This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft File: PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft (raw, json) Hash identifier: dusgYUG8Xg9CZT/blsGaVWGq3LU2mR93bjt3/dPecaI= Subject key identifier: AA:65:EC:64:65:6A:C6:01:2A:28:75:ED:89:64:B6:85:C8:CC:A6:9A Authority key identifier: 3C:52:F8:C1:7D:F4:6F:86:33:60:E0:32:FA:9D:31:68:9E:4A:F6:F1 Certificate issuer: /CN=3c52f8c17df46f863360e032fa9d31689e4af6f1 Certificate serial: 019B43254E204DD886A858109311B4DB662F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PFL4wX30b4YzYOAy-p0xaJ5K9vE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft Manifest number: 1361 Signing time: Sun 21 Dec 2025 23:01:16 +0000 Manifest this update: Sun 21 Dec 2025 23:01:16 +0000 Manifest next update: Mon 22 Dec 2025 23:01:16 +0000 Files and hashes: 1: PFL4wX30b4YzYOAy-p0xaJ5K9vE.crl (hash: iQLnQgg5wH2GmlKqKS8as+S9b1Pr4gHC5xKjk9rJ8RQ=) 2: W_v27Hupk3RRQBILYKusMtNhoAc.roa (hash: yWY4EAVlw3dwpD2kqQElXOLSvOEEYUa61TWmAID32CM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft rsync://rpki.ripe.net/repository/DEFAULT/PFL4wX30b4YzYOAy-p0xaJ5K9vE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:25:4e:20:4d:d8:86:a8:58:10:93:11:b4:db:66:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c52f8c17df46f863360e032fa9d31689e4af6f1 Validity Not Before: Dec 21 23:01:16 2025 GMT Not After : Dec 22 23:01:16 2025 GMT Subject: CN=aa65ec64656ac6012a2875ed8964b685c8cca69a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:ce:ed:9a:f6:87:e2:13:43:3c:16:1c:96:6e: 7f:e1:8d:ec:5d:a9:67:f6:52:9f:fb:79:81:72:fa: 60:c1:aa:83:40:82:9b:06:11:79:32:1c:55:6b:90: d8:b0:46:45:9c:60:f1:93:21:f4:e6:68:59:63:8c: ba:1c:fb:19:1e:c1:d7:d9:ee:f1:2f:80:ac:0a:7c: 46:18:dc:60:56:c8:35:34:d1:8e:cc:93:36:db:60: 0c:dc:92:c7:fd:1a:96:ae:a9:46:df:6e:20:28:88: 80:54:0f:51:26:c5:74:26:d1:80:f4:ce:a0:60:7c: 3b:b9:8e:43:56:7e:77:5b:9e:72:71:63:b9:f2:9c: 1e:ff:6a:f9:06:b1:7f:8d:18:52:3e:dd:6f:dc:21: af:29:46:cd:b9:48:b2:e3:ae:fd:3c:1c:76:f9:84: 69:af:82:e9:45:ca:7d:53:70:ba:f6:f9:5e:ce:01: 27:4a:0f:5a:63:4c:30:7d:bd:0d:61:ed:70:e9:69: c7:f3:9c:13:50:92:fb:d4:af:ef:58:cd:f1:cc:0e: 43:3a:a3:d6:3b:9b:8c:8e:4b:06:0d:07:31:c0:1a: ab:70:c5:b3:6e:e7:ae:15:64:f5:8a:57:10:e3:eb: 18:4b:23:40:44:ab:0c:9e:c2:90:98:ac:19:f8:7c: 5c:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:65:EC:64:65:6A:C6:01:2A:28:75:ED:89:64:B6:85:C8:CC:A6:9A X509v3 Authority Key Identifier: