This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.mft File: PrF4j-Ig5GQ0aS0cxDcHLXkteIg.mft (raw, json) Hash identifier: 85iwqcHU0SruVN63QBFI/kw9b2L8O5PBf9zSISuFRrQ= Subject key identifier: 2D:6B:33:FF:36:F7:25:81:61:4C:AC:79:7D:47:7D:ED:10:70:ED:5F Authority key identifier: 3E:B1:78:8F:E2:20:E4:64:34:69:2D:1C:C4:37:07:2D:79:2D:78:88 Certificate issuer: /CN=3eb1788fe220e46434692d1cc437072d792d7888 Certificate serial: 019AF19AA03E0ABF9F6458AB401CC7C6B858 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 03:00:33 +0000 Manifest this update: Sat 06 Dec 2025 03:00:33 +0000 Manifest next update: Sun 07 Dec 2025 03:00:33 +0000 Files and hashes: 1: 2YadcCcrthTPeDDHEpW__8Qd9bs.roa (hash: OdnpX4OxWP0430jIZ65+bJ7XNUvVVpsmfscwz1Ws1zM=) 2: 5NVHCfMQ6W48yxlWBv3uWNtbJDs.roa (hash: xWoUftWDtv357JcFYDaq4ko62SbPA3ugAxMWTRo1aWY=) 3: CVexCZZcrh9ZcPNoGlGj6g2cPNY.roa (hash: oCKOi7GJALUFPXeLK9MWcGccq1tZ9vcEgFN5xNZTkgo=) 4: PrF4j-Ig5GQ0aS0cxDcHLXkteIg.crl (hash: cah506izYRt0EfjDooiJ9g+8b+sR8LgA5fgokqNJiTk=) 5: UmpHN1dTZ2hpLcnnZpWS2Jt3BIg.roa (hash: PTvkuklKNLY3Mh0Z7gawtcDt9dMpbGsMOP+ydZCmFBk=) 6: puQ4Sk8pHIWfFKAYZzp1IAYEd0Q.roa (hash: tM5HP1N7Kc8KkaIaBlmp8d2jgH4OgbCHpaIgKSubYgE=) 7: zijtuBvUTHoACL0vLKqZfOgzwrA.roa (hash: /MUioQ1kaDrTgFZ5Z1TeKDrxhjrVzyNRI36qm2VszV8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.mft rsync://rpki.ripe.net/repository/DEFAULT/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:a0:3e:0a:bf:9f:64:58:ab:40:1c:c7:c6:b8:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3eb1788fe220e46434692d1cc437072d792d7888 Validity Not Before: Dec 6 03:00:33 2025 GMT Not After : Dec 7 03:00:33 2025 GMT Subject: CN=2d6b33ff36f72581614cac797d477ded1070ed5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:f5:4b:e3:7e:26:01:12:60:4b:94:67:1d:3d: ae:eb:83:ad:5b:f7:6d:a1:7a:55:8e:45:8b:93:75: 5b:96:92:a2:8d:53:1e:f1:03:01:ee:51:9a:3c:16: 8e:c8:28:6c:32:0b:f2:08:c9:94:f2:29:d1:e7:1f: 3b:aa:65:8c:b4:64:ad:24:2e:fc:9f:1a:06:9e:47: bf:9e:4f:d4:57:39:25:61:5b:24:9b:03:60:29:32: 51:57:47:ad:b8:dc:bf:8c:44:19:39:77:26:e2:7b: 15:34:44:82:3c:b1:33:72:63:a0:2d:58:95:7a:4f: 79:24:fa:88:b6:ad:11:6a:43:dd:1d:43:0e:44:fc: 3a:ae:22:97:70:8a:12:4e:e4:3b:e8:61:ba:2f:81: be:a9:cb:59:ce:1a:d4:11:fc:77:2c:28:8e:af:15: 37:9b:a8:51:a3:5c:56:59:2f:f0:5f:41:77:c3:78: eb:b7:9a:c7:57:4f:65:d8:a4:59:ad:d5:eb:84:f2: 97:47:c4:d8:d8:a6:34:70:a2:a3:d4:2f:e5:57:49: 3d:a5:c5:61:af:e2:1c:27:9d:95:01:87:0b:dc:05: 4f:01:60:bf:e3:a4:06:79:eb:dd:ae:c1:26:b7:14: a5:78:ae:f1:b5:d8:d9:67:3e:c6:22:68:cc:49:2a: a7:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:6B:33:FF:36:F7:25:81:61:4C:AC:79:7D:47:7D:ED:10:70:ED:5F