This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft File: PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft (raw, json) Hash identifier: sMQFFHy8zdQNjNdIZ5iyGyOXf1qIu4mgc6EFFPmjvGQ= Subject key identifier: 7C:C5:CD:D2:F3:31:CB:FE:59:24:3B:D6:0E:F0:BA:86:86:AD:E5:51 Authority key identifier: 3C:52:F8:C1:7D:F4:6F:86:33:60:E0:32:FA:9D:31:68:9E:4A:F6:F1 Certificate issuer: /CN=3c52f8c17df46f863360e032fa9d31689e4af6f1 Certificate serial: 019B3F48B2DACE3CEA1FEB7B8089BC7266D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PFL4wX30b4YzYOAy-p0xaJ5K9vE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft Manifest number: 135F Signing time: Sun 21 Dec 2025 05:01:27 +0000 Manifest this update: Sun 21 Dec 2025 05:01:27 +0000 Manifest next update: Mon 22 Dec 2025 05:01:27 +0000 Files and hashes: 1: PFL4wX30b4YzYOAy-p0xaJ5K9vE.crl (hash: 19gnpgLKUKDuemxHyFVsm3HJBVZWFRclceeLLFF4L4Q=) 2: W_v27Hupk3RRQBILYKusMtNhoAc.roa (hash: yWY4EAVlw3dwpD2kqQElXOLSvOEEYUa61TWmAID32CM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft rsync://rpki.ripe.net/repository/DEFAULT/PFL4wX30b4YzYOAy-p0xaJ5K9vE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:48:b2:da:ce:3c:ea:1f:eb:7b:80:89:bc:72:66:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c52f8c17df46f863360e032fa9d31689e4af6f1 Validity Not Before: Dec 21 05:01:27 2025 GMT Not After : Dec 22 05:01:27 2025 GMT Subject: CN=7cc5cdd2f331cbfe59243bd60ef0ba8686ade551 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:f0:8a:4e:41:b5:72:db:44:48:09:e7:12:98: fe:55:6d:7e:4a:15:ab:f3:d4:33:7d:c1:43:cd:45: 0a:d4:0f:af:80:66:a9:59:7d:47:17:65:bb:9c:e4: 1a:40:70:ce:89:20:2e:78:21:c4:27:5e:f8:dd:5f: 58:66:69:dc:ae:6e:16:39:3f:7f:1e:74:45:9f:db: 1c:36:26:47:40:50:81:c6:5a:32:b1:4a:41:c6:ec: 20:de:89:e7:51:68:82:0c:db:ab:f4:48:4d:33:50: 0c:48:92:95:dc:71:36:96:8f:1e:53:76:cd:8b:bc: d6:b6:66:c3:72:89:c7:a4:67:4f:d3:8b:e0:39:09: b0:bc:b5:41:c7:af:d9:9c:d9:e6:a9:56:b2:41:5f: 96:e6:4a:16:86:8c:a3:12:47:16:18:6d:b1:25:eb: 04:8e:75:50:9d:25:c9:06:77:8f:70:e7:4a:be:8b: d3:bb:19:90:8b:ae:f0:fb:38:18:6b:de:92:88:b8: bc:99:31:4c:bf:e1:fe:8d:ff:e6:6b:cb:b6:5d:53: 5c:2f:0d:ae:68:74:c2:90:c7:21:6c:d6:87:8c:f1: 4d:7f:e4:2c:3d:08:2d:50:6d:92:25:6d:9e:18:06: 69:05:98:f6:10:f0:71:55:56:dc:eb:09:27:12:1f: 77:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:C5:CD:D2:F3:31:CB:FE:59:24:3B:D6:0E:F0:BA:86:86:AD:E5:51 X509v3 Authority Key Identifier: keyid:3C:52:F8:C1:7D:F4:6F:86:33:60:E0:32:FA:9D:31:68:9E:4A:F6:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PFL4wX30b4YzYOAy-p0xaJ5K9vE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:e3:31:3f:d0:82:61:18:75:5f:10:8e:37:a0:f6:f4:79:fb: 4d:5d:bc:0c:8d:c3:92:91:0f:eb:52:7c:e2:3b:f4:2f:8c:6c: c2:3d:c2:dd:8a:aa:c9:bc:b0:45:e1:4e:c7:99:ad:d4:77:f6: ac:0a:9e:de:41:18:4f:2c:c0:e9:02:ca:6b:52:9a:11:83:02: 32:f7:d5:80:08:3c:20:39:0c:2c:37:54:35:7b:0e:18:29:2d: 3e:6d:50:42:8b:f1:8b:1e:7e:0a:d0:28:ec:4d:c7:7f:61:41: ea:e7:c2:24:ec:67:74:1e:6a:12:1c:46:ed:4a:1d:cf:18:70: 0d:1f:b0:45:ab:3d:e3:c1:92:68:45:3d:6d:c9:b2:ce:ec:dd: 4b:9e:66:21:ca:7c:03:36:0b:c8:65:3b:7c:38:94:fa:0c:12: 1d:5a:e6:ca:53:88:c3:2d:a8:da:5e:fd:ab:40:19:33:7b:f1: 4c:9d:3d:0e:43:60:3a:89:e7:bd:4d:77:8a:94:19:42:77:65: af:52:41:4f:32:f6:81:3f:86:24:85:3d:36:d7:0c:ef:7d:b7: 36:69:dc:30:ca:54:d2:24:35:85:da:3c:ca:37:9e:0f:8c:6e: 94:3f:fb:37:8c:46:c3:d2:f0:59:57:87:ca:4c:93:c3:78:82: 86:03:ae:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/SLLazjzqH+t7gIm8cmbYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjNTJmOGMxN2RmNDZmODYzMzYwZTAzMmZhOWQzMTY4OWU0 YWY2ZjEwHhcNMjUxMjIxMDUwMTI3WhcNMjUxMjIyMDUwMTI3WjAzMTEwLwYDVQQD Eyg3Y2M1Y2RkMmYzMzFjYmZlNTkyNDNiZDYwZWYwYmE4Njg2YWRlNTUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2vCKTkG1cttESAnnEpj+VW1+ShWr 89QzfcFDzUUK1A+vgGapWX1HF2W7nOQaQHDOiSAueCHEJ1743V9YZmncrm4WOT9/ HnRFn9scNiZHQFCBxloysUpBxuwg3onnUWiCDNur9EhNM1AMSJKV3HE2lo8eU3bN i7zWtmbDconHpGdP04vgOQmwvLVBx6/ZnNnmqVayQV+W5koWhoyjEkcWGG2xJesE jnVQnSXJBnePcOdKvovTuxmQi67w+zgYa96SiLi8mTFMv+H+jf/ma8u2XVNcLw2u aHTCkMchbNaHjPFNf+QsPQgtUG2SJW2eGAZpBZj2EPBxVVbc6wknEh931QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHzFzdLzMcv+WSQ71g7wuoaGreVRMB8GA1UdIwQY MBaAFDxS+MF99G+GM2DgMvqdMWieSvbxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEZMNHdYMzBiNFl6WU9BeS1wMHhhSjVLOXZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS85MDEwMTItMGUyYy00MWJhLTg3MzQt YmYwNmQ3ODczZjAyLzEvUEZMNHdYMzBiNFl6WU9BeS1wMHhhSjVLOXZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS85MDEwMTItMGUyYy00MWJhLTg3MzQtYmYwNmQ3ODczZjAy LzEvUEZMNHdYMzBiNFl6WU9BeS1wMHhhSjVLOXZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWeMxP9CC YRh1XxCON6D29Hn7TV28DI3DkpEP61J84jv0L4xswj3C3YqqybywReFOx5mt1Hf2 rAqe3kEYTyzA6QLKa1KaEYMCMvfVgAg8IDkMLDdUNXsOGCktPm1QQovxix5+CtAo 7E3Hf2FB6ufCJOxndB5qEhxG7UodzxhwDR+wRas948GSaEU9bcmyzuzdS55mIcp8 AzYLyGU7fDiU+gwSHVrmylOIwy2o2l79q0AZM3vxTJ09DkNgOonnvU13ipQZQndl r1JBTzL2gT+GJIU9NtcM7323NmncMMpU0iQ1hdo8yjeeD4xulD/7N4xGw9LwWVeH ykyTw3iChgOuEQ== -----END CERTIFICATE-----Generated at Sun Dec 21 11:26:43 2025 by rpki-client