This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1fcfba-cda0-4ad3-9893-94587d8331f9/1/pRZKRoFl6caTvYGEw8pWbKcP1WA.mft File: pRZKRoFl6caTvYGEw8pWbKcP1WA.mft (raw, json) Hash identifier: Wvs2pHfPQ2nRmyxi07B8ShkJMIT9niiQiA1uT+a2i3o= Subject key identifier: C3:E2:3D:04:0C:DE:91:4E:C2:14:5D:14:AE:2B:E9:36:34:6E:FB:5F Authority key identifier: A5:16:4A:46:81:65:E9:C6:93:BD:81:84:C3:CA:56:6C:A7:0F:D5:60 Certificate issuer: /CN=a5164a468165e9c693bd8184c3ca566ca70fd560 Certificate serial: 019B548680BFF801B95C0B8755D6875965FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pRZKRoFl6caTvYGEw8pWbKcP1WA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1fcfba-cda0-4ad3-9893-94587d8331f9/1/pRZKRoFl6caTvYGEw8pWbKcP1WA.mft Manifest number: 0256 Signing time: Thu 25 Dec 2025 08:00:59 +0000 Manifest this update: Thu 25 Dec 2025 08:00:59 +0000 Manifest next update: Fri 26 Dec 2025 08:00:59 +0000 Files and hashes: 1: pRZKRoFl6caTvYGEw8pWbKcP1WA.crl (hash: 4XerqMCstl7ZYHbYx2RtZTFcMUDQxqGYcUrC8V4uGB4=) 2: rIL66Wr2JO0hUiDgtrzPfwsPCdg.roa (hash: IzHYSyi3wxidgryTdPg9C85nPJtyfKau5Hu7/N9OG4I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/1fcfba-cda0-4ad3-9893-94587d8331f9/1/pRZKRoFl6caTvYGEw8pWbKcP1WA.crl rsync://rpki.ripe.net/repository/DEFAULT/24/1fcfba-cda0-4ad3-9893-94587d8331f9/1/pRZKRoFl6caTvYGEw8pWbKcP1WA.mft rsync://rpki.ripe.net/repository/DEFAULT/pRZKRoFl6caTvYGEw8pWbKcP1WA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 08:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:86:80:bf:f8:01:b9:5c:0b:87:55:d6:87:59:65:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5164a468165e9c693bd8184c3ca566ca70fd560 Validity Not Before: Dec 25 08:00:59 2025 GMT Not After : Dec 26 08:00:59 2025 GMT Subject: CN=c3e23d040cde914ec2145d14ae2be936346efb5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:11:d0:db:0b:e8:a6:9a:a0:e8:f7:fc:1f:7b: f7:03:cc:64:2d:ee:6f:1d:0d:95:da:b3:e8:9d:13: 69:e6:52:d3:ef:de:cb:94:d7:f1:b5:3e:04:c8:24: 03:3a:f5:c0:98:86:48:32:70:14:c0:c3:7a:b4:8f: 5c:8d:ef:4a:87:dd:44:e1:fa:d2:d2:4d:18:06:62: 95:ab:47:b8:f4:1a:29:05:ee:59:f4:bd:19:a0:4a: bb:6b:14:05:d7:a6:f2:d0:ec:f9:a2:4f:5e:bf:ee: 03:3f:ea:24:f9:58:e0:b9:42:5b:b8:29:24:69:88: b3:88:2a:11:47:6c:38:75:2f:90:fc:dc:cf:64:6e: 87:c2:65:5b:3c:2c:90:a8:70:53:cf:f3:e4:39:5c: 01:4a:2d:21:34:02:f9:4f:60:1d:3e:01:9c:08:fe: c2:d5:0e:89:3e:8d:2e:f3:49:80:83:90:a9:de:9a: ba:82:1b:97:c4:6e:be:2f:11:d7:c5:ef:f9:13:48: d7:32:4a:0c:31:ac:91:19:59:83:e1:90:8a:f6:e4: 5a:e1:05:5d:03:3d:0c:7d:d6:4c:24:70:39:22:f5: f6:7a:a6:e5:dd:1d:80:56:63:c2:55:88:87:be:dd: 0b:b1:36:b7:12:d3:4a:60:53:0b:3a:b8:82:8d:5e: f7:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:E2:3D:04:0C:DE:91:4E:C2:14:5D:14:AE:2B:E9:36:34:6E:FB:5F X509v3 Authority Key Identifier: keyid:A5:16:4A:46:81:65:E9:C6:93:BD:81:84:C3:CA:56:6C:A7:0F:D5:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pRZKRoFl6caTvYGEw8pWbKcP1WA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1fcfba-cda0-4ad3-9893-94587d8331f9/1/pRZKRoFl6caTvYGEw8pWbKcP1WA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1fcfba-cda0-4ad3-9893-94587d8331f9/1/pRZKRoFl6caTvYGEw8pWbKcP1WA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:32:89:2b:b2:c2:cf:50:49:94:7b:96:64:c6:0b:56:e4:de: a5:fe:2c:22:8a:c0:cd:f2:5d:d5:3e:39:3b:92:46:dc:cc:c6: db:be:90:74:cc:8b:b2:27:e3:5f:36:1e:98:f2:18:5a:46:49: 4e:51:2e:10:27:79:9b:f9:39:19:07:3d:a1:c1:1b:0d:c3:07: da:ce:ae:28:f8:bf:9f:82:ee:4e:f8:00:fc:04:8c:4a:50:18: 1b:a5:f6:c4:08:44:84:b9:9b:49:d5:a2:df:45:65:b4:9e:6f: fa:33:49:03:69:94:23:ea:a5:4d:2f:27:6d:02:8b:a2:89:66: d0:1f:46:3e:32:d9:95:10:d2:85:98:ab:f1:2e:31:5b:6b:b0: 21:2c:fe:6a:72:e5:55:63:0a:72:0e:fe:ea:87:89:bc:8c:ee: 7c:1c:76:94:fd:5c:a3:4b:44:6e:b3:ef:80:c9:0a:e9:92:d1: d5:b9:86:51:9b:86:49:ac:00:8b:59:1c:96:ad:f2:2e:b6:cf: 95:11:b8:38:b9:59:7b:81:6b:4e:51:18:d9:61:29:c7:05:ce: a5:b4:c8:2a:fc:5d:56:a2:35:dc:03:ef:70:8c:71:0a:bd:8a: c9:40:20:d3:e4:b3:d9:52:4e:db:49:2e:d2:6c:ac:0d:8c:76: 3b:19:7b:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtUhoC/+AG5XAuHVdaHWWX/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1MTY0YTQ2ODE2NWU5YzY5M2JkODE4NGMzY2E1NjZjYTcw ZmQ1NjAwHhcNMjUxMjI1MDgwMDU5WhcNMjUxMjI2MDgwMDU5WjAzMTEwLwYDVQQD EyhjM2UyM2QwNDBjZGU5MTRlYzIxNDVkMTRhZTJiZTkzNjM0NmVmYjVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRHQ2wvoppqg6Pf8H3v3A8xkLe5v HQ2V2rPonRNp5lLT797LlNfxtT4EyCQDOvXAmIZIMnAUwMN6tI9cje9Kh91E4frS 0k0YBmKVq0e49BopBe5Z9L0ZoEq7axQF16by0Oz5ok9ev+4DP+ok+VjguUJbuCkk aYiziCoRR2w4dS+Q/NzPZG6HwmVbPCyQqHBTz/PkOVwBSi0hNAL5T2AdPgGcCP7C 1Q6JPo0u80mAg5Cp3pq6ghuXxG6+LxHXxe/5E0jXMkoMMayRGVmD4ZCK9uRa4QVd Az0MfdZMJHA5IvX2eqbl3R2AVmPCVYiHvt0LsTa3EtNKYFMLOriCjV73wwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMPiPQQM3pFOwhRdFK4r6TY0bvtfMB8GA1UdIwQY MBaAFKUWSkaBZenGk72BhMPKVmynD9VgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFJaS1JvRmw2Y2FUdllHRXc4cFdiS2NQMVdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8xZmNmYmEtY2RhMC00YWQzLTk4OTMt OTQ1ODdkODMzMWY5LzEvcFJaS1JvRmw2Y2FUdllHRXc4cFdiS2NQMVdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC8xZmNmYmEtY2RhMC00YWQzLTk4OTMtOTQ1ODdkODMzMWY5 LzEvcFJaS1JvRmw2Y2FUdllHRXc4cFdiS2NQMVdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAajKJK7LC z1BJlHuWZMYLVuTepf4sIorAzfJd1T45O5JG3MzG276QdMyLsifjXzYemPIYWkZJ TlEuECd5m/k5GQc9ocEbDcMH2s6uKPi/n4LuTvgA/ASMSlAYG6X2xAhEhLmbSdWi 30VltJ5v+jNJA2mUI+qlTS8nbQKLoolm0B9GPjLZlRDShZir8S4xW2uwISz+anLl VWMKcg7+6oeJvIzufBx2lP1co0tEbrPvgMkK6ZLR1bmGUZuGSawAi1kclq3yLrbP lRG4OLlZe4FrTlEY2WEpxwXOpbTIKvxdVqI13APvcIxxCr2KyUAg0+Sz2VJO20ku 0mysDYx2Oxl7tg== -----END CERTIFICATE-----Generated at Thu Dec 25 13:58:05 2025 by rpki-client