This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/336070-028b-476f-8606-55c1c84aed79/1/pRJgm-HwV0eSjF8HvRl-YxQ132I.mft File: pRJgm-HwV0eSjF8HvRl-YxQ132I.mft (raw, json) Hash identifier: EqPLbAdeISRbhJbpeW0zddxXteryUumAbBuRLO678Nc= Subject key identifier: 0A:34:C9:6F:BD:8C:8B:D5:99:37:C3:66:71:6D:CE:C5:73:D5:FD:11 Authority key identifier: A5:12:60:9B:E1:F0:57:47:92:8C:5F:07:BD:19:7E:63:14:35:DF:62 Certificate issuer: /CN=a512609be1f05747928c5f07bd197e631435df62 Certificate serial: 019AF0BF9AA841372FAD180D5D27CA0D3DD8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pRJgm-HwV0eSjF8HvRl-YxQ132I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/336070-028b-476f-8606-55c1c84aed79/1/pRJgm-HwV0eSjF8HvRl-YxQ132I.mft Manifest number: 1A Signing time: Fri 05 Dec 2025 23:01:20 +0000 Manifest this update: Fri 05 Dec 2025 23:01:20 +0000 Manifest next update: Sat 06 Dec 2025 23:01:20 +0000 Files and hashes: 1: pRJgm-HwV0eSjF8HvRl-YxQ132I.crl (hash: zjWl2fDXq1E6fomxKcuKmKxuMM9Bz5zESWNNjj1OQuc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/336070-028b-476f-8606-55c1c84aed79/1/pRJgm-HwV0eSjF8HvRl-YxQ132I.crl rsync://rpki.ripe.net/repository/DEFAULT/62/336070-028b-476f-8606-55c1c84aed79/1/pRJgm-HwV0eSjF8HvRl-YxQ132I.mft rsync://rpki.ripe.net/repository/DEFAULT/pRJgm-HwV0eSjF8HvRl-YxQ132I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:9a:a8:41:37:2f:ad:18:0d:5d:27:ca:0d:3d:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a512609be1f05747928c5f07bd197e631435df62 Validity Not Before: Dec 5 23:01:20 2025 GMT Not After : Dec 6 23:01:20 2025 GMT Subject: CN=0a34c96fbd8c8bd59937c366716dcec573d5fd11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:70:44:b9:dc:0b:6c:d8:ee:44:98:a2:47:1e: 2d:0a:af:78:65:bd:0a:cd:24:70:83:99:6e:9d:6a: ea:fd:17:b3:83:bc:18:68:05:0e:d1:98:d6:74:dd: f2:2f:48:bc:ac:31:e7:aa:68:07:8e:6d:41:82:e2: 19:9d:94:30:98:9d:0d:ca:11:8d:99:59:d9:00:d8: 03:2a:26:a2:45:d8:23:9b:3a:00:0f:34:cd:41:93: 71:53:9c:bb:bb:74:c8:ed:e0:3a:8b:00:85:86:b7: 9b:48:bd:bd:6e:ba:d2:f6:af:7d:8f:2c:4c:8e:e1: ec:16:f2:1e:1c:5e:3e:4e:02:e2:ec:c9:31:3e:76: f6:df:41:8d:fd:67:a4:35:0b:6c:79:30:c7:27:65: 39:59:c9:84:d9:7e:53:b9:07:b0:8f:e5:18:11:46: 05:7e:fd:c0:6a:a2:4d:99:6e:2d:8c:c6:bb:5e:a5: 45:83:a9:01:ab:c8:5c:46:97:79:78:d5:db:df:de: 0e:b2:98:3c:bc:00:63:9a:73:f0:ec:dd:d8:1a:69: e4:d4:10:b9:f9:dd:d6:af:37:16:27:49:1a:a2:0e: 8b:db:1c:83:81:70:10:2c:ee:9a:f3:f2:0e:83:a3: e2:0b:d9:0e:b9:b1:61:36:83:f3:7e:c4:a8:7b:33: c7:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:34:C9:6F:BD:8C:8B:D5:99:37:C3:66:71:6D:CE:C5:73:D5:FD:11 X509v3 Authority Key Identifier: keyid:A5:12:60:9B:E1:F0:57:47:92:8C:5F:07:BD:19:7E:63:14:35:DF:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pRJgm-HwV0eSjF8HvRl-YxQ132I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/336070-028b-476f-8606-55c1c84aed79/1/pRJgm-HwV0eSjF8HvRl-YxQ132I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/336070-028b-476f-8606-55c1c84aed79/1/pRJgm-HwV0eSjF8HvRl-YxQ132I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:01:60:c3:b9:81:a4:bc:e0:9b:ff:77:3a:9e:f8:45:78:05: 4e:b3:4d:06:f1:16:da:1b:e3:2f:b9:ee:35:93:4e:a3:38:c4: bf:a5:e0:90:23:20:a3:bb:fc:20:35:ca:98:d0:23:dd:42:ab: 82:9e:42:80:0f:15:de:6c:db:86:ac:3b:79:07:3c:c6:1d:7c: ad:ed:d8:1b:77:25:94:e3:cf:8e:81:0e:93:44:e9:2b:00:e7: c1:5f:00:12:d1:5a:6a:6a:ae:a6:05:8d:c2:f2:4f:74:ea:1a: 99:ca:2f:7b:a7:0b:17:dc:b9:a1:1c:47:6f:01:cd:00:9d:ca: 3b:0c:56:91:44:cb:be:f7:bb:0b:9d:ec:b9:38:9b:f6:5d:b7: ca:03:a4:6e:25:c6:e9:34:f5:a2:52:d2:53:9d:70:32:cd:b1: de:47:af:6e:d5:ac:8b:9a:c6:6b:fb:f2:40:58:5c:50:df:06: 0e:16:4b:f6:cc:c3:dd:a0:a0:4f:41:c4:f2:12:aa:d8:75:17: 68:c5:b0:5c:16:0f:fd:06:a5:05:38:65:b4:44:da:ff:1f:90: 84:32:09:a1:60:26:c8:7f:2c:77:c3:cd:99:05:f2:60:75:21: d1:3a:a9:0e:2c:6e:10:42:6c:11:1a:0b:b8:25:09:34:05:8f: ad:74:10:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv5qoQTcvrRgNXSfKDT3YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1MTI2MDliZTFmMDU3NDc5MjhjNWYwN2JkMTk3ZTYzMTQz NWRmNjIwHhcNMjUxMjA1MjMwMTIwWhcNMjUxMjA2MjMwMTIwWjAzMTEwLwYDVQQD EygwYTM0Yzk2ZmJkOGM4YmQ1OTkzN2MzNjY3MTZkY2VjNTczZDVmZDExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXBEudwLbNjuRJiiRx4tCq94Zb0K zSRwg5lunWrq/Rezg7wYaAUO0ZjWdN3yL0i8rDHnqmgHjm1BguIZnZQwmJ0NyhGN mVnZANgDKiaiRdgjmzoADzTNQZNxU5y7u3TI7eA6iwCFhrebSL29brrS9q99jyxM juHsFvIeHF4+TgLi7MkxPnb230GN/WekNQtseTDHJ2U5WcmE2X5TuQewj+UYEUYF fv3AaqJNmW4tjMa7XqVFg6kBq8hcRpd5eNXb394Ospg8vABjmnPw7N3YGmnk1BC5 +d3WrzcWJ0kaog6L2xyDgXAQLO6a8/IOg6PiC9kOubFhNoPzfsSoezPHBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAo0yW+9jIvVmTfDZnFtzsVz1f0RMB8GA1UdIwQY MBaAFKUSYJvh8FdHkoxfB70ZfmMUNd9iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFJKZ20tSHdWMGVTakY4SHZSbC1ZeFExMzJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8zMzYwNzAtMDI4Yi00NzZmLTg2MDYt NTVjMWM4NGFlZDc5LzEvcFJKZ20tSHdWMGVTakY4SHZSbC1ZeFExMzJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi8zMzYwNzAtMDI4Yi00NzZmLTg2MDYtNTVjMWM4NGFlZDc5 LzEvcFJKZ20tSHdWMGVTakY4SHZSbC1ZeFExMzJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbwFgw7mB pLzgm/93Op74RXgFTrNNBvEW2hvjL7nuNZNOozjEv6XgkCMgo7v8IDXKmNAj3UKr gp5CgA8V3mzbhqw7eQc8xh18re3YG3cllOPPjoEOk0TpKwDnwV8AEtFaamqupgWN wvJPdOoamcove6cLF9y5oRxHbwHNAJ3KOwxWkUTLvve7C53suTib9l23ygOkbiXG 6TT1olLSU51wMs2x3kevbtWsi5rGa/vyQFhcUN8GDhZL9szD3aCgT0HE8hKq2HUX aMWwXBYP/QalBThltETa/x+QhDIJoWAmyH8sd8PNmQXyYHUh0TqpDixuEEJsERoL uCUJNAWPrXQQ0Q== -----END CERTIFICATE-----Generated at Sat Dec 6 07:42:13 2025 by rpki-client