This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/23de06-fc9a-43d3-ac95-37e64c07cc86/1/PRzEAjSeGROS0ex0acG8gkNjRDk.mft File: PRzEAjSeGROS0ex0acG8gkNjRDk.mft (raw, json) Hash identifier: yOlGjWCMxfZbei+BLIYl5DM74RQOCXmbs7nsn2+3/Lc= Subject key identifier: 45:CB:A4:80:8F:F4:44:9C:B2:12:F8:95:97:AE:39:F1:E6:3E:BD:97 Authority key identifier: 3D:1C:C4:02:34:9E:19:13:92:D1:EC:74:69:C1:BC:82:43:63:44:39 Certificate issuer: /CN=3d1cc402349e191392d1ec7469c1bc8243634439 Certificate serial: 019B360ED44C6E69D262CF76CDD3BFCDC06A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PRzEAjSeGROS0ex0acG8gkNjRDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/23de06-fc9a-43d3-ac95-37e64c07cc86/1/PRzEAjSeGROS0ex0acG8gkNjRDk.mft Manifest number: 0BC7 Signing time: Fri 19 Dec 2025 10:01:40 +0000 Manifest this update: Fri 19 Dec 2025 10:01:40 +0000 Manifest next update: Sat 20 Dec 2025 10:01:40 +0000 Files and hashes: 1: PRzEAjSeGROS0ex0acG8gkNjRDk.crl (hash: BAM7AJYUVo6FnUBXa6Ez6YcjADx4pytxM7oQ3gU16Ho=) 2: flDyEgY09JcTncHiiRnZ44dc3Jg.roa (hash: U/d1Btmo0ndLftNS6W3aEjJNMxknGgzWNSoSOFVtfm8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/23de06-fc9a-43d3-ac95-37e64c07cc86/1/PRzEAjSeGROS0ex0acG8gkNjRDk.crl rsync://rpki.ripe.net/repository/DEFAULT/81/23de06-fc9a-43d3-ac95-37e64c07cc86/1/PRzEAjSeGROS0ex0acG8gkNjRDk.mft rsync://rpki.ripe.net/repository/DEFAULT/PRzEAjSeGROS0ex0acG8gkNjRDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:0e:d4:4c:6e:69:d2:62:cf:76:cd:d3:bf:cd:c0:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d1cc402349e191392d1ec7469c1bc8243634439 Validity Not Before: Dec 19 10:01:40 2025 GMT Not After : Dec 20 10:01:40 2025 GMT Subject: CN=45cba4808ff4449cb212f89597ae39f1e63ebd97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f5:72:90:26:a0:74:8f:c7:21:19:91:af:cd: 81:1f:c5:85:a4:b7:23:79:3c:d9:11:c0:e2:51:7b: cf:02:7f:20:f8:22:3e:e9:d7:a8:9a:0f:0e:5e:67: 10:49:33:6e:11:46:34:34:54:90:a7:f4:f4:b2:5d: 7d:ad:eb:65:c1:e6:dd:56:b9:d2:e9:5e:90:12:6a: 78:e8:31:93:89:b7:d6:20:f4:fe:22:e0:26:fa:20: 79:d8:a6:6e:1c:4f:e0:82:b8:e7:06:a7:ab:c5:6f: 68:f8:72:65:11:b4:03:a9:2a:f4:d9:16:90:b5:7d: bc:f4:da:1a:55:af:56:a2:2b:c8:69:f7:f5:ac:41: 97:19:60:c8:30:14:9c:52:5d:b0:02:7b:16:ea:57: 1a:08:77:08:41:ff:ff:b2:11:9f:18:ad:5c:c9:ac: 94:b3:44:a9:f7:d6:dc:98:33:a2:0e:c4:f1:4b:2c: 49:ca:f1:31:fb:17:97:b9:ee:9e:cc:f4:b2:8f:e7: ad:5f:6c:67:39:4f:cc:4d:16:5b:3c:fc:1f:91:61: 19:ab:61:3c:98:ea:81:e3:36:35:b9:a6:a2:8a:3f: 47:90:67:9e:33:32:fc:1b:03:a6:74:da:cf:70:c7: 24:d4:04:28:64:b7:e5:63:7c:b1:24:b3:66:a6:2f: 6d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:CB:A4:80:8F:F4:44:9C:B2:12:F8:95:97:AE:39:F1:E6:3E:BD:97 X509v3 Authority Key Identifier: