This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/218b0e-54b5-4ad0-9aa0-efd1a098b485/1/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.mft File: Pr-vihqjvB_z4-Qwxn-3pkEKPfc.mft (raw, json) Hash identifier: 0rmnDN3RGbtG0693RkH4cgwPzgZFNFOxU7LK+98/7F8= Subject key identifier: 5A:D5:B8:D3:E7:E6:56:C9:7B:AD:16:80:30:78:48:8B:86:A8:DA:41 Authority key identifier: 3E:BF:AF:8A:1A:A3:BC:1F:F3:E3:E4:30:C6:7F:B7:A6:41:0A:3D:F7 Certificate issuer: /CN=3ebfaf8a1aa3bc1ff3e3e430c67fb7a6410a3df7 Certificate serial: 019B6A69151EA52C48831DECB6BB95CAAC1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/218b0e-54b5-4ad0-9aa0-efd1a098b485/1/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.mft Manifest number: 069E Signing time: Mon 29 Dec 2025 14:00:30 +0000 Manifest this update: Mon 29 Dec 2025 14:00:30 +0000 Manifest next update: Tue 30 Dec 2025 14:00:30 +0000 Files and hashes: 1: Pr-vihqjvB_z4-Qwxn-3pkEKPfc.crl (hash: cLlmYKiY9Wkxfo+GZxYRbMGibs4gvCzhK0yZoYPAkYI=) 2: Vdq57AskBeGBDlheyUDZPLCNdoE.roa (hash: lcSr2I4ArSoQ0YCCVynBh24JIyZ+E5ztrMNakx+ay84=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/218b0e-54b5-4ad0-9aa0-efd1a098b485/1/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/218b0e-54b5-4ad0-9aa0-efd1a098b485/1/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.mft rsync://rpki.ripe.net/repository/DEFAULT/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 14:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6a:69:15:1e:a5:2c:48:83:1d:ec:b6:bb:95:ca:ac:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ebfaf8a1aa3bc1ff3e3e430c67fb7a6410a3df7 Validity Not Before: Dec 29 14:00:30 2025 GMT Not After : Dec 30 14:00:30 2025 GMT Subject: CN=5ad5b8d3e7e656c97bad16803078488b86a8da41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:cb:59:53:0e:ed:71:f6:78:33:48:81:1d:f5: 21:d8:12:17:f6:02:0d:80:6a:dd:9e:ef:ca:d8:ba: 06:4d:56:df:bc:4c:f8:59:79:0b:36:a1:10:a8:1f: 1a:80:c9:fa:90:e6:d4:dc:35:9c:0c:7a:71:17:83: 83:7b:df:5b:3b:93:fd:3e:d0:10:99:08:c7:2e:8a: 55:da:9b:a7:1d:f6:8f:43:33:0d:11:47:6c:3c:d2: 76:fe:b2:cb:04:b2:ac:e8:8d:ed:1c:6e:08:ef:41: c4:52:af:52:64:95:a7:92:c3:20:d8:0c:20:4b:79: d2:e0:1d:b9:a1:f1:c7:85:ca:05:11:cc:da:3f:0b: c0:5f:b0:0a:68:99:46:79:54:75:84:72:4a:ed:18: c7:9f:26:07:2c:19:3c:ef:7c:54:79:c4:5a:b4:db: 2d:2a:9a:3e:28:ec:b9:03:7e:e9:b1:71:a6:56:8f: 9c:dc:15:2f:5a:ce:4a:45:77:2c:98:ca:c2:3a:8a: 26:71:3e:37:96:87:71:6c:f3:3d:3a:7f:18:d8:99: ab:b9:11:22:1e:29:ae:7b:5b:14:91:f9:11:41:aa: d6:d4:9e:ab:e4:23:59:de:4f:4e:91:43:8b:82:bd: 90:a1:94:a8:44:99:6e:f4:69:77:83:ab:5b:4f:c3: 8a:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:D5:B8:D3:E7:E6:56:C9:7B:AD:16:80:30:78:48:8B:86:A8:DA:41 X509v3 Authority Key Identifier: keyid:3E:BF:AF:8A:1A:A3:BC:1F:F3:E3:E4:30:C6:7F:B7:A6:41:0A:3D:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/218b0e-54b5-4ad0-9aa0-efd1a098b485/1/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/218b0e-54b5-4ad0-9aa0-efd1a098b485/1/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:3f:15:df:f0:b9:30:51:66:b9:ab:97:0f:d0:5c:e2:98:2f: d8:d6:7c:1d:aa:19:4c:64:27:14:d5:e6:8a:85:62:0b:34:fd: f6:5b:c6:a5:02:60:36:1c:d6:a9:10:a7:97:65:68:38:06:ef: 99:e1:dd:e1:3d:b3:ce:1c:90:ea:67:2f:7b:8a:60:2f:b4:24: 74:87:5f:3e:8c:09:3f:f5:19:79:00:ff:af:e3:43:55:17:0e: 89:2c:70:1a:24:41:d9:dd:0c:50:71:00:f4:f8:38:ae:bb:6e: 09:98:64:99:56:77:fd:dc:33:bd:81:f4:0b:ad:4e:a7:2e:44: 81:bf:ae:a7:18:04:f3:3e:8f:85:67:92:c8:49:fe:e8:46:f5: 13:e3:d4:be:7e:fa:b7:75:ce:6e:a5:12:2e:8c:d9:00:b8:07: bc:02:ea:b3:9e:57:3a:21:cd:be:42:d1:38:02:2f:59:31:59: cd:e3:f5:93:97:43:1f:9a:4f:d6:6d:67:45:1f:8a:92:90:2f: ab:ce:a0:57:59:bb:ef:c8:4b:ee:d2:69:14:4f:51:ee:9d:4b: ef:59:be:73:53:d7:57:fc:a9:3a:58:17:87:76:49:2e:fd:ff: fc:b8:13:2e:d3:ab:3e:7c:ec:6a:80:33:25:ae:94:30:3b:cb: 51:45:2d:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtqaRUepSxIgx3struVyqwfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlYmZhZjhhMWFhM2JjMWZmM2UzZTQzMGM2N2ZiN2E2NDEw YTNkZjcwHhcNMjUxMjI5MTQwMDMwWhcNMjUxMjMwMTQwMDMwWjAzMTEwLwYDVQQD Eyg1YWQ1YjhkM2U3ZTY1NmM5N2JhZDE2ODAzMDc4NDg4Yjg2YThkYTQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtctZUw7tcfZ4M0iBHfUh2BIX9gIN gGrdnu/K2LoGTVbfvEz4WXkLNqEQqB8agMn6kObU3DWcDHpxF4ODe99bO5P9PtAQ mQjHLopV2punHfaPQzMNEUdsPNJ2/rLLBLKs6I3tHG4I70HEUq9SZJWnksMg2Awg S3nS4B25ofHHhcoFEczaPwvAX7AKaJlGeVR1hHJK7RjHnyYHLBk873xUecRatNst Kpo+KOy5A37psXGmVo+c3BUvWs5KRXcsmMrCOoomcT43lodxbPM9On8Y2JmruREi Himue1sUkfkRQarW1J6r5CNZ3k9OkUOLgr2QoZSoRJlu9Gl3g6tbT8OKhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFrVuNPn5lbJe60WgDB4SIuGqNpBMB8GA1UdIwQY MBaAFD6/r4oao7wf8+PkMMZ/t6ZBCj33MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHItdmlocWp2Ql96NC1Rd3huLTNwa0VLUGZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi8yMThiMGUtNTRiNS00YWQwLTlhYTAt ZWZkMWEwOThiNDg1LzEvUHItdmlocWp2Ql96NC1Rd3huLTNwa0VLUGZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi8yMThiMGUtNTRiNS00YWQwLTlhYTAtZWZkMWEwOThiNDg1 LzEvUHItdmlocWp2Ql96NC1Rd3huLTNwa0VLUGZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACD8V3/C5 MFFmuauXD9Bc4pgv2NZ8HaoZTGQnFNXmioViCzT99lvGpQJgNhzWqRCnl2VoOAbv meHd4T2zzhyQ6mcve4pgL7QkdIdfPowJP/UZeQD/r+NDVRcOiSxwGiRB2d0MUHEA 9Pg4rrtuCZhkmVZ3/dwzvYH0C61Opy5Egb+upxgE8z6PhWeSyEn+6Eb1E+PUvn76 t3XObqUSLozZALgHvALqs55XOiHNvkLROAIvWTFZzeP1k5dDH5pP1m1nRR+KkpAv q86gV1m778hL7tJpFE9R7p1L71m+c1PXV/ypOlgXh3ZJLv3//LgTLtOrPnzsaoAz Ja6UMDvLUUUtdQ== -----END CERTIFICATE-----Generated at Mon Dec 29 22:46:56 2025 by rpki-client