This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/aa6565-5d97-4a80-9a5d-424c23f50ff3/1/PrkfNs_-gO_g3_JhI_j5fBXZdjw.mft File: PrkfNs_-gO_g3_JhI_j5fBXZdjw.mft (raw, json) Hash identifier: 9y6/rkLJLVasagvE4Jno33gDi0n5IopzG9h0v4tfwfU= Subject key identifier: EC:F2:AA:8D:36:73:96:7D:38:6B:BC:62:A7:97:61:68:8B:68:A4:DD Authority key identifier: 3E:B9:1F:36:CF:FE:80:EF:E0:DF:F2:61:23:F8:F9:7C:15:D9:76:3C Certificate issuer: /CN=3eb91f36cffe80efe0dff26123f8f97c15d9763c Certificate serial: 019AF12EA4FA873C2C4C06C6E182AD2F97C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PrkfNs_-gO_g3_JhI_j5fBXZdjw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/aa6565-5d97-4a80-9a5d-424c23f50ff3/1/PrkfNs_-gO_g3_JhI_j5fBXZdjw.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 01:02:37 +0000 Manifest this update: Sat 06 Dec 2025 01:02:37 +0000 Manifest next update: Sun 07 Dec 2025 01:02:37 +0000 Files and hashes: 1: PrkfNs_-gO_g3_JhI_j5fBXZdjw.crl (hash: RDf+mn0PYoDWRJ8Lk3tXHNsUYCV/oTJbiJ12GH7THoQ=) 2: nuDK-TC5cc4Dv5m-g_HwBrvB2yM.roa (hash: HAIc8rXtzi2UFMvUxwUOqrhRhKG5mpUAWpR1IBhhhmQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/aa6565-5d97-4a80-9a5d-424c23f50ff3/1/PrkfNs_-gO_g3_JhI_j5fBXZdjw.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/aa6565-5d97-4a80-9a5d-424c23f50ff3/1/PrkfNs_-gO_g3_JhI_j5fBXZdjw.mft rsync://rpki.ripe.net/repository/DEFAULT/PrkfNs_-gO_g3_JhI_j5fBXZdjw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:a4:fa:87:3c:2c:4c:06:c6:e1:82:ad:2f:97:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3eb91f36cffe80efe0dff26123f8f97c15d9763c Validity Not Before: Dec 6 01:02:37 2025 GMT Not After : Dec 7 01:02:37 2025 GMT Subject: CN=ecf2aa8d3673967d386bbc62a79761688b68a4dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:94:95:2c:ae:2e:9f:ef:bf:b0:f8:17:1b:32: 9a:a2:91:12:10:80:71:88:ed:9e:a9:22:3e:b6:a6: 7c:fd:9d:c0:42:6d:55:6c:d3:14:0b:8a:90:1d:35: 00:a7:0f:cb:31:a8:0d:92:c5:60:b9:3d:ea:06:ba: 94:89:88:d6:bf:ec:c8:7c:9c:6b:27:1e:27:f6:21: 5e:b5:ac:e7:9a:38:f0:40:46:b1:02:2d:38:91:72: 4d:3c:40:fe:73:d9:b7:a3:b0:86:f8:fe:ed:1d:20: 2f:30:b0:07:e2:22:64:ec:3f:9d:1d:b1:49:e7:e3: 9a:f0:50:84:5f:f9:91:4e:81:ea:b9:01:98:1b:52: ec:53:e2:be:a9:f8:10:4c:ac:a4:c8:21:7b:5c:ae: 2e:d5:46:e8:35:07:61:6f:09:c7:ba:d5:7d:d3:cc: 11:3c:ce:c0:2b:1d:bb:4e:a7:a5:78:ee:87:05:42: 34:23:d7:d1:1f:ed:ed:bb:63:f1:8f:e7:11:67:02: 7f:4d:9c:d5:6d:ce:9c:de:57:1e:c0:cc:62:46:ed: 4b:c2:22:a4:9a:a9:bd:cd:12:1d:ca:7e:1f:93:88: da:7a:f8:97:1a:67:24:6d:be:74:41:a7:d5:13:1b: 4c:51:25:1c:cc:23:6a:9f:34:d0:5a:25:5a:4f:d9: 3f:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:F2:AA:8D:36:73:96:7D:38:6B:BC:62:A7:97:61:68:8B:68:A4:DD X509v3 Authority Key Identifier: keyid:3E:B9:1F:36:CF:FE:80:EF:E0:DF:F2:61:23:F8:F9:7C:15:D9:76:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PrkfNs_-gO_g3_JhI_j5fBXZdjw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/aa6565-5d97-4a80-9a5d-424c23f50ff3/1/PrkfNs_-gO_g3_JhI_j5fBXZdjw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/aa6565-5d97-4a80-9a5d-424c23f50ff3/1/PrkfNs_-gO_g3_JhI_j5fBXZdjw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:a2:f3:29:89:d3:6d:05:fa:0d:60:dc:48:60:ce:f4:20:69: 40:ed:0e:a5:73:f0:cc:a5:ad:6c:85:d1:0e:da:ab:5d:4e:bc: 0e:52:db:65:59:84:80:61:ba:b8:27:c3:35:b0:fc:cd:81:e2: 75:f1:d6:0e:b0:f6:d3:06:93:96:0d:40:bf:00:03:c0:c9:e7: 01:d6:49:c5:56:d8:db:02:70:a3:3a:5e:99:ca:19:a2:6b:34: 2c:15:2e:89:2d:b7:7f:0a:6e:dd:d3:33:3a:f5:df:80:ef:a8: 71:4c:a9:e8:1e:2b:5c:4a:cd:fc:cf:2d:23:5b:d9:41:53:ce: 99:a4:77:d3:92:c8:9e:92:40:3f:b4:c0:7f:67:79:15:70:42: 2c:bd:cb:d9:c7:73:61:10:7c:d0:f5:26:6d:06:67:80:36:8c: 30:de:0c:a3:78:22:c0:81:46:03:72:97:33:81:32:81:7e:8a: a7:6e:a3:a6:6e:e8:dd:62:c5:af:ea:73:2c:7c:d3:0f:f6:b4: bb:aa:37:dc:4b:64:a8:3c:0e:36:55:20:38:02:79:0c:48:59: ff:94:10:b8:bf:1d:b9:88:d4:cb:4d:1d:70:22:41:35:1e:4e: 23:11:18:1b:fb:ed:c0:c3:2b:bc:18:f4:66:1d:7f:5c:36:99: e1:2b:2d:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLqT6hzwsTAbG4YKtL5fAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlYjkxZjM2Y2ZmZTgwZWZlMGRmZjI2MTIzZjhmOTdjMTVk OTc2M2MwHhcNMjUxMjA2MDEwMjM3WhcNMjUxMjA3MDEwMjM3WjAzMTEwLwYDVQQD EyhlY2YyYWE4ZDM2NzM5NjdkMzg2YmJjNjJhNzk3NjE2ODhiNjhhNGRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0pSVLK4un++/sPgXGzKaopESEIBx iO2eqSI+tqZ8/Z3AQm1VbNMUC4qQHTUApw/LMagNksVguT3qBrqUiYjWv+zIfJxr Jx4n9iFetaznmjjwQEaxAi04kXJNPED+c9m3o7CG+P7tHSAvMLAH4iJk7D+dHbFJ 5+Oa8FCEX/mRToHquQGYG1LsU+K+qfgQTKykyCF7XK4u1UboNQdhbwnHutV908wR PM7AKx27TqeleO6HBUI0I9fRH+3tu2Pxj+cRZwJ/TZzVbc6c3lcewMxiRu1LwiKk mqm9zRIdyn4fk4jaeviXGmckbb50QafVExtMUSUczCNqnzTQWiVaT9k/OwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOzyqo02c5Z9OGu8YqeXYWiLaKTdMB8GA1UdIwQY MBaAFD65HzbP/oDv4N/yYSP4+XwV2XY8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHJrZk5zXy1nT19nM19KaElfajVmQlhaZGp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9hYTY1NjUtNWQ5Ny00YTgwLTlhNWQt NDI0YzIzZjUwZmYzLzEvUHJrZk5zXy1nT19nM19KaElfajVmQlhaZGp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9hYTY1NjUtNWQ5Ny00YTgwLTlhNWQtNDI0YzIzZjUwZmYz LzEvUHJrZk5zXy1nT19nM19KaElfajVmQlhaZGp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIqLzKYnT bQX6DWDcSGDO9CBpQO0OpXPwzKWtbIXRDtqrXU68DlLbZVmEgGG6uCfDNbD8zYHi dfHWDrD20waTlg1AvwADwMnnAdZJxVbY2wJwozpemcoZoms0LBUuiS23fwpu3dMz OvXfgO+ocUyp6B4rXErN/M8tI1vZQVPOmaR305LInpJAP7TAf2d5FXBCLL3L2cdz YRB80PUmbQZngDaMMN4Mo3giwIFGA3KXM4EygX6Kp26jpm7o3WLFr+pzLHzTD/a0 u6o33EtkqDwONlUgOAJ5DEhZ/5QQuL8duYjUy00dcCJBNR5OIxEYG/vtwMMrvBj0 Zh1/XDaZ4SstyQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:02:39 2025 by rpki-client