This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/aa6565-5d97-4a80-9a5d-424c23f50ff3/1/PrkfNs_-gO_g3_JhI_j5fBXZdjw.mft File: PrkfNs_-gO_g3_JhI_j5fBXZdjw.mft (raw, json) Hash identifier: 0eosvDL+LjXNKQ03gFRxjgfgIvOoJ7lrosN1Uz0UBT0= Subject key identifier: CF:44:00:A0:97:8A:E3:77:C5:3F:BD:A6:C1:B2:4C:C2:14:D9:8F:05 Authority key identifier: 3E:B9:1F:36:CF:FE:80:EF:E0:DF:F2:61:23:F8:F9:7C:15:D9:76:3C Certificate issuer: /CN=3eb91f36cffe80efe0dff26123f8f97c15d9763c Certificate serial: 019B3A91763930A2BF12FAFF69742E91A21E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PrkfNs_-gO_g3_JhI_j5fBXZdjw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/aa6565-5d97-4a80-9a5d-424c23f50ff3/1/PrkfNs_-gO_g3_JhI_j5fBXZdjw.mft Manifest number: 1786 Signing time: Sat 20 Dec 2025 07:02:50 +0000 Manifest this update: Sat 20 Dec 2025 07:02:50 +0000 Manifest next update: Sun 21 Dec 2025 07:02:50 +0000 Files and hashes: 1: PrkfNs_-gO_g3_JhI_j5fBXZdjw.crl (hash: 0t3m9eVa3LWRWyY29oMFtIHNEjtSGYGAWM5Xn4hG0lQ=) 2: nuDK-TC5cc4Dv5m-g_HwBrvB2yM.roa (hash: HAIc8rXtzi2UFMvUxwUOqrhRhKG5mpUAWpR1IBhhhmQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/aa6565-5d97-4a80-9a5d-424c23f50ff3/1/PrkfNs_-gO_g3_JhI_j5fBXZdjw.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/aa6565-5d97-4a80-9a5d-424c23f50ff3/1/PrkfNs_-gO_g3_JhI_j5fBXZdjw.mft rsync://rpki.ripe.net/repository/DEFAULT/PrkfNs_-gO_g3_JhI_j5fBXZdjw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:02:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:91:76:39:30:a2:bf:12:fa:ff:69:74:2e:91:a2:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3eb91f36cffe80efe0dff26123f8f97c15d9763c Validity Not Before: Dec 20 07:02:50 2025 GMT Not After : Dec 21 07:02:50 2025 GMT Subject: CN=cf4400a0978ae377c53fbda6c1b24cc214d98f05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:79:fe:17:df:1b:67:68:9c:f9:bc:9a:37:01: 9c:73:fc:70:b1:f8:af:7e:3b:a1:42:9f:98:41:b7: ee:ad:14:5a:88:dc:b5:d1:a6:39:22:1b:fb:91:70: 18:83:bf:00:cf:db:20:99:00:a2:3b:e4:c5:e5:af: 14:7d:db:14:f5:b1:9a:bf:ad:86:be:7f:51:9d:18: b8:f5:ce:c1:ca:46:42:32:2e:ae:90:44:e1:c3:de: d1:fb:99:fd:f4:e1:13:c5:01:a7:2f:b0:98:a6:af: 2d:62:b5:4a:d0:5c:01:69:1a:a2:1a:8a:93:30:32: a4:8c:ca:23:88:dd:a4:6b:41:dd:c1:9c:d7:61:d0: fc:01:cf:97:09:71:fd:c1:c1:a9:42:c1:47:e4:e6: 72:27:ca:a8:8b:6d:26:74:cc:a3:5d:55:05:2b:a3: 29:d3:e8:cf:87:c1:d1:c3:43:c3:98:58:8b:cc:cc: 5b:e2:0d:91:71:f6:5e:64:eb:0f:17:b5:72:48:c8: 77:65:ba:7f:68:d0:d7:cf:d6:59:96:e8:31:f3:1f: 2d:54:4e:bc:dd:4e:f1:7f:b0:e8:98:9e:d3:d0:b3: 4e:05:7b:8b:14:b8:17:5f:d5:2d:f6:d4:07:8e:1b: 67:4d:cf:57:98:ae:75:e6:89:39:e7:87:48:7f:91: bb:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:44:00:A0:97:8A:E3:77:C5:3F:BD:A6:C1:B2:4C:C2:14:D9:8F:05 X509v3 Authority Key Identifier: keyid:3E:B9:1F:36:CF:FE:80:EF:E0:DF:F2:61:23:F8:F9:7C:15:D9:76:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PrkfNs_-gO_g3_JhI_j5fBXZdjw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/aa6565-5d97-4a80-9a5d-424c23f50ff3/1/PrkfNs_-gO_g3_JhI_j5fBXZdjw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/aa6565-5d97-4a80-9a5d-424c23f50ff3/1/PrkfNs_-gO_g3_JhI_j5fBXZdjw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:22:d4:b1:90:18:6b:d4:6c:9f:3a:bc:0e:91:14:b6:c7:77: 65:f2:37:a4:2a:5d:f7:b1:62:e3:dc:5d:03:17:f9:8f:80:fa: 47:ef:a8:2e:3c:70:1a:4a:c8:b1:6a:db:b2:b8:bd:be:3a:b5: c8:7c:1d:ac:4e:98:70:41:b4:a8:99:3c:9a:49:6f:04:5a:78: 34:a9:2f:27:98:c2:36:7f:89:c3:a7:d2:30:90:d9:a5:de:d7: 04:a9:51:92:cc:f3:ec:30:bf:b1:0d:78:93:bc:aa:9c:d0:93: 66:89:bc:fb:14:4e:75:3a:2e:36:3d:4d:28:f7:a7:ed:7d:7b: 63:f2:17:65:2d:98:9c:92:4f:1d:de:a2:85:c8:48:7b:d1:23: 64:5e:78:8c:fa:50:0a:e9:e3:6e:3d:c7:9a:73:6d:74:a0:f1: d4:a8:59:f6:f3:40:78:ed:d7:31:dd:b7:45:e3:02:63:5b:ba: 9b:d0:ce:b1:cb:3c:98:97:e9:e7:d1:7f:8b:a3:b8:5d:76:f4: 8f:60:ec:04:f9:ee:05:9d:bb:61:8a:d7:2a:d7:8a:5b:bf:ef: ba:27:5b:6f:91:87:c3:b0:09:69:32:6c:f9:db:5a:16:71:e2: 6e:ef:c1:b6:b2:f1:29:3c:8b:63:39:56:3b:0a:2b:cf:a6:a2: ba:55:38:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kXY5MKK/Evr/aXQukaIeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlYjkxZjM2Y2ZmZTgwZWZlMGRmZjI2MTIzZjhmOTdjMTVk OTc2M2MwHhcNMjUxMjIwMDcwMjUwWhcNMjUxMjIxMDcwMjUwWjAzMTEwLwYDVQQD EyhjZjQ0MDBhMDk3OGFlMzc3YzUzZmJkYTZjMWIyNGNjMjE0ZDk4ZjA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3n+F98bZ2ic+byaNwGcc/xwsfiv fjuhQp+YQbfurRRaiNy10aY5Ihv7kXAYg78Az9sgmQCiO+TF5a8UfdsU9bGav62G vn9RnRi49c7BykZCMi6ukEThw97R+5n99OETxQGnL7CYpq8tYrVK0FwBaRqiGoqT MDKkjMojiN2ka0HdwZzXYdD8Ac+XCXH9wcGpQsFH5OZyJ8qoi20mdMyjXVUFK6Mp 0+jPh8HRw0PDmFiLzMxb4g2RcfZeZOsPF7VySMh3Zbp/aNDXz9ZZlugx8x8tVE68 3U7xf7DomJ7T0LNOBXuLFLgXX9Ut9tQHjhtnTc9XmK515ok554dIf5G7xwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM9EAKCXiuN3xT+9psGyTMIU2Y8FMB8GA1UdIwQY MBaAFD65HzbP/oDv4N/yYSP4+XwV2XY8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHJrZk5zXy1nT19nM19KaElfajVmQlhaZGp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9hYTY1NjUtNWQ5Ny00YTgwLTlhNWQt NDI0YzIzZjUwZmYzLzEvUHJrZk5zXy1nT19nM19KaElfajVmQlhaZGp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9hYTY1NjUtNWQ5Ny00YTgwLTlhNWQtNDI0YzIzZjUwZmYz LzEvUHJrZk5zXy1nT19nM19KaElfajVmQlhaZGp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzSLUsZAY a9Rsnzq8DpEUtsd3ZfI3pCpd97Fi49xdAxf5j4D6R++oLjxwGkrIsWrbsri9vjq1 yHwdrE6YcEG0qJk8mklvBFp4NKkvJ5jCNn+Jw6fSMJDZpd7XBKlRkszz7DC/sQ14 k7yqnNCTZom8+xROdTouNj1NKPen7X17Y/IXZS2YnJJPHd6ihchIe9EjZF54jPpQ Cunjbj3HmnNtdKDx1KhZ9vNAeO3XMd23ReMCY1u6m9DOscs8mJfp59F/i6O4XXb0 j2DsBPnuBZ27YYrXKteKW7/vuidbb5GHw7AJaTJs+dtaFnHibu/BtrLxKTyLYzlW Oworz6aiulU4gw== -----END CERTIFICATE-----Generated at Sat Dec 20 12:18:05 2025 by rpki-client