This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/PrkDKEodFdwVitcYLqC854bOsq0.mft File: PrkDKEodFdwVitcYLqC854bOsq0.mft (raw, json) Hash identifier: cZeltMcZ10y2d6QtYZFVHojEhlIudDchmN2d6lpk3NY= Subject key identifier: 4E:84:61:49:58:2B:93:E2:D0:BC:4B:02:11:34:B3:14:68:64:6B:CF Authority key identifier: 3E:B9:03:28:4A:1D:15:DC:15:8A:D7:18:2E:A0:BC:E7:86:CE:B2:AD Certificate issuer: /CN=3eb903284a1d15dc158ad7182ea0bce786ceb2ad Certificate serial: 019B3F48A9B65406DC52AC6E594B952D81B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PrkDKEodFdwVitcYLqC854bOsq0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/PrkDKEodFdwVitcYLqC854bOsq0.mft Manifest number: 03E4 Signing time: Sun 21 Dec 2025 05:01:25 +0000 Manifest this update: Sun 21 Dec 2025 05:01:25 +0000 Manifest next update: Mon 22 Dec 2025 05:01:25 +0000 Files and hashes: 1: 0zozhddFGxlaDU0eMcPGzCbmd6I.roa (hash: HhrjUsFCH402W4XdhuJKvzUEm96xMJ7A0tUrjiNFw6Y=) 2: 2z44fAwQyyEeWoKCF_G5EjvRE_Q.roa (hash: Z34LIfgBtYIlenX8BP2t8IUqfPpsJULSyBoNS38aJWk=) 3: 4kquCz-i6kJDkS1O2XQAUk_agCI.roa (hash: Pez2ubHTLSNld28U0wPkDbmTvFBCVvXm37XAiS5Y0fA=) 4: FukUNQ-1MuiT_YZ8AK4IiNn3ZEM.roa (hash: Q+TDgTJT6+GCL8Icb4N9FEYd+k8ybFyashs6L8F6jRA=) 5: Ih96IDuDaMSdBEjycgfBHMlpv1k.roa (hash: gzRNZYScETmPIIaSnlA3ny9nEyJmD80+p4ZodHIyvdw=) 6: PrkDKEodFdwVitcYLqC854bOsq0.crl (hash: +y0YzCTNYbhnY2iq3ndjcQdHkkJYNbFUiqWI6It+xQg=) 7: fDTEunNvzlH5X-k5xdeAmWjVRig.roa (hash: kSsYzCwppDZTwjMBzSM9jNvsq5Yv3fwitPhSPp+j0to=) 8: s8x3Zl1NTIQSd2VaNW3r7mX9Qt0.roa (hash: 955pA2YQRo69WOfGT4zy28ccgCxBC3J2614wD9x3OY4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/PrkDKEodFdwVitcYLqC854bOsq0.crl rsync://rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/PrkDKEodFdwVitcYLqC854bOsq0.mft rsync://rpki.ripe.net/repository/DEFAULT/PrkDKEodFdwVitcYLqC854bOsq0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:48:a9:b6:54:06:dc:52:ac:6e:59:4b:95:2d:81:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3eb903284a1d15dc158ad7182ea0bce786ceb2ad Validity Not Before: Dec 21 05:01:25 2025 GMT Not After : Dec 22 05:01:25 2025 GMT Subject: CN=4e846149582b93e2d0bc4b021134b31468646bcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:16:56:e2:15:38:4d:1a:92:a9:d1:8e:a8:a7: 96:ff:fe:9f:d9:13:e9:22:c2:95:4f:9b:0a:6f:2f: 8a:ff:f7:85:c1:cc:c0:7f:4c:af:ad:80:4c:37:dc: bc:99:c3:3b:80:d3:31:88:13:a0:6d:eb:d6:d6:49: e0:a1:5a:2c:98:5b:ac:d5:0c:3a:37:ba:e3:5b:fa: a5:20:11:3c:2c:0e:33:18:72:ad:41:c8:30:dc:49: a5:d9:8e:ab:50:53:d9:0a:6f:b8:84:64:80:4b:16: 1d:16:42:6f:96:0b:eb:52:2e:cb:0f:30:fb:13:5a: a0:74:05:c6:4a:29:2c:49:b8:60:0b:9b:86:c2:f6: fc:44:b3:9a:14:cd:9f:b4:f3:43:9d:6d:ed:a6:4c: 1d:87:d2:ab:86:4b:7a:9c:c3:3a:ef:34:df:9b:ba: 60:1f:55:40:84:51:57:79:6c:e3:02:0c:e2:ca:ef: f8:ec:6b:3e:7b:5b:53:ee:b8:d1:31:97:af:00:4c: cf:81:46:e5:ee:ee:84:a8:c6:bc:08:b9:bd:ef:90: af:ad:ce:aa:39:38:73:30:2d:88:03:20:24:7b:a1: af:3f:4a:17:c8:d0:5d:16:91:62:dd:c3:a3:27:5f: be:17:08:56:89:fe:03:1a:21:71:c9:35:cf:e0:9d: 