This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft File: PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft (raw, json) Hash identifier: WsMJL1jc3OFUXlz0xWmwqB+GJJaCzZ7qS6585uVciao= Subject key identifier: 41:6B:8B:EA:62:D5:87:B3:10:EA:15:F2:33:95:F5:FE:A0:62:C1:DA Authority key identifier: 3C:52:F8:C1:7D:F4:6F:86:33:60:E0:32:FA:9D:31:68:9E:4A:F6:F1 Certificate issuer: /CN=3c52f8c17df46f863360e032fa9d31689e4af6f1 Certificate serial: 019AF208B1796EA943BAAAB2CAA6033F84D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PFL4wX30b4YzYOAy-p0xaJ5K9vE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft Manifest number: 1337 Signing time: Sat 06 Dec 2025 05:00:47 +0000 Manifest this update: Sat 06 Dec 2025 05:00:47 +0000 Manifest next update: Sun 07 Dec 2025 05:00:47 +0000 Files and hashes: 1: PFL4wX30b4YzYOAy-p0xaJ5K9vE.crl (hash: Hyb4h2IOFF1if8eLitgiHtk26bZmm//ypDGElDXbaYA=) 2: W_v27Hupk3RRQBILYKusMtNhoAc.roa (hash: yWY4EAVlw3dwpD2kqQElXOLSvOEEYUa61TWmAID32CM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft rsync://rpki.ripe.net/repository/DEFAULT/PFL4wX30b4YzYOAy-p0xaJ5K9vE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:b1:79:6e:a9:43:ba:aa:b2:ca:a6:03:3f:84:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c52f8c17df46f863360e032fa9d31689e4af6f1 Validity Not Before: Dec 6 05:00:47 2025 GMT Not After : Dec 7 05:00:47 2025 GMT Subject: CN=416b8bea62d587b310ea15f23395f5fea062c1da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:79:6d:48:ae:71:a0:75:60:1c:bb:ad:0a:84: fa:54:7e:67:70:90:e0:11:f0:c0:29:71:37:7f:1c: 44:47:35:56:4e:f1:88:e9:14:b2:3e:d6:c5:aa:61: 45:0e:18:00:33:80:d0:22:1d:ec:d2:44:72:57:9d: 40:b1:b3:7b:66:2d:59:dc:c1:9f:c4:d5:39:e8:5f: 21:58:ea:56:dc:8d:d7:6c:1c:5d:c6:39:b3:6f:10: d4:c1:73:47:4c:3b:2d:be:24:36:19:01:5a:e5:66: fd:c4:4e:40:63:e9:0e:60:f3:fa:13:7c:2f:c0:87: 74:c2:68:7b:d1:db:a1:80:e1:08:43:13:8d:c0:db: 44:54:4f:27:8f:31:c0:75:d4:93:97:8b:8d:12:d6: 36:7c:87:4c:ac:49:27:de:d8:6e:c4:fc:aa:c3:f3: ca:11:7c:55:1e:35:e8:f7:73:0a:d3:7d:cd:56:d6: 03:3d:d0:11:06:bc:28:92:1a:3d:24:6c:fa:b4:9e: bb:46:a1:6c:fa:ad:a3:c4:f1:50:b6:0e:bf:09:99: 29:7a:c4:e0:f9:08:89:1c:7a:fc:c9:d2:df:c5:be: 95:fd:1b:3e:14:47:29:a4:86:45:c3:47:ae:2f:36: 60:b8:97:91:5c:2b:bd:9a:d8:da:3f:3b:72:32:72: 90:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:6B:8B:EA:62:D5:87:B3:10:EA:15:F2:33:95:F5:FE:A0:62:C1:DA X509v3 Authority Key Identifier: keyid:3C:52:F8:C1:7D:F4:6F:86:33:60:E0:32:FA:9D:31:68:9E:4A:F6:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PFL4wX30b4YzYOAy-p0xaJ5K9vE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:1f:30:21:b6:ff:99:14:6f:c1:04:e5:84:98:02:4b:b8:de: d1:6f:3a:9d:ef:53:5e:23:33:36:e5:72:f1:26:c3:fa:01:b0: a4:07:da:fb:71:a8:18:48:ed:43:96:96:46:9c:a8:be:e0:1b: a0:24:fd:69:19:23:11:40:96:f0:c5:23:e5:c5:11:6f:b4:eb: a0:26:18:f4:ce:b8:1a:14:97:da:ce:67:b0:6e:bc:a1:cb:7b: ab:73:2b:c9:b3:b0:07:a3:7b:ad:cc:c2:70:1c:57:11:d2:6a: 72:23:af:f5:62:09:57:a3:76:89:1a:0f:ae:d9:3a:f8:1e:49: 79:54:d0:74:23:0b:c5:10:22:00:d0:da:a3:12:47:ff:57:33: bc:83:92:33:6c:5b:ae:51:81:7e:cf:4c:57:e7:f1:ca:f7:8d: e5:a9:3f:73:ec:e5:39:69:0b:db:1c:d4:97:c9:0e:0b:52:9d: a4:15:79:dd:8b:7f:48:a4:ff:da:2f:0b:f0:8d:15:4e:a5:2f: 00:1c:e1:c7:b7:04:c8:0c:9b:7f:33:e9:6c:86:12:70:ff:dd: 3d:b2:e6:b7:d0:79:23:92:52:1d:c9:38:a4:97:50:96:19:a0: 22:b7:0e:0c:d3:27:1f:99:ba:89:a4:fa:d5:1b:1c:3b:b8:9d: 3a:ff:5c:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCLF5bqlDuqqyyqYDP4TWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjNTJmOGMxN2RmNDZmODYzMzYwZTAzMmZhOWQzMTY4OWU0 YWY2ZjEwHhcNMjUxMjA2MDUwMDQ3WhcNMjUxMjA3MDUwMDQ3WjAzMTEwLwYDVQQD Eyg0MTZiOGJlYTYyZDU4N2IzMTBlYTE1ZjIzMzk1ZjVmZWEwNjJjMWRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2HltSK5xoHVgHLutCoT6VH5ncJDg EfDAKXE3fxxERzVWTvGI6RSyPtbFqmFFDhgAM4DQIh3s0kRyV51AsbN7Zi1Z3MGf xNU56F8hWOpW3I3XbBxdxjmzbxDUwXNHTDstviQ2GQFa5Wb9xE5AY+kOYPP6E3wv wId0wmh70duhgOEIQxONwNtEVE8njzHAddSTl4uNEtY2fIdMrEkn3thuxPyqw/PK EXxVHjXo93MK033NVtYDPdARBrwokho9JGz6tJ67RqFs+q2jxPFQtg6/CZkpesTg +QiJHHr8ydLfxb6V/Rs+FEcppIZFw0euLzZguJeRXCu9mtjaPztyMnKQswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEFri+pi1YezEOoV8jOV9f6gYsHaMB8GA1UdIwQY MBaAFDxS+MF99G+GM2DgMvqdMWieSvbxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEZMNHdYMzBiNFl6WU9BeS1wMHhhSjVLOXZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS85MDEwMTItMGUyYy00MWJhLTg3MzQt YmYwNmQ3ODczZjAyLzEvUEZMNHdYMzBiNFl6WU9BeS1wMHhhSjVLOXZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS85MDEwMTItMGUyYy00MWJhLTg3MzQtYmYwNmQ3ODczZjAy LzEvUEZMNHdYMzBiNFl6WU9BeS1wMHhhSjVLOXZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHh8wIbb/ mRRvwQTlhJgCS7je0W86ne9TXiMzNuVy8SbD+gGwpAfa+3GoGEjtQ5aWRpyovuAb oCT9aRkjEUCW8MUj5cURb7TroCYY9M64GhSX2s5nsG68oct7q3MrybOwB6N7rczC cBxXEdJqciOv9WIJV6N2iRoPrtk6+B5JeVTQdCMLxRAiANDaoxJH/1czvIOSM2xb rlGBfs9MV+fxyveN5ak/c+zlOWkL2xzUl8kOC1KdpBV53Yt/SKT/2i8L8I0VTqUv ABzhx7cEyAybfzPpbIYScP/dPbLmt9B5I5JSHck4pJdQlhmgIrcODNMnH5m6iaT6 1RscO7idOv9cLg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:17:25 2025 by rpki-client