This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/5424d9-5348-4f6f-9390-45a40a21b8d3/1/pr640lzi1AsMuuWcEeKSvTcXDfo.mft File: pr640lzi1AsMuuWcEeKSvTcXDfo.mft (raw, json) Hash identifier: tJ4dh9OPrnM3Klv4j9oR1I9bGoewrudg2KD/wCKD7KU= Subject key identifier: 90:15:76:DB:96:24:5E:AF:83:59:3E:89:52:9E:BC:41:A2:F4:98:AA Authority key identifier: A6:BE:B8:D2:5C:E2:D4:0B:0C:BA:E5:9C:11:E2:92:BD:37:17:0D:FA Certificate issuer: /CN=a6beb8d25ce2d40b0cbae59c11e292bd37170dfa Certificate serial: 019B4EBBC2C35CBFD141FC1E2C2C67E3D275 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pr640lzi1AsMuuWcEeKSvTcXDfo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/5424d9-5348-4f6f-9390-45a40a21b8d3/1/pr640lzi1AsMuuWcEeKSvTcXDfo.mft Manifest number: 1189 Signing time: Wed 24 Dec 2025 05:01:26 +0000 Manifest this update: Wed 24 Dec 2025 05:01:26 +0000 Manifest next update: Thu 25 Dec 2025 05:01:26 +0000 Files and hashes: 1: pr640lzi1AsMuuWcEeKSvTcXDfo.crl (hash: NV7PsSEp1pinMdEv66SXSzw1rvzoq3Tj6Y8rMDscQ2A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/5424d9-5348-4f6f-9390-45a40a21b8d3/1/pr640lzi1AsMuuWcEeKSvTcXDfo.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/5424d9-5348-4f6f-9390-45a40a21b8d3/1/pr640lzi1AsMuuWcEeKSvTcXDfo.mft rsync://rpki.ripe.net/repository/DEFAULT/pr640lzi1AsMuuWcEeKSvTcXDfo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 05:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:bb:c2:c3:5c:bf:d1:41:fc:1e:2c:2c:67:e3:d2:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6beb8d25ce2d40b0cbae59c11e292bd37170dfa Validity Not Before: Dec 24 05:01:26 2025 GMT Not After : Dec 25 05:01:26 2025 GMT Subject: CN=901576db96245eaf83593e89529ebc41a2f498aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a9:9a:98:51:9b:eb:74:1f:06:77:09:a8:44: cf:76:d5:7f:29:8b:bd:4b:6e:60:ec:25:f7:74:b6: d7:4b:bf:b8:bd:a8:ca:bc:e6:58:3e:fc:b5:06:2e: 69:3b:f4:77:b8:9e:c9:d0:b8:24:c4:9c:90:99:34: 23:86:d8:37:96:39:b4:16:32:e0:33:db:53:dc:5a: c2:ea:ca:9d:ae:d0:41:2f:78:38:45:d1:c7:b0:b4: b4:a3:24:f6:94:0c:5a:79:d8:8b:a3:85:62:8d:46: 0c:bf:e4:ae:fb:df:4f:cb:a8:ad:8e:c0:38:34:70: 48:33:ea:57:72:24:bc:87:79:f8:7d:28:fa:a0:09: b6:fe:41:b1:75:d9:0c:6b:51:a0:f7:fc:a0:b5:00: 25:9a:02:fb:2d:eb:57:2b:45:67:21:d9:11:6e:fa: 54:82:59:48:14:d6:7d:8e:3e:46:e2:d9:61:22:9a: 2d:51:09:72:f6:6e:1d:5e:68:21:70:8d:6d:5d:27: 7f:56:af:03:bf:be:a6:4f:5c:c4:64:99:53:e9:47: f4:90:5b:4c:91:a1:e2:3b:ef:7d:a9:e7:b0:93:d0: cb:75:a3:ff:fd:06:66:7b:b9:1d:16:87:e7:6c:62: 48:e3:0f:b1:3c:09:a8:88:db:2e:5e:36:71:9f:0e: be:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:15:76:DB:96:24:5E:AF:83:59:3E:89:52:9E:BC:41:A2:F4:98:AA X509v3 Authority Key Identifier: keyid:A6:BE:B8:D2:5C:E2:D4:0B:0C:BA:E5:9C:11:E2:92:BD:37:17:0D:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pr640lzi1AsMuuWcEeKSvTcXDfo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/5424d9-5348-4f6f-9390-45a40a21b8d3/1/pr640lzi1AsMuuWcEeKSvTcXDfo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/5424d9-5348-4f6f-9390-45a40a21b8d3/1/pr640lzi1AsMuuWcEeKSvTcXDfo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:11:61:e4:21:ed:aa:cd:9d:7a:dd:ed:27:bb:5f:9f:7b:10: ad:19:8b:e0:b6:06:0b:56:25:5d:73:8c:12:b2:2f:55:43:dc: 49:e6:89:27:20:7a:7b:cf:95:91:ba:36:16:51:75:8c:c0:5d: 66:9c:4e:35:79:d5:6a:9f:3c:e2:30:d6:e7:94:d5:bc:f3:da: 62:34:69:db:20:fd:19:97:ef:8a:8e:57:d8:86:b6:60:04:b9: df:8f:1f:fe:39:3a:ac:f4:67:92:62:80:22:78:6a:cd:3b:a6: 65:7e:53:73:a0:f6:33:a0:f7:a9:e0:bc:aa:8e:31:23:a7:f2: 46:20:09:43:4a:22:b7:9b:90:53:d7:22:0c:31:b6:dd:76:16: ac:9e:39:70:f6:53:73:aa:7d:62:54:36:b4:c7:d0:07:1a:79: 14:53:a4:a6:5f:79:be:42:87:3a:5e:6b:54:4f:0d:25:97:45: 6a:4d:27:5e:7b:98:01:c4:f4:6b:0c:c4:1c:ac:ac:3f:27:c3: 7e:27:d1:df:9d:70:4c:22:32:b8:74:39:20:8c:d0:03:e6:bb: c9:56:4c:1a:3b:37:c2:68:d4:cb:d3:e6:49:56:7d:21:a0:ac: 4c:8d:ab:91:40:b5:46:91:a3:a5:28:c9:41:c6:04:46:ed:f3: 45:55:e6:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOu8LDXL/RQfweLCxn49J1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2YmViOGQyNWNlMmQ0MGIwY2JhZTU5YzExZTI5MmJkMzcx NzBkZmEwHhcNMjUxMjI0MDUwMTI2WhcNMjUxMjI1MDUwMTI2WjAzMTEwLwYDVQQD Eyg5MDE1NzZkYjk2MjQ1ZWFmODM1OTNlODk1MjllYmM0MWEyZjQ5OGFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6mamFGb63QfBncJqETPdtV/KYu9 S25g7CX3dLbXS7+4vajKvOZYPvy1Bi5pO/R3uJ7J0LgkxJyQmTQjhtg3ljm0FjLg M9tT3FrC6sqdrtBBL3g4RdHHsLS0oyT2lAxaediLo4VijUYMv+Su+99Py6itjsA4 NHBIM+pXciS8h3n4fSj6oAm2/kGxddkMa1Gg9/ygtQAlmgL7LetXK0VnIdkRbvpU gllIFNZ9jj5G4tlhIpotUQly9m4dXmghcI1tXSd/Vq8Dv76mT1zEZJlT6Uf0kFtM kaHiO+99qeewk9DLdaP//QZme7kdFofnbGJI4w+xPAmoiNsuXjZxnw6+HQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJAVdtuWJF6vg1k+iVKevEGi9JiqMB8GA1UdIwQY MBaAFKa+uNJc4tQLDLrlnBHikr03Fw36MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHI2NDBsemkxQXNNdXVXY0VlS1N2VGNYRGZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS81NDI0ZDktNTM0OC00ZjZmLTkzOTAt NDVhNDBhMjFiOGQzLzEvcHI2NDBsemkxQXNNdXVXY0VlS1N2VGNYRGZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS81NDI0ZDktNTM0OC00ZjZmLTkzOTAtNDVhNDBhMjFiOGQz LzEvcHI2NDBsemkxQXNNdXVXY0VlS1N2VGNYRGZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEBFh5CHt qs2det3tJ7tfn3sQrRmL4LYGC1YlXXOMErIvVUPcSeaJJyB6e8+Vkbo2FlF1jMBd ZpxONXnVap884jDW55TVvPPaYjRp2yD9GZfvio5X2Ia2YAS5348f/jk6rPRnkmKA InhqzTumZX5Tc6D2M6D3qeC8qo4xI6fyRiAJQ0oit5uQU9ciDDG23XYWrJ45cPZT c6p9YlQ2tMfQBxp5FFOkpl95vkKHOl5rVE8NJZdFak0nXnuYAcT0awzEHKysPyfD fifR351wTCIyuHQ5IIzQA+a7yVZMGjs3wmjUy9PmSVZ9IaCsTI2rkUC1RpGjpSjJ QcYERu3zRVXmrQ== -----END CERTIFICATE-----Generated at Wed Dec 24 11:30:58 2025 by rpki-client