2e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:84:61:49:58:2B:93:E2:D0:BC:4B:02:11:34:B3:14:68:64:6B:CF X509v3 Authority Key Identifier: keyid:3E:B9:03:28:4A:1D:15:DC:15:8A:D7:18:2E:A0:BC:E7:86:CE:B2:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PrkDKEodFdwVitcYLqC854bOsq0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/PrkDKEodFdwVitcYLqC854bOsq0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/PrkDKEodFdwVitcYLqC854bOsq0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:6e:fb:a7:dd:b7:f2:9b:81:0d:74:95:df:0b:69:1c:d3:aa: 0b:f4:56:fb:12:b3:26:9a:32:6e:72:7a:26:9b:3f:39:37:02: b4:0f:89:cb:60:f0:8f:60:e0:99:a5:1c:b2:f3:04:69:9b:a3: 36:8b:17:42:ee:34:91:d8:95:54:6e:af:4f:91:4a:c9:80:c4: d0:a8:a5:7f:90:95:04:38:c7:b5:de:92:8a:fe:3d:88:29:b8: 03:a7:cb:2e:59:02:b6:29:e0:51:be:9d:12:b1:4c:b3:0d:4f: a1:ea:6b:e2:76:c3:42:bb:b0:ed:bb:fd:3b:13:62:60:b9:83: 46:b5:22:0a:e9:3b:9d:c5:27:f4:70:b8:82:8e:2c:09:7d:a4: 3b:72:b0:56:a0:3a:0a:35:4d:8a:52:30:d9:80:70:df:0f:d5: bb:58:01:14:b1:f5:cc:ce:c2:a8:d1:cb:ca:e8:b9:f8:a0:50: 98:e2:9b:a7:a8:d9:df:ec:36:f5:53:dc:a6:df:40:da:38:97: 63:7a:87:82:61:f6:74:fa:b3:80:37:fa:e6:1e:bf:15:02:db: b0:df:2b:c3:44:65:7b:2b:52:e5:00:cf:e8:a0:6e:a2:f4:5a: 1b:a2:10:07:bb:30:02:89:bf:c4:dd:5e:7d:9c:85:9d:b9:66: 85:77:7f:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/SKm2VAbcUqxuWUuVLYG4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlYjkwMzI4NGExZDE1ZGMxNThhZDcxODJlYTBiY2U3ODZj ZWIyYWQwHhcNMjUxMjIxMDUwMTI1WhcNMjUxMjIyMDUwMTI1WjAzMTEwLwYDVQQD Eyg0ZTg0NjE0OTU4MmI5M2UyZDBiYzRiMDIxMTM0YjMxNDY4NjQ2YmNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhZW4hU4TRqSqdGOqKeW//6f2RPp IsKVT5sKby+K//eFwczAf0yvrYBMN9y8mcM7gNMxiBOgbevW1kngoVosmFus1Qw6 N7rjW/qlIBE8LA4zGHKtQcgw3Eml2Y6rUFPZCm+4hGSASxYdFkJvlgvrUi7LDzD7 E1qgdAXGSiksSbhgC5uGwvb8RLOaFM2ftPNDnW3tpkwdh9Krhkt6nMM67zTfm7pg H1VAhFFXeWzjAgziyu/47Gs+e1tT7rjRMZevAEzPgUbl7u6EqMa8CLm975Cvrc6q OThzMC2IAyAke6GvP0oXyNBdFpFi3cOjJ1++FwhWif4DGiFxyTXP4J0ufQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE6EYUlYK5Pi0LxLAhE0sxRoZGvPMB8GA1UdIwQY MBaAFD65AyhKHRXcFYrXGC6gvOeGzrKtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHJrREtFb2RGZHdWaXRjWUxxQzg1NGJPc3EwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi85MmVhOWYtYjEyZS00ZGQ1LTliZDMt Yjc3ZGM4ZGMxYzdlLzEvUHJrREtFb2RGZHdWaXRjWUxxQzg1NGJPc3EwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi85MmVhOWYtYjEyZS00ZGQ1LTliZDMtYjc3ZGM4ZGMxYzdl LzEvUHJrREtFb2RGZHdWaXRjWUxxQzg1NGJPc3EwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAW77p923 8puBDXSV3wtpHNOqC/RW+xKzJpoybnJ6Jps/OTcCtA+Jy2Dwj2DgmaUcsvMEaZuj NosXQu40kdiVVG6vT5FKyYDE0Kilf5CVBDjHtd6Siv49iCm4A6fLLlkCtingUb6d ErFMsw1Poepr4nbDQruw7bv9OxNiYLmDRrUiCuk7ncUn9HC4go4sCX2kO3KwVqA6 CjVNilIw2YBw3w/Vu1gBFLH1zM7CqNHLyui5+KBQmOKbp6jZ3+w29VPcpt9A2jiX Y3qHgmH2dPqzgDf65h6/FQLbsN8rw0RleytS5QDP6KBuovRaG6IQB7swAom/xN1e fZyFnblmhXd/iQ== -----END CERTIFICATE-----Generated at Sun Dec 21 08:14:48 2025 by rpki-client