This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft File: PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft (raw, json) Hash identifier: yB638KcI41JClnw8r6gT1U3jMmrl2Z9TlqF1gh52hqc= Subject key identifier: D5:16:7D:02:87:A7:1A:B4:7E:E3:58:10:A2:CB:E2:6D:23:E7:A4:DF Authority key identifier: 3C:52:F8:C1:7D:F4:6F:86:33:60:E0:32:FA:9D:31:68:9E:4A:F6:F1 Certificate issuer: /CN=3c52f8c17df46f863360e032fa9d31689e4af6f1 Certificate serial: 019B717E68C5DD15043D79100812FE74D650 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PFL4wX30b4YzYOAy-p0xaJ5K9vE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft Manifest number: 1379 Signing time: Tue 30 Dec 2025 23:01:08 +0000 Manifest this update: Tue 30 Dec 2025 23:01:08 +0000 Manifest next update: Wed 31 Dec 2025 23:01:08 +0000 Files and hashes: 1: PFL4wX30b4YzYOAy-p0xaJ5K9vE.crl (hash: oly2QE4eyagPMBoqCLfhjhHiwmMJLMwnm4GHK3JrwTs=) 2: W_v27Hupk3RRQBILYKusMtNhoAc.roa (hash: yWY4EAVlw3dwpD2kqQElXOLSvOEEYUa61TWmAID32CM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft rsync://rpki.ripe.net/repository/DEFAULT/PFL4wX30b4YzYOAy-p0xaJ5K9vE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 23:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:71:7e:68:c5:dd:15:04:3d:79:10:08:12:fe:74:d6:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c52f8c17df46f863360e032fa9d31689e4af6f1 Validity Not Before: Dec 30 23:01:08 2025 GMT Not After : Dec 31 23:01:08 2025 GMT Subject: CN=d5167d0287a71ab47ee35810a2cbe26d23e7a4df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:1a:f5:16:a3:d0:20:e9:ee:bc:39:d8:54:d8: 7b:cd:dd:2b:a7:b4:da:bd:24:a9:75:50:64:34:56: af:df:09:ca:a4:0f:0e:15:2c:51:52:dc:fd:9c:aa: 86:7c:e3:19:0e:62:bb:ec:3c:15:12:1b:f1:58:ef: d4:0e:3e:dd:35:67:62:e7:cf:c0:ce:ea:a2:39:5e: 12:05:78:90:ca:f8:71:07:cf:53:6a:d7:3b:25:91: bf:45:b9:58:1c:52:96:a0:b6:e1:2e:d3:88:a9:c3: 95:8b:8b:31:28:36:0f:3e:46:e1:f7:08:07:63:87: b6:a7:43:6e:37:3d:7e:5c:e5:ba:d3:22:a5:24:80: 2f:5f:9b:b8:92:0a:52:2e:86:43:d6:78:2d:93:f5: 8f:90:cf:65:28:d1:15:b6:4e:2d:f3:f1:bd:52:1d: 42:53:37:f5:b9:86:ea:23:78:53:5d:9a:2b:82:7a: e2:d2:71:15:77:51:b7:3e:c2:00:f1:08:a4:55:96: 66:3b:17:eb:a0:f5:a8:38:ea:b3:0b:fd:f7:c2:03: 5e:e0:ea:f2:76:91:4a:4d:39:0f:78:b8:a9:ed:f5: 39:03:82:1e:2e:eb:55:fd:a4:86:d7:59:45:22:d9: ba:e5:83:2a:a0:d7:cf:5f:8c:38:5c:4b:f0:13:37: 03:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:16:7D:02:87:A7:1A:B4:7E:E3:58:10:A2:CB:E2:6D:23:E7:A4:DF X509v3 Authority Key Identifier: keyid:3C:52:F8:C1:7D:F4:6F:86:33:60:E0:32:FA:9D:31:68:9E:4A:F6:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PFL4wX30b4YzYOAy-p0xaJ5K9vE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e4:86:4b:ec:db:ba:27:65:6e:43:5c:17:3a:ed:a2:c3:49:47: a3:e9:fe:4c:8f:e7:16:c7:2c:cd:83:22:19:5c:ce:ef:46:af: 89:a1:fe:94:8d:20:43:5d:2d:05:41:62:80:63:63:54:d1:b7: bb:1f:4a:c6:9b:eb:69:96:b2:63:c3:e0:1d:d1:54:8f:b7:af: 38:16:a3:9d:b2:97:65:35:cc:50:9d:29:84:bd:3a:60:2e:e2: ed:f8:37:29:62:55:a0:83:01:27:e5:a8:dc:43:8d:d8:d2:34: 3a:7a:c4:92:5e:51:04:c8:3c:e9:66:db:da:73:a9:9f:60:fe: 03:c8:20:c4:a4:60:c2:8a:6a:9d:39:af:c7:fa:fa:aa:69:51: 13:a9:7e:43:90:30:93:8d:e4:bc:41:96:86:1e:17:53:f7:14: e4:f1:7c:3f:ca:b1:53:d8:ae:4f:f1:c3:3c:f9:14:1b:14:7f: ac:fe:f0:ba:02:29:08:d6:e6:dd:23:98:3d:2f:66:97:c6:1c: 51:79:56:fe:b3:f2:92:3f:af:e5:d4:de:37:50:8e:6c:e7:d5: bf:2f:e0:ea:ff:b7:75:d7:53:0c:36:1a:1d:e9:ec:a2:2d:8c: ca:45:55:65:7e:fd:62:97:71:22:1d:85:a1:38:7a:a5:40:4f: 5f:30:f0:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtxfmjF3RUEPXkQCBL+dNZQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjNTJmOGMxN2RmNDZmODYzMzYwZTAzMmZhOWQzMTY4OWU0 YWY2ZjEwHhcNMjUxMjMwMjMwMTA4WhcNMjUxMjMxMjMwMTA4WjAzMTEwLwYDVQQD EyhkNTE2N2QwMjg3YTcxYWI0N2VlMzU4MTBhMmNiZTI2ZDIzZTdhNGRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxr1FqPQIOnuvDnYVNh7zd0rp7Ta vSSpdVBkNFav3wnKpA8OFSxRUtz9nKqGfOMZDmK77DwVEhvxWO/UDj7dNWdi58/A zuqiOV4SBXiQyvhxB89Tatc7JZG/RblYHFKWoLbhLtOIqcOVi4sxKDYPPkbh9wgH Y4e2p0NuNz1+XOW60yKlJIAvX5u4kgpSLoZD1ngtk/WPkM9lKNEVtk4t8/G9Uh1C Uzf1uYbqI3hTXZorgnri0nEVd1G3PsIA8QikVZZmOxfroPWoOOqzC/33wgNe4Ory dpFKTTkPeLip7fU5A4IeLutV/aSG11lFItm65YMqoNfPX4w4XEvwEzcDvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNUWfQKHpxq0fuNYEKLL4m0j56TfMB8GA1UdIwQY MBaAFDxS+MF99G+GM2DgMvqdMWieSvbxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEZMNHdYMzBiNFl6WU9BeS1wMHhhSjVLOXZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS85MDEwMTItMGUyYy00MWJhLTg3MzQt YmYwNmQ3ODczZjAyLzEvUEZMNHdYMzBiNFl6WU9BeS1wMHhhSjVLOXZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS85MDEwMTItMGUyYy00MWJhLTg3MzQtYmYwNmQ3ODczZjAy LzEvUEZMNHdYMzBiNFl6WU9BeS1wMHhhSjVLOXZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA5IZL7Nu6 J2VuQ1wXOu2iw0lHo+n+TI/nFscszYMiGVzO70aviaH+lI0gQ10tBUFigGNjVNG3 ux9KxpvraZayY8PgHdFUj7evOBajnbKXZTXMUJ0phL06YC7i7fg3KWJVoIMBJ+Wo 3EON2NI0OnrEkl5RBMg86Wbb2nOpn2D+A8ggxKRgwopqnTmvx/r6qmlRE6l+Q5Aw k43kvEGWhh4XU/cU5PF8P8qxU9iuT/HDPPkUGxR/rP7wugIpCNbm3SOYPS9ml8Yc UXlW/rPykj+v5dTeN1CObOfVvy/g6v+3dddTDDYaHensoi2MykVVZX79YpdxIh2F oTh6pUBPXzDwMw== -----END CERTIFICATE-----Generated at Wed Dec 31 08:01:14 2025 by rpki-client