keyid:3D:1C:C4:02:34:9E:19:13:92:D1:EC:74:69:C1:BC:82:43:63:44:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRzEAjSeGROS0ex0acG8gkNjRDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/23de06-fc9a-43d3-ac95-37e64c07cc86/1/PRzEAjSeGROS0ex0acG8gkNjRDk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/23de06-fc9a-43d3-ac95-37e64c07cc86/1/PRzEAjSeGROS0ex0acG8gkNjRDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:2d:33:c4:6b:bf:ef:f0:ed:0a:ed:ea:98:4d:61:cb:46:63: 38:98:30:2b:74:69:0a:6f:28:68:e7:67:52:6a:59:f7:f5:06: ba:b7:06:20:6d:68:fe:1b:43:24:20:0f:82:51:2b:ae:ec:3b: 50:05:6a:17:3d:b1:65:11:d7:fe:37:71:b0:07:3a:cd:03:6e: ab:78:9b:af:37:f6:6c:5d:e5:f6:03:fe:45:8c:ac:5d:21:fc: 52:15:06:4b:67:0b:87:bf:ab:67:d6:20:3e:db:09:c9:83:2a: 4a:2e:51:f2:f4:7b:50:20:c4:35:6c:f5:0b:0b:a4:9c:1b:6b: b8:3c:e8:c3:ea:b4:8a:2a:d9:d4:90:57:0a:fc:92:91:3e:00: 20:3f:48:0c:d7:ba:23:f6:d5:04:1c:b3:20:49:9d:68:01:fb: 9b:df:3a:4d:34:5a:0c:e7:49:14:bb:67:7a:8f:d6:22:74:55: 48:d6:1c:55:af:49:23:ec:c0:12:0f:2f:ad:62:f6:c8:48:59: 92:16:91:79:66:89:05:33:5f:b8:a7:74:4e:74:ee:2e:10:42: c2:9d:e6:19:9a:ba:0c:a1:f3:b4:f8:34:19:92:0d:4c:2e:c4: 87:5b:cd:12:f7:fd:8f:92:62:f2:ac:08:5b:3c:f0:0f:39:eb: cf:3a:e1:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2DtRMbmnSYs92zdO/zcBqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkMWNjNDAyMzQ5ZTE5MTM5MmQxZWM3NDY5YzFiYzgyNDM2 MzQ0MzkwHhcNMjUxMjE5MTAwMTQwWhcNMjUxMjIwMTAwMTQwWjAzMTEwLwYDVQQD Eyg0NWNiYTQ4MDhmZjQ0NDljYjIxMmY4OTU5N2FlMzlmMWU2M2ViZDk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPVykCagdI/HIRmRr82BH8WFpLcj eTzZEcDiUXvPAn8g+CI+6deomg8OXmcQSTNuEUY0NFSQp/T0sl19retlwebdVrnS 6V6QEmp46DGTibfWIPT+IuAm+iB52KZuHE/ggrjnBqerxW9o+HJlEbQDqSr02RaQ tX289NoaVa9WoivIaff1rEGXGWDIMBScUl2wAnsW6lcaCHcIQf//shGfGK1cyayU s0Sp99bcmDOiDsTxSyxJyvEx+xeXue6ezPSyj+etX2xnOU/MTRZbPPwfkWEZq2E8 mOqB4zY1uaaiij9HkGeeMzL8GwOmdNrPcMck1AQoZLflY3yxJLNmpi9tjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEXLpICP9EScshL4lZeuOfHmPr2XMB8GA1UdIwQY MBaAFD0cxAI0nhkTktHsdGnBvIJDY0Q5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFJ6RUFqU2VHUk9TMGV4MGFjRzhna05qUkRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8yM2RlMDYtZmM5YS00M2QzLWFjOTUt MzdlNjRjMDdjYzg2LzEvUFJ6RUFqU2VHUk9TMGV4MGFjRzhna05qUkRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS8yM2RlMDYtZmM5YS00M2QzLWFjOTUtMzdlNjRjMDdjYzg2 LzEvUFJ6RUFqU2VHUk9TMGV4MGFjRzhna05qUkRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFy0zxGu/ 7/DtCu3qmE1hy0ZjOJgwK3RpCm8oaOdnUmpZ9/UGurcGIG1o/htDJCAPglErruw7 UAVqFz2xZRHX/jdxsAc6zQNuq3ibrzf2bF3l9gP+RYysXSH8UhUGS2cLh7+rZ9Yg PtsJyYMqSi5R8vR7UCDENWz1CwuknBtruDzow+q0iirZ1JBXCvySkT4AID9IDNe6 I/bVBByzIEmdaAH7m986TTRaDOdJFLtneo/WInRVSNYcVa9JI+zAEg8vrWL2yEhZ khaReWaJBTNfuKd0TnTuLhBCwp3mGZq6DKHztPg0GZINTC7Eh1vNEvf9j5Ji8qwI WzzwDznrzzrh0A== -----END CERTIFICATE-----Generated at Fri Dec 19 15:06:11 2025 by rpki-client