keyid:3C:52:F8:C1:7D:F4:6F:86:33:60:E0:32:FA:9D:31:68:9E:4A:F6:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PFL4wX30b4YzYOAy-p0xaJ5K9vE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:70:82:df:5c:db:b0:47:73:b6:f8:52:bb:7e:60:f3:8a:15: 20:94:e5:cb:c8:3c:bb:0a:7a:65:98:19:fc:cd:0c:63:14:f8: 1e:85:69:1b:38:a1:f2:83:4d:67:52:40:46:89:3b:76:7f:0c: 86:8f:85:2e:01:54:cc:0f:94:05:25:58:3d:97:08:96:d7:b1: 07:a3:de:31:9d:e2:fb:c0:ed:22:80:7f:d3:26:3b:74:51:e7: d1:5d:62:cf:de:b9:ce:c0:ff:c4:72:e7:69:3b:f0:5a:3b:bc: 8c:6a:b2:87:15:96:41:0c:0b:4a:09:37:bd:79:c3:16:8c:28: 66:08:9f:9d:a2:12:0d:70:a7:e9:bd:48:a5:f5:6b:80:f7:7e: 2a:0d:2a:5f:f8:44:1a:c1:36:0c:c6:80:1c:1a:6e:a4:46:1d: b6:cb:8d:14:b6:90:48:e9:86:b6:91:fe:fc:28:41:00:1f:d6: 93:14:83:5e:60:36:19:aa:a6:f1:25:11:a1:b1:0d:dc:cb:b6: d7:68:72:fa:7d:68:ec:97:49:25:a2:27:f9:7b:68:71:8d:5a: be:aa:c8:50:db:f5:fb:aa:db:d0:c8:67:71:17:96:14:fc:e9: c4:10:59:7d:01:32:01:20:03:88:48:60:5a:91:c0:eb:ff:c8: 1d:73:c1:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDJU4gTdiGqFgQkxG022YvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjNTJmOGMxN2RmNDZmODYzMzYwZTAzMmZhOWQzMTY4OWU0 YWY2ZjEwHhcNMjUxMjIxMjMwMTE2WhcNMjUxMjIyMjMwMTE2WjAzMTEwLwYDVQQD EyhhYTY1ZWM2NDY1NmFjNjAxMmEyODc1ZWQ4OTY0YjY4NWM4Y2NhNjlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6M7tmvaH4hNDPBYclm5/4Y3sXaln 9lKf+3mBcvpgwaqDQIKbBhF5MhxVa5DYsEZFnGDxkyH05mhZY4y6HPsZHsHX2e7x L4CsCnxGGNxgVsg1NNGOzJM222AM3JLH/RqWrqlG324gKIiAVA9RJsV0JtGA9M6g YHw7uY5DVn53W55ycWO58pwe/2r5BrF/jRhSPt1v3CGvKUbNuUiy4679PBx2+YRp r4LpRcp9U3C69vlezgEnSg9aY0wwfb0NYe1w6WnH85wTUJL71K/vWM3xzA5DOqPW O5uMjksGDQcxwBqrcMWzbueuFWT1ilcQ4+sYSyNARKsMnsKQmKwZ+HxcEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKpl7GRlasYBKih17YlktoXIzKaaMB8GA1UdIwQY MBaAFDxS+MF99G+GM2DgMvqdMWieSvbxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEZMNHdYMzBiNFl6WU9BeS1wMHhhSjVLOXZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS85MDEwMTItMGUyYy00MWJhLTg3MzQt YmYwNmQ3ODczZjAyLzEvUEZMNHdYMzBiNFl6WU9BeS1wMHhhSjVLOXZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS85MDEwMTItMGUyYy00MWJhLTg3MzQtYmYwNmQ3ODczZjAy LzEvUEZMNHdYMzBiNFl6WU9BeS1wMHhhSjVLOXZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANHCC31zb sEdztvhSu35g84oVIJTly8g8uwp6ZZgZ/M0MYxT4HoVpGzih8oNNZ1JARok7dn8M ho+FLgFUzA+UBSVYPZcIltexB6PeMZ3i+8DtIoB/0yY7dFHn0V1iz965zsD/xHLn aTvwWju8jGqyhxWWQQwLSgk3vXnDFowoZgifnaISDXCn6b1IpfVrgPd+Kg0qX/hE GsE2DMaAHBpupEYdtsuNFLaQSOmGtpH+/ChBAB/WkxSDXmA2Gaqm8SURobEN3Mu2 12hy+n1o7JdJJaIn+XtocY1avqrIUNv1+6rb0MhncReWFPzpxBBZfQEyASADiEhg WpHA6//IHXPBJA== -----END CERTIFICATE-----Generated at Mon Dec 22 08:33:17 2025 by rpki-client