This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.mft File: prswRa6njo-nZIEpcU-3NgaNw3s.mft (raw, json) Hash identifier: UyMZA82JOx+56xW2fES5JnGHQ4lpvNKpB7nxcxtKb5U= Subject key identifier: D5:64:83:46:5A:D0:7C:6A:E9:91:73:85:52:F2:8F:65:A8:83:2C:CA Authority key identifier: A6:BB:30:45:AE:A7:8E:8F:A7:64:81:29:71:4F:B7:36:06:8D:C3:7B Certificate issuer: /CN=a6bb3045aea78e8fa7648129714fb736068dc37b Certificate serial: 019AF276A5EB8D95E471153369DF8D29CD4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/prswRa6njo-nZIEpcU-3NgaNw3s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.mft Manifest number: 0ABC Signing time: Sat 06 Dec 2025 07:00:53 +0000 Manifest this update: Sat 06 Dec 2025 07:00:53 +0000 Manifest next update: Sun 07 Dec 2025 07:00:53 +0000 Files and hashes: 1: SY81gJpFL3O5UNAf48JLyqIodXE.roa (hash: jLBfqqRL2Al9+uGkQb3qfdiObpqqeOZguvx4px0RKv8=) 2: prswRa6njo-nZIEpcU-3NgaNw3s.crl (hash: 8x0LnObXqy45IkKAdjWrA3eya21k08Lwl9Bfmhu8CBY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.mft rsync://rpki.ripe.net/repository/DEFAULT/prswRa6njo-nZIEpcU-3NgaNw3s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:a5:eb:8d:95:e4:71:15:33:69:df:8d:29:cd:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6bb3045aea78e8fa7648129714fb736068dc37b Validity Not Before: Dec 6 07:00:53 2025 GMT Not After : Dec 7 07:00:53 2025 GMT Subject: CN=d56483465ad07c6ae991738552f28f65a8832cca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:3d:ab:ff:89:77:9c:ad:14:1e:90:dd:3b:37: 04:c4:46:3f:ca:a6:4e:0f:00:38:d0:30:2c:f6:60: 76:e7:61:02:40:54:cc:19:e2:05:0c:cd:9c:2c:96: 0d:04:a7:37:30:49:ad:06:a7:0a:7b:79:a3:ad:43: 06:55:00:b0:f7:50:59:22:d8:84:dc:2a:ac:cf:af: 84:a9:36:66:ff:07:76:18:25:27:cd:9c:f4:83:f4: b8:e9:57:61:78:c4:07:b6:d8:fb:28:82:dc:2d:94: 9d:dc:93:ed:46:4d:70:34:71:6f:bd:7b:da:18:31: 44:ff:db:2c:31:f4:ed:5e:79:95:a1:f2:24:ae:bd: 9a:50:e1:aa:64:d1:c3:1f:f1:f0:3e:17:47:32:09: c2:19:68:d0:bc:6f:70:be:16:d3:f7:88:d6:68:2b: a2:4b:b6:07:d1:d5:b2:6f:bd:96:ef:58:c3:20:66: 87:ac:0a:56:dd:c6:14:71:52:de:d3:4a:64:3d:4b: 8b:67:27:c6:35:1e:bf:d5:01:c8:fd:5e:43:f8:e2: bb:fa:1b:0f:92:da:c2:58:29:46:71:0e:a5:3e:3f: 25:14:9f:72:51:39:9a:3d:85:57:ee:bf:2a:b9:f1: 6b:b2:40:55:83:d4:06:cb:b1:78:4f:dc:34:0f:ff: 40:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:64:83:46:5A:D0:7C:6A:E9:91:73:85:52:F2:8F:65:A8:83:2C:CA X509v3 Authority Key Identifier: keyid:A6:BB:30:45:AE:A7:8E:8F:A7:64:81:29:71:4F:B7:36:06:8D:C3:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prswRa6njo-nZIEpcU-3NgaNw3s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:74:30:51:92:22:cd:3b:ea:2f:24:0e:3b:7f:47:d3:8b:46: 05:2e:e0:a6:40:12:85:7e:a5:30:8e:8a:9e:e6:8b:a7:e1:78: 31:59:e5:72:65:fd:28:14:e3:84:52:14:2c:57:5f:01:5a:0f: 52:21:e7:e3:5b:bd:73:0b:30:3e:f9:0a:47:f8:ce:16:36:00: 53:d2:57:15:21:23:a6:f0:45:f1:20:28:2a:c8:1f:b2:54:33: ba:6e:a4:5f:a7:6b:45:ca:d7:5d:11:29:e5:73:59:59:63:8d: 31:b8:67:3e:54:9f:78:51:be:81:a1:ac:38:16:40:37:27:78: 04:d6:2b:de:cf:9d:c2:36:97:96:66:9a:e8:8b:a9:2c:f1:02: f2:5b:09:7f:55:6f:1b:6c:05:16:a3:41:d7:11:a6:18:30:2c: 37:34:53:b6:99:0b:0f:bf:d6:05:bc:85:1a:f2:5a:30:26:49: 40:64:9c:ad:b6:ce:77:e7:8a:1d:49:1c:56:a5:52:70:5e:e9: 54:9e:77:d9:00:78:1c:87:89:cc:9e:ea:c8:76:30:9d:f6:78: 04:b0:1f:b5:4f:38:f0:83:ac:58:4b:2e:ec:1e:ba:9b:5a:1e: 92:94:63:fc:32:3c:0b:6a:fa:86:a1:c5:59:89:f2:d6:92:10: e9:b0:54:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydqXrjZXkcRUzad+NKc1PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2YmIzMDQ1YWVhNzhlOGZhNzY0ODEyOTcxNGZiNzM2MDY4 ZGMzN2IwHhcNMjUxMjA2MDcwMDUzWhcNMjUxMjA3MDcwMDUzWjAzMTEwLwYDVQQD EyhkNTY0ODM0NjVhZDA3YzZhZTk5MTczODU1MmYyOGY2NWE4ODMyY2NhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoT2r/4l3nK0UHpDdOzcExEY/yqZO DwA40DAs9mB252ECQFTMGeIFDM2cLJYNBKc3MEmtBqcKe3mjrUMGVQCw91BZItiE 3Cqsz6+EqTZm/wd2GCUnzZz0g/S46VdheMQHttj7KILcLZSd3JPtRk1wNHFvvXva GDFE/9ssMfTtXnmVofIkrr2aUOGqZNHDH/HwPhdHMgnCGWjQvG9wvhbT94jWaCui S7YH0dWyb72W71jDIGaHrApW3cYUcVLe00pkPUuLZyfGNR6/1QHI/V5D+OK7+hsP ktrCWClGcQ6lPj8lFJ9yUTmaPYVX7r8qufFrskBVg9QGy7F4T9w0D/9AkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNVkg0Za0Hxq6ZFzhVLyj2WogyzKMB8GA1UdIwQY MBaAFKa7MEWup46Pp2SBKXFPtzYGjcN7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHJzd1JhNm5qby1uWklFcGNVLTNOZ2FOdzNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi80MWVhZjktNjU2ZC00MGQ5LTlmN2Et MzM0ZGUzZDc2ZmU1LzEvcHJzd1JhNm5qby1uWklFcGNVLTNOZ2FOdzNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi80MWVhZjktNjU2ZC00MGQ5LTlmN2EtMzM0ZGUzZDc2ZmU1 LzEvcHJzd1JhNm5qby1uWklFcGNVLTNOZ2FOdzNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKXQwUZIi zTvqLyQOO39H04tGBS7gpkAShX6lMI6KnuaLp+F4MVnlcmX9KBTjhFIULFdfAVoP UiHn41u9cwswPvkKR/jOFjYAU9JXFSEjpvBF8SAoKsgfslQzum6kX6drRcrXXREp 5XNZWWONMbhnPlSfeFG+gaGsOBZANyd4BNYr3s+dwjaXlmaa6IupLPEC8lsJf1Vv G2wFFqNB1xGmGDAsNzRTtpkLD7/WBbyFGvJaMCZJQGScrbbOd+eKHUkcVqVScF7p VJ532QB4HIeJzJ7qyHYwnfZ4BLAftU848IOsWEsu7B66m1oekpRj/DI8C2r6hqHF WYny1pIQ6bBUWA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:18:14 2025 by rpki-client