This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/218b0e-54b5-4ad0-9aa0-efd1a098b485/1/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.mft File: Pr-vihqjvB_z4-Qwxn-3pkEKPfc.mft (raw, json) Hash identifier: kHoHi3lPCZ2+zyS4lKxWHQcyXgDQDRzDAesFKtgfnzM= Subject key identifier: 25:24:79:CF:16:41:54:FD:A8:BA:2B:68:B0:82:77:25:E0:76:2F:8B Authority key identifier: 3E:BF:AF:8A:1A:A3:BC:1F:F3:E3:E4:30:C6:7F:B7:A6:41:0A:3D:F7 Certificate issuer: /CN=3ebfaf8a1aa3bc1ff3e3e430c67fb7a6410a3df7 Certificate serial: 019B571969103A2111B0C373AA5F3574038C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/218b0e-54b5-4ad0-9aa0-efd1a098b485/1/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.mft Manifest number: 0694 Signing time: Thu 25 Dec 2025 20:00:41 +0000 Manifest this update: Thu 25 Dec 2025 20:00:41 +0000 Manifest next update: Fri 26 Dec 2025 20:00:41 +0000 Files and hashes: 1: Pr-vihqjvB_z4-Qwxn-3pkEKPfc.crl (hash: 3IKJ4kDBp49FsiNgYkJ9pVsWII7vchYwNd1/E7MUNTo=) 2: Vdq57AskBeGBDlheyUDZPLCNdoE.roa (hash: lcSr2I4ArSoQ0YCCVynBh24JIyZ+E5ztrMNakx+ay84=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/218b0e-54b5-4ad0-9aa0-efd1a098b485/1/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/218b0e-54b5-4ad0-9aa0-efd1a098b485/1/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.mft rsync://rpki.ripe.net/repository/DEFAULT/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:57:19:69:10:3a:21:11:b0:c3:73:aa:5f:35:74:03:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ebfaf8a1aa3bc1ff3e3e430c67fb7a6410a3df7 Validity Not Before: Dec 25 20:00:41 2025 GMT Not After : Dec 26 20:00:41 2025 GMT Subject: CN=252479cf164154fda8ba2b68b0827725e0762f8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:2e:48:c1:f0:32:6d:e0:52:fd:bb:e7:f9:a8: a3:0a:fd:f9:27:40:7b:6e:b0:d5:40:c2:0e:c1:4d: d7:17:dc:0c:b8:c9:4e:a6:3f:13:70:9f:ba:e1:c8: 1f:42:a0:4a:d1:75:46:76:06:5b:4e:4e:07:6f:c5: 57:2f:2b:fd:e8:0c:d4:0d:fe:e0:37:15:ea:50:32: 94:6f:21:18:e3:a5:b3:ff:bb:bb:23:e7:63:04:b2: 13:12:96:70:ff:f1:b0:f8:5d:bc:40:37:22:e7:1c: ec:2b:dc:ec:29:55:dc:0a:3a:29:3f:51:13:54:3f: 74:b1:4a:0b:71:36:39:f4:c7:d1:f1:28:0b:f2:12: 71:bd:59:a8:3d:79:11:c4:e1:44:e8:70:9c:94:9d: b5:55:2a:d6:a8:ac:14:5c:5d:cf:e2:4f:6e:63:f0: 7a:bd:78:2a:83:d1:d8:b7:8a:57:7e:3f:54:3e:21: 4f:2e:b8:87:f3:45:5f:93:8f:74:7b:2e:69:98:03: eb:43:25:86:4d:5e:5d:bc:29:2e:63:30:7a:af:a9: 9e:ba:37:13:0c:8c:1d:a2:44:4f:03:00:fe:0f:a3: 91:7e:72:47:62:5a:46:a9:7e:a0:3a:a7:65:dc:42: 55:37:bf:fb:09:be:1e:41:5b:25:83:3c:bd:e6:46: 56:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:24:79:CF:16:41:54:FD:A8:BA:2B:68:B0:82:77:25:E0:76:2F:8B X509v3 Authority Key Identifier: keyid:3E:BF:AF:8A:1A:A3:BC:1F:F3:E3:E4:30:C6:7F:B7:A6:41:0A:3D:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/218b0e-54b5-4ad0-9aa0-efd1a098b485/1/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/218b0e-54b5-4ad0-9aa0-efd1a098b485/1/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:d5:39:32:fc:ee:eb:5f:08:72:ed:36:6b:04:81:09:4e:5a: 5e:ad:c5:0c:60:8b:90:45:0d:53:a6:95:01:ae:f7:c7:6e:c0: f0:85:86:41:16:17:fd:e6:a3:ad:cd:1e:cb:96:91:e5:0b:c8: 7b:7f:f0:f4:29:7a:cb:6f:0e:9c:50:c3:04:4b:ab:a9:47:23: 80:d7:f8:86:b8:21:90:7d:6f:3c:37:e9:85:f6:43:ef:f2:8c: a9:be:33:94:bb:ea:c5:80:28:d6:99:18:44:09:c4:58:94:a9: 80:bb:a4:fa:d8:7b:27:58:bc:d2:e0:92:9d:cd:21:b2:8b:b8: 98:7a:87:8e:d7:46:c5:c5:3e:0f:ed:55:58:f1:ba:cd:50:7b: a5:62:59:dc:3d:14:15:3a:9a:f7:64:8d:01:cc:6c:cb:7e:e0: 38:1e:e4:49:c7:6c:07:29:90:07:f7:76:f0:0d:f1:fc:7b:c9: a7:de:89:8a:16:3b:d0:0c:a2:07:c3:ac:56:a9:c6:f2:b8:86: af:8b:8e:c7:6b:11:41:14:ce:31:c9:ae:9f:17:7e:71:c9:6b: 47:e0:1b:0e:16:c4:9f:f9:6d:ee:fc:a1:cb:26:b4:0f:7f:b3: 80:86:eb:59:db:68:f7:c5:0d:2d:cb:ca:78:59:91:b5:3b:d4: 42:03:b6:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtXGWkQOiERsMNzql81dAOMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlYmZhZjhhMWFhM2JjMWZmM2UzZTQzMGM2N2ZiN2E2NDEw YTNkZjcwHhcNMjUxMjI1MjAwMDQxWhcNMjUxMjI2MjAwMDQxWjAzMTEwLwYDVQQD EygyNTI0NzljZjE2NDE1NGZkYThiYTJiNjhiMDgyNzcyNWUwNzYyZjhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAui5IwfAybeBS/bvn+aijCv35J0B7 brDVQMIOwU3XF9wMuMlOpj8TcJ+64cgfQqBK0XVGdgZbTk4Hb8VXLyv96AzUDf7g NxXqUDKUbyEY46Wz/7u7I+djBLITEpZw//Gw+F28QDci5xzsK9zsKVXcCjopP1ET VD90sUoLcTY59MfR8SgL8hJxvVmoPXkRxOFE6HCclJ21VSrWqKwUXF3P4k9uY/B6 vXgqg9HYt4pXfj9UPiFPLriH80Vfk490ey5pmAPrQyWGTV5dvCkuYzB6r6meujcT DIwdokRPAwD+D6ORfnJHYlpGqX6gOqdl3EJVN7/7Cb4eQVslgzy95kZWewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCUkec8WQVT9qLoraLCCdyXgdi+LMB8GA1UdIwQY MBaAFD6/r4oao7wf8+PkMMZ/t6ZBCj33MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHItdmlocWp2Ql96NC1Rd3huLTNwa0VLUGZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi8yMThiMGUtNTRiNS00YWQwLTlhYTAt ZWZkMWEwOThiNDg1LzEvUHItdmlocWp2Ql96NC1Rd3huLTNwa0VLUGZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi8yMThiMGUtNTRiNS00YWQwLTlhYTAtZWZkMWEwOThiNDg1 LzEvUHItdmlocWp2Ql96NC1Rd3huLTNwa0VLUGZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu9U5Mvzu 618Icu02awSBCU5aXq3FDGCLkEUNU6aVAa73x27A8IWGQRYX/eajrc0ey5aR5QvI e3/w9Cl6y28OnFDDBEurqUcjgNf4hrghkH1vPDfphfZD7/KMqb4zlLvqxYAo1pkY RAnEWJSpgLuk+th7J1i80uCSnc0hsou4mHqHjtdGxcU+D+1VWPG6zVB7pWJZ3D0U FTqa92SNAcxsy37gOB7kScdsBymQB/d28A3x/HvJp96JihY70AyiB8OsVqnG8riG r4uOx2sRQRTOMcmunxd+cclrR+AbDhbEn/lt7vyhyya0D3+zgIbrWdto98UNLcvK eFmRtTvUQgO2Qw== -----END CERTIFICATE-----Generated at Thu Dec 25 22:15:24 2025 by rpki-client