This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/37514f-14e9-4dbe-b398-c87fab985af8/1/PRRSju_C35P_tOdPobZQO3btls4.mft File: PRRSju_C35P_tOdPobZQO3btls4.mft (raw, json) Hash identifier: i2B+GXx3h461vJraG7vEozIefr+v/jPzwLU/lV3FXhQ= Subject key identifier: AB:1A:8A:43:A5:E5:39:BA:7C:9B:91:28:30:6C:81:86:43:72:97:47 Authority key identifier: 3D:14:52:8E:EF:C2:DF:93:FF:B4:E7:4F:A1:B6:50:3B:76:ED:96:CE Certificate issuer: /CN=3d14528eefc2df93ffb4e74fa1b6503b76ed96ce Certificate serial: 019AF0BF2BCA7B853A828B918592149441A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PRRSju_C35P_tOdPobZQO3btls4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/37514f-14e9-4dbe-b398-c87fab985af8/1/PRRSju_C35P_tOdPobZQO3btls4.mft Manifest number: 1761 Signing time: Fri 05 Dec 2025 23:00:51 +0000 Manifest this update: Fri 05 Dec 2025 23:00:51 +0000 Manifest next update: Sat 06 Dec 2025 23:00:51 +0000 Files and hashes: 1: 1-6KFFu76PFsOuJn8gJBndgCFOdU.roa (hash: 6vvOH7Ca5iY7AgmvELf2eSvGZtIS2tf6NCvrsrbSjcE=) 2: PRRSju_C35P_tOdPobZQO3btls4.crl (hash: p1U7mAjdabueUdX1HyYIRxWhopM5OmfdWr/bwHZRiSc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/37514f-14e9-4dbe-b398-c87fab985af8/1/PRRSju_C35P_tOdPobZQO3btls4.crl rsync://rpki.ripe.net/repository/DEFAULT/50/37514f-14e9-4dbe-b398-c87fab985af8/1/PRRSju_C35P_tOdPobZQO3btls4.mft rsync://rpki.ripe.net/repository/DEFAULT/PRRSju_C35P_tOdPobZQO3btls4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:2b:ca:7b:85:3a:82:8b:91:85:92:14:94:41:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d14528eefc2df93ffb4e74fa1b6503b76ed96ce Validity Not Before: Dec 5 23:00:51 2025 GMT Not After : Dec 6 23:00:51 2025 GMT Subject: CN=ab1a8a43a5e539ba7c9b9128306c818643729747 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:1c:cc:19:8c:87:76:fa:c0:79:b7:07:09:87: df:a4:71:b3:73:42:28:bb:60:51:c8:4c:ea:f6:a8: c4:c7:fb:98:37:56:82:80:dd:46:ae:42:ab:02:2b: 86:58:ae:bf:cb:53:ed:21:f6:51:6c:44:22:f2:ee: 6b:2d:5c:61:6a:f0:1c:44:b2:f7:11:d5:e0:1d:c2: 11:1d:2f:67:d1:80:a0:f0:3b:45:3f:38:ce:fe:b9: c3:c7:bf:4e:91:b8:c4:75:47:27:1a:7b:97:a5:1a: 05:62:21:59:c5:87:f0:d4:80:29:2c:aa:ac:f5:6f: 73:29:8d:be:d6:2a:bb:7e:05:87:89:6d:b0:cb:e9: 79:4b:b1:d9:19:21:9e:4d:33:0f:c7:fd:69:a0:f2: d1:4f:91:a7:b9:72:d8:31:e2:70:a9:f5:ba:a5:dc: 73:c0:ea:cc:3d:22:61:0d:c6:80:f7:f5:d2:78:a2: c1:b2:1b:69:4f:29:c7:88:7c:03:d5:60:ff:7e:19: 9c:07:11:63:1e:fd:ed:fd:07:a6:04:03:b5:6d:2f: 37:a7:bf:4e:e6:bc:bd:53:5d:c7:56:e0:a1:b4:eb: 03:77:8c:8e:8a:3f:73:e6:bc:81:7c:f7:40:d1:75: ee:9e:4a:39:54:15:fa:f9:39:3c:2c:4e:94:fc:fc: 3e:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:1A:8A:43:A5:E5:39:BA:7C:9B:91:28:30:6C:81:86:43:72:97:47 X509v3 Authority Key Identifier: