This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.mft File: pC0LgmZEoYOHz4Mi235kavY9mGo.mft (raw, json) Hash identifier: tc/AFN5xUgm/LY1g57qJGWf7K6qVQa3croDZ4zYXnEA= Subject key identifier: 07:4E:99:E1:7A:8A:3F:EA:90:73:08:D5:83:B6:19:1F:5A:00:EE:E7 Authority key identifier: A4:2D:0B:82:66:44:A1:83:87:CF:83:22:DB:7E:64:6A:F6:3D:98:6A Certificate issuer: /CN=a42d0b826644a18387cf8322db7e646af63d986a Certificate serial: 019B21E305F3037A460437DE277862BBD080 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pC0LgmZEoYOHz4Mi235kavY9mGo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.mft Manifest number: 04E6 Signing time: Mon 15 Dec 2025 12:01:24 +0000 Manifest this update: Mon 15 Dec 2025 12:01:24 +0000 Manifest next update: Tue 16 Dec 2025 12:01:24 +0000 Files and hashes: 1: pC0LgmZEoYOHz4Mi235kavY9mGo.crl (hash: FM2n8zZZE8bL6UTBL4ahe+3axuVeaZnRZaFFR3zMwVM=) 2: plbxQbrAe4NUuxrJeWYY2owN_A4.roa (hash: UGw+vuKvbSSScPoToTljhf+tZpkdRjY+j2rbaz2Dfco=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.mft rsync://rpki.ripe.net/repository/DEFAULT/pC0LgmZEoYOHz4Mi235kavY9mGo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:e3:05:f3:03:7a:46:04:37:de:27:78:62:bb:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a42d0b826644a18387cf8322db7e646af63d986a Validity Not Before: Dec 15 12:01:24 2025 GMT Not After : Dec 16 12:01:24 2025 GMT Subject: CN=074e99e17a8a3fea907308d583b6191f5a00eee7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:c2:cd:78:a4:27:53:b7:a1:b1:81:34:d1:5a: 8b:43:4e:85:2f:c8:e3:ed:8b:1d:80:14:a0:da:8f: d4:a3:fc:8c:12:df:62:d1:10:3a:fa:58:ad:77:b0: 48:a9:5b:76:61:07:21:b1:cf:23:84:bf:48:94:fc: 75:2a:cf:f3:e4:68:4f:8a:46:70:4d:0b:fc:98:af: 0e:df:3a:20:90:8e:a2:07:b4:f1:46:3b:1a:18:c3: fc:90:2d:51:ba:e6:37:80:1b:db:bf:a2:3d:9b:e0: d7:2c:f8:0c:ac:6b:62:34:ec:21:97:fa:1f:bd:64: fc:d4:ea:f4:5b:a5:93:e4:f0:ba:f1:3f:e0:a2:cf: 06:f8:a2:f4:b9:b3:45:df:84:18:7e:8e:db:5c:f0: 40:53:73:4b:7f:84:40:79:22:dd:cd:02:29:0e:fe: 38:57:af:d5:05:80:e3:8b:3c:93:5b:6c:b8:1a:f2: 6d:f9:52:ba:a4:a3:09:62:2b:e1:72:b7:52:01:e5: 9d:03:fd:6b:d0:51:8b:2e:bb:d0:2c:ec:d2:ba:82: e5:14:6f:9c:73:89:2b:91:e7:e6:f7:93:30:23:d0: 71:6e:25:87:95:4b:8d:f6:19:05:55:27:ca:ea:7a: ec:d6:12:8b:8d:ed:cc:6f:70:7f:e8:32:52:2d:66: fe:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:4E:99:E1:7A:8A:3F:EA:90:73:08:D5:83:B6:19:1F:5A:00:EE:E7 X509v3 Authority Key Identifier: