This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.mft File: prswRa6njo-nZIEpcU-3NgaNw3s.mft (raw, json) Hash identifier: 68NtsY3QX3Y5PeIm/dnb7Fevkn76uDQ+p/kWBrtlZes= Subject key identifier: CF:9C:B8:B1:F8:4B:FA:A0:A3:14:22:AD:17:E3:A7:3B:7C:DC:78:BA Authority key identifier: A6:BB:30:45:AE:A7:8E:8F:A7:64:81:29:71:4F:B7:36:06:8D:C3:7B Certificate issuer: /CN=a6bb3045aea78e8fa7648129714fb736068dc37b Certificate serial: 019B3EDB15DCA08D9642B8680C9AA05995CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/prswRa6njo-nZIEpcU-3NgaNw3s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.mft Manifest number: 0AE4 Signing time: Sun 21 Dec 2025 03:01:43 +0000 Manifest this update: Sun 21 Dec 2025 03:01:43 +0000 Manifest next update: Mon 22 Dec 2025 03:01:43 +0000 Files and hashes: 1: HiZN67Xy7B4VaWN1D2-QW-5lZMM.roa (hash: 8QSJj0VNdliqUGzz62yE+WiUcnkzhswyxYG6b8R64/Q=) 2: prswRa6njo-nZIEpcU-3NgaNw3s.crl (hash: Tb/g/NqUsQ5QALsGhan65BL71qymcHP6vFf65IEMBws=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.mft rsync://rpki.ripe.net/repository/DEFAULT/prswRa6njo-nZIEpcU-3NgaNw3s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:db:15:dc:a0:8d:96:42:b8:68:0c:9a:a0:59:95:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6bb3045aea78e8fa7648129714fb736068dc37b Validity Not Before: Dec 21 03:01:43 2025 GMT Not After : Dec 22 03:01:43 2025 GMT Subject: CN=cf9cb8b1f84bfaa0a31422ad17e3a73b7cdc78ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d0:3f:5b:5a:20:06:14:d0:29:99:c8:17:f3: 5f:0a:df:94:be:8e:78:07:3b:66:81:da:48:a6:2b: 2e:d0:17:5d:e4:a7:c6:a4:8e:87:fa:5a:b9:94:89: c5:7b:79:d7:e5:34:5b:4e:69:ec:ab:74:80:a3:1d: 58:b2:95:d6:39:a6:af:bd:56:3e:9a:c5:fa:f0:73: 41:d3:01:e6:b5:f9:93:a3:b2:e6:7a:9d:e6:dd:32: e6:6d:3a:fd:b3:e7:0f:33:5c:82:6e:9b:84:f7:0f: 51:5b:34:c8:1c:0f:04:4a:f9:25:92:12:d1:3b:66: 3a:0e:75:a8:be:67:c7:4f:a4:7f:5b:24:d6:bb:30: a2:0c:2d:34:22:bd:ff:e7:96:e0:c8:27:01:0a:05: 65:06:04:20:8a:0f:0c:46:fc:ab:c6:21:e1:e0:74: cd:96:ec:d3:62:b4:67:cf:c5:17:a0:14:03:01:2c: 71:65:d6:12:11:9e:88:2f:c5:1f:c7:6c:e6:3e:97: 59:72:a7:f8:4d:92:6d:05:e2:0d:46:26:6a:ec:e4: 7c:cc:e9:e4:2d:db:2c:97:0a:f2:34:45:ac:57:d0: e8:fc:5e:fa:1b:0e:30:a3:0c:55:4b:b6:94:60:3f: 52:79:0a:00:5c:6b:69:e6:73:5a:d1:d0:cb:51:6b: e9:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:9C:B8:B1:F8:4B:FA:A0:A3:14:22:AD:17:E3:A7:3B:7C:DC:78:BA X509v3 Authority Key Identifier: keyid:A6:BB:30:45:AE:A7:8E:8F:A7:64:81:29:71:4F:B7:36:06:8D:C3:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prswRa6njo-nZIEpcU-3NgaNw3s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:90:3b:69:f8:aa:7c:98:0a:23:65:84:0e:df:df:29:8b:33: 7e:56:c5:6a:dc:8d:70:df:48:04:b9:28:6c:4b:28:37:8c:e4: 0f:3e:25:cf:31:b6:50:fc:98:93:f4:3e:1f:04:9f:f9:6a:f5: b5:94:29:5c:07:39:bc:26:f5:81:43:dc:28:92:38:03:99:ff: 65:c8:5a:01:17:3a:63:05:bd:2c:cf:9b:67:06:61:22:d1:89: 41:d1:05:22:41:a3:92:41:3f:08:27:61:e1:4b:dd:b7:11:4e: aa:88:0f:5e:81:f7:3f:18:70:b7:36:b6:4f:5c:d3:ab:5d:13: f8:c8:47:8d:92:f1:03:30:83:36:ac:53:65:6d:be:85:7f:6f: 18:4e:2e:b4:8e:10:8b:b5:6a:04:b5:4d:3a:f3:35:d2:ab:c4: ca:44:6a:50:4e:c8:ef:8e:4f:10:df:6e:6d:68:a4:54:88:9c: 4b:10:65:08:4f:d1:35:c2:93:a5:84:35:7e:ae:c0:9d:2b:af: 7b:a6:a3:67:b0:c6:09:02:dc:a7:d9:b2:68:9d:7e:95:ca:3e: b0:68:f4:b0:21:fa:61:c9:5f:d0:39:f4:95:eb:04:be:70:66: fd:89:b9:c0:f1:f6:b2:3a:1f:29:68:1a:0a:9b:b6:01:c0:ac: 34:d5:e0:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2xXcoI2WQrhoDJqgWZXNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2YmIzMDQ1YWVhNzhlOGZhNzY0ODEyOTcxNGZiNzM2MDY4 ZGMzN2IwHhcNMjUxMjIxMDMwMTQzWhcNMjUxMjIyMDMwMTQzWjAzMTEwLwYDVQQD EyhjZjljYjhiMWY4NGJmYWEwYTMxNDIyYWQxN2UzYTczYjdjZGM3OGJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNA/W1ogBhTQKZnIF/NfCt+Uvo54 BztmgdpIpisu0Bdd5KfGpI6H+lq5lInFe3nX5TRbTmnsq3SAox1YspXWOaavvVY+ msX68HNB0wHmtfmTo7Lmep3m3TLmbTr9s+cPM1yCbpuE9w9RWzTIHA8ESvklkhLR O2Y6DnWovmfHT6R/WyTWuzCiDC00Ir3/55bgyCcBCgVlBgQgig8MRvyrxiHh4HTN luzTYrRnz8UXoBQDASxxZdYSEZ6IL8Ufx2zmPpdZcqf4TZJtBeINRiZq7OR8zOnk LdsslwryNEWsV9Do/F76Gw4wowxVS7aUYD9SeQoAXGtp5nNa0dDLUWvpMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM+cuLH4S/qgoxQirRfjpzt83Hi6MB8GA1UdIwQY MBaAFKa7MEWup46Pp2SBKXFPtzYGjcN7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHJzd1JhNm5qby1uWklFcGNVLTNOZ2FOdzNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi80MWVhZjktNjU2ZC00MGQ5LTlmN2Et MzM0ZGUzZDc2ZmU1LzEvcHJzd1JhNm5qby1uWklFcGNVLTNOZ2FOdzNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi80MWVhZjktNjU2ZC00MGQ5LTlmN2EtMzM0ZGUzZDc2ZmU1 LzEvcHJzd1JhNm5qby1uWklFcGNVLTNOZ2FOdzNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQpA7afiq fJgKI2WEDt/fKYszflbFatyNcN9IBLkobEsoN4zkDz4lzzG2UPyYk/Q+HwSf+Wr1 tZQpXAc5vCb1gUPcKJI4A5n/ZchaARc6YwW9LM+bZwZhItGJQdEFIkGjkkE/CCdh 4UvdtxFOqogPXoH3Pxhwtza2T1zTq10T+MhHjZLxAzCDNqxTZW2+hX9vGE4utI4Q i7VqBLVNOvM10qvEykRqUE7I745PEN9ubWikVIicSxBlCE/RNcKTpYQ1fq7AnSuv e6ajZ7DGCQLcp9myaJ1+lco+sGj0sCH6Yclf0Dn0lesEvnBm/Ym5wPH2sjofKWga Cpu2AcCsNNXg4g== -----END CERTIFICATE-----Generated at Sun Dec 21 06:01:53 2025 by rpki-client