This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.mft File: PRH7pD9XqwRF5UL87suHaBZXzPM.mft (raw, json) Hash identifier: qqCEQ+6yB7is8Xh8dtqOsysX1TGfAVCyMz7sAadGwQA= Subject key identifier: C0:D2:15:10:A9:B8:46:03:B2:93:3E:49:9D:EE:A9:60:6F:BB:3D:20 Authority key identifier: 3D:11:FB:A4:3F:57:AB:04:45:E5:42:FC:EE:CB:87:68:16:57:CC:F3 Certificate issuer: /CN=3d11fba43f57ab0445e542fceecb87681657ccf3 Certificate serial: 019AF12EE4B0548A8B3A3D3F4F47EC1A49A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PRH7pD9XqwRF5UL87suHaBZXzPM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.mft Manifest number: 03EA Signing time: Sat 06 Dec 2025 01:02:53 +0000 Manifest this update: Sat 06 Dec 2025 01:02:53 +0000 Manifest next update: Sun 07 Dec 2025 01:02:53 +0000 Files and hashes: 1: 2DxOeFRwGr0ZkLmLFLoh-xJZObE.roa (hash: aeAg8fL5FqA68LiiZmemChuMc/666QpvAefI6BAnFLU=) 2: PRH7pD9XqwRF5UL87suHaBZXzPM.crl (hash: 637RIxRslsnbvO/CEe+JmbsJfOXVOBnZKoSFJ7wSJa4=) 3: QubVM_6N5lx1EgDJtxcjPI_RV3o.roa (hash: 0U5OEeLVzA3Fo3jdio9FkyyDkZiO1CmcUt6CGyuWF74=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.mft rsync://rpki.ripe.net/repository/DEFAULT/PRH7pD9XqwRF5UL87suHaBZXzPM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:e4:b0:54:8a:8b:3a:3d:3f:4f:47:ec:1a:49:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d11fba43f57ab0445e542fceecb87681657ccf3 Validity Not Before: Dec 6 01:02:53 2025 GMT Not After : Dec 7 01:02:53 2025 GMT Subject: CN=c0d21510a9b84603b2933e499deea9606fbb3d20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:2d:26:ec:c6:c4:dd:85:02:11:22:a4:4b:e2: 7b:81:8f:16:07:06:fe:5d:0e:59:5d:1e:0e:6c:b4: 87:1f:8e:87:c8:73:04:eb:66:c7:5f:3d:f3:c0:e6: 0b:66:4f:05:ae:e6:04:c8:f1:ce:10:79:fd:71:d4: 0e:8f:fa:ec:fe:38:ca:92:3e:7b:d9:5e:c2:90:dd: 5a:cd:43:8e:f8:43:42:55:cb:86:2e:42:c5:26:13: 20:59:34:0e:87:90:07:1a:23:28:93:86:a6:47:df: 33:90:b9:e5:d1:96:45:26:78:a6:bb:0e:12:e7:e2: 90:ea:3a:27:56:28:69:e5:8b:be:39:d9:7d:3c:04: 72:05:53:64:c3:42:f8:fd:65:38:5b:fc:f9:49:31: 34:37:66:f4:bd:5d:52:1e:a2:5e:11:55:ef:cb:3b: 21:d1:9c:0f:ec:52:38:ae:fa:75:86:af:34:3d:83: e3:38:b6:48:88:f7:d3:90:6c:f3:b5:17:0f:39:8b: 53:8c:26:4d:47:56:3b:6f:98:a4:f5:2a:21:54:fa: e9:b3:20:00:a9:71:53:76:e9:e1:60:75:b5:64:a2: ba:32:8a:64:55:e0:3b:75:9b:e3:6a:04:72:80:5d: d5:62:56:06:5b:50:90:c4:05:1c:d3:16:96:f1:fa: 08:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:D2:15:10:A9:B8:46:03:B2:93:3E:49:9D:EE:A9:60:6F:BB:3D:20 X509v3 Authority Key Identifier: keyid:3D:11:FB:A4:3F:57:AB:04:45:E5:42:FC:EE:CB:87:68:16:57:CC:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRH7pD9XqwRF5UL87suHaBZXzPM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:11:e4:15:5b:45:8a:56:d2:94:92:3f:2b:2d:45:7e:88:ad: d9:93:80:f5:8f:9e:c5:b8:4d:af:22:7e:bb:98:27:20:97:7c: 30:71:4c:15:fd:dd:a1:9b:35:30:36:5b:b4:1e:95:a4:eb:94: c4:52:39:7c:df:3f:9b:18:9f:9c:13:ca:bc:ad:f4:1c:de:32: 93:4b:d0:cb:14:c5:6d:b9:94:41:1b:cf:ad:d7:68:63:79:be: 8a:5e:62:f6:f8:74:16:17:80:04:3c:15:1c:3d:cb:1b:85:3b: b0:b4:30:e8:a5:63:a6:b5:ad:5c:07:ec:ff:23:28:08:be:67: c0:7a:96:80:d8:c2:1e:cc:7b:73:93:cd:95:e1:4f:71:4c:16: 57:8a:a3:12:2b:c3:b5:9c:26:0d:a3:ad:e8:08:ec:4a:32:20: d5:9b:6f:bb:ca:23:39:5d:98:32:77:90:86:85:09:d2:bf:0d: fc:68:14:df:fb:72:85:9e:1e:d9:0f:bf:bc:e1:75:5f:10:a4: ee:42:66:16:48:da:48:ca:fe:6b:fe:d5:5e:26:56:e9:19:a5: 32:ae:ac:eb:4b:22:66:9d:8a:af:44:66:cf:c6:f4:b7:69:11: 3e:7a:02:59:e6:0e:14:84:6f:39:ce:45:98:7f:33:58:4d:2f: 7b:5a:69:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLuSwVIqLOj0/T0fsGkmnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkMTFmYmE0M2Y1N2FiMDQ0NWU1NDJmY2VlY2I4NzY4MTY1 N2NjZjMwHhcNMjUxMjA2MDEwMjUzWhcNMjUxMjA3MDEwMjUzWjAzMTEwLwYDVQQD EyhjMGQyMTUxMGE5Yjg0NjAzYjI5MzNlNDk5ZGVlYTk2MDZmYmIzZDIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhy0m7MbE3YUCESKkS+J7gY8WBwb+ XQ5ZXR4ObLSHH46HyHME62bHXz3zwOYLZk8FruYEyPHOEHn9cdQOj/rs/jjKkj57 2V7CkN1azUOO+ENCVcuGLkLFJhMgWTQOh5AHGiMok4amR98zkLnl0ZZFJnimuw4S 5+KQ6jonVihp5Yu+Odl9PARyBVNkw0L4/WU4W/z5STE0N2b0vV1SHqJeEVXvyzsh 0ZwP7FI4rvp1hq80PYPjOLZIiPfTkGzztRcPOYtTjCZNR1Y7b5ik9SohVPrpsyAA qXFTdunhYHW1ZKK6MopkVeA7dZvjagRygF3VYlYGW1CQxAUc0xaW8foIdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMDSFRCpuEYDspM+SZ3uqWBvuz0gMB8GA1UdIwQY MBaAFD0R+6Q/V6sEReVC/O7Lh2gWV8zzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFJIN3BEOVhxd1JGNVVMODdzdUhhQlpYelBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80NzNhZGUtYjUwNC00YjEwLWFlZDYt YzVkZDM4NTdhNGQyLzEvUFJIN3BEOVhxd1JGNVVMODdzdUhhQlpYelBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80NzNhZGUtYjUwNC00YjEwLWFlZDYtYzVkZDM4NTdhNGQy LzEvUFJIN3BEOVhxd1JGNVVMODdzdUhhQlpYelBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJxHkFVtF ilbSlJI/Ky1Ffoit2ZOA9Y+exbhNryJ+u5gnIJd8MHFMFf3doZs1MDZbtB6VpOuU xFI5fN8/mxifnBPKvK30HN4yk0vQyxTFbbmUQRvPrddoY3m+il5i9vh0FheABDwV HD3LG4U7sLQw6KVjprWtXAfs/yMoCL5nwHqWgNjCHsx7c5PNleFPcUwWV4qjEivD tZwmDaOt6AjsSjIg1Ztvu8ojOV2YMneQhoUJ0r8N/GgU3/tyhZ4e2Q+/vOF1XxCk 7kJmFkjaSMr+a/7VXiZW6RmlMq6s60siZp2Kr0Rmz8b0t2kRPnoCWeYOFIRvOc5F mH8zWE0ve1ppYA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:54:31 2025 by rpki-client