This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/642897-530e-4613-af84-0da300c7c63d/1/S_PRgzZkK2qayK7f-_eu5uXmKfQ.mft File: S_PRgzZkK2qayK7f-_eu5uXmKfQ.mft (raw, json) Hash identifier: Umo+nnU4PnLSoikSxR8VLP1ACPsLu/9NiBFzqRm0qKE= Subject key identifier: 21:DB:C7:25:C0:C9:18:6F:88:CF:C6:4B:19:88:6A:6E:8A:77:6A:AD Authority key identifier: 4B:F3:D1:83:36:64:2B:6A:9A:C8:AE:DF:FB:F7:AE:E6:E5:E6:29:F4 Certificate issuer: /CN=4bf3d18336642b6a9ac8aedffbf7aee6e5e629f4 Certificate serial: 019AF352D68686235DE021C447F55FFDFC9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S_PRgzZkK2qayK7f-_eu5uXmKfQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/642897-530e-4613-af84-0da300c7c63d/1/S_PRgzZkK2qayK7f-_eu5uXmKfQ.mft Manifest number: 1718 Signing time: Sat 06 Dec 2025 11:01:23 +0000 Manifest this update: Sat 06 Dec 2025 11:01:23 +0000 Manifest next update: Sun 07 Dec 2025 11:01:23 +0000 Files and hashes: 1: S_PRgzZkK2qayK7f-_eu5uXmKfQ.crl (hash: zeYaflNcNGES/2830jQCmjUCuMyOCAZ7Ub6QIhVSx8c=) 2: zO3b4_gkop7bpRFmwUyQSnP3CuQ.roa (hash: KQ8uWDK74BxQd55e4CkD8HOGjkQGRjBDcA3U74QNwgw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/642897-530e-4613-af84-0da300c7c63d/1/S_PRgzZkK2qayK7f-_eu5uXmKfQ.crl rsync://rpki.ripe.net/repository/DEFAULT/36/642897-530e-4613-af84-0da300c7c63d/1/S_PRgzZkK2qayK7f-_eu5uXmKfQ.mft rsync://rpki.ripe.net/repository/DEFAULT/S_PRgzZkK2qayK7f-_eu5uXmKfQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:d6:86:86:23:5d:e0:21:c4:47:f5:5f:fd:fc:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4bf3d18336642b6a9ac8aedffbf7aee6e5e629f4 Validity Not Before: Dec 6 11:01:23 2025 GMT Not After : Dec 7 11:01:23 2025 GMT Subject: CN=21dbc725c0c9186f88cfc64b19886a6e8a776aad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:3e:f5:f4:92:7c:0b:68:64:69:1f:79:09:e6: c7:73:f6:68:33:58:65:e0:5f:9a:41:88:35:c7:aa: c1:da:cf:e0:73:c1:c4:0f:34:79:6f:da:6f:d3:32: 0d:90:d7:23:fd:d6:14:f2:4b:fa:f2:2c:b3:77:ab: 9a:2c:e4:72:88:a3:22:42:ae:a3:40:c3:58:b8:44: 5d:d4:a3:c0:0f:a2:ce:ce:73:78:99:dd:f4:fc:72: 5f:15:09:eb:91:90:9a:94:fd:d8:15:9a:b4:e8:70: 52:76:0c:21:d1:c8:89:80:cc:04:06:cc:e8:80:a3: 9f:ef:17:dd:ca:75:71:b3:66:12:a1:d3:4f:a5:d2: f9:6b:37:32:ea:80:03:27:0e:bc:3d:d7:ed:62:4f: 0b:11:40:88:a9:f8:c7:85:47:03:5f:39:27:5b:ac: db:6a:bd:af:23:35:a6:8f:c8:4c:17:bb:43:41:78: 2f:d2:74:6e:ea:d1:9e:23:9a:e3:7a:cb:d4:e0:d0: b7:69:5c:8f:f5:39:50:c5:d9:08:98:27:f7:19:64: 73:0e:32:96:3a:1c:eb:96:a9:fb:5d:c5:fd:5f:70: b7:c7:c3:60:98:0a:54:ba:94:b0:b6:d0:ea:a8:a8: db:b8:78:70:96:b1:be:60:5a:2c:46:fa:00:4d:08: 33:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:DB:C7:25:C0:C9:18:6F:88:CF:C6:4B:19:88:6A:6E:8A:77:6A:AD X509v3 Authority Key Identifier: keyid:4B:F3:D1:83:36:64:2B:6A:9A:C8:AE:DF:FB:F7:AE:E6:E5:E6:29:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S_PRgzZkK2qayK7f-_eu5uXmKfQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/642897-530e-4613-af84-0da300c7c63d/1/S_PRgzZkK2qayK7f-_eu5uXmKfQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/642897-530e-4613-af84-0da300c7c63d/1/S_PRgzZkK2qayK7f-_eu5uXmKfQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:02:c9:96:46:bc:9b:bd:56:92:21:1f:d9:99:1f:1c:0f:7c: b7:b7:c6:77:03:ba:2c:4e:a1:9e:e6:04:c4:8c:64:6c:33:6c: 38:46:f9:76:ec:ce:06:06:c5:d1:d3:62:5b:6d:db:83:52:ac: 8b:52:f2:ab:32:34:ae:40:77:f5:d8:e3:51:8e:4d:1a:b5:c7: f2:dd:05:0a:d8:84:03:f8:39:87:d0:78:de:06:14:3e:bd:7b: ce:bb:ae:0b:06:ba:d2:90:f4:a5:cb:97:b2:58:a0:73:49:6c: 1c:08:1c:44:dd:c3:f3:d7:b0:92:4d:db:1b:7f:ac:c2:3b:84: 13:0d:3e:ef:85:c8:6e:89:93:6f:b1:ce:2b:be:50:16:c1:39: fc:a6:8b:d5:c7:b0:d6:80:3a:1d:9b:cc:40:3c:39:ca:ba:a9: b7:19:71:0c:88:5e:01:8e:5d:62:fd:b0:07:6d:88:0c:22:22: 35:f2:83:40:75:84:44:5b:32:c1:41:fe:73:70:fa:b0:b1:bc: 58:98:72:14:b4:90:cc:c2:80:69:9f:55:09:bf:6c:46:56:5e: 35:f1:54:96:89:50:77:ee:86:e4:83:5b:59:64:10:43:13:a4: f3:35:a2:5c:cd:8d:1a:89:a0:aa:cb:fc:66:84:2c:a9:06:87: e0:a3:fe:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUtaGhiNd4CHER/Vf/fyaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiZjNkMTgzMzY2NDJiNmE5YWM4YWVkZmZiZjdhZWU2ZTVl NjI5ZjQwHhcNMjUxMjA2MTEwMTIzWhcNMjUxMjA3MTEwMTIzWjAzMTEwLwYDVQQD EygyMWRiYzcyNWMwYzkxODZmODhjZmM2NGIxOTg4NmE2ZThhNzc2YWFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArj719JJ8C2hkaR95CebHc/ZoM1hl 4F+aQYg1x6rB2s/gc8HEDzR5b9pv0zINkNcj/dYU8kv68iyzd6uaLORyiKMiQq6j QMNYuERd1KPAD6LOznN4md30/HJfFQnrkZCalP3YFZq06HBSdgwh0ciJgMwEBszo gKOf7xfdynVxs2YSodNPpdL5azcy6oADJw68PdftYk8LEUCIqfjHhUcDXzknW6zb ar2vIzWmj8hMF7tDQXgv0nRu6tGeI5rjesvU4NC3aVyP9TlQxdkImCf3GWRzDjKW Ohzrlqn7XcX9X3C3x8NgmApUupSwttDqqKjbuHhwlrG+YFosRvoATQgzxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCHbxyXAyRhviM/GSxmIam6Kd2qtMB8GA1UdIwQY MBaAFEvz0YM2ZCtqmsiu3/v3rubl5in0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU19QUmd6WmtLMnFheUs3Zi1fZXU1dVhtS2ZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi82NDI4OTctNTMwZS00NjEzLWFmODQt MGRhMzAwYzdjNjNkLzEvU19QUmd6WmtLMnFheUs3Zi1fZXU1dVhtS2ZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi82NDI4OTctNTMwZS00NjEzLWFmODQtMGRhMzAwYzdjNjNk LzEvU19QUmd6WmtLMnFheUs3Zi1fZXU1dVhtS2ZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYALJlka8 m71WkiEf2ZkfHA98t7fGdwO6LE6hnuYExIxkbDNsOEb5duzOBgbF0dNiW23bg1Ks i1LyqzI0rkB39djjUY5NGrXH8t0FCtiEA/g5h9B43gYUPr17zruuCwa60pD0pcuX sligc0lsHAgcRN3D89ewkk3bG3+swjuEEw0+74XIbomTb7HOK75QFsE5/KaL1cew 1oA6HZvMQDw5yrqptxlxDIheAY5dYv2wB22IDCIiNfKDQHWERFsywUH+c3D6sLG8 WJhyFLSQzMKAaZ9VCb9sRlZeNfFUlolQd+6G5INbWWQQQxOk8zWiXM2NGomgqsv8 ZoQsqQaH4KP+TQ== -----END CERTIFICATE-----Generated at Sat Dec 6 13:51:39 2025 by rpki-client