This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.mft File: pbnffpj285_iukAi2id9KBmCgCE.mft (raw, json) Hash identifier: T0v3TzfLlp9/sCKo5miIScJQ/stEn7mckSNAjkG5iHY= Subject key identifier: 14:9A:34:79:63:D3:E7:36:9D:E8:60:BA:E9:5F:E9:9E:D6:78:0E:89 Authority key identifier: A5:B9:DF:7E:98:F6:F3:9F:E2:BA:40:22:DA:27:7D:28:19:82:80:21 Certificate issuer: /CN=a5b9df7e98f6f39fe2ba4022da277d2819828021 Certificate serial: 019B48147C1B9E739908B0E078ACD67758AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pbnffpj285_iukAi2id9KBmCgCE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.mft Manifest number: 0F4C Signing time: Mon 22 Dec 2025 22:01:00 +0000 Manifest this update: Mon 22 Dec 2025 22:01:00 +0000 Manifest next update: Tue 23 Dec 2025 22:01:00 +0000 Files and hashes: 1: 1h7x7glo7raaLY2_2McusPDR_aM.roa (hash: HMpq5ZxT3KuTaqPuHxdfR/p2+y/DB0HiuZsEYPl7Agw=) 2: OGo9fBtswLdwnS7x4PLyvgfblhc.roa (hash: YfRWTX+R7heO/+Oj3o5jtwp1kOciqeFbXjDX1mTE1h8=) 3: ouICw0nyK_0-5jscxv12aq634vw.roa (hash: ZpjXF6V0UreF7p2IPTzGzZ30r7TGS05jqHG074BeOko=) 4: pbnffpj285_iukAi2id9KBmCgCE.crl (hash: J9OEq0gzrj11i8DTLcLfnEr1/1Pj4seUisktSa8JbKE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.mft rsync://rpki.ripe.net/repository/DEFAULT/pbnffpj285_iukAi2id9KBmCgCE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:14:7c:1b:9e:73:99:08:b0:e0:78:ac:d6:77:58:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5b9df7e98f6f39fe2ba4022da277d2819828021 Validity Not Before: Dec 22 22:01:00 2025 GMT Not After : Dec 23 22:01:00 2025 GMT Subject: CN=149a347963d3e7369de860bae95fe99ed6780e89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:70:14:da:0d:d3:09:b8:88:75:39:76:50:ed: 83:b3:2a:17:fc:9e:9b:eb:27:3c:04:31:7c:91:9d: 89:35:a0:17:84:78:91:60:da:16:d2:86:5b:2e:07: d7:e6:76:4b:d1:c6:2b:27:78:25:8f:fc:f5:ed:9e: b4:dc:c2:0c:37:a5:16:40:99:3e:19:3a:bb:43:8d: 6f:cb:79:10:80:72:72:cd:36:19:55:cd:56:b0:df: 49:a5:7f:93:88:79:b9:23:f3:74:d5:6d:93:f7:28: c5:80:7b:89:86:ce:35:b7:ba:55:eb:39:2b:47:9c: f7:38:09:cc:d9:cc:62:b5:9a:7b:3e:8e:14:42:c2: be:2a:7d:ac:8a:88:d9:a9:71:94:70:d8:9b:09:44: 77:23:0d:06:33:17:6f:70:b2:73:4b:9a:c2:e7:0c: ed:96:0c:77:0d:54:48:6d:46:f3:8e:de:a8:2c:0b: 96:76:5b:b8:dc:fd:f9:10:4d:ca:f8:74:4b:1a:d8: 9a:e9:48:4f:3a:61:dc:75:6b:08:22:6a:ba:6a:fe: 45:a5:8c:d5:ad:15:cb:1d:ab:47:61:d9:e5:10:04: 97:40:ba:9a:0e:c6:1b:35:12:55:f4:be:80:de:c8: 00:c4:f6:ee:2f:c5:f3:bc:ff:af:95:df:ae:9b:d5: 89:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:9A:34:79:63:D3:E7:36:9D:E8:60:BA:E9:5F:E9:9E:D6:78:0E:89 X509v3 Authority Key Identifier: keyid:A5:B9:DF:7E:98:F6:F3:9F:E2:BA:40:22:DA:27:7D:28:19:82:80:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbnffpj285_iukAi2id9KBmCgCE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:4c:f3:14:b3:86:e3:50:cf:d9:7d:20:2c:70:97:50:6a:7a: f7:f9:0f:c3:3c:58:ae:77:7e:d7:e5:91:0d:62:7e:72:1f:15: 95:a2:35:16:f4:65:34:a5:b7:44:48:99:70:ee:7a:31:54:a9: f5:61:7a:40:8d:04:59:8b:d2:99:1c:d3:71:b4:ce:e0:13:d9: 6e:97:8b:d2:7d:27:26:31:90:7d:93:1d:f2:b1:66:24:34:81: d9:06:1b:99:09:a8:46:e2:32:55:21:d7:48:6e:6d:1c:87:48: a3:49:2b:8b:31:59:62:a8:e4:9a:03:99:0a:b9:2b:34:84:1a: db:47:ae:18:3e:37:46:0b:11:07:b7:0a:97:78:3d:75:62:23: 64:d3:7b:09:69:d6:c8:9f:c4:f7:c0:63:e2:57:1e:ca:b1:be: 50:4a:e6:1b:05:95:43:00:ca:02:11:9d:87:61:84:62:dd:f0: c5:4b:af:86:0f:d4:f3:4e:86:43:41:5f:f4:46:7a:a0:0c:7d: f0:ae:c1:39:ee:9c:36:05:d7:11:19:22:17:fc:f0:32:e1:df: b7:23:6a:6a:41:ce:86:8d:65:31:54:36:16:d6:31:c9:c9:70: 95:06:e8:a0:1b:08:02:d3:8a:c8:d4:de:05:10:1a:08:a5:ab: f6:42:1a:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIFHwbnnOZCLDgeKzWd1iqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1YjlkZjdlOThmNmYzOWZlMmJhNDAyMmRhMjc3ZDI4MTk4 MjgwMjEwHhcNMjUxMjIyMjIwMTAwWhcNMjUxMjIzMjIwMTAwWjAzMTEwLwYDVQQD EygxNDlhMzQ3OTYzZDNlNzM2OWRlODYwYmFlOTVmZTk5ZWQ2NzgwZTg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnAU2g3TCbiIdTl2UO2DsyoX/J6b 6yc8BDF8kZ2JNaAXhHiRYNoW0oZbLgfX5nZL0cYrJ3glj/z17Z603MIMN6UWQJk+ GTq7Q41vy3kQgHJyzTYZVc1WsN9JpX+TiHm5I/N01W2T9yjFgHuJhs41t7pV6zkr R5z3OAnM2cxitZp7Po4UQsK+Kn2siojZqXGUcNibCUR3Iw0GMxdvcLJzS5rC5wzt lgx3DVRIbUbzjt6oLAuWdlu43P35EE3K+HRLGtia6UhPOmHcdWsIImq6av5FpYzV rRXLHatHYdnlEASXQLqaDsYbNRJV9L6A3sgAxPbuL8XzvP+vld+um9WJuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBSaNHlj0+c2nehguulf6Z7WeA6JMB8GA1UdIwQY MBaAFKW5336Y9vOf4rpAItonfSgZgoAhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGJuZmZwajI4NV9pdWtBaTJpZDlLQm1DZ0NFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC85NzMwNDctODkxNC00MWM2LWExZTAt MGFjN2I3ZWRlNDJiLzEvcGJuZmZwajI4NV9pdWtBaTJpZDlLQm1DZ0NFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC85NzMwNDctODkxNC00MWM2LWExZTAtMGFjN2I3ZWRlNDJi LzEvcGJuZmZwajI4NV9pdWtBaTJpZDlLQm1DZ0NFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdUzzFLOG 41DP2X0gLHCXUGp69/kPwzxYrnd+1+WRDWJ+ch8VlaI1FvRlNKW3REiZcO56MVSp 9WF6QI0EWYvSmRzTcbTO4BPZbpeL0n0nJjGQfZMd8rFmJDSB2QYbmQmoRuIyVSHX SG5tHIdIo0krizFZYqjkmgOZCrkrNIQa20euGD43RgsRB7cKl3g9dWIjZNN7CWnW yJ/E98Bj4lceyrG+UErmGwWVQwDKAhGdh2GEYt3wxUuvhg/U806GQ0Ff9EZ6oAx9 8K7BOe6cNgXXERkiF/zwMuHftyNqakHOho1lMVQ2FtYxyclwlQbooBsIAtOKyNTe BRAaCKWr9kIajg== -----END CERTIFICATE-----Generated at Tue Dec 23 00:05:23 2025 by rpki-client