This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.mft File: pC0LgmZEoYOHz4Mi235kavY9mGo.mft (raw, json) Hash identifier: 4DIRrePTcfBLLVd4YjAqe+KP8GndJ3Yg6qwtEwIN6M4= Subject key identifier: 08:70:0F:E5:F3:DF:87:CD:ED:38:3E:80:84:10:7F:61:8A:DD:66:1E Authority key identifier: A4:2D:0B:82:66:44:A1:83:87:CF:83:22:DB:7E:64:6A:F6:3D:98:6A Certificate issuer: /CN=a42d0b826644a18387cf8322db7e646af63d986a Certificate serial: 019B3EDA0DCB6C8A6E8C32F8777F068C08FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pC0LgmZEoYOHz4Mi235kavY9mGo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.mft Manifest number: 04F5 Signing time: Sun 21 Dec 2025 03:00:36 +0000 Manifest this update: Sun 21 Dec 2025 03:00:36 +0000 Manifest next update: Mon 22 Dec 2025 03:00:36 +0000 Files and hashes: 1: pC0LgmZEoYOHz4Mi235kavY9mGo.crl (hash: eh1vQ793/zIYmfMv5uqp+NMdKsxbLRjVNGmvxlqoOQU=) 2: plbxQbrAe4NUuxrJeWYY2owN_A4.roa (hash: UGw+vuKvbSSScPoToTljhf+tZpkdRjY+j2rbaz2Dfco=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.mft rsync://rpki.ripe.net/repository/DEFAULT/pC0LgmZEoYOHz4Mi235kavY9mGo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:0d:cb:6c:8a:6e:8c:32:f8:77:7f:06:8c:08:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a42d0b826644a18387cf8322db7e646af63d986a Validity Not Before: Dec 21 03:00:36 2025 GMT Not After : Dec 22 03:00:36 2025 GMT Subject: CN=08700fe5f3df87cded383e8084107f618add661e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:d7:f9:d7:b4:0e:3a:fb:a0:22:7d:41:f5:9b: 35:85:88:1c:cc:ba:a6:3e:6b:ad:ad:50:bc:5e:41: 85:55:19:24:64:9b:3e:b9:2d:7d:fd:cb:06:3a:93: 13:95:f0:48:43:91:61:e4:8e:51:20:4e:61:14:14: 89:18:30:ef:c5:3f:92:af:d8:8f:5b:2a:e9:63:1b: 6e:0a:1e:77:fb:3b:63:40:ed:9e:52:f2:0c:e5:d5: 6e:89:27:a2:15:d1:68:2f:9b:7c:4e:6e:06:f7:ae: cf:1e:ad:2d:9f:30:ed:d2:de:0b:d8:4f:42:c9:84: 0b:9e:ae:6a:04:51:7c:58:da:d2:bb:aa:f6:1f:dc: 97:41:69:80:2c:b1:38:fc:62:81:b9:e0:fa:c9:c4: 22:70:06:0f:dc:99:55:5d:e3:7a:d6:87:1a:ac:da: 3e:f9:7a:4c:d2:47:15:59:c7:67:51:f1:c4:7a:8f: ff:a5:76:2b:20:06:bf:96:38:4d:d5:c6:b8:75:b3: 2d:20:db:e2:30:82:0f:13:4c:da:68:f7:a8:96:68: 09:83:d8:8e:bc:3c:ba:0a:70:9a:bc:2a:6a:67:23: 16:f3:cb:22:72:1a:78:e2:73:c4:06:dd:11:72:2a: b3:a3:79:7b:52:f3:51:37:79:e6:a3:59:99:3c:b7: 85:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:70:0F:E5:F3:DF:87:CD:ED:38:3E:80:84:10:7F:61:8A:DD:66:1E X509v3 Authority Key Identifier: keyid:A4:2D:0B:82:66:44:A1:83:87:CF:83:22:DB:7E:64:6A:F6:3D:98:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pC0LgmZEoYOHz4Mi235kavY9mGo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:ad:c9:e9:41:5f:e1:54:61:ad:a4:6f:44:86:b0:ac:a6:e7: 67:7e:b4:fa:ee:ee:44:cf:22:00:8e:64:6e:68:07:52:2c:09: 97:42:de:95:aa:0a:9f:b0:d3:15:98:a3:a2:48:30:85:ca:ef: 77:b3:d7:6d:0b:52:15:7b:6d:ab:12:66:59:b2:ac:cf:55:e4: ec:72:25:60:f0:49:6a:a5:91:94:3e:55:43:0c:d3:56:5e:07: 97:44:73:56:d2:11:ff:b7:fb:ca:9f:42:33:b5:b6:e9:93:6d: cc:c3:21:ab:98:2c:f7:c5:fc:ad:34:e7:f7:33:7c:23:f0:0b: 1b:c8:e2:bd:9b:c1:f0:cc:8b:7c:9f:c0:e3:a5:1e:4e:53:87: de:44:da:78:e4:49:c4:69:56:c2:75:6f:45:37:10:4f:fe:44: cf:fe:41:5b:b4:f7:91:bd:0a:2e:9e:a0:01:b3:8a:de:0b:95: fa:1a:2d:cd:1f:d4:82:8c:28:97:2a:82:9c:0a:83:8c:fc:7f: 7c:d5:1e:81:6f:47:c6:20:bb:02:95:d3:8c:47:48:11:3f:49: 2f:34:a6:3e:e5:45:eb:4c:b2:05:8d:c0:98:7a:82:b8:17:fa: 2a:5b:77:d0:1d:86:37:0c:51:d9:32:5d:d8:2e:40:6d:70:70: a1:2c:e1:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2g3LbIpujDL4d38GjAj8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0MmQwYjgyNjY0NGExODM4N2NmODMyMmRiN2U2NDZhZjYz ZDk4NmEwHhcNMjUxMjIxMDMwMDM2WhcNMjUxMjIyMDMwMDM2WjAzMTEwLwYDVQQD EygwODcwMGZlNWYzZGY4N2NkZWQzODNlODA4NDEwN2Y2MThhZGQ2NjFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Nf517QOOvugIn1B9Zs1hYgczLqm PmutrVC8XkGFVRkkZJs+uS19/csGOpMTlfBIQ5Fh5I5RIE5hFBSJGDDvxT+Sr9iP WyrpYxtuCh53+ztjQO2eUvIM5dVuiSeiFdFoL5t8Tm4G967PHq0tnzDt0t4L2E9C yYQLnq5qBFF8WNrSu6r2H9yXQWmALLE4/GKBueD6ycQicAYP3JlVXeN61ocarNo+ +XpM0kcVWcdnUfHEeo//pXYrIAa/ljhN1ca4dbMtINviMIIPE0zaaPeolmgJg9iO vDy6CnCavCpqZyMW88sichp44nPEBt0Rciqzo3l7UvNRN3nmo1mZPLeFgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAhwD+Xz34fN7Tg+gIQQf2GK3WYeMB8GA1UdIwQY MBaAFKQtC4JmRKGDh8+DItt+ZGr2PZhqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEMwTGdtWkVvWU9IejRNaTIzNWthdlk5bUdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8yMjYwZjItM2NjZC00NGU1LTg0Mjgt ZTgyZDVlZTRlNDBmLzEvcEMwTGdtWkVvWU9IejRNaTIzNWthdlk5bUdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS8yMjYwZjItM2NjZC00NGU1LTg0MjgtZTgyZDVlZTRlNDBm LzEvcEMwTGdtWkVvWU9IejRNaTIzNWthdlk5bUdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMq3J6UFf 4VRhraRvRIawrKbnZ360+u7uRM8iAI5kbmgHUiwJl0LelaoKn7DTFZijokgwhcrv d7PXbQtSFXttqxJmWbKsz1Xk7HIlYPBJaqWRlD5VQwzTVl4Hl0RzVtIR/7f7yp9C M7W26ZNtzMMhq5gs98X8rTTn9zN8I/ALG8jivZvB8MyLfJ/A46UeTlOH3kTaeORJ xGlWwnVvRTcQT/5Ez/5BW7T3kb0KLp6gAbOK3guV+hotzR/UgowolyqCnAqDjPx/ fNUegW9HxiC7ApXTjEdIET9JLzSmPuVF60yyBY3AmHqCuBf6Klt30B2GNwxR2TJd 2C5AbXBwoSzhfg== -----END CERTIFICATE-----Generated at Sun Dec 21 09:44:41 2025 by rpki-client