X509v3 Authority Key Identifier: keyid:3E:B1:78:8F:E2:20:E4:64:34:69:2D:1C:C4:37:07:2D:79:2D:78:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:21:64:af:ac:29:15:69:3b:35:8f:5e:47:c2:cc:35:44:cf: 27:a5:81:2d:3f:ff:6d:a8:8e:cf:16:ca:5c:98:01:40:b8:d5: 9f:b7:e3:d6:b1:b3:87:d4:70:40:75:b4:b9:56:a8:85:97:eb: ef:37:f3:18:44:d7:e4:0c:69:6b:9a:d1:d9:8f:32:c6:bb:07: 1c:11:7c:66:92:b0:be:e6:0a:22:bc:1d:94:20:b7:20:86:c7: 22:02:b8:bb:4e:1d:1b:f3:7c:0f:0f:20:6c:c3:d5:95:3d:1a: 15:4e:f2:8b:b2:6e:1d:3f:01:39:19:f4:37:ba:36:f5:2b:48: 62:83:81:ac:f7:ce:07:6e:54:6b:08:04:e6:5c:e7:29:0e:0e: b2:47:ff:9f:ac:36:2b:ea:ad:46:cd:15:87:35:39:32:e1:43: da:a2:96:a0:01:9b:22:0c:f8:56:1f:78:ea:fc:cd:eb:73:7a: 61:fc:51:a6:50:94:96:22:f6:ce:d2:50:47:8c:d5:d9:22:07: d2:5b:fe:b1:fc:a0:54:0d:10:57:24:cf:38:44:b2:c0:64:69: 40:0d:ab:8b:f9:f8:75:66:6f:6a:76:17:de:27:a8:55:2c:ac: 6a:2b:13:ed:32:75:95:b7:a6:85:c2:4c:12:39:d3:9a:a0:6d: 10:07:ba:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmqA+Cr+fZFirQBzHxrhYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlYjE3ODhmZTIyMGU0NjQzNDY5MmQxY2M0MzcwNzJkNzky ZDc4ODgwHhcNMjUxMjA2MDMwMDMzWhcNMjUxMjA3MDMwMDMzWjAzMTEwLwYDVQQD EygyZDZiMzNmZjM2ZjcyNTgxNjE0Y2FjNzk3ZDQ3N2RlZDEwNzBlZDVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1vVL434mARJgS5RnHT2u64OtW/dt oXpVjkWLk3VblpKijVMe8QMB7lGaPBaOyChsMgvyCMmU8inR5x87qmWMtGStJC78 nxoGnke/nk/UVzklYVskmwNgKTJRV0etuNy/jEQZOXcm4nsVNESCPLEzcmOgLViV ek95JPqItq0RakPdHUMORPw6riKXcIoSTuQ76GG6L4G+qctZzhrUEfx3LCiOrxU3 m6hRo1xWWS/wX0F3w3jrt5rHV09l2KRZrdXrhPKXR8TY2KY0cKKj1C/lV0k9pcVh r+IcJ52VAYcL3AVPAWC/46QGeevdrsEmtxSleK7xtdjZZz7GImjMSSqneQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC1rM/829yWBYUyseX1Hfe0QcO1fMB8GA1UdIwQY MBaAFD6xeI/iIORkNGktHMQ3By15LXiIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHJGNGotSWc1R1EwYVMwY3hEY0hMWGt0ZUlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8yMmY1NzAtMGIyNi00MDA0LThlZDAt ZDk1MDk0NzMwNzJjLzEvUHJGNGotSWc1R1EwYVMwY3hEY0hMWGt0ZUlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8yMmY1NzAtMGIyNi00MDA0LThlZDAtZDk1MDk0NzMwNzJj LzEvUHJGNGotSWc1R1EwYVMwY3hEY0hMWGt0ZUlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKCFkr6wp FWk7NY9eR8LMNUTPJ6WBLT//baiOzxbKXJgBQLjVn7fj1rGzh9RwQHW0uVaohZfr 7zfzGETX5Axpa5rR2Y8yxrsHHBF8ZpKwvuYKIrwdlCC3IIbHIgK4u04dG/N8Dw8g bMPVlT0aFU7yi7JuHT8BORn0N7o29StIYoOBrPfOB25UawgE5lznKQ4Oskf/n6w2 K+qtRs0VhzU5MuFD2qKWoAGbIgz4Vh946vzN63N6YfxRplCUliL2ztJQR4zV2SIH 0lv+sfygVA0QVyTPOESywGRpQA2ri/n4dWZvanYX3ieoVSysaisT7TJ1lbemhcJM EjnTmqBtEAe6Rg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:05:52 2025 by rpki-client