This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.mft File: PRYHLKAlL6tQZY1zb_LGDBYp3HY.mft (raw, json) Hash identifier: Jgqlot1xls2aYRZC1VLVaZ4L87qRND90WoqTA76Xwno= Subject key identifier: 27:F1:1C:5F:3E:0A:C9:F3:93:4F:E2:70:AD:24:BD:BA:6D:81:0C:3D Authority key identifier: 3D:16:07:2C:A0:25:2F:AB:50:65:8D:73:6F:F2:C6:0C:16:29:DC:76 Certificate issuer: /CN=3d16072ca0252fab50658d736ff2c60c1629dc76 Certificate serial: 019B40917448D62C6B40B39275208B2D9194 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PRYHLKAlL6tQZY1zb_LGDBYp3HY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.mft Manifest number: 1050 Signing time: Sun 21 Dec 2025 11:00:32 +0000 Manifest this update: Sun 21 Dec 2025 11:00:32 +0000 Manifest next update: Mon 22 Dec 2025 11:00:32 +0000 Files and hashes: 1: 8e7eehP1l-DLf5STdKJWnoHYbKQ.roa (hash: K8SacJP+Z6piM83BegnBqW6J1m/glPf8EgTcnUYrotM=) 2: PRYHLKAlL6tQZY1zb_LGDBYp3HY.crl (hash: WUtx6cJnrXWn9tSH9Pv87PmoeDpiCmCz6jtbMV3WI9o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.mft rsync://rpki.ripe.net/repository/DEFAULT/PRYHLKAlL6tQZY1zb_LGDBYp3HY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:91:74:48:d6:2c:6b:40:b3:92:75:20:8b:2d:91:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d16072ca0252fab50658d736ff2c60c1629dc76 Validity Not Before: Dec 21 11:00:32 2025 GMT Not After : Dec 22 11:00:32 2025 GMT Subject: CN=27f11c5f3e0ac9f3934fe270ad24bdba6d810c3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:9c:52:44:a5:bc:8e:98:97:0a:4f:da:a9:c8: 7c:99:6d:c6:ce:d6:8f:09:17:2f:36:f9:10:39:11: 54:00:da:1d:0e:21:ce:10:c2:04:9c:a9:6d:2a:6d: e4:d7:50:80:3d:77:03:b7:04:86:be:ea:cd:60:56: 83:59:98:94:a1:16:82:ba:74:e9:79:c6:58:24:ec: da:bf:a3:60:47:68:c2:18:29:ff:3e:88:a3:db:0a: 63:a3:7e:43:55:0a:12:01:42:eb:a7:62:40:bf:3e: d6:7a:43:78:f0:29:b4:3e:50:f3:58:34:ce:fa:b5: e6:e9:b4:a7:6b:67:dc:73:18:24:55:7c:1b:bf:ba: 7d:83:0f:06:da:94:55:57:a2:b8:7e:16:8c:6e:1e: db:a6:0c:21:11:d8:bf:ac:b0:2a:55:1e:4a:92:92: ab:3d:63:b6:f0:45:bd:0a:55:51:89:2c:58:35:f7: c2:65:1e:ef:5c:22:ee:8d:d5:39:85:77:2f:a3:22: 88:3e:b0:31:12:83:40:55:8b:d4:28:03:6c:39:60: a7:aa:15:e7:12:9d:11:b1:1c:f9:18:e4:9b:48:88: 3b:bb:c7:43:59:17:ff:ff:71:5e:8d:0f:ec:e4:eb: 73:39:3a:13:1d:ed:09:22:fc:d6:60:f4:b0:78:a1: 47:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:F1:1C:5F:3E:0A:C9:F3:93:4F:E2:70:AD:24:BD:BA:6D:81:0C:3D X509v3 Authority Key Identifier: