This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/2d43c2-3b2e-4f2e-a6ad-a0a72a733c02/1/Pbiird2wAoUIVJlqlLcrh_Snsw8.mft File: Pbiird2wAoUIVJlqlLcrh_Snsw8.mft (raw, json) Hash identifier: M2kZm3Mx3vMJ+0bo68k3KLM/hD76P0v7Kqe8ShMVySk= Subject key identifier: C6:16:9C:64:3A:D6:B0:5F:B5:66:45:C0:44:7F:DA:C0:97:F6:B4:9E Authority key identifier: 3D:B8:A2:AD:DD:B0:02:85:08:54:99:6A:94:B7:2B:87:F4:A7:B3:0F Certificate issuer: /CN=3db8a2adddb002850854996a94b72b87f4a7b30f Certificate serial: 019B390F51A6E925C6755AD345540751587A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pbiird2wAoUIVJlqlLcrh_Snsw8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/2d43c2-3b2e-4f2e-a6ad-a0a72a733c02/1/Pbiird2wAoUIVJlqlLcrh_Snsw8.mft Manifest number: 1033 Signing time: Sat 20 Dec 2025 00:01:03 +0000 Manifest this update: Sat 20 Dec 2025 00:01:03 +0000 Manifest next update: Sun 21 Dec 2025 00:01:03 +0000 Files and hashes: 1: Pbiird2wAoUIVJlqlLcrh_Snsw8.crl (hash: IuVpIM65vJU1rXxiaAUMWTRlMKywDSVY16JXEigfkj8=) 2: gt9goB76oJJ9IidA_tfxI6lWDIw.roa (hash: q0BFU46k9v4mjBVsSe1ZjIuLriX+JzS+b+gMagD0YfA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/2d43c2-3b2e-4f2e-a6ad-a0a72a733c02/1/Pbiird2wAoUIVJlqlLcrh_Snsw8.crl rsync://rpki.ripe.net/repository/DEFAULT/df/2d43c2-3b2e-4f2e-a6ad-a0a72a733c02/1/Pbiird2wAoUIVJlqlLcrh_Snsw8.mft rsync://rpki.ripe.net/repository/DEFAULT/Pbiird2wAoUIVJlqlLcrh_Snsw8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 00:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:0f:51:a6:e9:25:c6:75:5a:d3:45:54:07:51:58:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3db8a2adddb002850854996a94b72b87f4a7b30f Validity Not Before: Dec 20 00:01:03 2025 GMT Not After : Dec 21 00:01:03 2025 GMT Subject: CN=c6169c643ad6b05fb56645c0447fdac097f6b49e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d3:49:7f:b0:04:2b:d4:fb:a7:77:a0:ed:6b: 22:55:6d:e6:41:7f:b4:82:3d:55:d0:78:0b:4a:30: bc:a7:fd:55:c1:87:b7:06:1e:be:71:1a:d8:11:30: cc:e4:34:2b:1d:5d:d5:aa:d8:4e:56:82:34:fb:ae: ea:35:ec:3f:d7:30:53:01:22:6f:df:da:2f:53:58: c0:f8:d4:2e:cd:08:0b:41:a8:a0:5b:1b:65:db:27: e9:3d:fe:a7:b4:c4:c3:ea:61:bd:3d:f1:21:53:3a: be:b0:00:f8:7a:ef:19:cb:ab:57:5a:b0:9d:b4:af: c1:92:ed:b7:36:7d:37:ab:e8:28:b9:cd:e6:8e:80: 7d:7c:ff:b5:e3:2e:f4:9c:f5:8f:32:f5:c3:15:8e: fb:ee:c5:00:67:1f:67:dc:0a:26:fd:02:fe:ba:5c: 24:48:5e:76:48:6c:ee:09:5d:85:d1:28:76:24:89: 5b:4c:16:a1:90:a2:80:e7:57:55:97:4b:37:68:1b: b3:77:43:7c:d2:d6:7e:40:32:dd:5f:4d:ad:eb:61: eb:8b:38:1e:ed:79:ed:d3:d0:ff:3c:fe:cb:ab:78: 15:61:e6:8f:3f:6a:b1:c9:4f:bd:76:e0:33:fb:5f: c6:af:33:64:4a:f4:55:ac:02:d7:aa:0d:18:14:75: 4d:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:16:9C:64:3A:D6:B0:5F:B5:66:45:C0:44:7F:DA:C0:97:F6:B4:9E X509v3 Authority Key Identifier: keyid:3D:B8:A2:AD:DD:B0:02:85:08:54:99:6A:94:B7:2B:87:F4:A7:B3:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pbiird2wAoUIVJlqlLcrh_Snsw8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2d43c2-3b2e-4f2e-a6ad-a0a72a733c02/1/Pbiird2wAoUIVJlqlLcrh_Snsw8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2d43c2-3b2e-4f2e-a6ad-a0a72a733c02/1/Pbiird2wAoUIVJlqlLcrh_Snsw8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:73:1a:65:b9:95:d4:ea:80:7e:05:64:a7:57:13:cb:fb:75: 5f:b3:d2:0b:11:d8:b3:16:c5:df:06:51:af:5f:29:72:79:9b: 74:a4:18:25:0d:bb:76:e4:47:e6:1f:8f:ac:9a:3c:7b:0c:b1: 58:e0:5b:7f:de:bc:48:fa:b3:41:7e:27:a2:2e:09:b7:d8:9c: 52:f8:cb:52:65:d4:25:58:9a:91:10:9b:dc:1f:e3:b9:66:64: 27:72:5f:8f:90:02:a1:8d:aa:36:ed:c1:e2:7f:ff:ad:69:f5: 10:7d:04:30:c8:4b:51:4e:51:ed:2a:e7:36:2d:25:54:fd:3d: 70:5e:09:15:06:0d:8c:2b:57:f4:3f:ac:7a:eb:69:e2:cf:ca: b9:de:f2:a9:43:48:b4:a3:d0:8d:55:97:ed:c5:8f:32:74:d5: 69:a1:a7:65:87:45:65:a2:67:d8:18:b7:40:e4:44:9f:41:29: fe:7e:76:cb:60:4b:21:d5:2d:e8:35:4c:16:61:19:92:e5:81: 4e:a4:5a:82:23:a1:12:12:ef:cc:08:64:ea:04:1b:3e:44:bd: 7a:b1:46:d0:44:d2:6a:32:b7:89:8f:ad:9b:71:31:a8:cf:56: b2:01:52:93:8a:2c:57:09:2f:8b:53:87:17:33:c5:85:cc:a3: 2b:a4:06:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5D1Gm6SXGdVrTRVQHUVh6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkYjhhMmFkZGRiMDAyODUwODU0OTk2YTk0YjcyYjg3ZjRh N2IzMGYwHhcNMjUxMjIwMDAwMTAzWhcNMjUxMjIxMDAwMTAzWjAzMTEwLwYDVQQD EyhjNjE2OWM2NDNhZDZiMDVmYjU2NjQ1YzA0NDdmZGFjMDk3ZjZiNDllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9NJf7AEK9T7p3eg7WsiVW3mQX+0 gj1V0HgLSjC8p/1VwYe3Bh6+cRrYETDM5DQrHV3VqthOVoI0+67qNew/1zBTASJv 39ovU1jA+NQuzQgLQaigWxtl2yfpPf6ntMTD6mG9PfEhUzq+sAD4eu8Zy6tXWrCd tK/Bku23Nn03q+gouc3mjoB9fP+14y70nPWPMvXDFY777sUAZx9n3Aom/QL+ulwk SF52SGzuCV2F0Sh2JIlbTBahkKKA51dVl0s3aBuzd0N80tZ+QDLdX02t62Hrizge 7Xnt09D/PP7Lq3gVYeaPP2qxyU+9duAz+1/GrzNkSvRVrALXqg0YFHVNTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMYWnGQ61rBftWZFwER/2sCX9rSeMB8GA1UdIwQY MBaAFD24oq3dsAKFCFSZapS3K4f0p7MPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGJpaXJkMndBb1VJVkpscWxMY3JoX1Nuc3c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8yZDQzYzItM2IyZS00ZjJlLWE2YWQt YTBhNzJhNzMzYzAyLzEvUGJpaXJkMndBb1VJVkpscWxMY3JoX1Nuc3c4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi8yZDQzYzItM2IyZS00ZjJlLWE2YWQtYTBhNzJhNzMzYzAy LzEvUGJpaXJkMndBb1VJVkpscWxMY3JoX1Nuc3c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI3MaZbmV 1OqAfgVkp1cTy/t1X7PSCxHYsxbF3wZRr18pcnmbdKQYJQ27duRH5h+PrJo8ewyx WOBbf968SPqzQX4noi4Jt9icUvjLUmXUJViakRCb3B/juWZkJ3Jfj5ACoY2qNu3B 4n//rWn1EH0EMMhLUU5R7SrnNi0lVP09cF4JFQYNjCtX9D+seutp4s/Kud7yqUNI tKPQjVWX7cWPMnTVaaGnZYdFZaJn2Bi3QOREn0Ep/n52y2BLIdUt6DVMFmEZkuWB TqRagiOhEhLvzAhk6gQbPkS9erFG0ETSajK3iY+tm3ExqM9WsgFSk4osVwkvi1OH FzPFhcyjK6QGrw== -----END CERTIFICATE-----Generated at Sat Dec 20 06:54:09 2025 by rpki-client