This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3e3324-6e60-45a5-9433-e057a8bdcf96/1/PrYnJBMoJOVJBuJAqIA2QZo2W4Q.mft File: PrYnJBMoJOVJBuJAqIA2QZo2W4Q.mft (raw, json) Hash identifier: H3mXUlCH86RVeGfFRqxL5cXaPcpf8feKdE/sZe8t7Jk= Subject key identifier: 5E:AB:24:5F:CF:CE:5B:67:0A:70:E5:56:79:D8:A9:E6:B0:80:50:28 Authority key identifier: 3E:B6:27:24:13:28:24:E5:49:06:E2:40:A8:80:36:41:9A:36:5B:84 Certificate issuer: /CN=3eb62724132824e54906e240a88036419a365b84 Certificate serial: 019AF12D6DC39CD1A0805C0B9FB507CA5B54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PrYnJBMoJOVJBuJAqIA2QZo2W4Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/3e3324-6e60-45a5-9433-e057a8bdcf96/1/PrYnJBMoJOVJBuJAqIA2QZo2W4Q.mft Manifest number: 92 Signing time: Sat 06 Dec 2025 01:01:17 +0000 Manifest this update: Sat 06 Dec 2025 01:01:17 +0000 Manifest next update: Sun 07 Dec 2025 01:01:17 +0000 Files and hashes: 1: LKYEcHRv13hCEn2ITZ6Ji002NW4.roa (hash: XBnCCt2ig9Uvd5g1UVG/Ee+HEig1GAa0vstmiIJNytc=) 2: PrYnJBMoJOVJBuJAqIA2QZo2W4Q.crl (hash: LFze/MSWphGoPIeC+4a4xk4yzmQ3/OTeiRb9XSDvVQk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/3e3324-6e60-45a5-9433-e057a8bdcf96/1/PrYnJBMoJOVJBuJAqIA2QZo2W4Q.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/3e3324-6e60-45a5-9433-e057a8bdcf96/1/PrYnJBMoJOVJBuJAqIA2QZo2W4Q.mft rsync://rpki.ripe.net/repository/DEFAULT/PrYnJBMoJOVJBuJAqIA2QZo2W4Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:6d:c3:9c:d1:a0:80:5c:0b:9f:b5:07:ca:5b:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3eb62724132824e54906e240a88036419a365b84 Validity Not Before: Dec 6 01:01:17 2025 GMT Not After : Dec 7 01:01:17 2025 GMT Subject: CN=5eab245fcfce5b670a70e55679d8a9e6b0805028 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:05:ee:c5:99:df:b9:f9:ca:12:ac:6e:d6:b2: 06:f8:69:0e:7e:f8:87:48:2c:c2:c1:1b:31:5b:36: d8:60:48:9b:a7:c5:5a:44:45:f9:07:98:fb:47:34: ca:99:40:b2:01:e7:df:a4:1c:46:a9:4c:21:a1:b3: e7:e7:83:6a:2b:41:fd:05:6b:37:15:b6:af:40:29: 90:0f:8e:ae:81:05:fe:06:a6:ee:43:b9:c3:47:ef: 5d:63:2c:95:ae:25:90:70:33:f0:95:76:b8:8e:a4: 6a:d0:6b:50:79:97:89:b5:36:3b:79:64:72:5f:0f: bc:2d:d0:b2:56:17:56:ae:66:80:10:ce:50:51:53: de:b1:42:ce:ee:d7:b2:59:e1:fe:0d:7c:11:a6:ba: e7:4c:c4:45:be:f8:db:bf:d0:7e:7e:1b:66:be:25: a1:e3:b2:29:a1:a3:be:a7:f1:3a:e8:a1:93:e1:1a: 12:5e:6c:01:46:0b:87:21:05:2a:17:92:8d:1c:e3: fe:6c:4f:13:d7:f7:a1:6a:05:c3:1c:d2:23:59:75: c5:ca:5b:ec:0e:91:1a:af:ef:96:96:80:96:bb:ab: d4:74:9b:d6:3d:2c:72:44:f0:03:ff:86:49:4f:fa: 04:ba:06:0e:57:6c:23:2f:52:61:47:1e:1c:cd:84: 50:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:AB:24:5F:CF:CE:5B:67:0A:70:E5:56:79:D8:A9:E6:B0:80:50:28 X509v3 Authority Key Identifier: keyid:3E:B6:27:24:13:28:24:E5:49:06:E2:40:A8:80:36:41:9A:36:5B:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PrYnJBMoJOVJBuJAqIA2QZo2W4Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3e3324-6e60-45a5-9433-e057a8bdcf96/1/PrYnJBMoJOVJBuJAqIA2QZo2W4Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3e3324-6e60-45a5-9433-e057a8bdcf96/1/PrYnJBMoJOVJBuJAqIA2QZo2W4Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:cf:37:c9:05:e8:6b:a6:b0:7f:97:e7:0d:34:aa:b4:58:24: d9:7b:72:ca:48:cf:d2:94:66:fc:84:e7:21:1f:41:1b:7f:ee: a4:74:f2:e6:5f:45:c0:37:60:99:1e:67:57:7d:00:4e:36:9e: 1c:b7:1a:ff:5c:15:92:f7:57:84:5d:52:b0:43:62:51:af:8f: 84:66:97:63:00:08:0b:f8:37:3c:f3:eb:5f:fd:b3:97:a3:35: 5c:a2:c7:42:52:1f:40:be:1c:78:f6:38:60:f0:ad:f5:ad:b0: 7b:ed:5f:6f:58:ef:61:d6:de:cf:60:e5:44:ec:07:b9:b6:d0: 94:ab:fc:91:a8:11:6f:2f:7f:e6:71:a8:5b:f4:85:ed:b2:04: f9:6f:90:68:00:02:4b:6c:6e:31:27:55:8c:6a:8c:8c:48:1d: 17:39:ed:31:c5:a4:89:e2:3c:29:75:5f:b2:27:f7:0c:e2:ab: 56:d5:5a:2d:fe:98:b1:04:b4:77:a7:dc:ab:16:15:83:78:9e: b1:01:c2:3e:d6:0a:07:bb:d5:2b:b8:cc:b8:0d:c0:eb:39:7a: 4c:b5:3d:73:74:43:8a:66:26:94:65:17:1e:77:e0:86:fa:e9: d7:11:a2:75:d0:0c:b7:2b:fe:7b:57:32:87:d2:06:b0:16:7c: 94:7d:96:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLW3DnNGggFwLn7UHyltUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlYjYyNzI0MTMyODI0ZTU0OTA2ZTI0MGE4ODAzNjQxOWEz NjViODQwHhcNMjUxMjA2MDEwMTE3WhcNMjUxMjA3MDEwMTE3WjAzMTEwLwYDVQQD Eyg1ZWFiMjQ1ZmNmY2U1YjY3MGE3MGU1NTY3OWQ4YTllNmIwODA1MDI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3AXuxZnfufnKEqxu1rIG+GkOfviH SCzCwRsxWzbYYEibp8VaREX5B5j7RzTKmUCyAeffpBxGqUwhobPn54NqK0H9BWs3 FbavQCmQD46ugQX+BqbuQ7nDR+9dYyyVriWQcDPwlXa4jqRq0GtQeZeJtTY7eWRy Xw+8LdCyVhdWrmaAEM5QUVPesULO7teyWeH+DXwRprrnTMRFvvjbv9B+fhtmviWh 47IpoaO+p/E66KGT4RoSXmwBRguHIQUqF5KNHOP+bE8T1/ehagXDHNIjWXXFylvs DpEar++WloCWu6vUdJvWPSxyRPAD/4ZJT/oEugYOV2wjL1JhRx4czYRQ2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF6rJF/PzltnCnDlVnnYqeawgFAoMB8GA1UdIwQY MBaAFD62JyQTKCTlSQbiQKiANkGaNluEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHJZbkpCTW9KT1ZKQnVKQXFJQTJRWm8yVzRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8zZTMzMjQtNmU2MC00NWE1LTk0MzMt ZTA1N2E4YmRjZjk2LzEvUHJZbkpCTW9KT1ZKQnVKQXFJQTJRWm8yVzRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8zZTMzMjQtNmU2MC00NWE1LTk0MzMtZTA1N2E4YmRjZjk2 LzEvUHJZbkpCTW9KT1ZKQnVKQXFJQTJRWm8yVzRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUc83yQXo a6awf5fnDTSqtFgk2XtyykjP0pRm/ITnIR9BG3/upHTy5l9FwDdgmR5nV30ATjae HLca/1wVkvdXhF1SsENiUa+PhGaXYwAIC/g3PPPrX/2zl6M1XKLHQlIfQL4cePY4 YPCt9a2we+1fb1jvYdbez2DlROwHubbQlKv8kagRby9/5nGoW/SF7bIE+W+QaAAC S2xuMSdVjGqMjEgdFzntMcWkieI8KXVfsif3DOKrVtVaLf6YsQS0d6fcqxYVg3ie sQHCPtYKB7vVK7jMuA3A6zl6TLU9c3RDimYmlGUXHnfghvrp1xGiddAMtyv+e1cy h9IGsBZ8lH2WuQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:08:51 2025 by rpki-client