This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/0363f0-ec0d-48a6-9ceb-e8bd2dba97ab/1/PBJHYkowBcb89mErrJnKsExgEmo.mft File: PBJHYkowBcb89mErrJnKsExgEmo.mft (raw, json) Hash identifier: 7xBCz5gSbfp/qNKM6bQKW47dcO5qw1b4+KgbodzbAT0= Subject key identifier: 84:41:30:61:E9:E2:4D:E0:3B:81:BB:08:8E:76:58:96:56:9B:16:11 Authority key identifier: 3C:12:47:62:4A:30:05:C6:FC:F6:61:2B:AC:99:CA:B0:4C:60:12:6A Certificate issuer: /CN=3c1247624a3005c6fcf6612bac99cab04c60126a Certificate serial: 019B3E35561FA010237D8B51ED9E1AF4BC10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBJHYkowBcb89mErrJnKsExgEmo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/0363f0-ec0d-48a6-9ceb-e8bd2dba97ab/1/PBJHYkowBcb89mErrJnKsExgEmo.mft Manifest number: 1C Signing time: Sun 21 Dec 2025 00:00:41 +0000 Manifest this update: Sun 21 Dec 2025 00:00:41 +0000 Manifest next update: Mon 22 Dec 2025 00:00:41 +0000 Files and hashes: 1: AVCw8DyKkNUiF_I561aHOaiB-yQ.roa (hash: 4jl/bGMpOoT3KaRQ6y+hEQZejpdNRUav6K6qbFOHgsk=) 2: PBJHYkowBcb89mErrJnKsExgEmo.crl (hash: kVsqcQHEEomhv07yCE68fEZzhK8+QVm/7Q1pzAf3+ic=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/0363f0-ec0d-48a6-9ceb-e8bd2dba97ab/1/PBJHYkowBcb89mErrJnKsExgEmo.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/0363f0-ec0d-48a6-9ceb-e8bd2dba97ab/1/PBJHYkowBcb89mErrJnKsExgEmo.mft rsync://rpki.ripe.net/repository/DEFAULT/PBJHYkowBcb89mErrJnKsExgEmo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:35:56:1f:a0:10:23:7d:8b:51:ed:9e:1a:f4:bc:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c1247624a3005c6fcf6612bac99cab04c60126a Validity Not Before: Dec 21 00:00:41 2025 GMT Not After : Dec 22 00:00:41 2025 GMT Subject: CN=84413061e9e24de03b81bb088e765896569b1611 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:9d:24:e6:f6:1a:8e:a0:cd:56:d7:0c:95:08: b6:84:d7:84:7a:65:09:04:24:91:b4:72:11:15:a6: 8a:1f:68:a7:21:9f:60:9d:43:fa:da:a7:74:e0:04: 15:9e:62:81:ac:b9:17:20:d6:50:b8:01:62:8c:84: 61:2d:63:d4:0a:a2:bc:f2:f9:28:fd:f9:ae:6e:86: 1d:a7:d9:0c:a5:39:08:d3:3c:e9:05:cb:e4:ec:8d: 5e:f8:39:14:5a:c4:b6:a2:5d:42:5d:d6:c2:b7:15: d8:18:f2:0b:05:cd:59:d9:29:42:e3:47:42:18:e9: 67:f8:09:b0:ae:5c:a5:14:2c:6c:ff:8b:ee:b6:9e: e8:df:d9:2b:5e:96:43:91:cc:9f:b2:ae:8d:ee:c3: 00:46:9e:13:3e:06:48:77:85:40:0c:20:d4:9c:2d: 56:5d:d3:97:87:f3:12:03:b3:22:8d:b2:18:93:4a: 5a:31:e5:0b:af:02:b9:3c:c9:67:a6:23:48:05:eb: 0b:de:b1:e7:ad:ac:86:75:ac:8b:a5:aa:3e:72:d2: ae:af:27:6a:34:a4:df:6e:ff:c1:2b:3b:d3:ac:3c: 41:98:c8:09:7d:f7:82:d0:5d:32:3f:90:8d:fe:27: fb:2e:7f:e0:22:97:24:c8:64:c9:8b:94:90:ff:f2: 05:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:41:30:61:E9:E2:4D:E0:3B:81:BB:08:8E:76:58:96:56:9B:16:11 X509v3 Authority Key Identifier: keyid:3C:12:47:62:4A:30:05:C6:FC:F6:61:2B:AC:99:CA:B0:4C:60:12:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBJHYkowBcb89mErrJnKsExgEmo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/0363f0-ec0d-48a6-9ceb-e8bd2dba97ab/1/PBJHYkowBcb89mErrJnKsExgEmo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/0363f0-ec0d-48a6-9ceb-e8bd2dba97ab/1/PBJHYkowBcb89mErrJnKsExgEmo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:e1:3e:b1:d6:75:31:9d:cc:a3:cc:47:29:7b:4a:6f:1c:8a: 10:8f:5f:00:f7:3c:ec:76:ac:fc:40:fc:bd:21:23:c4:0a:99: 10:36:db:df:82:21:22:1f:62:8d:99:29:52:e5:cb:ef:96:91: 9a:68:5c:97:ea:56:37:69:1c:99:3f:31:ff:83:70:c7:88:e3: 30:ed:0e:8d:5c:8d:f4:e1:8a:6e:ad:b7:80:df:64:d8:ae:45: 62:14:a4:25:bb:06:16:d3:f6:45:5a:f0:16:8c:04:9f:d7:9a: 08:cb:4f:bf:2e:04:df:8f:92:e0:79:43:58:9f:b9:48:2f:1b: b4:2d:ba:88:7f:73:cc:3e:5f:9b:bf:62:ad:69:c8:11:6e:f4: 86:10:fc:e3:7e:22:11:71:be:ce:10:e9:ca:6c:da:5f:7c:53: d7:b2:d9:25:fb:55:0a:ee:2a:6f:3a:d3:6c:20:c3:1c:cd:2b: 0b:f8:7b:79:72:ab:e7:d5:b2:1f:1d:a0:fe:f6:a5:92:4b:31: 4e:34:a9:21:7c:c3:fe:83:b6:73:88:0b:3f:93:2f:a3:72:b5: ae:ad:e7:41:68:3b:2a:a7:52:ed:f2:40:21:14:94:d6:13:27: 54:e2:94:d0:b4:18:2d:7d:c7:34:4a:57:83:81:6b:40:2a:41: b8:56:26:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+NVYfoBAjfYtR7Z4a9LwQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjMTI0NzYyNGEzMDA1YzZmY2Y2NjEyYmFjOTljYWIwNGM2 MDEyNmEwHhcNMjUxMjIxMDAwMDQxWhcNMjUxMjIyMDAwMDQxWjAzMTEwLwYDVQQD Eyg4NDQxMzA2MWU5ZTI0ZGUwM2I4MWJiMDg4ZTc2NTg5NjU2OWIxNjExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Z0k5vYajqDNVtcMlQi2hNeEemUJ BCSRtHIRFaaKH2inIZ9gnUP62qd04AQVnmKBrLkXINZQuAFijIRhLWPUCqK88vko /fmuboYdp9kMpTkI0zzpBcvk7I1e+DkUWsS2ol1CXdbCtxXYGPILBc1Z2SlC40dC GOln+AmwrlylFCxs/4vutp7o39krXpZDkcyfsq6N7sMARp4TPgZId4VADCDUnC1W XdOXh/MSA7MijbIYk0paMeULrwK5PMlnpiNIBesL3rHnrayGdayLpao+ctKurydq NKTfbv/BKzvTrDxBmMgJffeC0F0yP5CN/if7Ln/gIpckyGTJi5SQ//IFrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIRBMGHp4k3gO4G7CI52WJZWmxYRMB8GA1UdIwQY MBaAFDwSR2JKMAXG/PZhK6yZyrBMYBJqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEJKSFlrb3dCY2I4OW1FcnJKbktzRXhnRW1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8wMzYzZjAtZWMwZC00OGE2LTljZWIt ZThiZDJkYmE5N2FiLzEvUEJKSFlrb3dCY2I4OW1FcnJKbktzRXhnRW1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC8wMzYzZjAtZWMwZC00OGE2LTljZWItZThiZDJkYmE5N2Fi LzEvUEJKSFlrb3dCY2I4OW1FcnJKbktzRXhnRW1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtOE+sdZ1 MZ3Mo8xHKXtKbxyKEI9fAPc87Has/ED8vSEjxAqZEDbb34IhIh9ijZkpUuXL75aR mmhcl+pWN2kcmT8x/4Nwx4jjMO0OjVyN9OGKbq23gN9k2K5FYhSkJbsGFtP2RVrw FowEn9eaCMtPvy4E34+S4HlDWJ+5SC8btC26iH9zzD5fm79irWnIEW70hhD8434i EXG+zhDpymzaX3xT17LZJftVCu4qbzrTbCDDHM0rC/h7eXKr59WyHx2g/valkksx TjSpIXzD/oO2c4gLP5Mvo3K1rq3nQWg7KqdS7fJAIRSU1hMnVOKU0LQYLX3HNEpX g4FrQCpBuFYmyQ== -----END CERTIFICATE-----Generated at Sun Dec 21 03:20:42 2025 by rpki-client