This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.mft File: PRH7pD9XqwRF5UL87suHaBZXzPM.mft (raw, json) Hash identifier: UbkpAm4aXdt0z+wDdyLZch3w8wqXA04JICboNOWxTqc= Subject key identifier: 8E:D8:81:09:24:6F:EF:79:DF:13:55:4B:82:5E:67:B7:1C:64:0E:49 Authority key identifier: 3D:11:FB:A4:3F:57:AB:04:45:E5:42:FC:EE:CB:87:68:16:57:CC:F3 Certificate issuer: /CN=3d11fba43f57ab0445e542fceecb87681657ccf3 Certificate serial: 019B274133EE81FD6D37042926BE8CD6BD25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PRH7pD9XqwRF5UL87suHaBZXzPM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.mft Manifest number: 0406 Signing time: Tue 16 Dec 2025 13:02:22 +0000 Manifest this update: Tue 16 Dec 2025 13:02:22 +0000 Manifest next update: Wed 17 Dec 2025 13:02:22 +0000 Files and hashes: 1: 2DxOeFRwGr0ZkLmLFLoh-xJZObE.roa (hash: aeAg8fL5FqA68LiiZmemChuMc/666QpvAefI6BAnFLU=) 2: PRH7pD9XqwRF5UL87suHaBZXzPM.crl (hash: OppM8nErXzs5FEoxaqXzQ8+8inpC8bShKPY6o1gfnAc=) 3: QubVM_6N5lx1EgDJtxcjPI_RV3o.roa (hash: 0U5OEeLVzA3Fo3jdio9FkyyDkZiO1CmcUt6CGyuWF74=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.mft rsync://rpki.ripe.net/repository/DEFAULT/PRH7pD9XqwRF5UL87suHaBZXzPM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 13:02:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:41:33:ee:81:fd:6d:37:04:29:26:be:8c:d6:bd:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d11fba43f57ab0445e542fceecb87681657ccf3 Validity Not Before: Dec 16 13:02:22 2025 GMT Not After : Dec 17 13:02:22 2025 GMT Subject: CN=8ed88109246fef79df13554b825e67b71c640e49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:43:5f:62:5b:4d:0c:8f:6e:6e:d2:6a:8f:e5: 85:8b:74:22:46:77:8f:60:71:68:44:90:92:ae:9b: 2d:96:19:71:2b:46:af:f0:fa:07:48:be:5b:87:88: ea:d3:84:aa:c9:d6:86:38:c7:a0:7b:58:9b:98:6f: be:ac:da:8f:c9:66:0b:75:81:f0:89:2f:58:6f:c8: 53:ec:9d:e7:eb:78:78:c4:c8:e4:8f:da:b6:55:2e: b5:40:91:4c:b7:24:62:1b:9b:42:9e:99:40:e0:13: 77:4e:7a:77:a6:11:6a:a6:22:8a:a2:1f:e8:96:0d: 1a:1d:e9:2e:a1:95:ab:cd:ab:05:b0:43:df:da:99: b4:8d:88:3a:3e:e5:73:f9:be:6b:5e:ba:46:46:c7: 35:5d:9a:f5:95:2e:5c:44:7b:ff:03:25:19:f6:0f: 82:de:e8:96:5b:63:37:d3:2f:81:9c:e3:e5:e3:10: 43:07:1c:c3:c3:fb:9d:b1:19:53:63:a2:92:a0:02: 28:fd:d4:ab:e0:6d:42:c0:3c:79:b8:c1:18:84:85: 6f:bd:94:f1:e8:94:8e:fd:27:b4:f5:db:ba:4c:52: 83:8c:9e:38:77:cf:94:6e:91:61:52:3a:d8:b6:07: 83:f2:3c:f2:16:a9:06:1a:e6:be:e3:af:da:48:62: 5b:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:D8:81:09:24:6F:EF:79:DF:13:55:4B:82:5E:67:B7:1C:64:0E:49 X509v3 Authority Key Identifier: keyid:3D:11:FB:A4:3F:57:AB:04:45:E5:42:FC:EE:CB:87:68:16:57:CC:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRH7pD9XqwRF5UL87suHaBZXzPM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:bf:92:30:82:a4:e1:59:e6:9f:d7:85:9f:f6:6f:54:0a:27: 1c:a0:6d:59:f9:8a:36:ee:4e:c8:df:43:e9:39:4b:24:9f:06: e9:1b:35:9c:8d:e4:68:c4:f6:88:f4:b4:a8:e4:a2:10:07:fd: bc:5f:51:ca:9b:bf:8f:c5:25:9a:3f:81:2a:10:c7:2d:9a:f1: 45:01:b1:eb:f7:85:9d:5e:c8:e4:60:e3:3d:e1:9f:99:75:e1: bc:91:a9:fd:1a:87:59:d5:1b:57:80:8b:d7:2d:25:8d:47:67: 56:77:6d:f6:80:03:0b:41:02:10:cc:f0:ad:72:aa:61:b7:67: 12:7a:c6:69:88:fd:68:0a:90:5a:dd:f1:bb:89:63:e7:0f:13: fe:3c:a8:8b:d3:f0:68:30:e9:b2:5b:7a:78:a9:84:2f:3c:df: e5:a6:05:07:58:ad:14:b3:99:3e:f7:1a:a3:5a:f6:4a:a7:be: 1f:0b:cd:9e:d7:a3:9d:6b:b9:ab:72:22:6f:fe:3f:aa:d7:17: e4:ff:7b:ac:82:7a:e0:8d:44:ed:f8:04:cb:4d:1c:d3:a6:f5: 79:4c:ad:a0:c4:9f:79:74:f4:d7:e5:86:25:75:2c:f4:b5:6a: d3:9f:25:32:2e:51:c1:36:56:9f:f8:cb:9b:51:60:cb:45:2d: 5d:ab:fa:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsnQTPugf1tNwQpJr6M1r0lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkMTFmYmE0M2Y1N2FiMDQ0NWU1NDJmY2VlY2I4NzY4MTY1 N2NjZjMwHhcNMjUxMjE2MTMwMjIyWhcNMjUxMjE3MTMwMjIyWjAzMTEwLwYDVQQD Eyg4ZWQ4ODEwOTI0NmZlZjc5ZGYxMzU1NGI4MjVlNjdiNzFjNjQwZTQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0NfYltNDI9ubtJqj+WFi3QiRneP YHFoRJCSrpstlhlxK0av8PoHSL5bh4jq04SqydaGOMege1ibmG++rNqPyWYLdYHw iS9Yb8hT7J3n63h4xMjkj9q2VS61QJFMtyRiG5tCnplA4BN3Tnp3phFqpiKKoh/o lg0aHekuoZWrzasFsEPf2pm0jYg6PuVz+b5rXrpGRsc1XZr1lS5cRHv/AyUZ9g+C 3uiWW2M30y+BnOPl4xBDBxzDw/udsRlTY6KSoAIo/dSr4G1CwDx5uMEYhIVvvZTx 6JSO/Se09du6TFKDjJ44d8+UbpFhUjrYtgeD8jzyFqkGGua+46/aSGJbJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI7YgQkkb+953xNVS4JeZ7ccZA5JMB8GA1UdIwQY MBaAFD0R+6Q/V6sEReVC/O7Lh2gWV8zzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFJIN3BEOVhxd1JGNVVMODdzdUhhQlpYelBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80NzNhZGUtYjUwNC00YjEwLWFlZDYt YzVkZDM4NTdhNGQyLzEvUFJIN3BEOVhxd1JGNVVMODdzdUhhQlpYelBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80NzNhZGUtYjUwNC00YjEwLWFlZDYtYzVkZDM4NTdhNGQy LzEvUFJIN3BEOVhxd1JGNVVMODdzdUhhQlpYelBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWr+SMIKk 4Vnmn9eFn/ZvVAonHKBtWfmKNu5OyN9D6TlLJJ8G6Rs1nI3kaMT2iPS0qOSiEAf9 vF9Rypu/j8Ulmj+BKhDHLZrxRQGx6/eFnV7I5GDjPeGfmXXhvJGp/RqHWdUbV4CL 1y0ljUdnVndt9oADC0ECEMzwrXKqYbdnEnrGaYj9aAqQWt3xu4lj5w8T/jyoi9Pw aDDpslt6eKmELzzf5aYFB1itFLOZPvcao1r2Sqe+HwvNntejnWu5q3Iib/4/qtcX 5P97rIJ64I1E7fgEy00c06b1eUytoMSfeXT01+WGJXUs9LVq058lMi5RwTZWn/jL m1Fgy0UtXav6WQ== -----END CERTIFICATE-----Generated at Tue Dec 16 23:15:19 2025 by rpki-client