This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/1693bf-6d40-469c-b056-5a8457121a0b/1/PRLRHJogPV58gmPt9URH47c1i38.mft File: PRLRHJogPV58gmPt9URH47c1i38.mft (raw, json) Hash identifier: yEdsLfdSZlIS8FpfuoiQPfUyyYbqAAosoWmW11eySg8= Subject key identifier: 65:18:2C:8A:8E:C4:35:CC:DE:FC:BE:50:A6:FD:44:E8:C2:74:45:61 Authority key identifier: 3D:12:D1:1C:9A:20:3D:5E:7C:82:63:ED:F5:44:47:E3:B7:35:8B:7F Certificate issuer: /CN=3d12d11c9a203d5e7c8263edf54447e3b7358b7f Certificate serial: 019B42EE766F11D2B09A9742ECCEF2754F11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PRLRHJogPV58gmPt9URH47c1i38.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/1693bf-6d40-469c-b056-5a8457121a0b/1/PRLRHJogPV58gmPt9URH47c1i38.mft Manifest number: 12B2 Signing time: Sun 21 Dec 2025 22:01:22 +0000 Manifest this update: Sun 21 Dec 2025 22:01:22 +0000 Manifest next update: Mon 22 Dec 2025 22:01:22 +0000 Files and hashes: 1: IFYqWjpdJxRaG3uyQLqw79JLTGo.roa (hash: alQatZzeYH3fzwBxC+QNB+5aLjO5V+OfKBsHgM/Tlv8=) 2: PRLRHJogPV58gmPt9URH47c1i38.crl (hash: Y/bGf+ewFnnqrLpXegJQ0BbVY5ecG/aJr6ycaa4gqx0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/1693bf-6d40-469c-b056-5a8457121a0b/1/PRLRHJogPV58gmPt9URH47c1i38.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/1693bf-6d40-469c-b056-5a8457121a0b/1/PRLRHJogPV58gmPt9URH47c1i38.mft rsync://rpki.ripe.net/repository/DEFAULT/PRLRHJogPV58gmPt9URH47c1i38.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:ee:76:6f:11:d2:b0:9a:97:42:ec:ce:f2:75:4f:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d12d11c9a203d5e7c8263edf54447e3b7358b7f Validity Not Before: Dec 21 22:01:22 2025 GMT Not After : Dec 22 22:01:22 2025 GMT Subject: CN=65182c8a8ec435ccdefcbe50a6fd44e8c2744561 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b9:b6:01:3b:77:fb:79:bf:2a:33:b3:c0:12: 94:bc:b7:4c:ea:0f:cf:81:fc:ea:90:67:6c:eb:c7: ac:c1:c0:29:40:a8:b9:45:f6:62:71:66:09:4f:d0: b4:65:e8:0d:c2:0e:44:de:d2:da:de:17:b0:af:7d: dd:05:cc:7a:af:12:d8:e7:98:11:12:79:22:cf:9b: d0:8a:72:5c:9b:c8:e9:15:b0:50:db:d8:3b:94:da: cb:7a:db:af:20:47:e3:9b:c1:52:16:f2:d1:33:57: a5:a1:78:72:98:9d:aa:dc:49:70:1c:ae:68:7d:5e: 75:1d:b7:62:3a:86:c7:ab:42:40:07:af:c4:2d:da: fb:52:bf:04:cb:77:31:10:26:8e:26:76:0c:a4:ce: 0e:fa:b3:ba:d7:27:17:81:f6:4d:f9:04:4f:18:f9: 3b:24:c6:a7:33:de:60:b3:92:36:60:86:a3:d6:75: 3f:cf:e4:f0:a4:88:df:24:e5:9b:9f:26:1f:c3:61: dc:07:b5:7c:f9:40:a9:07:11:83:cc:d3:75:ff:66: 63:4c:86:c9:2c:17:89:2e:81:7e:5c:fb:0e:5c:8a: 8d:c0:dc:8d:da:ac:e9:35:13:58:eb:cf:a6:6c:9a: 2f:1c:dd:3a:06:cb:a0:0c:81:b5:5f:a7:47:c6:26: dc:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:18:2C:8A:8E:C4:35:CC:DE:FC:BE:50:A6:FD:44:E8:C2:74:45:61 X509v3 Authority Key Identifier: keyid:3D:12:D1:1C:9A:20:3D:5E:7C:82:63:ED:F5:44:47:E3:B7:35:8B:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRLRHJogPV58gmPt9URH47c1i38.