This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.mft File: pC0LgmZEoYOHz4Mi235kavY9mGo.mft (raw, json) Hash identifier: wCbyBvQ0GdH7E3wVfGmZNVETzMt1PFNg7iQRoefpBqQ= Subject key identifier: 58:9A:1D:4D:18:DF:EC:08:E1:58:40:C0:F8:1C:C7:4A:D2:84:F1:48 Authority key identifier: A4:2D:0B:82:66:44:A1:83:87:CF:83:22:DB:7E:64:6A:F6:3D:98:6A Certificate issuer: /CN=a42d0b826644a18387cf8322db7e646af63d986a Certificate serial: 019AF19BBE0BB37B491FCAFD20A47FDE09AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pC0LgmZEoYOHz4Mi235kavY9mGo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.mft Manifest number: 04CD Signing time: Sat 06 Dec 2025 03:01:47 +0000 Manifest this update: Sat 06 Dec 2025 03:01:47 +0000 Manifest next update: Sun 07 Dec 2025 03:01:47 +0000 Files and hashes: 1: pC0LgmZEoYOHz4Mi235kavY9mGo.crl (hash: 4wBIFdGIWHxeFxDd2bjEO6ihZaFaDgv7/ti/5OCOSLI=) 2: plbxQbrAe4NUuxrJeWYY2owN_A4.roa (hash: UGw+vuKvbSSScPoToTljhf+tZpkdRjY+j2rbaz2Dfco=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.mft rsync://rpki.ripe.net/repository/DEFAULT/pC0LgmZEoYOHz4Mi235kavY9mGo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:be:0b:b3:7b:49:1f:ca:fd:20:a4:7f:de:09:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a42d0b826644a18387cf8322db7e646af63d986a Validity Not Before: Dec 6 03:01:47 2025 GMT Not After : Dec 7 03:01:47 2025 GMT Subject: CN=589a1d4d18dfec08e15840c0f81cc74ad284f148 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:5d:5d:b5:2a:74:b5:3d:6c:c8:9a:7c:54:48: 35:9e:c0:6c:0d:74:52:ef:c1:a3:28:3b:b8:ce:fa: c6:86:23:8c:81:79:a4:8f:96:6e:60:55:61:55:f5: a2:c3:95:4a:51:ef:91:2c:43:c6:b8:9e:7d:6b:49: bf:5c:dc:6b:73:24:dc:bf:ac:ed:98:a2:1b:f4:b8: 4e:1a:0b:97:3e:80:0f:f7:ec:d8:3e:15:09:6b:2f: 07:69:e5:f0:20:e0:01:a9:29:f7:92:76:27:31:b1: b1:73:ed:d8:e7:f0:70:13:81:7e:f5:a5:ca:0f:56: 0d:95:82:b9:bc:e9:7f:70:29:a5:29:82:84:94:47: 1a:0c:36:14:0d:f4:f5:41:75:35:a8:09:0a:d6:0c: ef:53:29:39:85:89:3c:42:ea:1f:9a:20:41:84:4f: 83:c7:ee:28:9d:fc:61:92:69:1b:ed:e3:73:f3:ee: ed:1c:11:b4:69:11:b3:23:7a:7d:fb:ba:fd:5d:e4: bf:08:7b:8e:1d:ee:4e:9f:14:91:51:d8:a7:39:1d: ba:ed:69:54:75:52:a7:64:a7:84:ea:5a:97:30:19: 0c:2a:da:ab:98:00:9f:26:f9:1c:84:66:f5:e9:b3: 48:4a:da:f0:73:ec:ef:8b:9e:50:4d:13:10:2b:f0: 10:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:9A:1D:4D:18:DF:EC:08:E1:58:40:C0:F8:1C:C7:4A:D2:84:F1:48 X509v3 Authority Key Identifier: keyid:A4:2D:0B:82:66:44:A1:83:87:CF:83:22:DB:7E:64:6A:F6:3D:98:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pC0LgmZEoYOHz4Mi235kavY9mGo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:44:97:c2:5d:08:2b:25:82:93:17:10:13:e8:c7:1a:b2:df: 49:65:ae:94:5f:37:f7:dc:17:8c:d5:33:9f:df:73:e6:14:76: 0e:2d:d6:38:d5:08:60:8a:a3:6b:0b:ac:12:61:cd:bb:21:79: a8:be:33:7b:86:50:6a:c0:6e:fd:d7:e1:33:68:01:f6:33:39: 90:f4:11:e5:6c:00:db:6e:37:98:1f:19:6b:91:98:45:be:56: 7c:88:47:ed:4e:8e:0c:98:8c:0c:1c:da:bb:12:b4:37:13:0b: 23:76:68:b5:33:84:a7:11:9c:9f:f2:68:4d:bd:28:1a:c1:74: 6b:c6:36:c7:0c:75:98:60:12:ed:a0:73:b9:ba:fb:53:50:7a: ae:cd:f4:5b:83:48:a4:e2:90:c3:02:7f:4a:8b:d9:38:db:90: 6f:58:93:b9:31:72:f4:08:a4:78:30:ff:4d:47:1c:ab:3f:fe: cf:f9:38:66:7c:7c:31:23:ea:86:5b:6b:b8:79:e3:7c:0d:60: 70:e4:3c:55:a4:0d:cf:2d:01:e3:b7:49:cc:21:27:c8:6b:3e: d5:8a:33:22:22:b9:d3:cb:1f:39:f1:79:74:37:14:d2:04:17: 0f:a7:a6:0e:d3:f2:91:f9:a0:ac:c2:5e:d6:0a:4e:04:f3:98: 36:e5:7e:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm74Ls3tJH8r9IKR/3gmrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0MmQwYjgyNjY0NGExODM4N2NmODMyMmRiN2U2NDZhZjYz ZDk4NmEwHhcNMjUxMjA2MDMwMTQ3WhcNMjUxMjA3MDMwMTQ3WjAzMTEwLwYDVQQD Eyg1ODlhMWQ0ZDE4ZGZlYzA4ZTE1ODQwYzBmODFjYzc0YWQyODRmMTQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2V1dtSp0tT1syJp8VEg1nsBsDXRS 78GjKDu4zvrGhiOMgXmkj5ZuYFVhVfWiw5VKUe+RLEPGuJ59a0m/XNxrcyTcv6zt mKIb9LhOGguXPoAP9+zYPhUJay8HaeXwIOABqSn3knYnMbGxc+3Y5/BwE4F+9aXK D1YNlYK5vOl/cCmlKYKElEcaDDYUDfT1QXU1qAkK1gzvUyk5hYk8QuofmiBBhE+D x+4onfxhkmkb7eNz8+7tHBG0aRGzI3p9+7r9XeS/CHuOHe5OnxSRUdinOR267WlU dVKnZKeE6lqXMBkMKtqrmACfJvkchGb16bNIStrwc+zvi55QTRMQK/AQuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFiaHU0Y3+wI4VhAwPgcx0rShPFIMB8GA1UdIwQY MBaAFKQtC4JmRKGDh8+DItt+ZGr2PZhqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEMwTGdtWkVvWU9IejRNaTIzNWthdlk5bUdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8yMjYwZjItM2NjZC00NGU1LTg0Mjgt ZTgyZDVlZTRlNDBmLzEvcEMwTGdtWkVvWU9IejRNaTIzNWthdlk5bUdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS8yMjYwZjItM2NjZC00NGU1LTg0MjgtZTgyZDVlZTRlNDBm LzEvcEMwTGdtWkVvWU9IejRNaTIzNWthdlk5bUdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFUSXwl0I KyWCkxcQE+jHGrLfSWWulF8399wXjNUzn99z5hR2Di3WONUIYIqjawusEmHNuyF5 qL4ze4ZQasBu/dfhM2gB9jM5kPQR5WwA2243mB8Za5GYRb5WfIhH7U6ODJiMDBza uxK0NxMLI3ZotTOEpxGcn/JoTb0oGsF0a8Y2xwx1mGAS7aBzubr7U1B6rs30W4NI pOKQwwJ/SovZONuQb1iTuTFy9AikeDD/TUccqz/+z/k4Znx8MSPqhltruHnjfA1g cOQ8VaQNzy0B47dJzCEnyGs+1YozIiK508sfOfF5dDcU0gQXD6emDtPykfmgrMJe 1gpOBPOYNuV+2g== -----END CERTIFICATE-----Generated at Sat Dec 6 14:04:30 2025 by rpki-client