This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/c077d5-b791-41ac-b7a2-566d1a637eef/1/PrqPh8ox3rbBfcfN4Iw3p3XnMCQ.mft File: PrqPh8ox3rbBfcfN4Iw3p3XnMCQ.mft (raw, json) Hash identifier: 2g18QRYnmFix+kJX+vFzl9W9SL69uWqYQOaENYuOC/0= Subject key identifier: 74:96:F4:27:5E:8C:51:5D:EE:CE:75:FC:05:06:DB:52:1C:27:24:A6 Authority key identifier: 3E:BA:8F:87:CA:31:DE:B6:C1:7D:C7:CD:E0:8C:37:A7:75:E7:30:24 Certificate issuer: /CN=3eba8f87ca31deb6c17dc7cde08c37a775e73024 Certificate serial: 019AF2767F2AAF58785D1C1402F7DFEC0F60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PrqPh8ox3rbBfcfN4Iw3p3XnMCQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/c077d5-b791-41ac-b7a2-566d1a637eef/1/PrqPh8ox3rbBfcfN4Iw3p3XnMCQ.mft Manifest number: CB Signing time: Sat 06 Dec 2025 07:00:43 +0000 Manifest this update: Sat 06 Dec 2025 07:00:43 +0000 Manifest next update: Sun 07 Dec 2025 07:00:43 +0000 Files and hashes: 1: PrqPh8ox3rbBfcfN4Iw3p3XnMCQ.crl (hash: MBSzatL/z4kBFC25lfSMxxwIk0zPOOcVAVl+tJEBsnU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/c077d5-b791-41ac-b7a2-566d1a637eef/1/PrqPh8ox3rbBfcfN4Iw3p3XnMCQ.crl rsync://rpki.ripe.net/repository/DEFAULT/88/c077d5-b791-41ac-b7a2-566d1a637eef/1/PrqPh8ox3rbBfcfN4Iw3p3XnMCQ.mft rsync://rpki.ripe.net/repository/DEFAULT/PrqPh8ox3rbBfcfN4Iw3p3XnMCQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:7f:2a:af:58:78:5d:1c:14:02:f7:df:ec:0f:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3eba8f87ca31deb6c17dc7cde08c37a775e73024 Validity Not Before: Dec 6 07:00:43 2025 GMT Not After : Dec 7 07:00:43 2025 GMT Subject: CN=7496f4275e8c515deece75fc0506db521c2724a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:e3:8e:3d:4b:95:37:32:69:6b:7a:e5:dd:9c: ae:12:50:55:ea:05:f9:9e:80:05:68:08:3e:81:5a: d6:12:7a:15:a6:b0:a8:ca:53:22:ca:bd:b4:0d:2e: cf:f5:fd:7d:94:68:a3:bb:24:db:01:61:5d:f9:f1: 9b:7b:ef:2e:2d:85:04:a2:14:f9:bc:e9:59:7a:5f: 6a:62:a2:a6:ed:a9:16:2c:ec:f4:38:04:34:1d:4a: 0a:82:60:7d:7b:d7:00:db:a1:c5:a8:0c:e1:21:f1: 88:b8:6d:32:9b:1f:4e:d5:c0:7f:87:cb:56:82:b7: 6e:3c:55:c1:59:88:b8:e9:c8:3b:6d:97:46:a9:d2: f2:19:20:9f:3d:90:16:d5:cb:6c:b9:60:84:39:08: a4:b1:91:30:69:b0:0c:88:dc:3f:0c:94:12:3f:61: dd:60:b4:3e:5c:5b:a9:3a:09:00:2f:e0:32:ce:b3: d1:77:45:c7:17:5f:00:5e:2e:ba:c6:86:b6:c1:18: 55:6c:a7:ba:df:1e:c1:ce:47:a8:8e:a0:a6:69:b7: cc:bb:34:54:30:f6:1e:76:c7:d4:7c:bf:43:32:32: 1a:1f:a7:5a:7e:c0:b7:70:34:ba:c5:fc:63:57:27: 41:b1:d2:35:9b:db:5b:9a:b9:94:2d:e3:f2:c7:65: 70:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:96:F4:27:5E:8C:51:5D:EE:CE:75:FC:05:06:DB:52:1C:27:24:A6 X509v3 Authority Key Identifier: keyid:3E:BA:8F:87:CA:31:DE:B6:C1:7D:C7:CD:E0:8C:37:A7:75:E7:30:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PrqPh8ox3rbBfcfN4Iw3p3XnMCQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/c077d5-b791-41ac-b7a2-566d1a637eef/1/PrqPh8ox3rbBfcfN4Iw3p3XnMCQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/c077d5-b791-41ac-b7a2-566d1a637eef/1/PrqPh8ox3rbBfcfN4Iw3p3XnMCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:e9:90:88:8d:d6:4a:b1:87:68:01:44:ae:db:02:5c:f6:49: 0a:7d:9f:5c:16:27:15:dd:06:fa:38:27:a8:3d:8a:61:71:2e: be:8b:cb:b2:6d:e6:0c:d9:de:56:d2:59:54:ba:3b:f7:e7:44: a2:9f:1b:0f:81:dc:31:30:50:cd:77:2e:cf:3a:f6:bd:40:09: 63:87:80:60:a5:67:83:b8:08:87:dc:d4:75:0b:03:19:6d:d6: 3f:9e:ab:c8:a6:4d:5d:1b:b1:ec:ed:7b:ad:30:2a:f0:e0:27: a2:6c:0d:5c:9b:d9:77:25:0a:2b:0f:9d:5a:84:19:d3:a5:1b: dd:3f:24:38:53:14:6f:50:1f:f4:64:08:79:af:bf:a5:6a:61: 01:6a:f4:dc:5f:c5:31:9f:72:99:ba:9d:60:27:be:a1:81:10: b1:2e:6a:56:0b:78:17:f4:55:26:ca:91:be:58:7d:3c:f7:92: 0c:04:12:97:7e:63:15:8b:d5:dd:3b:52:fe:e7:7f:1c:d5:d1: b3:3e:9c:b5:e0:d2:db:62:08:1d:40:f9:43:a3:18:2c:b4:0c: e7:f3:44:e6:fa:06:da:1a:08:18:4e:5a:af:c9:ce:a6:c3:66: 3f:d0:65:49:7a:4a:53:71:9b:ea:43:f4:d3:5c:4c:f0:8a:60: 51:9c:07:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydn8qr1h4XRwUAvff7A9gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlYmE4Zjg3Y2EzMWRlYjZjMTdkYzdjZGUwOGMzN2E3NzVl NzMwMjQwHhcNMjUxMjA2MDcwMDQzWhcNMjUxMjA3MDcwMDQzWjAzMTEwLwYDVQQD Eyg3NDk2ZjQyNzVlOGM1MTVkZWVjZTc1ZmMwNTA2ZGI1MjFjMjcyNGE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7uOOPUuVNzJpa3rl3ZyuElBV6gX5 noAFaAg+gVrWEnoVprCoylMiyr20DS7P9f19lGijuyTbAWFd+fGbe+8uLYUEohT5 vOlZel9qYqKm7akWLOz0OAQ0HUoKgmB9e9cA26HFqAzhIfGIuG0ymx9O1cB/h8tW grduPFXBWYi46cg7bZdGqdLyGSCfPZAW1ctsuWCEOQiksZEwabAMiNw/DJQSP2Hd YLQ+XFupOgkAL+AyzrPRd0XHF18AXi66xoa2wRhVbKe63x7BzkeojqCmabfMuzRU MPYedsfUfL9DMjIaH6dafsC3cDS6xfxjVydBsdI1m9tbmrmULePyx2VwWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHSW9CdejFFd7s51/AUG21IcJySmMB8GA1UdIwQY MBaAFD66j4fKMd62wX3HzeCMN6d15zAkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHJxUGg4b3gzcmJCZmNmTjRJdzNwM1huTUNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9jMDc3ZDUtYjc5MS00MWFjLWI3YTIt NTY2ZDFhNjM3ZWVmLzEvUHJxUGg4b3gzcmJCZmNmTjRJdzNwM1huTUNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC9jMDc3ZDUtYjc5MS00MWFjLWI3YTItNTY2ZDFhNjM3ZWVm LzEvUHJxUGg4b3gzcmJCZmNmTjRJdzNwM1huTUNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIemQiI3W SrGHaAFErtsCXPZJCn2fXBYnFd0G+jgnqD2KYXEuvovLsm3mDNneVtJZVLo79+dE op8bD4HcMTBQzXcuzzr2vUAJY4eAYKVng7gIh9zUdQsDGW3WP56ryKZNXRux7O17 rTAq8OAnomwNXJvZdyUKKw+dWoQZ06Ub3T8kOFMUb1Af9GQIea+/pWphAWr03F/F MZ9ymbqdYCe+oYEQsS5qVgt4F/RVJsqRvlh9PPeSDAQSl35jFYvV3TtS/ud/HNXR sz6cteDS22IIHUD5Q6MYLLQM5/NE5voG2hoIGE5ar8nOpsNmP9BlSXpKU3Gb6kP0 01xM8IpgUZwHew== -----END CERTIFICATE-----Generated at Sat Dec 6 11:00:23 2025 by rpki-client