This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/21bdbb-856f-41dd-aad9-066ddf32bfcc/1/0PFLigjLX4BX1IsD5T9Fi44f7tY.mft File: 0PFLigjLX4BX1IsD5T9Fi44f7tY.mft (raw, json) Hash identifier: EtOVhQyZBQMQcV8W3Vy7eiJuOI9s2UMhZKivmfvblEc= Subject key identifier: 35:D4:92:43:C6:E7:96:70:61:40:86:8F:36:EC:A2:1D:47:2B:C9:53 Authority key identifier: D0:F1:4B:8A:08:CB:5F:80:57:D4:8B:03:E5:3F:45:8B:8E:1F:EE:D6 Certificate issuer: /CN=d0f14b8a08cb5f8057d48b03e53f458b8e1feed6 Certificate serial: 019B6768189EB38B609F6FA525169644EDCE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0PFLigjLX4BX1IsD5T9Fi44f7tY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/21bdbb-856f-41dd-aad9-066ddf32bfcc/1/0PFLigjLX4BX1IsD5T9Fi44f7tY.mft Manifest number: 03EC Signing time: Mon 29 Dec 2025 00:00:33 +0000 Manifest this update: Mon 29 Dec 2025 00:00:33 +0000 Manifest next update: Tue 30 Dec 2025 00:00:33 +0000 Files and hashes: 1: 0PFLigjLX4BX1IsD5T9Fi44f7tY.crl (hash: wIlIVO9gdBd5zdYwx5qalM5XzmqwMlV79gi89F9XkCg=) 2: 5XHmlHMatoj7HuqzW-xKZFCBoCk.roa (hash: 2LwcEFXQBzd4wv+NbYjPLMlRT/J2wftX73OmJ3FhceM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/21bdbb-856f-41dd-aad9-066ddf32bfcc/1/0PFLigjLX4BX1IsD5T9Fi44f7tY.crl rsync://rpki.ripe.net/repository/DEFAULT/38/21bdbb-856f-41dd-aad9-066ddf32bfcc/1/0PFLigjLX4BX1IsD5T9Fi44f7tY.mft rsync://rpki.ripe.net/repository/DEFAULT/0PFLigjLX4BX1IsD5T9Fi44f7tY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 20:59:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:67:68:18:9e:b3:8b:60:9f:6f:a5:25:16:96:44:ed:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0f14b8a08cb5f8057d48b03e53f458b8e1feed6 Validity Not Before: Dec 29 00:00:33 2025 GMT Not After : Dec 30 00:00:33 2025 GMT Subject: CN=35d49243c6e796706140868f36eca21d472bc953 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:61:12:fa:ca:1c:71:34:79:b8:20:05:b9:9b: b0:ac:d0:0f:3a:cd:db:55:bc:22:22:d3:a0:94:a4: ea:6d:8a:c2:fb:1c:11:5f:68:82:81:5b:f2:b5:06: 07:f9:bb:fa:73:8e:e2:d3:d8:90:d3:3b:b3:94:11: 32:54:e2:c6:ec:c3:2a:5a:50:bb:df:ad:99:e3:d7: 2b:4c:62:bf:6f:a2:c6:5c:cd:e6:19:12:bc:5a:5d: 6b:cf:c7:a3:7f:87:ac:2c:e0:52:f9:f1:b5:ba:17: ed:b2:ed:6d:ee:bb:79:63:0d:14:06:e4:88:e7:6e: 78:1d:c2:cb:88:ee:78:6f:ec:b6:6f:51:39:ef:4c: b3:d0:a2:cb:1d:29:2c:0c:1a:1b:22:7f:50:7b:bc: 5f:2a:77:06:92:1f:92:ac:4e:a9:c5:c0:ba:26:2b: c3:b3:21:3e:b9:dc:4a:e8:ef:fa:9a:70:c0:9f:07: 1d:d2:c8:e1:66:31:0c:7c:e4:ee:42:f0:70:e4:ab: eb:2f:86:8b:7b:be:b9:5e:13:97:05:53:15:4f:7d: f4:84:e8:b6:49:d1:03:60:9c:60:e2:5a:98:ad:49: 28:1a:4b:0a:7e:94:7c:9e:2c:64:43:2c:c1:cb:17: 25:ce:5b:8a:07:88:2a:41:f8:2c:d6:b3:74:df:3a: 27:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:D4:92:43:C6:E7:96:70:61:40:86:8F:36:EC:A2:1D:47:2B:C9:53 X509v3 Authority Key Identifier: keyid:D0:F1:4B:8A:08:CB:5F:80:57:D4:8B:03:E5:3F:45:8B:8E:1F:EE:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0PFLigjLX4BX1IsD5T9Fi44f7tY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/21bdbb-856f-41dd-aad9-066ddf32bfcc/1/0PFLigjLX4BX1IsD5T9Fi44f7tY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/21bdbb-856f-41dd-aad9-066ddf32bfcc/1/0PFLigjLX4BX1IsD5T9Fi44f7tY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:36:f4:73:36:25:c0:31:41:c3:86:70:a8:a0:ce:d9:2e:39: bc:9b:03:ae:22:6f:30:da:7e:9b:5f:bf:58:a3:af:7a:43:76: f2:89:4f:59:d8:1e:2e:67:94:97:f1:de:82:c4:40:e9:7d:e0: a2:0f:6e:bb:24:36:4c:80:0e:3a:c3:1a:45:11:11:06:10:f8: 48:dd:77:93:f9:cd:5d:8f:1b:94:e1:1c:df:fb:6e:e5:d9:af: 60:2a:37:15:60:f0:b8:27:bc:77:b8:99:e3:47:15:ba:b5:70: e1:bf:af:c3:a3:63:42:db:80:e7:a0:7a:4b:f2:55:53:5c:65: f4:76:dd:ba:3d:2a:d8:10:f0:42:aa:37:e9:3e:c5:85:a3:c3: ec:44:6c:62:16:da:d3:e8:25:e3:fc:68:d7:e5:04:66:a9:9e: 0c:96:3d:f8:6b:40:d8:9c:48:a8:11:fe:19:ba:b0:b9:41:bc: 04:16:46:46:8c:d8:ec:1e:9b:e9:53:a9:56:54:f9:49:d5:4d: 66:4d:d8:bc:1f:ad:bd:ab:9f:a6:04:94:5f:4f:36:60:14:81: d0:e7:d7:f2:20:9e:8f:65:82:47:09:16:0b:4b:1f:34:b8:96: 01:11:4c:41:a8:64:28:2b:8c:8f:4a:1d:25:a0:1c:ba:f2:da: 9c:d3:3a:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtnaBies4tgn2+lJRaWRO3OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwZjE0YjhhMDhjYjVmODA1N2Q0OGIwM2U1M2Y0NThiOGUx ZmVlZDYwHhcNMjUxMjI5MDAwMDMzWhcNMjUxMjMwMDAwMDMzWjAzMTEwLwYDVQQD EygzNWQ0OTI0M2M2ZTc5NjcwNjE0MDg2OGYzNmVjYTIxZDQ3MmJjOTUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWES+soccTR5uCAFuZuwrNAPOs3b VbwiItOglKTqbYrC+xwRX2iCgVvytQYH+bv6c47i09iQ0zuzlBEyVOLG7MMqWlC7 362Z49crTGK/b6LGXM3mGRK8Wl1rz8ejf4esLOBS+fG1uhftsu1t7rt5Yw0UBuSI 5254HcLLiO54b+y2b1E570yz0KLLHSksDBobIn9Qe7xfKncGkh+SrE6pxcC6JivD syE+udxK6O/6mnDAnwcd0sjhZjEMfOTuQvBw5KvrL4aLe765XhOXBVMVT330hOi2 SdEDYJxg4lqYrUkoGksKfpR8nixkQyzByxclzluKB4gqQfgs1rN03zon2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDXUkkPG55ZwYUCGjzbsoh1HK8lTMB8GA1UdIwQY MBaAFNDxS4oIy1+AV9SLA+U/RYuOH+7WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFBGTGlnakxYNEJYMUlzRDVUOUZpNDRmN3RZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8yMWJkYmItODU2Zi00MWRkLWFhZDkt MDY2ZGRmMzJiZmNjLzEvMFBGTGlnakxYNEJYMUlzRDVUOUZpNDRmN3RZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8yMWJkYmItODU2Zi00MWRkLWFhZDktMDY2ZGRmMzJiZmNj LzEvMFBGTGlnakxYNEJYMUlzRDVUOUZpNDRmN3RZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZjb0czYl wDFBw4ZwqKDO2S45vJsDriJvMNp+m1+/WKOvekN28olPWdgeLmeUl/HegsRA6X3g og9uuyQ2TIAOOsMaRRERBhD4SN13k/nNXY8blOEc3/tu5dmvYCo3FWDwuCe8d7iZ 40cVurVw4b+vw6NjQtuA56B6S/JVU1xl9Hbduj0q2BDwQqo36T7FhaPD7ERsYhba 0+gl4/xo1+UEZqmeDJY9+GtA2JxIqBH+GbqwuUG8BBZGRozY7B6b6VOpVlT5SdVN Zk3YvB+tvaufpgSUX082YBSB0OfX8iCej2WCRwkWC0sfNLiWARFMQahkKCuMj0od JaAcuvLanNM6rA== -----END CERTIFICATE-----Generated at Mon Dec 29 05:26:32 2025 by rpki-client