keyid:A4:2D:0B:82:66:44:A1:83:87:CF:83:22:DB:7E:64:6A:F6:3D:98:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pC0LgmZEoYOHz4Mi235kavY9mGo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:7e:9a:17:7c:ab:ed:c4:9d:60:87:aa:97:60:83:51:92:21: 9f:33:e7:e5:41:f2:c6:1a:4f:cb:bb:2a:28:86:9a:44:bf:04: 82:6b:a8:25:51:75:85:f1:03:71:be:4d:26:6a:5a:5f:ef:59: 70:4b:6e:1d:6b:96:a7:6b:02:2e:b7:85:6d:0f:ba:8b:c6:d2: 04:04:45:dc:5a:47:99:0d:b0:fc:85:50:8e:2a:3f:45:09:b2: 09:49:f0:97:63:e9:a5:6d:a2:e7:7f:b4:90:1d:0b:42:3c:d5: d1:7e:17:b8:ee:f8:95:89:7b:7b:f9:d8:33:d3:19:4a:e1:4b: ba:26:96:90:ae:0e:df:27:ca:4a:83:0a:76:8f:4b:84:6d:07: 24:d9:b2:f8:65:6b:f7:fe:56:6e:70:75:26:e7:c0:97:bf:5a: 05:ac:15:d9:4f:74:1f:64:fa:da:c9:ae:f0:27:13:1d:59:70: c3:e5:89:6e:1c:81:7b:62:b9:c3:d9:e3:db:05:97:a0:5d:29: b6:dc:f8:f9:5e:1f:e5:97:bf:d1:53:67:87:ab:89:40:da:f7: 80:ac:8b:c1:5f:4c:57:be:ac:3a:91:4d:ec:ff:87:04:cf:f3: 89:4a:21:c4:8a:6a:6d:4e:83:13:41:a4:9b:fd:f3:cf:ea:72: a1:e7:66:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsh4wXzA3pGBDfeJ3hiu9CAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0MmQwYjgyNjY0NGExODM4N2NmODMyMmRiN2U2NDZhZjYz ZDk4NmEwHhcNMjUxMjE1MTIwMTI0WhcNMjUxMjE2MTIwMTI0WjAzMTEwLwYDVQQD EygwNzRlOTllMTdhOGEzZmVhOTA3MzA4ZDU4M2I2MTkxZjVhMDBlZWU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2sLNeKQnU7ehsYE00VqLQ06FL8jj 7YsdgBSg2o/Uo/yMEt9i0RA6+litd7BIqVt2YQchsc8jhL9IlPx1Ks/z5GhPikZw TQv8mK8O3zogkI6iB7TxRjsaGMP8kC1RuuY3gBvbv6I9m+DXLPgMrGtiNOwhl/of vWT81Or0W6WT5PC68T/gos8G+KL0ubNF34QYfo7bXPBAU3NLf4RAeSLdzQIpDv44 V6/VBYDjizyTW2y4GvJt+VK6pKMJYivhcrdSAeWdA/1r0FGLLrvQLOzSuoLlFG+c c4krkefm95MwI9BxbiWHlUuN9hkFVSfK6nrs1hKLje3Mb3B/6DJSLWb+EQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAdOmeF6ij/qkHMI1YO2GR9aAO7nMB8GA1UdIwQY MBaAFKQtC4JmRKGDh8+DItt+ZGr2PZhqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEMwTGdtWkVvWU9IejRNaTIzNWthdlk5bUdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8yMjYwZjItM2NjZC00NGU1LTg0Mjgt ZTgyZDVlZTRlNDBmLzEvcEMwTGdtWkVvWU9IejRNaTIzNWthdlk5bUdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS8yMjYwZjItM2NjZC00NGU1LTg0MjgtZTgyZDVlZTRlNDBm LzEvcEMwTGdtWkVvWU9IejRNaTIzNWthdlk5bUdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi36aF3yr 7cSdYIeql2CDUZIhnzPn5UHyxhpPy7sqKIaaRL8EgmuoJVF1hfEDcb5NJmpaX+9Z cEtuHWuWp2sCLreFbQ+6i8bSBARF3FpHmQ2w/IVQjio/RQmyCUnwl2PppW2i53+0 kB0LQjzV0X4XuO74lYl7e/nYM9MZSuFLuiaWkK4O3yfKSoMKdo9LhG0HJNmy+GVr 9/5WbnB1JufAl79aBawV2U90H2T62smu8CcTHVlww+WJbhyBe2K5w9nj2wWXoF0p ttz4+V4f5Ze/0VNnh6uJQNr3gKyLwV9MV76sOpFN7P+HBM/ziUohxIpqbU6DE0Gk m/3zz+pyoedmLA== -----END CERTIFICATE-----Generated at Mon Dec 15 14:50:03 2025 by rpki-client