This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/710b27-f68b-436f-bcef-2d65e06687de/1/pffZAsirU0AJh6GIKrJ_fPoBt0A.mft File: pffZAsirU0AJh6GIKrJ_fPoBt0A.mft (raw, json) Hash identifier: uluGybT0w5BmLqCxmz7VdH54OTT1gTxvrBHL/AIFBhI= Subject key identifier: 3A:E4:9C:A0:2C:F9:0E:27:6A:2A:AF:85:63:08:22:46:DD:46:B7:3B Authority key identifier: A5:F7:D9:02:C8:AB:53:40:09:87:A1:88:2A:B2:7F:7C:FA:01:B7:40 Certificate issuer: /CN=a5f7d902c8ab53400987a1882ab27f7cfa01b740 Certificate serial: 019AF1D25E2974863E2DBAE2C34CBDB17530 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pffZAsirU0AJh6GIKrJ_fPoBt0A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/710b27-f68b-436f-bcef-2d65e06687de/1/pffZAsirU0AJh6GIKrJ_fPoBt0A.mft Manifest number: 03BA Signing time: Sat 06 Dec 2025 04:01:26 +0000 Manifest this update: Sat 06 Dec 2025 04:01:26 +0000 Manifest next update: Sun 07 Dec 2025 04:01:26 +0000 Files and hashes: 1: pffZAsirU0AJh6GIKrJ_fPoBt0A.crl (hash: lngwew5zZiTdHe/PtLpUIWwjFF/FBmibjZJbFkPZJzM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/710b27-f68b-436f-bcef-2d65e06687de/1/pffZAsirU0AJh6GIKrJ_fPoBt0A.crl rsync://rpki.ripe.net/repository/DEFAULT/64/710b27-f68b-436f-bcef-2d65e06687de/1/pffZAsirU0AJh6GIKrJ_fPoBt0A.mft rsync://rpki.ripe.net/repository/DEFAULT/pffZAsirU0AJh6GIKrJ_fPoBt0A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:5e:29:74:86:3e:2d:ba:e2:c3:4c:bd:b1:75:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5f7d902c8ab53400987a1882ab27f7cfa01b740 Validity Not Before: Dec 6 04:01:26 2025 GMT Not After : Dec 7 04:01:26 2025 GMT Subject: CN=3ae49ca02cf90e276a2aaf8563082246dd46b73b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:a7:02:8c:3f:7a:8e:ff:ca:44:02:ab:e4:93: e6:bf:4a:93:1d:15:1f:51:df:3e:ff:96:31:63:67: 76:22:c9:46:34:56:8b:fe:d7:18:b7:15:db:4d:5a: 3b:0e:5c:d0:c8:f2:1d:9d:35:e4:c0:d4:82:0f:94: 74:7d:7f:c0:e0:69:a7:47:5c:8b:b5:38:c5:31:94: 66:37:ea:f2:3b:79:93:d9:85:23:99:d3:03:3a:e9: f7:f7:0d:34:75:b9:59:48:2f:2a:bd:e7:de:42:3a: 30:fe:95:20:c7:a5:04:78:68:20:8f:72:65:f0:5c: 17:e6:dc:6a:d2:b1:3e:d0:e6:56:b9:4b:c7:a2:49: 73:77:ed:eb:86:42:06:40:e9:ee:59:7c:e9:e9:32: 2f:78:5f:65:d9:f0:e2:48:71:3c:90:4a:29:1b:d5: 40:0d:2b:31:2c:ca:1c:06:7e:50:d1:e9:b0:6d:7c: 3d:0d:8c:35:43:e4:c2:bb:b1:04:05:77:a0:57:02: c3:b9:55:60:80:28:b1:ca:9f:84:4d:4c:2a:eb:a6: 7b:7e:7f:b5:41:d1:58:35:fb:d6:be:79:5e:9f:78: 3f:d1:b1:13:34:de:a4:51:82:f6:68:e4:11:58:bc: a5:d1:92:a8:c0:7c:94:72:a9:b3:37:cf:00:77:a1: ab:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:E4:9C:A0:2C:F9:0E:27:6A:2A:AF:85:63:08:22:46:DD:46:B7:3B X509v3 Authority Key Identifier: keyid:A5:F7:D9:02:C8:AB:53:40:09:87:A1:88:2A:B2:7F:7C:FA:01:B7:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pffZAsirU0AJh6GIKrJ_fPoBt0A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/710b27-f68b-436f-bcef-2d65e06687de/1/pffZAsirU0AJh6GIKrJ_fPoBt0A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/710b27-f68b-436f-bcef-2d65e06687de/1/pffZAsirU0AJh6GIKrJ_fPoBt0A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:7d:90:c9:20:24:00:2d:83:6e:94:17:e0:3d:28:37:ce:ea: 0f:20:54:a9:72:d4:b7:a1:fb:af:a7:71:a9:fb:27:53:9f:f3: a5:75:a3:a0:a7:7e:46:c9:dd:d4:64:83:9a:53:83:cd:46:bb: 26:02:e4:07:ff:bb:a0:71:52:55:e3:dd:4f:5c:79:5d:96:ec: 27:ba:ac:a6:00:df:d3:38:03:7d:d1:86:39:ea:7d:46:6a:91: f4:d9:58:18:e0:fa:4b:9a:2c:2d:64:b7:eb:eb:ae:bf:a5:eb: 44:5f:bd:59:04:24:57:a6:38:ed:f7:7f:c5:27:36:c8:fc:50: 2d:fe:bb:c9:c3:5b:38:c7:a1:ed:c2:72:28:cb:6c:d7:2c:21: 8f:f9:11:2d:07:a5:1d:27:d2:3c:3f:89:83:22:e5:f4:5a:b8: 6c:bc:7f:bb:91:16:1f:05:cb:62:25:76:66:41:42:f7:4c:12: a9:b1:54:56:39:17:92:13:3b:b6:af:b0:d7:8f:e2:0e:b4:19: a3:d9:cd:d0:d5:6b:96:66:56:27:aa:80:8a:1a:a5:25:27:0c: 6b:f3:db:a4:fa:fa:c7:3d:96:1e:16:2e:d8:2b:ee:ae:bf:1f: 63:ce:3e:bd:96:ac:a7:33:83:9a:c6:df:18:0e:fa:a7:40:0d: e5:ab:00:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0l4pdIY+Lbriw0y9sXUwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1ZjdkOTAyYzhhYjUzNDAwOTg3YTE4ODJhYjI3ZjdjZmEw MWI3NDAwHhcNMjUxMjA2MDQwMTI2WhcNMjUxMjA3MDQwMTI2WjAzMTEwLwYDVQQD EygzYWU0OWNhMDJjZjkwZTI3NmEyYWFmODU2MzA4MjI0NmRkNDZiNzNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06cCjD96jv/KRAKr5JPmv0qTHRUf Ud8+/5YxY2d2IslGNFaL/tcYtxXbTVo7DlzQyPIdnTXkwNSCD5R0fX/A4GmnR1yL tTjFMZRmN+ryO3mT2YUjmdMDOun39w00dblZSC8qvefeQjow/pUgx6UEeGggj3Jl 8FwX5txq0rE+0OZWuUvHoklzd+3rhkIGQOnuWXzp6TIveF9l2fDiSHE8kEopG9VA DSsxLMocBn5Q0emwbXw9DYw1Q+TCu7EEBXegVwLDuVVggCixyp+ETUwq66Z7fn+1 QdFYNfvWvnlen3g/0bETNN6kUYL2aOQRWLyl0ZKowHyUcqmzN88Ad6GrUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDrknKAs+Q4naiqvhWMIIkbdRrc7MB8GA1UdIwQY MBaAFKX32QLIq1NACYehiCqyf3z6AbdAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGZmWkFzaXJVMEFKaDZHSUtySl9mUG9CdDBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC83MTBiMjctZjY4Yi00MzZmLWJjZWYt MmQ2NWUwNjY4N2RlLzEvcGZmWkFzaXJVMEFKaDZHSUtySl9mUG9CdDBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC83MTBiMjctZjY4Yi00MzZmLWJjZWYtMmQ2NWUwNjY4N2Rl LzEvcGZmWkFzaXJVMEFKaDZHSUtySl9mUG9CdDBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjX2QySAk AC2DbpQX4D0oN87qDyBUqXLUt6H7r6dxqfsnU5/zpXWjoKd+Rsnd1GSDmlODzUa7 JgLkB/+7oHFSVePdT1x5XZbsJ7qspgDf0zgDfdGGOep9RmqR9NlYGOD6S5osLWS3 6+uuv6XrRF+9WQQkV6Y47fd/xSc2yPxQLf67ycNbOMeh7cJyKMts1ywhj/kRLQel HSfSPD+JgyLl9Fq4bLx/u5EWHwXLYiV2ZkFC90wSqbFUVjkXkhM7tq+w14/iDrQZ o9nN0NVrlmZWJ6qAihqlJScMa/PbpPr6xz2WHhYu2Cvurr8fY84+vZaspzODmsbf GA76p0AN5asAOA== -----END CERTIFICATE-----Generated at Sat Dec 6 15:10:50 2025 by rpki-client