keyid:3D:14:52:8E:EF:C2:DF:93:FF:B4:E7:4F:A1:B6:50:3B:76:ED:96:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRRSju_C35P_tOdPobZQO3btls4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/37514f-14e9-4dbe-b398-c87fab985af8/1/PRRSju_C35P_tOdPobZQO3btls4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/37514f-14e9-4dbe-b398-c87fab985af8/1/PRRSju_C35P_tOdPobZQO3btls4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:09:60:2c:e8:6d:ae:32:75:5f:90:7c:ff:b7:81:d1:44:ec: 8a:37:49:b4:c2:c0:ca:71:24:be:e2:db:f0:33:85:cf:f4:4d: f8:d5:0a:1d:f3:dc:24:a9:fe:80:37:fd:12:a7:2c:0c:5c:26: 87:8e:95:11:8f:87:d5:22:16:39:d4:38:10:8e:f2:de:03:e8: 55:cd:a3:4b:6d:e6:e9:5a:e7:92:ae:42:23:04:d4:76:27:44: 95:0c:da:2b:b0:4b:82:37:5b:73:43:48:ac:d5:2a:71:56:33: 6d:0b:50:38:b0:91:0c:86:9e:fc:2b:61:d1:68:7b:1a:e6:33: dd:3d:1c:81:fe:f0:1f:57:47:7c:c0:44:4e:9b:06:cf:08:bb: 83:e5:89:ee:2e:14:3a:15:68:14:4b:26:ff:31:78:4c:81:a7: 21:71:21:f3:78:8c:de:2a:a8:77:64:62:e9:38:05:a3:e6:e5: 67:17:ab:e1:55:84:5f:8c:cf:de:fb:b6:d8:7e:1b:ea:25:5e: d9:e9:26:5b:02:b5:3f:d8:8a:b3:f2:75:f9:43:e5:57:0f:c5: b0:56:7b:db:d5:c2:bc:02:f1:63:8e:9b:31:ee:c9:02:db:f1: 7d:40:4d:13:0a:f6:39:df:9c:71:6f:a2:18:39:30:d9:95:de: 5b:4f:f0:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvyvKe4U6gouRhZIUlEGkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkMTQ1MjhlZWZjMmRmOTNmZmI0ZTc0ZmExYjY1MDNiNzZl ZDk2Y2UwHhcNMjUxMjA1MjMwMDUxWhcNMjUxMjA2MjMwMDUxWjAzMTEwLwYDVQQD EyhhYjFhOGE0M2E1ZTUzOWJhN2M5YjkxMjgzMDZjODE4NjQzNzI5NzQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxzMGYyHdvrAebcHCYffpHGzc0Io u2BRyEzq9qjEx/uYN1aCgN1GrkKrAiuGWK6/y1PtIfZRbEQi8u5rLVxhavAcRLL3 EdXgHcIRHS9n0YCg8DtFPzjO/rnDx79OkbjEdUcnGnuXpRoFYiFZxYfw1IApLKqs 9W9zKY2+1iq7fgWHiW2wy+l5S7HZGSGeTTMPx/1poPLRT5GnuXLYMeJwqfW6pdxz wOrMPSJhDcaA9/XSeKLBshtpTynHiHwD1WD/fhmcBxFjHv3t/QemBAO1bS83p79O 5ry9U13HVuChtOsDd4yOij9z5ryBfPdA0XXunko5VBX6+Tk8LE6U/Pw+/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKsaikOl5Tm6fJuRKDBsgYZDcpdHMB8GA1UdIwQY MBaAFD0UUo7vwt+T/7TnT6G2UDt27ZbOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFJSU2p1X0MzNVBfdE9kUG9iWlFPM2J0bHM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8zNzUxNGYtMTRlOS00ZGJlLWIzOTgt Yzg3ZmFiOTg1YWY4LzEvUFJSU2p1X0MzNVBfdE9kUG9iWlFPM2J0bHM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC8zNzUxNGYtMTRlOS00ZGJlLWIzOTgtYzg3ZmFiOTg1YWY4 LzEvUFJSU2p1X0MzNVBfdE9kUG9iWlFPM2J0bHM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAwlgLOht rjJ1X5B8/7eB0UTsijdJtMLAynEkvuLb8DOFz/RN+NUKHfPcJKn+gDf9EqcsDFwm h46VEY+H1SIWOdQ4EI7y3gPoVc2jS23m6Vrnkq5CIwTUdidElQzaK7BLgjdbc0NI rNUqcVYzbQtQOLCRDIae/Cth0Wh7GuYz3T0cgf7wH1dHfMBETpsGzwi7g+WJ7i4U OhVoFEsm/zF4TIGnIXEh83iM3iqod2Ri6TgFo+blZxer4VWEX4zP3vu22H4b6iVe 2ekmWwK1P9iKs/J1+UPlVw/FsFZ729XCvALxY46bMe7JAtvxfUBNEwr2Od+ccW+i GDkw2ZXeW0/wNA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:14:07 2025 by rpki-client