52:7a:da:19:07:30:a1:e1:53:36:16:61:44:52:9f: 3b:71:11:7b:f8:79:2d:89:8d:5a:8d:5e:bd:b8:c6: e2:70:0f:1e:b8:73:94:ec:2a:1b:80:5d:9e:b9:fd: 35:21:b6:d4:c9:8c:d3:28:f1:6d:bd:b5:53:a8:18: 83:ac:82:09:fb:c2:1b:79:a7:0b:a2:07:18:4a:d8: 71:c9:9d:fe:71:3f:80:3c:f8:75:4e:a5:16:c7:68: 18:8b:f3:25:73:8c:b1:51:06:7e:96:19:17:e8:fa: 63:3f:f6:e5:24:5d:61:21:63:ad:06:21:13:53:ab: dd:28:b0:31:64:eb:71:90:2a:8b:56:35:7a:45:a3: 7d:a3:41:57:32:7d:33:00:9b:31:e0:38:41:94:fa: ca:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:F2:DD:17:0E:CF:4D:16:49:EA:08:CA:68:11:C2:FF:FD:D8:CF:D1 X509v3 Authority Key Identifier: keyid:3C:10:BB:B9:7B:53:9C:6B:F8:30:59:59:85:56:65:A0:E7:AA:6D:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBC7uXtTnGv4MFlZhVZloOeqbZU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f763a9-7176-4f32-9760-220165c3e6df/1/PBC7uXtTnGv4MFlZhVZloOeqbZU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f763a9-7176-4f32-9760-220165c3e6df/1/PBC7uXtTnGv4MFlZhVZloOeqbZU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:45:3d:aa:46:ac:5b:97:c8:9c:8d:e1:0f:55:09:c4:11:de: 60:87:57:38:be:6e:8a:be:92:17:4e:9c:5e:c9:f1:99:9b:39: 52:4a:ea:25:b7:ce:db:d5:a9:a6:e3:17:01:15:84:19:ad:18: f0:a9:4c:a6:21:89:6b:65:88:bb:39:0a:3d:4d:20:05:f4:61: bd:ca:06:b8:6b:5a:c4:66:51:d2:64:70:df:e5:12:4b:1f:d2: d1:10:0e:3d:6b:f7:14:2d:ee:3f:f1:b7:d8:9f:48:0b:c0:a9: 75:df:75:c6:a3:77:f8:45:96:4d:df:fb:97:97:18:53:9e:d7: 88:d4:07:0d:a1:1a:f5:58:5e:dd:ed:b1:44:5c:25:83:65:5b: 99:02:3a:7d:3e:c7:af:a8:ba:72:67:80:91:8a:2f:72:d0:e7: 4d:93:e2:81:78:d1:54:20:1c:89:5a:8e:8f:dc:39:59:67:bd: 89:16:90:79:bf:12:90:d1:55:1b:67:52:63:37:bb:1f:b4:b4: bc:d6:63:64:5c:57:c0:cc:c5:41:d4:c1:a3:6d:d6:9f:14:fb: d3:87:4e:e1:a3:60:dd:6f:60:c5:8b:71:75:fe:de:2a:e4:20: dc:44:ce:b9:e4:41:22:8d:89:70:47:de:3a:62:21:b9:9c:7a: f8:f1:2e:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtq2GokKq39vssfdDyvFfXtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjMTBiYmI5N2I1MzljNmJmODMwNTk1OTg1NTY2NWEwZTdh YTZkOTUwHhcNMjUxMjI5MTYwMjA2WhcNMjUxMjMwMTYwMjA2WjAzMTEwLwYDVQQD Eyg3Y2YyZGQxNzBlY2Y0ZDE2NDllYTA4Y2E2ODExYzJmZmZkZDhjZmQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgwbh1vIaq9OxF6f96Teb/AwPZhH6 UbL2vT+RH59TZXAhvEy4a16JqYhb+Hn0KIMno87g8KhLFP4wF/qAhxiz3eunSDDU tD6DEjWK4cwjYgJjeXZKJ7+mrCtjAEytiWZ68+GnyoZxnqxSetoZBzCh4VM2FmFE Up87cRF7+HktiY1ajV69uMbicA8euHOU7CobgF2euf01IbbUyYzTKPFtvbVTqBiD rIIJ+8IbeacLogcYSthxyZ3+cT+APPh1TqUWx2gYi/Mlc4yxUQZ+lhkX6PpjP/bl JF1hIWOtBiETU6vdKLAxZOtxkCqLVjV6RaN9o0FXMn0zAJsx4DhBlPrKOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHzy3RcOz00WSeoIymgRwv/92M/RMB8GA1UdIwQY MBaAFDwQu7l7U5xr+DBZWYVWZaDnqm2VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEJDN3VYdFRuR3Y0TUZsWmhWWmxvT2VxYlpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9mNzYzYTktNzE3Ni00ZjMyLTk3NjAt MjIwMTY1YzNlNmRmLzEvUEJDN3VYdFRuR3Y0TUZsWmhWWmxvT2VxYlpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9mNzYzYTktNzE3Ni00ZjMyLTk3NjAtMjIwMTY1YzNlNmRm LzEvUEJDN3VYdFRuR3Y0TUZsWmhWWmxvT2VxYlpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVkU9qkas W5fInI3hD1UJxBHeYIdXOL5uir6SF06cXsnxmZs5UkrqJbfO29WppuMXARWEGa0Y 8KlMpiGJa2WIuzkKPU0gBfRhvcoGuGtaxGZR0mRw3+USSx/S0RAOPWv3FC3uP/G3 2J9IC8Cpdd91xqN3+EWWTd/7l5cYU57XiNQHDaEa9Vhe3e2xRFwlg2VbmQI6fT7H r6i6cmeAkYovctDnTZPigXjRVCAciVqOj9w5WWe9iRaQeb8SkNFVG2dSYze7H7S0 vNZjZFxXwMzFQdTBo23WnxT704dO4aNg3W9gxYtxdf7eKuQg3ETOueRBIo2JcEfe OmIhuZx6+PEuYQ== -----END CERTIFICATE-----Generated at Mon Dec 29 23:46:13 2025 by rpki-client