This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1fcfba-cda0-4ad3-9893-94587d8331f9/1/pRZKRoFl6caTvYGEw8pWbKcP1WA.mft File: pRZKRoFl6caTvYGEw8pWbKcP1WA.mft (raw, json) Hash identifier: uGwFbC9rp/QR/NDM6xcn896orMkMnA6XjMur3nCBXWo= Subject key identifier: 84:86:C5:FC:63:49:A4:1E:82:1B:00:E9:0B:F0:47:37:3B:DF:0F:73 Authority key identifier: A5:16:4A:46:81:65:E9:C6:93:BD:81:84:C3:CA:56:6C:A7:0F:D5:60 Certificate issuer: /CN=a5164a468165e9c693bd8184c3ca566ca70fd560 Certificate serial: 019AF5E5F352949D7B7219046A281CC376F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pRZKRoFl6caTvYGEw8pWbKcP1WA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1fcfba-cda0-4ad3-9893-94587d8331f9/1/pRZKRoFl6caTvYGEw8pWbKcP1WA.mft Manifest number: 0225 Signing time: Sat 06 Dec 2025 23:01:19 +0000 Manifest this update: Sat 06 Dec 2025 23:01:19 +0000 Manifest next update: Sun 07 Dec 2025 23:01:19 +0000 Files and hashes: 1: pRZKRoFl6caTvYGEw8pWbKcP1WA.crl (hash: BZCFaHkx0meex2vFZ5PefLBBl3rNi+duNXI3LLr00Cg=) 2: rIL66Wr2JO0hUiDgtrzPfwsPCdg.roa (hash: IzHYSyi3wxidgryTdPg9C85nPJtyfKau5Hu7/N9OG4I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/1fcfba-cda0-4ad3-9893-94587d8331f9/1/pRZKRoFl6caTvYGEw8pWbKcP1WA.crl rsync://rpki.ripe.net/repository/DEFAULT/24/1fcfba-cda0-4ad3-9893-94587d8331f9/1/pRZKRoFl6caTvYGEw8pWbKcP1WA.mft rsync://rpki.ripe.net/repository/DEFAULT/pRZKRoFl6caTvYGEw8pWbKcP1WA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e5:f3:52:94:9d:7b:72:19:04:6a:28:1c:c3:76:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5164a468165e9c693bd8184c3ca566ca70fd560 Validity Not Before: Dec 6 23:01:19 2025 GMT Not After : Dec 7 23:01:19 2025 GMT Subject: CN=8486c5fc6349a41e821b00e90bf047373bdf0f73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:51:c9:62:a3:8f:3f:3d:02:ed:aa:0d:44:da: 7f:66:3b:40:0c:4d:86:f0:9e:81:1c:d7:f9:f0:cd: 73:83:50:0b:57:45:1a:6e:9c:4f:b5:ae:fd:15:f9: 6a:f5:f5:bf:91:6c:29:4d:60:10:7a:27:5f:0e:4c: 1c:ae:ba:a0:17:d8:c9:a1:0a:80:e8:6d:e7:6f:2b: 94:fd:a8:0a:e2:9d:b8:bb:33:b1:a2:e3:d8:22:a9: 11:a3:d1:37:b0:04:97:00:52:7c:b5:38:6a:6c:ff: 4b:10:25:be:6e:fd:4b:f4:97:81:f6:fa:bb:b5:11: 79:30:33:bb:e9:e8:dc:92:f2:36:48:9d:d6:92:23: 2d:70:08:2b:00:28:18:9e:79:40:60:94:1c:4d:5e: 68:b2:d3:97:f0:5f:37:67:fe:81:3e:21:d1:7e:bf: 1d:5c:85:b9:a7:b6:89:71:57:77:c5:d7:68:a9:83: 70:f3:89:6b:43:48:94:9d:6e:a6:ff:43:b2:6e:b6: c2:c4:10:5f:91:af:6c:03:12:1e:1e:a1:bf:b8:59: 83:7d:6f:44:0f:4d:5d:47:21:b1:85:67:f7:41:48: cf:f5:f0:d9:20:d5:bb:e5:a4:c8:19:9d:d5:29:08: f5:9b:e3:fc:43:0b:75:ed:a1:80:1b:b0:a3:37:03: 3e:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:86:C5:FC:63:49:A4:1E:82:1B:00:E9:0B:F0:47:37:3B:DF:0F:73 X509v3 Authority Key Identifier: keyid:A5:16:4A:46:81:65:E9:C6:93:BD:81:84:C3:CA:56:6C:A7:0F:D5:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pRZKRoFl6caTvYGEw8pWbKcP1WA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1fcfba-cda0-4ad3-9893-94587d8331f9/1/pRZKRoFl6caTvYGEw8pWbKcP1WA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1fcfba-cda0-4ad3-9893-94587d8331f9/1/pRZKRoFl6caTvYGEw8pWbKcP1WA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:22:77:75:70:00:ce:b8:06:02:19:cc:e0:68:0e:7c:e7:74: 3c:dc:b0:a5:e7:93:72:12:e2:40:f8:f7:db:ca:33:68:af:ae: 34:5d:cd:d4:ae:f9:09:b7:01:f2:03:d1:34:1a:e7:fa:b0:54: f7:2d:55:0c:d8:f1:0c:ac:55:32:81:c0:42:fa:32:c1:eb:ff: 0f:9a:c2:14:41:ac:dd:21:48:c4:9f:31:98:8d:12:e5:d1:38: 4e:04:ef:79:e8:82:04:f1:8e:f2:23:df:d8:3a:5e:52:f3:f0: 79:74:b0:93:c1:4e:7a:90:7d:1c:e2:9a:e4:f0:30:ee:d0:87: f6:49:a2:0e:9b:6a:2e:e9:91:ba:12:c7:e6:9a:e7:59:da:ed: f9:20:ac:7d:3f:14:3e:c2:77:8e:68:7e:3b:4e:37:54:85:38: 2f:f4:d9:02:17:e9:49:30:b4:c4:86:26:1d:e6:67:21:b9:28: 19:59:88:15:1b:dc:66:d2:88:7a:0d:5b:91:0e:ab:d9:ac:f5: 8d:0d:f9:51:03:d6:fa:69:c4:91:bf:9a:80:45:d6:56:4f:47: 8f:ca:08:c0:19:92:83:a3:14:fa:fc:45:52:e7:23:ad:48:91: 1d:e5:9b:87:51:8b:1f:0b:1e:be:29:fd:01:de:13:95:69:0c: e2:04:83:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15fNSlJ17chkEaigcw3b5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1MTY0YTQ2ODE2NWU5YzY5M2JkODE4NGMzY2E1NjZjYTcw ZmQ1NjAwHhcNMjUxMjA2MjMwMTE5WhcNMjUxMjA3MjMwMTE5WjAzMTEwLwYDVQQD Eyg4NDg2YzVmYzYzNDlhNDFlODIxYjAwZTkwYmYwNDczNzNiZGYwZjczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVHJYqOPPz0C7aoNRNp/ZjtADE2G 8J6BHNf58M1zg1ALV0UabpxPta79Fflq9fW/kWwpTWAQeidfDkwcrrqgF9jJoQqA 6G3nbyuU/agK4p24uzOxouPYIqkRo9E3sASXAFJ8tThqbP9LECW+bv1L9JeB9vq7 tRF5MDO76ejckvI2SJ3WkiMtcAgrACgYnnlAYJQcTV5ostOX8F83Z/6BPiHRfr8d XIW5p7aJcVd3xddoqYNw84lrQ0iUnW6m/0OybrbCxBBfka9sAxIeHqG/uFmDfW9E D01dRyGxhWf3QUjP9fDZINW75aTIGZ3VKQj1m+P8Qwt17aGAG7CjNwM+2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFISGxfxjSaQeghsA6QvwRzc73w9zMB8GA1UdIwQY MBaAFKUWSkaBZenGk72BhMPKVmynD9VgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFJaS1JvRmw2Y2FUdllHRXc4cFdiS2NQMVdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8xZmNmYmEtY2RhMC00YWQzLTk4OTMt OTQ1ODdkODMzMWY5LzEvcFJaS1JvRmw2Y2FUdllHRXc4cFdiS2NQMVdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC8xZmNmYmEtY2RhMC00YWQzLTk4OTMtOTQ1ODdkODMzMWY5 LzEvcFJaS1JvRmw2Y2FUdllHRXc4cFdiS2NQMVdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALSJ3dXAA zrgGAhnM4GgOfOd0PNywpeeTchLiQPj328ozaK+uNF3N1K75CbcB8gPRNBrn+rBU 9y1VDNjxDKxVMoHAQvoywev/D5rCFEGs3SFIxJ8xmI0S5dE4TgTveeiCBPGO8iPf 2DpeUvPweXSwk8FOepB9HOKa5PAw7tCH9kmiDptqLumRuhLH5prnWdrt+SCsfT8U PsJ3jmh+O043VIU4L/TZAhfpSTC0xIYmHeZnIbkoGVmIFRvcZtKIeg1bkQ6r2az1 jQ35UQPW+mnEkb+agEXWVk9Hj8oIwBmSg6MU+vxFUucjrUiRHeWbh1GLHwsevin9 Ad4TlWkM4gSDLA== -----END CERTIFICATE-----Generated at Sun Dec 7 00:36:03 2025 by rpki-client