This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.mft File: PBHQXNKatxkq8DnPXz0AvpIVeTk.mft (raw, json) Hash identifier: FPmUqdvv/WeBQtoYRlLwXiNL2G0dv96UPnARgxHol+Y= Subject key identifier: 54:F6:5B:3C:5F:F2:9C:F2:F3:0B:C4:21:5D:6F:80:96:65:75:53:D4 Authority key identifier: 3C:11:D0:5C:D2:9A:B7:19:2A:F0:39:CF:5F:3D:00:BE:92:15:79:39 Certificate issuer: /CN=3c11d05cd29ab7192af039cf5f3d00be92157939 Certificate serial: 019B679EF6C30F963D62DD3AC7B2030268B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBHQXNKatxkq8DnPXz0AvpIVeTk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.mft Manifest number: 09ED Signing time: Mon 29 Dec 2025 01:00:29 +0000 Manifest this update: Mon 29 Dec 2025 01:00:29 +0000 Manifest next update: Tue 30 Dec 2025 01:00:29 +0000 Files and hashes: 1: PBHQXNKatxkq8DnPXz0AvpIVeTk.crl (hash: opxPNKe8kAjSTkUvNvSeg28xASBXi+qlW2joTvjf2z8=) 2: uXWEOT5kLicjM9eRqYG2MPSav7U.roa (hash: WztCPaYNfJzy3qntVN7a2OFcCyo/yo2zpUp1jJXzcgs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.mft rsync://rpki.ripe.net/repository/DEFAULT/PBHQXNKatxkq8DnPXz0AvpIVeTk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 20:59:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:67:9e:f6:c3:0f:96:3d:62:dd:3a:c7:b2:03:02:68:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c11d05cd29ab7192af039cf5f3d00be92157939 Validity Not Before: Dec 29 01:00:29 2025 GMT Not After : Dec 30 01:00:29 2025 GMT Subject: CN=54f65b3c5ff29cf2f30bc4215d6f8096657553d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ea:61:65:1d:b4:df:a9:16:2a:06:6c:0c:a8: 57:e3:76:67:7e:92:9f:a6:92:e3:35:73:30:61:c9: 70:67:3a:fe:d5:b7:74:85:87:2a:5f:09:17:10:06: 41:a6:58:cf:f5:31:8f:e9:70:b5:25:c2:c3:16:cc: 82:93:af:f8:90:7e:7c:6b:6c:da:a1:50:0c:e2:5e: 77:ef:d1:ef:e5:e0:1f:b9:9c:a0:5e:43:4b:3b:2e: 2a:4b:a6:fb:2a:2d:77:27:e9:4e:ea:86:7f:f6:90: 8a:c8:34:db:d4:8f:7f:14:a5:7b:03:0c:f1:ea:e4: af:26:16:b2:dc:4e:91:b2:ec:2e:98:b7:09:a9:eb: a2:16:c0:25:a9:e3:ea:84:e6:53:ce:ad:96:ec:33: a1:e1:26:d6:31:b3:d8:45:ef:be:8c:c2:46:31:91: b5:58:61:58:61:1f:9a:67:a9:16:68:9a:3d:16:8c: 0b:b3:e3:5e:4e:c5:dc:b8:77:18:d2:80:2f:c7:ba: c3:7f:76:28:c2:8f:87:dd:53:5d:01:8f:b8:70:af: a3:50:f9:b1:d7:77:27:13:7a:a5:5b:76:93:e2:b4: 80:9a:f4:6d:e2:9c:fc:76:d6:63:6a:74:4b:d2:18: 5b:32:42:99:06:ab:85:cf:89:33:5a:94:1e:87:d0: fe:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:F6:5B:3C:5F:F2:9C:F2:F3:0B:C4:21:5D:6F:80:96:65:75:53:D4 X509v3 Authority Key Identifier: keyid:3C:11:D0:5C:D2:9A:B7:19:2A:F0:39:CF:5F:3D:00:BE:92:15:79:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBHQXNKatxkq8DnPXz0AvpIVeTk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:5c:0d:b3:ab:91:82:3b:45:73:f0:f1:08:99:48:9e:dc:2f: 5f:3c:e4:ae:a4:4c:b1:4e:1c:e1:61:a6:1c:43:7b:21:81:b4: c8:7e:7a:f9:b4:30:d2:39:0a:61:dd:0a:cc:21:b2:72:8c:6a: 08:3f:02:3e:81:d6:55:f0:54:65:8c:49:31:93:17:99:c7:3f: 35:89:d5:72:5f:32:00:b2:96:7c:90:a9:87:ce:5a:82:8d:2e: f4:7e:28:39:0b:14:1c:06:f9:69:a8:70:a1:9c:82:68:0e:c8: 20:ea:33:a4:7c:0d:06:34:71:f4:9f:c6:e8:1a:5a:a8:a1:9a: 51:98:5d:0b:98:8a:b6:d8:fe:c9:66:be:b8:04:21:41:93:0d: 9d:f0:c4:8d:8e:7c:7f:e7:ea:fd:8b:df:8a:76:34:43:d6:94: 9e:c8:7d:e3:48:20:a3:50:18:94:c7:fc:4a:d4:a5:e5:b1:61: a8:fc:e0:52:3a:33:b7:f4:38:a2:65:12:3f:f1:e8:ad:be:a2: 45:38:e5:76:fd:98:64:ff:bb:01:97:8f:f7:b8:27:9f:65:b7: de:be:b1:1b:97:2f:59:16:1d:12:3d:93:25:82:b9:f7:a2:df: e5:37:bc:56:60:31:84:e7:dd:c7:33:68:10:c9:8d:6f:f3:9e: 5b:01:d3:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtnnvbDD5Y9Yt06x7IDAmixMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjMTFkMDVjZDI5YWI3MTkyYWYwMzljZjVmM2QwMGJlOTIx NTc5MzkwHhcNMjUxMjI5MDEwMDI5WhcNMjUxMjMwMDEwMDI5WjAzMTEwLwYDVQQD Eyg1NGY2NWIzYzVmZjI5Y2YyZjMwYmM0MjE1ZDZmODA5NjY1NzU1M2Q0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0uphZR2036kWKgZsDKhX43ZnfpKf ppLjNXMwYclwZzr+1bd0hYcqXwkXEAZBpljP9TGP6XC1JcLDFsyCk6/4kH58a2za oVAM4l5379Hv5eAfuZygXkNLOy4qS6b7Ki13J+lO6oZ/9pCKyDTb1I9/FKV7Awzx 6uSvJhay3E6RsuwumLcJqeuiFsAlqePqhOZTzq2W7DOh4SbWMbPYRe++jMJGMZG1 WGFYYR+aZ6kWaJo9FowLs+NeTsXcuHcY0oAvx7rDf3Yowo+H3VNdAY+4cK+jUPmx 13cnE3qlW3aT4rSAmvRt4pz8dtZjanRL0hhbMkKZBquFz4kzWpQeh9D+/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFT2Wzxf8pzy8wvEIV1vgJZldVPUMB8GA1UdIwQY MBaAFDwR0FzSmrcZKvA5z189AL6SFXk5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEJIUVhOS2F0eGtxOERuUFh6MEF2cElWZVRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9jZGIxMDQtMDVkYi00Y2RiLWE0MmUt NzA4ZGMwOTdmZmZlLzEvUEJIUVhOS2F0eGtxOERuUFh6MEF2cElWZVRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9jZGIxMDQtMDVkYi00Y2RiLWE0MmUtNzA4ZGMwOTdmZmZl LzEvUEJIUVhOS2F0eGtxOERuUFh6MEF2cElWZVRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf1wNs6uR gjtFc/DxCJlIntwvXzzkrqRMsU4c4WGmHEN7IYG0yH56+bQw0jkKYd0KzCGycoxq CD8CPoHWVfBUZYxJMZMXmcc/NYnVcl8yALKWfJCph85ago0u9H4oOQsUHAb5aahw oZyCaA7IIOozpHwNBjRx9J/G6BpaqKGaUZhdC5iKttj+yWa+uAQhQZMNnfDEjY58 f+fq/YvfinY0Q9aUnsh940ggo1AYlMf8StSl5bFhqPzgUjozt/Q4omUSP/Horb6i RTjldv2YZP+7AZeP97gnn2W33r6xG5cvWRYdEj2TJYK596Lf5Te8VmAxhOfdxzNo EMmNb/OeWwHT+w== -----END CERTIFICATE-----Generated at Mon Dec 29 04:43:57 2025 by rpki-client