keyid:3D:16:07:2C:A0:25:2F:AB:50:65:8D:73:6F:F2:C6:0C:16:29:DC:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRYHLKAlL6tQZY1zb_LGDBYp3HY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:0e:a3:7b:3c:b3:e5:ba:0d:8b:36:ac:6c:bc:0e:bf:38:84: 33:96:7c:cf:02:e8:56:4f:f6:95:0b:04:fe:d7:7a:cf:70:0f: 1c:a4:24:43:f6:76:9b:87:34:d7:83:3f:54:55:30:af:eb:1a: 56:91:89:c9:af:00:b3:b5:ac:81:20:bc:63:32:b2:a6:6e:d2: 35:d4:b1:e2:e7:00:5c:32:d6:82:61:18:5a:ba:97:46:a5:7b: 4b:9e:b1:a7:2d:99:01:1e:6d:d6:e0:49:20:1f:e3:95:b9:f6: 61:22:68:ce:84:5c:99:38:de:e3:fb:53:31:19:22:6d:89:a2: 69:44:79:14:35:c4:dc:64:26:0c:70:a7:ea:93:54:c4:dc:af: aa:ae:70:14:dc:7f:37:1c:2d:0b:ea:74:9e:a5:c8:2d:9e:40: 56:28:0e:48:2e:04:d0:89:4e:fb:f2:a2:e9:fd:48:82:3d:4e: eb:df:23:c8:31:a2:27:e3:2a:a4:b2:8f:cb:f6:7c:72:2a:8e: 88:dd:56:1a:b7:09:92:fc:73:9d:10:e3:39:f7:1b:d0:33:9b: 61:f6:32:89:9f:9a:42:d8:2e:05:a8:a0:77:18:bf:ec:09:3e: 49:1a:19:73:09:4f:f0:2f:1b:50:6d:2c:4c:d6:15:87:26:a5: 01:ed:f3:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAkXRI1ixrQLOSdSCLLZGUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkMTYwNzJjYTAyNTJmYWI1MDY1OGQ3MzZmZjJjNjBjMTYy OWRjNzYwHhcNMjUxMjIxMTEwMDMyWhcNMjUxMjIyMTEwMDMyWjAzMTEwLwYDVQQD EygyN2YxMWM1ZjNlMGFjOWYzOTM0ZmUyNzBhZDI0YmRiYTZkODEwYzNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJxSRKW8jpiXCk/aqch8mW3GztaP CRcvNvkQORFUANodDiHOEMIEnKltKm3k11CAPXcDtwSGvurNYFaDWZiUoRaCunTp ecZYJOzav6NgR2jCGCn/Poij2wpjo35DVQoSAULrp2JAvz7WekN48Cm0PlDzWDTO +rXm6bSna2fccxgkVXwbv7p9gw8G2pRVV6K4fhaMbh7bpgwhEdi/rLAqVR5KkpKr PWO28EW9ClVRiSxYNffCZR7vXCLujdU5hXcvoyKIPrAxEoNAVYvUKANsOWCnqhXn Ep0RsRz5GOSbSIg7u8dDWRf//3FejQ/s5OtzOToTHe0JIvzWYPSweKFHhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCfxHF8+Csnzk0/icK0kvbptgQw9MB8GA1UdIwQY MBaAFD0WByygJS+rUGWNc2/yxgwWKdx2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFJZSExLQWxMNnRRWlkxemJfTEdEQllwM0hZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8yZmJmMmMtNTQyZi00Yzk4LTk5ZGIt YTRlNWRlOGVlNzE2LzEvUFJZSExLQWxMNnRRWlkxemJfTEdEQllwM0hZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi8yZmJmMmMtNTQyZi00Yzk4LTk5ZGItYTRlNWRlOGVlNzE2 LzEvUFJZSExLQWxMNnRRWlkxemJfTEdEQllwM0hZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASA6jezyz 5boNizasbLwOvziEM5Z8zwLoVk/2lQsE/td6z3APHKQkQ/Z2m4c014M/VFUwr+sa VpGJya8As7WsgSC8YzKypm7SNdSx4ucAXDLWgmEYWrqXRqV7S56xpy2ZAR5t1uBJ IB/jlbn2YSJozoRcmTje4/tTMRkibYmiaUR5FDXE3GQmDHCn6pNUxNyvqq5wFNx/ NxwtC+p0nqXILZ5AVigOSC4E0IlO+/Ki6f1Igj1O698jyDGiJ+MqpLKPy/Z8ciqO iN1WGrcJkvxznRDjOfcb0DObYfYyiZ+aQtguBaigdxi/7Ak+SRoZcwlP8C8bUG0s TNYVhyalAe3zPw== -----END CERTIFICATE-----Generated at Sun Dec 21 19:14:33 2025 by rpki-client