This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/8fef7f-d011-4cdb-ac0a-31700f0e1a61/1/praJ3e9Y8KM4Pi71qjonxP5FMY4.mft File: praJ3e9Y8KM4Pi71qjonxP5FMY4.mft (raw, json) Hash identifier: rVFbNSqiqpFy9u5bA4lVv1A5DckiIQ7nQL3iXSrhEeA= Subject key identifier: 22:8A:87:61:5A:4D:7C:CC:7E:87:31:8D:96:59:5F:C5:AF:16:95:56 Authority key identifier: A6:B6:89:DD:EF:58:F0:A3:38:3E:2E:F5:AA:3A:27:C4:FE:45:31:8E Certificate issuer: /CN=a6b689ddef58f0a3383e2ef5aa3a27c4fe45318e Certificate serial: 019AF276695E5CCE477FF9CD7CC267A80B73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/praJ3e9Y8KM4Pi71qjonxP5FMY4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/8fef7f-d011-4cdb-ac0a-31700f0e1a61/1/praJ3e9Y8KM4Pi71qjonxP5FMY4.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 07:00:37 +0000 Manifest this update: Sat 06 Dec 2025 07:00:37 +0000 Manifest next update: Sun 07 Dec 2025 07:00:37 +0000 Files and hashes: 1: 1-hqyEGwonCGY9K2L38Pw7_zJV_k.roa (hash: a3BoJ3dncPr176aD5ziB0Bh5202joOPjBl2mIqn/r/0=) 2: praJ3e9Y8KM4Pi71qjonxP5FMY4.crl (hash: WcV4oKmKJ3zFEATd9+/8cX5/nj5wiGZoO7jFqenp6S8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/8fef7f-d011-4cdb-ac0a-31700f0e1a61/1/praJ3e9Y8KM4Pi71qjonxP5FMY4.crl rsync://rpki.ripe.net/repository/DEFAULT/98/8fef7f-d011-4cdb-ac0a-31700f0e1a61/1/praJ3e9Y8KM4Pi71qjonxP5FMY4.mft rsync://rpki.ripe.net/repository/DEFAULT/praJ3e9Y8KM4Pi71qjonxP5FMY4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:69:5e:5c:ce:47:7f:f9:cd:7c:c2:67:a8:0b:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6b689ddef58f0a3383e2ef5aa3a27c4fe45318e Validity Not Before: Dec 6 07:00:37 2025 GMT Not After : Dec 7 07:00:37 2025 GMT Subject: CN=228a87615a4d7ccc7e87318d96595fc5af169556 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:4b:03:f1:9f:cc:3f:75:06:35:45:3e:8d:a3: 92:92:a8:ea:6f:71:c8:cb:9d:c3:7e:32:9d:d3:7e: 88:ee:28:e9:69:1f:f8:e9:23:e4:9c:c0:9c:a4:14: 98:60:d2:c3:2e:2f:31:a4:6f:24:57:69:2a:5f:8e: fc:70:ea:54:13:1a:ab:f3:70:0a:72:93:2c:be:20: b5:d5:c6:41:21:06:62:0d:b1:e6:22:bd:c2:c0:22: 34:f9:b5:27:8d:20:3b:6b:ce:32:7b:27:7e:3e:2f: fc:f0:bf:65:5a:e0:fe:d8:a0:a7:09:de:75:c2:96: 7c:a0:2c:56:06:83:94:a3:bf:46:4b:81:58:aa:d0: 10:6c:7b:8e:b0:1b:3f:f4:b3:bc:67:2a:18:7b:8a: ee:41:b5:57:d0:f2:06:2b:a9:c0:f0:f6:39:64:34: 99:08:3f:2d:3b:87:e5:56:79:b5:1b:b3:46:26:6f: 77:b9:e0:03:d2:44:0d:36:cd:74:26:f4:5a:8a:6e: 7d:ad:51:33:52:ba:0e:b4:15:8f:bf:ec:a9:ec:94: 19:fd:e8:db:41:41:84:3f:d1:8d:3b:6f:ac:9b:86: f2:4f:f2:d8:9b:d4:c5:c6:61:cf:d6:be:91:35:cc: cb:d2:33:b6:16:1b:49:6f:e4:93:be:5b:81:b9:47: 47:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:8A:87:61:5A:4D:7C:CC:7E:87:31:8D:96:59:5F:C5:AF:16:95:56 X509v3 Authority Key Identifier: keyid:A6:B6:89:DD:EF:58:F0:A3:38:3E:2E:F5:AA:3A:27:C4:FE:45:31:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/praJ3e9Y8KM4Pi71qjonxP5FMY4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8fef7f-d011-4cdb-ac0a-31700f0e1a61/1/praJ3e9Y8KM4Pi71qjonxP5FMY4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8fef7f-d011-4cdb-ac0a-31700f0e1a61/1/praJ3e9Y8KM4Pi71qjonxP5FMY4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:42:c2:2f:a8:14:16:6c:d3:2b:2f:7b:d6:52:55:d4:b1:54: 1a:91:91:00:72:d9:69:28:f8:0c:82:ae:98:3f:f2:d6:21:77: a3:f6:07:ab:e5:ed:c7:f2:6b:7f:98:94:d1:15:07:5a:61:da: 14:28:66:f8:9a:6d:7c:d9:ce:1f:fe:ea:86:cb:cf:fd:51:c0: 41:72:b1:4d:f9:79:c5:36:8c:be:23:9a:8e:e2:14:ee:43:f7: 14:3f:5e:71:b8:41:3d:e2:11:d0:49:c6:0c:80:9f:8c:08:a5: dc:ee:f5:b2:1a:6b:86:dd:d4:2b:b5:f4:61:ad:c7:10:84:e0: 47:a3:19:db:ce:e0:4d:11:9a:d8:7b:bb:76:d7:13:b5:cb:6f: 74:c8:58:8b:b1:7a:71:aa:12:60:02:ee:5e:26:b5:68:c1:40: 02:91:e8:91:9c:d0:a7:d8:a6:86:d0:23:6f:e2:70:37:07:0c: 31:f9:9d:03:99:9a:7a:e2:9f:7b:c5:e5:6e:71:b9:0d:c0:6b: ea:ee:19:fc:5a:51:8a:eb:b5:ad:db:a6:e7:33:86:5b:fd:07: fd:55:04:a7:01:b1:4f:60:ea:58:26:14:7c:ae:32:63:b8:4b: 31:b4:c6:30:11:4e:3a:81:db:63:b3:ce:10:7c:e2:7c:b1:56: 59:09:a7:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydmleXM5Hf/nNfMJnqAtzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2YjY4OWRkZWY1OGYwYTMzODNlMmVmNWFhM2EyN2M0ZmU0 NTMxOGUwHhcNMjUxMjA2MDcwMDM3WhcNMjUxMjA3MDcwMDM3WjAzMTEwLwYDVQQD EygyMjhhODc2MTVhNGQ3Y2NjN2U4NzMxOGQ5NjU5NWZjNWFmMTY5NTU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0sD8Z/MP3UGNUU+jaOSkqjqb3HI y53DfjKd036I7ijpaR/46SPknMCcpBSYYNLDLi8xpG8kV2kqX478cOpUExqr83AK cpMsviC11cZBIQZiDbHmIr3CwCI0+bUnjSA7a84yeyd+Pi/88L9lWuD+2KCnCd51 wpZ8oCxWBoOUo79GS4FYqtAQbHuOsBs/9LO8ZyoYe4ruQbVX0PIGK6nA8PY5ZDSZ CD8tO4flVnm1G7NGJm93ueAD0kQNNs10JvRaim59rVEzUroOtBWPv+yp7JQZ/ejb QUGEP9GNO2+sm4byT/LYm9TFxmHP1r6RNczL0jO2FhtJb+STvluBuUdHzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCKKh2FaTXzMfocxjZZZX8WvFpVWMB8GA1UdIwQY MBaAFKa2id3vWPCjOD4u9ao6J8T+RTGOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHJhSjNlOVk4S000UGk3MXFqb254UDVGTVk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC84ZmVmN2YtZDAxMS00Y2RiLWFjMGEt MzE3MDBmMGUxYTYxLzEvcHJhSjNlOVk4S000UGk3MXFqb254UDVGTVk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC84ZmVmN2YtZDAxMS00Y2RiLWFjMGEtMzE3MDBmMGUxYTYx LzEvcHJhSjNlOVk4S000UGk3MXFqb254UDVGTVk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeULCL6gU FmzTKy971lJV1LFUGpGRAHLZaSj4DIKumD/y1iF3o/YHq+Xtx/Jrf5iU0RUHWmHa FChm+JptfNnOH/7qhsvP/VHAQXKxTfl5xTaMviOajuIU7kP3FD9ecbhBPeIR0EnG DICfjAil3O71shprht3UK7X0Ya3HEITgR6MZ287gTRGa2Hu7dtcTtctvdMhYi7F6 caoSYALuXia1aMFAApHokZzQp9imhtAjb+JwNwcMMfmdA5maeuKfe8XlbnG5DcBr 6u4Z/FpRiuu1rdum5zOGW/0H/VUEpwGxT2DqWCYUfK4yY7hLMbTGMBFOOoHbY7PO EHzifLFWWQmnug== -----END CERTIFICATE-----Generated at Sat Dec 6 09:04:51 2025 by rpki-client