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/1693bf-6d40-469c-b056-5a8457121a0b/1/PRLRHJogPV58gmPt9URH47c1i38.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/1693bf-6d40-469c-b056-5a8457121a0b/1/PRLRHJogPV58gmPt9URH47c1i38.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:81:31:c0:16:6f:5a:de:e7:87:cb:ea:dd:55:c6:a6:44:e6: 7b:cb:88:da:cf:91:da:f6:1e:cd:db:59:c9:80:fe:98:de:2e: 10:61:97:c1:53:79:d7:67:43:da:81:e1:e3:ca:f1:44:48:eb: 25:1c:9c:17:f3:bd:b3:68:a5:08:d7:02:ac:38:2a:1e:66:4f: 37:ae:c4:2d:af:3a:09:05:20:e1:ce:45:6e:a0:49:a7:12:64: 66:b6:00:18:62:d1:35:c9:7d:0f:2b:b9:47:45:dc:30:7c:a7: 39:d1:de:78:35:ef:80:19:de:85:95:dc:5b:ff:41:99:6b:37: 6f:fc:e2:99:81:5b:a8:ac:06:56:5d:c3:b2:4a:65:cc:b4:96: 6c:67:7d:81:11:52:57:09:fa:bf:73:f5:ac:b0:9d:4a:fe:61: a6:d4:1e:80:48:62:2c:13:fb:2b:f2:1a:d4:bd:79:6e:34:c4: 2c:08:b1:14:dc:6f:d8:45:c5:cc:74:64:9e:c8:5d:5c:eb:bf: 43:5d:2e:7a:84:39:08:3c:43:a7:69:86:71:7a:05:14:80:93: 6b:6c:8d:34:9e:6f:bf:1c:3c:c5:3d:47:31:ff:ea:9f:8b:3c: 61:41:84:c6:05:cb:8a:db:80:40:0f:2a:a7:15:50:78:4e:f1: 3f:59:ba:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtC7nZvEdKwmpdC7M7ydU8RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkMTJkMTFjOWEyMDNkNWU3YzgyNjNlZGY1NDQ0N2UzYjcz NThiN2YwHhcNMjUxMjIxMjIwMTIyWhcNMjUxMjIyMjIwMTIyWjAzMTEwLwYDVQQD Eyg2NTE4MmM4YThlYzQzNWNjZGVmY2JlNTBhNmZkNDRlOGMyNzQ0NTYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7m2ATt3+3m/KjOzwBKUvLdM6g/P gfzqkGds68eswcApQKi5RfZicWYJT9C0ZegNwg5E3tLa3hewr33dBcx6rxLY55gR Enkiz5vQinJcm8jpFbBQ29g7lNrLetuvIEfjm8FSFvLRM1eloXhymJ2q3ElwHK5o fV51HbdiOobHq0JAB6/ELdr7Ur8Ey3cxECaOJnYMpM4O+rO61ycXgfZN+QRPGPk7 JManM95gs5I2YIaj1nU/z+TwpIjfJOWbnyYfw2HcB7V8+UCpBxGDzNN1/2ZjTIbJ LBeJLoF+XPsOXIqNwNyN2qzpNRNY68+mbJovHN06BsugDIG1X6dHxibcEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGUYLIqOxDXM3vy+UKb9ROjCdEVhMB8GA1UdIwQY MBaAFD0S0RyaID1efIJj7fVER+O3NYt/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFJMUkhKb2dQVjU4Z21QdDlVUkg0N2MxaTM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8xNjkzYmYtNmQ0MC00NjljLWIwNTYt NWE4NDU3MTIxYTBiLzEvUFJMUkhKb2dQVjU4Z21QdDlVUkg0N2MxaTM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS8xNjkzYmYtNmQ0MC00NjljLWIwNTYtNWE4NDU3MTIxYTBi LzEvUFJMUkhKb2dQVjU4Z21QdDlVUkg0N2MxaTM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM4ExwBZv Wt7nh8vq3VXGpkTme8uI2s+R2vYezdtZyYD+mN4uEGGXwVN512dD2oHh48rxREjr JRycF/O9s2ilCNcCrDgqHmZPN67ELa86CQUg4c5FbqBJpxJkZrYAGGLRNcl9Dyu5 R0XcMHynOdHeeDXvgBnehZXcW/9BmWs3b/zimYFbqKwGVl3DskplzLSWbGd9gRFS Vwn6v3P1rLCdSv5hptQegEhiLBP7K/Ia1L15bjTELAixFNxv2EXFzHRknshdXOu/ Q10ueoQ5CDxDp2mGcXoFFICTa2yNNJ5vvxw8xT1HMf/qn4s8YUGExgXLituAQA8q pxVQeE7xP1m62w== -----END CERTIFICATE-----Generated at Mon Dec 22 01:02:59 2025 by rpki-client