This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft File: PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft (raw, json) Hash identifier: 9zANuusD+HWQCwB28q4YX2UWfKyuzGLNHGbv3TPxteQ= Subject key identifier: 92:4C:06:C1:3C:92:71:5F:04:34:CF:82:5C:58:F4:5D:1A:23:98:AD Authority key identifier: 3C:52:F8:C1:7D:F4:6F:86:33:60:E0:32:FA:9D:31:68:9E:4A:F6:F1 Certificate issuer: /CN=3c52f8c17df46f863360e032fa9d31689e4af6f1 Certificate serial: 019B397DBB73B75C8AAD9155F03BE16085C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PFL4wX30b4YzYOAy-p0xaJ5K9vE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft Manifest number: 135C Signing time: Sat 20 Dec 2025 02:01:39 +0000 Manifest this update: Sat 20 Dec 2025 02:01:39 +0000 Manifest next update: Sun 21 Dec 2025 02:01:39 +0000 Files and hashes: 1: PFL4wX30b4YzYOAy-p0xaJ5K9vE.crl (hash: pW3MJ4qxzG1bAwVOe4961KnB4rZvROvDa4tNBMQvPz0=) 2: W_v27Hupk3RRQBILYKusMtNhoAc.roa (hash: yWY4EAVlw3dwpD2kqQElXOLSvOEEYUa61TWmAID32CM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft rsync://rpki.ripe.net/repository/DEFAULT/PFL4wX30b4YzYOAy-p0xaJ5K9vE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:7d:bb:73:b7:5c:8a:ad:91:55:f0:3b:e1:60:85:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c52f8c17df46f863360e032fa9d31689e4af6f1 Validity Not Before: Dec 20 02:01:39 2025 GMT Not After : Dec 21 02:01:39 2025 GMT Subject: CN=924c06c13c92715f0434cf825c58f45d1a2398ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:4b:1a:1c:27:1a:28:9c:81:d9:f0:6e:cd:78: f0:75:67:a4:48:ef:6a:39:c0:41:5a:d4:12:99:c5: ac:90:c3:d9:68:03:3a:de:b9:c0:44:c1:e1:80:e3: f0:96:d1:63:d2:02:ea:8a:97:af:5c:f6:61:16:a1: 29:a9:75:28:9f:11:d5:c9:e6:49:9e:00:2c:08:2f: 58:5d:0e:0f:77:ab:1d:7e:dc:1d:d0:4e:b3:fb:3f: ce:d6:aa:54:89:43:0a:52:17:d9:6b:37:e8:41:8a: 9b:a6:b5:90:c7:f5:c4:12:95:e4:cc:a4:ae:76:d3: ae:38:34:f0:11:d4:e6:08:c4:b1:48:70:04:7a:83: 6c:18:da:d8:f9:ce:15:85:ff:92:b4:51:c3:55:8c: 20:79:94:32:5f:04:a1:92:34:da:2f:8a:d8:e7:8d: d4:55:64:ac:bf:f7:46:55:8f:6b:a0:df:9e:19:ed: 8e:b4:ef:05:68:db:47:f0:49:17:22:99:8c:5f:c2: 94:f0:15:62:ea:70:3d:46:46:d7:94:c0:85:1f:35: b0:44:1a:fa:18:5c:47:d3:04:09:05:9f:de:f2:ed: f7:a7:ab:77:53:b6:e7:6b:06:e0:72:05:d6:fa:51: 64:bd:58:69:2b:9f:d2:8e:8f:28:f8:95:a7:c9:dd: 8a:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:4C:06:C1:3C:92:71:5F:04:34:CF:82:5C:58:F4:5D:1A:23:98:AD X509v3 Authority Key Identifier: keyid:3C:52:F8:C1:7D:F4:6F:86:33:60:E0:32:FA:9D:31:68:9E:4A:F6:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PFL4wX30b4YzYOAy-p0xaJ5K9vE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:e2:2d:65:00:a1:a1:fa:bc:0e:74:61:e2:43:c6:fb:b6:07: f0:68:e1:b0:61:a0:80:2a:a0:80:af:96:33:ca:73:74:f2:33: 93:bf:17:d8:c6:30:f1:43:95:a2:1d:86:98:b3:92:f2:38:f8: 35:47:55:75:1a:0a:74:b7:ba:12:6e:b2:42:78:90:82:e2:26: a6:95:34:53:d9:f6:05:d0:e3:93:18:2e:bf:27:b3:e5:52:2d: d6:fa:97:99:88:9d:d2:9e:6d:81:5a:cd:a0:b5:8d:db:92:32: af:d8:97:e2:54:4f:93:dc:a0:1a:99:4d:d8:9f:4d:26:43:88: 58:38:85:12:5c:c3:30:73:e1:c6:f3:3a:af:6e:07:08:6c:15: c7:29:14:75:bc:96:12:8f:79:80:4d:32:26:93:72:d2:c1:0c: 79:11:9e:d1:5a:89:7f:96:4b:10:0a:bc:36:20:65:53:a3:fc: cd:b4:ac:2e:62:4b:80:e4:58:2a:db:f8:7e:a5:a6:90:bd:1d: a1:92:4c:c6:75:54:f5:c2:bd:bc:71:67:bb:b8:61:76:9f:19: 91:55:04:ff:c9:74:4e:80:69:4e:43:82:e1:a6:8d:94:38:cd: 17:99:8d:e7:1c:1b:c4:f8:05:9e:a7:7f:bc:91:1a:f1:cc:58: 3f:3b:3f:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5fbtzt1yKrZFV8DvhYIXCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjNTJmOGMxN2RmNDZmODYzMzYwZTAzMmZhOWQzMTY4OWU0 YWY2ZjEwHhcNMjUxMjIwMDIwMTM5WhcNMjUxMjIxMDIwMTM5WjAzMTEwLwYDVQQD Eyg5MjRjMDZjMTNjOTI3MTVmMDQzNGNmODI1YzU4ZjQ1ZDFhMjM5OGFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0saHCcaKJyB2fBuzXjwdWekSO9q OcBBWtQSmcWskMPZaAM63rnARMHhgOPwltFj0gLqipevXPZhFqEpqXUonxHVyeZJ ngAsCC9YXQ4Pd6sdftwd0E6z+z/O1qpUiUMKUhfZazfoQYqbprWQx/XEEpXkzKSu dtOuODTwEdTmCMSxSHAEeoNsGNrY+c4Vhf+StFHDVYwgeZQyXwShkjTaL4rY543U VWSsv/dGVY9roN+eGe2OtO8FaNtH8EkXIpmMX8KU8BVi6nA9RkbXlMCFHzWwRBr6 GFxH0wQJBZ/e8u33p6t3U7bnawbgcgXW+lFkvVhpK5/Sjo8o+JWnyd2KUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJJMBsE8knFfBDTPglxY9F0aI5itMB8GA1UdIwQY MBaAFDxS+MF99G+GM2DgMvqdMWieSvbxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEZMNHdYMzBiNFl6WU9BeS1wMHhhSjVLOXZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS85MDEwMTItMGUyYy00MWJhLTg3MzQt YmYwNmQ3ODczZjAyLzEvUEZMNHdYMzBiNFl6WU9BeS1wMHhhSjVLOXZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS85MDEwMTItMGUyYy00MWJhLTg3MzQtYmYwNmQ3ODczZjAy LzEvUEZMNHdYMzBiNFl6WU9BeS1wMHhhSjVLOXZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM+ItZQCh ofq8DnRh4kPG+7YH8GjhsGGggCqggK+WM8pzdPIzk78X2MYw8UOVoh2GmLOS8jj4 NUdVdRoKdLe6Em6yQniQguImppU0U9n2BdDjkxguvyez5VIt1vqXmYid0p5tgVrN oLWN25Iyr9iX4lRPk9ygGplN2J9NJkOIWDiFElzDMHPhxvM6r24HCGwVxykUdbyW Eo95gE0yJpNy0sEMeRGe0VqJf5ZLEAq8NiBlU6P8zbSsLmJLgORYKtv4fqWmkL0d oZJMxnVU9cK9vHFnu7hhdp8ZkVUE/8l0ToBpTkOC4aaNlDjNF5mN5xwbxPgFnqd/ vJEa8cxYPzs/XA== -----END CERTIFICATE-----Generated at Sat Dec 20 10:38:36 2025 by rpki-client