This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/PBuDiIaW_ERHjGk9bngD6VFiUOY.mft
File: PBuDiIaW_ERHjGk9bngD6VFiUOY.mft (raw, json)
Hash identifier: urI3RS5ND1vE+wSr9HiJ6sNRR9TqRQhlRbOsC5gIyv0=
Subject key identifier: 98:E6:C5:65:C9:65:B5:05:63:10:21:F1:C7:98:BA:E9:36:BE:57:59
Authority key identifier: 3C:1B:83:88:86:96:FC:44:47:8C:69:3D:6E:78:03:E9:51:62:50:E6
Certificate issuer: /CN=3c1b83888696fc44478c693d6e7803e9516250e6
Certificate serial: 019B41DB4DC39FFE3A1D01E82A7ABBD18B94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBuDiIaW_ERHjGk9bngD6VFiUOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/PBuDiIaW_ERHjGk9bngD6VFiUOY.mft
Manifest number: 0E99
Signing time: Sun 21 Dec 2025 17:00:49 +0000
Manifest this update: Sun 21 Dec 2025 17:00:49 +0000
Manifest next update: Mon 22 Dec 2025 17:00:49 +0000
Files and hashes: 1: 1-PRouHcN36iLzwy9uNqLaIiV2X0.roa (hash: 4hehSvfv8sJqIC+vHja2uEOG+73HXBFbIDrIN8bH3vg=)
2: 67RGYz7m7xWKzUB6-JO6U9Kw4Oo.roa (hash: Iy7s2Aw6gINY7MrIIhsJrkKAANHoHyCQ2Dm8An5q6ps=)
3: PBuDiIaW_ERHjGk9bngD6VFiUOY.crl (hash: PHp/Udnp3b9T3PpVaYJ3WDwlm35azay5ZqmM/UIAD44=)
4: rTI3MC_cflVKmz4QHcC39TCJNIM.roa (hash: Gn7Y1Iho0e2nKKiZXGFb+cFXQIXgua4De8STjxaheIw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/PBuDiIaW_ERHjGk9bngD6VFiUOY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/PBuDiIaW_ERHjGk9bngD6VFiUOY.mft
rsync://rpki.ripe.net/repository/DEFAULT/PBuDiIaW_ERHjGk9bngD6VFiUOY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 22 Dec 2025 13:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:41:db:4d:c3:9f:fe:3a:1d:01:e8:2a:7a:bb:d1:8b:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c1b83888696fc44478c693d6e7803e9516250e6
Validity
Not Before: Dec 21 17:00:49 2025 GMT
Not After : Dec 22 17:00:49 2025 GMT
Subject: CN=98e6c565c965b505631021f1c798bae936be5759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:6d:15:53:23:c8:3b:82:83:74:af:ec:1b:9b:
e7:fd:2f:e3:73:a7:ed:b8:8a:5e:84:a5:39:3b:e9:
9b:f9:7a:a9:1d:15:ef:91:a4:c5:8d:5f:7c:90:22:
24:fa:db:f8:27:2e:b7:7b:f6:99:35:7b:04:3a:39:
95:48:b3:a1:92:35:90:e4:6d:22:6b:86:4d:f5:ae:
c8:a2:06:3e:f7:13:90:ff:6e:54:88:db:8b:4c:4c:
79:6f:28:c2:d4:49:9f:26:90:ac:07:24:ff:08:b4:
c9:99:42:56:8a:91:ac:6f:ee:c9:82:7f:fe:3d:45:
31:97:fa:68:f2:03:f1:97:0a:28:8d:78:cc:07:5e:
e0:0a:f6:03:90:9a:62:76:d4:e0:5c:fb:ef:06:1b:
89:98:f2:4f:6b:18:53:38:06:11:81:83:f4:eb:f1:
02:2f:62:97:2e:49:80:f0:75:6a:0b:87:a9:ee:0d:
7b:9e:0a:14:fc:c6:f2:ce:b4:be:f8:5b:88:62:d6:
37:c9:9c:8b:22:88:44:04:04:de:02:38:78:d4:bc:
8f:13:b4:f9:9c:54:c9:50:bb:b7:18:bd:48:e4:0f:
5a:31:38:10:ae:53:6c:39:3e:22:b9:32:6e:c8:54:
fb:a2:9f:dd:1d:e0:d7:cd:0b:95:4a:86:18:54:07:
4d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:E6:C5:65:C9:65:B5:05:63:10:21:F1:C7:98:BA:E9:36:BE:57:59
X509v3 Authority Key Identifier:
keyid:3C:1B:83:88:86:96:FC:44:47:8C:69:3D:6E:78:03:E9:51:62:50:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBuDiIaW_ERHjGk9bngD6VFiUOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/PBuDiIaW_ERHjGk9bngD6VFiUOY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/PBuDiIaW_ERHjGk9bngD6VFiUOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:44:e5:0a:23:40:ad:3b:3a:f9:78:53:78:d4:b1:4b:ec:45:
8c:76:dd:f4:ab:b2:38:63:ca:81:ab:55:ab:2b:d9:ed:3d:3a:
01:4f:f0:b1:2b:e7:63:2b:ed:0f:09:ae:77:bc:7c:22:31:78:
cc:90:30:34:af:a3:05:8c:9e:30:ab:ea:d6:80:35:cb:9b:18:
b4:4a:a9:ab:da:e1:f2:5f:62:10:5e:d6:35:e5:c3:02:9b:f5:
89:4c:ba:42:86:6e:7a:95:8b:ed:70:8a:2a:dd:b5:81:dc:c7:
29:cc:ec:62:0d:2a:25:de:a6:be:4f:83:f1:d4:68:ec:fe:44:
1e:6e:ff:47:65:0d:3c:80:09:d1:44:0d:a4:1a:5e:f4:70:27:
b5:75:cb:b1:d4:83:4f:d7:dd:c7:0d:57:d5:7c:bb:19:82:45:
32:99:6b:14:d1:0f:87:96:37:99:d2:a4:f2:77:26:17:fa:08:
90:93:0d:57:27:f5:36:d6:ac:3d:12:28:6d:ab:85:e6:ff:e5:
88:aa:14:c1:5f:8f:a7:d3:53:6d:0c:9b:bd:64:48:18:79:bb:
e9:a4:27:97:a7:bd:3c:e2:20:57:a3:04:c2:39:66:f4:c6:8e:
9d:7e:ca:c8:08:ef:60:ca:4f:ec:04:98:fb:47:9e:05:af:e1:
df:29:d2:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 22:27:41 2025 by rpki-client