This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.mft File: pC0LgmZEoYOHz4Mi235kavY9mGo.mft (raw, json) Hash identifier: 7TbXSpNxlT4HzrxQkkfqxHK509axZwxza55Pe+WZ7uw= Subject key identifier: 55:BA:31:F1:6F:13:F9:B3:FE:B9:64:26:00:91:44:73:E8:E4:D1:D0 Authority key identifier: A4:2D:0B:82:66:44:A1:83:87:CF:83:22:DB:7E:64:6A:F6:3D:98:6A Certificate issuer: /CN=a42d0b826644a18387cf8322db7e646af63d986a Certificate serial: 019B2B8AC00B7AA18EF55E335300FE18DF5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pC0LgmZEoYOHz4Mi235kavY9mGo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.mft Manifest number: 04EB Signing time: Wed 17 Dec 2025 09:01:11 +0000 Manifest this update: Wed 17 Dec 2025 09:01:11 +0000 Manifest next update: Thu 18 Dec 2025 09:01:11 +0000 Files and hashes: 1: pC0LgmZEoYOHz4Mi235kavY9mGo.crl (hash: 7XnELMdO3bEam12hLFiZa7QxUvknQZgE1YKHnJry5QE=) 2: plbxQbrAe4NUuxrJeWYY2owN_A4.roa (hash: UGw+vuKvbSSScPoToTljhf+tZpkdRjY+j2rbaz2Dfco=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.mft rsync://rpki.ripe.net/repository/DEFAULT/pC0LgmZEoYOHz4Mi235kavY9mGo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 09:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:8a:c0:0b:7a:a1:8e:f5:5e:33:53:00:fe:18:df:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a42d0b826644a18387cf8322db7e646af63d986a Validity Not Before: Dec 17 09:01:11 2025 GMT Not After : Dec 18 09:01:11 2025 GMT Subject: CN=55ba31f16f13f9b3feb9642600914473e8e4d1d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:78:11:e7:2d:c7:3b:36:e2:e6:80:dc:43:d2: 33:05:19:ba:5f:fd:e9:1d:bf:d4:ac:b4:61:f8:54: 15:a4:e3:56:a5:3f:a9:44:6c:76:19:31:59:25:55: fc:94:e2:ec:e6:1e:20:6d:cd:a4:a2:fc:54:77:ea: 23:52:1f:96:f8:5b:25:99:51:e1:6a:f2:f6:f9:56: 5a:b8:9b:d3:db:4e:f8:fa:d6:04:69:fa:e7:4c:b9: 08:53:85:08:05:32:30:5f:48:96:15:59:40:e5:f3: dd:2e:f1:cc:1c:a5:d5:d3:27:08:7e:53:d2:bb:99: 70:4f:ee:f6:10:12:83:37:87:a1:d0:b2:0a:82:7a: 7b:99:ca:97:37:59:80:ac:9b:33:3e:5a:6d:a1:82: 98:8b:3f:a1:17:ec:4c:cf:06:49:d5:28:00:e6:0c: ef:48:5c:96:07:68:ea:b5:27:79:ac:ac:c1:8f:6b: e5:8b:61:d0:4d:0c:4e:c6:3a:b5:d4:f7:ec:a0:c3: 0d:ee:45:db:33:ce:1a:3f:e3:c2:13:44:b8:0f:5d: b5:88:f9:38:4f:a4:9b:95:56:cb:12:14:94:13:9d: 83:49:81:e1:8c:46:2c:7c:54:99:45:6c:74:63:10: c6:fe:13:ca:3b:70:11:60:d4:76:ef:df:83:27:13: 48:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:BA:31:F1:6F:13:F9:B3:FE:B9:64:26:00:91:44:73:E8:E4:D1:D0 X509v3 Authority Key Identifier: keyid:A4:2D:0B:82:66:44:A1:83:87:CF:83:22:DB:7E:64:6A:F6:3D:98:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pC0LgmZEoYOHz4Mi235kavY9mGo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:f0:f1:75:ca:a9:00:a3:b5:e3:b2:32:16:14:d4:4f:55:3b: c9:50:97:ae:4f:2b:1b:65:d7:a7:11:72:72:47:6a:bb:a3:7e: 61:7b:22:b9:d9:6b:e8:8f:2b:12:5a:86:74:c5:8d:69:d8:b0: 45:51:73:c8:5c:31:c4:e8:99:8a:14:c4:f8:7c:5f:8c:e4:17: fb:e9:28:11:27:c3:84:70:a2:c0:2e:76:46:eb:11:c8:3e:e9: ba:4c:23:01:ba:03:d7:e5:d8:2c:b3:16:0f:fb:d5:42:e6:b3: e2:f9:b9:80:89:20:be:3f:96:30:b9:9c:a9:86:16:24:ff:1c: 8c:f4:52:eb:b8:3e:0c:e2:87:c9:86:9b:08:3d:0b:f6:44:e5: e8:e2:c2:bd:d2:f6:23:18:aa:c6:9f:f5:b4:34:96:f8:f6:47: 3e:cb:62:51:43:07:00:b6:0d:10:43:76:70:d6:99:fa:19:ed: 31:ac:93:1d:76:51:34:6d:52:06:c3:6a:31:bb:66:8c:a9:e0: 87:6e:60:f3:64:2f:0f:6d:d0:f1:7d:e0:af:57:72:0e:f7:62: 9d:e3:41:6a:54:49:de:a8:2c:c7:d1:0c:a6:82:5c:cd:31:84: 39:b6:a3:24:ef:a6:ec:ba:7a:3f:ed:67:6c:da:bb:1e:33:df: 5c:f9:31:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrisALeqGO9V4zUwD+GN9cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0MmQwYjgyNjY0NGExODM4N2NmODMyMmRiN2U2NDZhZjYz ZDk4NmEwHhcNMjUxMjE3MDkwMTExWhcNMjUxMjE4MDkwMTExWjAzMTEwLwYDVQQD Eyg1NWJhMzFmMTZmMTNmOWIzZmViOTY0MjYwMDkxNDQ3M2U4ZTRkMWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3gR5y3HOzbi5oDcQ9IzBRm6X/3p Hb/UrLRh+FQVpONWpT+pRGx2GTFZJVX8lOLs5h4gbc2kovxUd+ojUh+W+FslmVHh avL2+VZauJvT2074+tYEafrnTLkIU4UIBTIwX0iWFVlA5fPdLvHMHKXV0ycIflPS u5lwT+72EBKDN4eh0LIKgnp7mcqXN1mArJszPlptoYKYiz+hF+xMzwZJ1SgA5gzv SFyWB2jqtSd5rKzBj2vli2HQTQxOxjq11PfsoMMN7kXbM84aP+PCE0S4D121iPk4 T6SblVbLEhSUE52DSYHhjEYsfFSZRWx0YxDG/hPKO3ARYNR279+DJxNIDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFW6MfFvE/mz/rlkJgCRRHPo5NHQMB8GA1UdIwQY MBaAFKQtC4JmRKGDh8+DItt+ZGr2PZhqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEMwTGdtWkVvWU9IejRNaTIzNWthdlk5bUdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8yMjYwZjItM2NjZC00NGU1LTg0Mjgt ZTgyZDVlZTRlNDBmLzEvcEMwTGdtWkVvWU9IejRNaTIzNWthdlk5bUdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS8yMjYwZjItM2NjZC00NGU1LTg0MjgtZTgyZDVlZTRlNDBm LzEvcEMwTGdtWkVvWU9IejRNaTIzNWthdlk5bUdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALvDxdcqp AKO147IyFhTUT1U7yVCXrk8rG2XXpxFyckdqu6N+YXsiudlr6I8rElqGdMWNadiw RVFzyFwxxOiZihTE+HxfjOQX++koESfDhHCiwC52RusRyD7pukwjAboD1+XYLLMW D/vVQuaz4vm5gIkgvj+WMLmcqYYWJP8cjPRS67g+DOKHyYabCD0L9kTl6OLCvdL2 Ixiqxp/1tDSW+PZHPstiUUMHALYNEEN2cNaZ+hntMayTHXZRNG1SBsNqMbtmjKng h25g82QvD23Q8X3gr1dyDvdineNBalRJ3qgsx9EMpoJczTGEObajJO+m7Lp6P+1n bNq7HjPfXPkxwg== -----END CERTIFICATE-----Generated at Wed Dec 17 19:02:18 2025 by rpki-client