This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/21bdbb-856f-41dd-aad9-066ddf32bfcc/1/0PFLigjLX4BX1IsD5T9Fi44f7tY.mft File: 0PFLigjLX4BX1IsD5T9Fi44f7tY.mft (raw, json) Hash identifier: BARBkA367InAAzsfm6jvjZtjFvWXzL5J+ax8RogbXv0= Subject key identifier: 23:2E:05:8A:FD:C2:80:8A:25:B4:FB:4F:02:4E:94:EF:C5:28:30:24 Authority key identifier: D0:F1:4B:8A:08:CB:5F:80:57:D4:8B:03:E5:3F:45:8B:8E:1F:EE:D6 Certificate issuer: /CN=d0f14b8a08cb5f8057d48b03e53f458b8e1feed6 Certificate serial: 019B42B6C6669705C6A052DAAFF16AA06865 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0PFLigjLX4BX1IsD5T9Fi44f7tY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/21bdbb-856f-41dd-aad9-066ddf32bfcc/1/0PFLigjLX4BX1IsD5T9Fi44f7tY.mft Manifest number: 03D9 Signing time: Sun 21 Dec 2025 21:00:32 +0000 Manifest this update: Sun 21 Dec 2025 21:00:32 +0000 Manifest next update: Mon 22 Dec 2025 21:00:32 +0000 Files and hashes: 1: 0PFLigjLX4BX1IsD5T9Fi44f7tY.crl (hash: z3KJaFDDdPub0Sv7UEmW1sr0Vi8MnDpJbtSHZ4ITZBo=) 2: 5XHmlHMatoj7HuqzW-xKZFCBoCk.roa (hash: 2LwcEFXQBzd4wv+NbYjPLMlRT/J2wftX73OmJ3FhceM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/21bdbb-856f-41dd-aad9-066ddf32bfcc/1/0PFLigjLX4BX1IsD5T9Fi44f7tY.crl rsync://rpki.ripe.net/repository/DEFAULT/38/21bdbb-856f-41dd-aad9-066ddf32bfcc/1/0PFLigjLX4BX1IsD5T9Fi44f7tY.mft rsync://rpki.ripe.net/repository/DEFAULT/0PFLigjLX4BX1IsD5T9Fi44f7tY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 21:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:b6:c6:66:97:05:c6:a0:52:da:af:f1:6a:a0:68:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0f14b8a08cb5f8057d48b03e53f458b8e1feed6 Validity Not Before: Dec 21 21:00:32 2025 GMT Not After : Dec 22 21:00:32 2025 GMT Subject: CN=232e058afdc2808a25b4fb4f024e94efc5283024 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:80:3e:95:0c:e4:27:d7:f6:0c:3f:ff:a3:b9: 35:ea:c0:a5:14:eb:64:fd:73:1f:fd:07:ef:d4:4d: 5a:bc:33:5a:f3:80:cf:16:7c:96:b1:e4:49:fe:5a: 95:c4:b2:54:99:bd:72:ee:dc:15:2d:ce:60:9d:21: 8e:ae:be:be:c4:d7:18:35:72:10:9f:f9:51:47:ec: 83:99:4d:25:01:78:37:56:66:5f:f7:82:cf:20:a3: be:ee:f3:d2:9d:f8:ea:44:a9:34:cf:d0:5c:3b:f5: 05:f1:29:30:2a:5b:02:ae:b2:6f:e6:52:2b:7a:4d: 9d:f9:a6:2c:6a:98:02:c9:c6:4c:35:0b:09:d6:17: 9d:fb:08:01:c1:33:00:2a:4a:51:61:1c:12:98:bc: 5e:7e:ca:0c:83:4e:2f:1e:46:c1:9b:d1:de:23:60: e7:26:9c:97:24:65:42:68:cc:0b:80:95:cb:83:f3: 62:24:da:90:30:54:3e:52:43:37:ef:8c:31:fa:3f: 6a:91:1e:ba:79:7f:39:f4:56:66:fd:a3:80:76:bf: 63:7a:b5:96:77:ab:26:ff:2e:db:24:36:1b:59:27: ad:3f:41:eb:c7:47:f7:05:96:0c:00:1e:a5:04:39: aa:20:fd:e7:e2:da:46:5a:23:b5:dc:10:72:bc:09: 6e:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:2E:05:8A:FD:C2:80:8A:25:B4:FB:4F:02:4E:94:EF:C5:28:30:24 X509v3 Authority Key Identifier: keyid:D0:F1:4B:8A:08:CB:5F:80:57:D4:8B:03:E5:3F:45:8B:8E:1F:EE:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0PFLigjLX4BX1IsD5T9Fi44f7tY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/21bdbb-856f-41dd-aad9-066ddf32bfcc/1/0PFLigjLX4BX1IsD5T9Fi44f7tY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/21bdbb-856f-41dd-aad9-066ddf32bfcc/1/0PFLigjLX4BX1IsD5T9Fi44f7tY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:c5:2d:56:d0:c0:fe:5f:19:b9:4b:79:e9:87:52:60:39:5b: 34:22:6d:a7:f8:5c:ef:a2:58:cf:8b:9b:37:24:74:4a:35:f4: da:0a:ed:51:39:3b:ea:43:c3:fb:3d:2d:d8:18:e6:3d:d7:87: dc:2e:43:f8:8c:86:11:25:07:09:92:7f:73:4a:86:31:6f:2f: 25:da:ef:8e:2a:3d:f4:90:b5:28:18:21:36:1e:4b:ad:77:dc: a6:9e:92:23:52:4f:36:1d:36:25:d4:74:22:83:10:6b:ad:ec: 52:9f:be:f3:59:89:f0:27:44:24:ee:f0:35:0a:4f:bb:6b:50: 9e:20:54:ad:af:f7:ab:15:09:97:07:17:c6:5b:73:91:95:2e: 61:e0:3d:7a:11:4b:cb:b8:6f:f1:5c:eb:b2:bc:fe:59:b3:ac: 5d:5e:04:af:6b:c2:6c:4a:3d:cb:b9:47:bd:d2:09:22:03:4f: 0b:6a:2c:96:8e:48:56:9e:2a:e2:50:f7:e6:4a:14:9c:47:23: 30:7c:43:65:fd:18:ca:85:1b:38:f4:b7:b9:b5:cc:28:69:1b: fc:a3:23:86:bd:80:15:e3:cd:0c:f2:30:7e:93:a8:de:ee:b9: 6a:0c:de:d1:45:ec:e4:a0:5c:f3:80:2f:19:eb:2e:65:04:a1: 1d:16:24:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCtsZmlwXGoFLar/FqoGhlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwZjE0YjhhMDhjYjVmODA1N2Q0OGIwM2U1M2Y0NThiOGUx ZmVlZDYwHhcNMjUxMjIxMjEwMDMyWhcNMjUxMjIyMjEwMDMyWjAzMTEwLwYDVQQD EygyMzJlMDU4YWZkYzI4MDhhMjViNGZiNGYwMjRlOTRlZmM1MjgzMDI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5oA+lQzkJ9f2DD//o7k16sClFOtk /XMf/Qfv1E1avDNa84DPFnyWseRJ/lqVxLJUmb1y7twVLc5gnSGOrr6+xNcYNXIQ n/lRR+yDmU0lAXg3VmZf94LPIKO+7vPSnfjqRKk0z9BcO/UF8SkwKlsCrrJv5lIr ek2d+aYsapgCycZMNQsJ1hed+wgBwTMAKkpRYRwSmLxefsoMg04vHkbBm9HeI2Dn JpyXJGVCaMwLgJXLg/NiJNqQMFQ+UkM374wx+j9qkR66eX859FZm/aOAdr9jerWW d6sm/y7bJDYbWSetP0Hrx0f3BZYMAB6lBDmqIP3n4tpGWiO13BByvAluzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCMuBYr9woCKJbT7TwJOlO/FKDAkMB8GA1UdIwQY MBaAFNDxS4oIy1+AV9SLA+U/RYuOH+7WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFBGTGlnakxYNEJYMUlzRDVUOUZpNDRmN3RZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8yMWJkYmItODU2Zi00MWRkLWFhZDkt MDY2ZGRmMzJiZmNjLzEvMFBGTGlnakxYNEJYMUlzRDVUOUZpNDRmN3RZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8yMWJkYmItODU2Zi00MWRkLWFhZDktMDY2ZGRmMzJiZmNj LzEvMFBGTGlnakxYNEJYMUlzRDVUOUZpNDRmN3RZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbsUtVtDA /l8ZuUt56YdSYDlbNCJtp/hc76JYz4ubNyR0SjX02grtUTk76kPD+z0t2BjmPdeH 3C5D+IyGESUHCZJ/c0qGMW8vJdrvjio99JC1KBghNh5LrXfcpp6SI1JPNh02JdR0 IoMQa63sUp++81mJ8CdEJO7wNQpPu2tQniBUra/3qxUJlwcXxltzkZUuYeA9ehFL y7hv8Vzrsrz+WbOsXV4Er2vCbEo9y7lHvdIJIgNPC2oslo5IVp4q4lD35koUnEcj MHxDZf0YyoUbOPS3ubXMKGkb/KMjhr2AFePNDPIwfpOo3u65agze0UXs5KBc84Av GesuZQShHRYkPw== -----END CERTIFICATE-----Generated at Mon Dec 22 04:39:46 2025 by rpki-client