This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/56e9d5-ff45-4464-b2bb-610b9e72a6be/1/PRKXkoZrFiE7VsW_pr66x8YYsVA.mft File: PRKXkoZrFiE7VsW_pr66x8YYsVA.mft (raw, json) Hash identifier: AK4za3kUBDqXq04xyIaRyNaA2SLjp8PN8MYDh7iIw38= Subject key identifier: 74:A3:19:4A:32:35:14:58:01:69:01:E5:90:0E:97:43:F0:F1:A0:E0 Authority key identifier: 3D:12:97:92:86:6B:16:21:3B:56:C5:BF:A6:BE:BA:C7:C6:18:B1:50 Certificate issuer: /CN=3d129792866b16213b56c5bfa6bebac7c618b150 Certificate serial: 019AF12D8DC69947DBE7005AA3A67E2B0ADD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PRKXkoZrFiE7VsW_pr66x8YYsVA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/56e9d5-ff45-4464-b2bb-610b9e72a6be/1/PRKXkoZrFiE7VsW_pr66x8YYsVA.mft Manifest number: 12EF Signing time: Sat 06 Dec 2025 01:01:25 +0000 Manifest this update: Sat 06 Dec 2025 01:01:25 +0000 Manifest next update: Sun 07 Dec 2025 01:01:25 +0000 Files and hashes: 1: PRKXkoZrFiE7VsW_pr66x8YYsVA.crl (hash: 8yja2ckhXvPxuyvOpCirtwyTkJ+gzi6+Lx0A68HsXEg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/56e9d5-ff45-4464-b2bb-610b9e72a6be/1/PRKXkoZrFiE7VsW_pr66x8YYsVA.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/56e9d5-ff45-4464-b2bb-610b9e72a6be/1/PRKXkoZrFiE7VsW_pr66x8YYsVA.mft rsync://rpki.ripe.net/repository/DEFAULT/PRKXkoZrFiE7VsW_pr66x8YYsVA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:8d:c6:99:47:db:e7:00:5a:a3:a6:7e:2b:0a:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d129792866b16213b56c5bfa6bebac7c618b150 Validity Not Before: Dec 6 01:01:25 2025 GMT Not After : Dec 7 01:01:25 2025 GMT Subject: CN=74a3194a32351458016901e5900e9743f0f1a0e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:6d:86:ae:82:51:3d:c2:89:82:e2:e3:0c:9f: 04:d8:bd:bf:72:83:32:55:7c:8c:b6:e8:bf:4a:74: 76:bf:78:fe:0e:8c:8e:68:f6:8f:5a:1b:71:4c:27: 30:91:6b:c6:f9:bf:01:9a:0c:d3:12:e0:e8:c2:e6: cb:70:01:dd:0c:cc:ea:be:55:77:8e:3f:e2:10:73: 93:01:48:84:62:59:37:ab:a4:bc:83:7e:b7:f4:d4: ba:68:ce:29:f1:89:31:fd:7c:96:cb:4f:52:52:7a: 65:d6:47:71:4b:af:f0:30:80:fe:c4:7d:6b:72:0f: c5:16:ab:f7:dc:17:ef:37:02:48:3e:03:df:c2:12: 51:fc:0b:72:3e:c9:df:77:ef:a8:a7:d5:32:18:55: 2a:07:65:da:7c:ea:18:c7:a1:ef:55:18:24:8a:2a: 08:75:aa:2f:62:14:dd:01:bf:bd:1f:f3:84:01:cb: ab:b9:97:be:ee:4a:c7:2b:0c:96:ca:a9:67:fb:fd: f1:cc:8a:82:05:54:9f:c1:03:e0:3a:e7:2b:cf:b7: fb:23:6a:cc:aa:bf:a6:6e:06:1f:bb:78:5c:50:77: c5:b1:ed:8c:29:29:ee:89:1f:ca:00:42:c3:93:2d: 8c:54:f4:41:ba:4f:ca:6f:ba:2f:9b:3d:db:93:aa: a4:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:A3:19:4A:32:35:14:58:01:69:01:E5:90:0E:97:43:F0:F1:A0:E0 X509v3 Authority Key Identifier: keyid:3D:12:97:92:86:6B:16:21:3B:56:C5:BF:A6:BE:BA:C7:C6:18:B1:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRKXkoZrFiE7VsW_pr66x8YYsVA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/56e9d5-ff45-4464-b2bb-610b9e72a6be/1/PRKXkoZrFiE7VsW_pr66x8YYsVA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/56e9d5-ff45-4464-b2bb-610b9e72a6be/1/PRKXkoZrFiE7VsW_pr66x8YYsVA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:13:92:5b:38:93:5f:34:25:31:22:c7:10:38:e4:78:7c:6c: 18:c6:14:b6:5d:3d:1f:26:df:36:2a:a5:96:e4:ad:68:cb:99: 22:77:cf:ae:0c:38:de:61:db:fb:55:aa:9a:fd:c4:8d:f7:ea: 40:96:7e:d0:4e:06:29:e9:1a:f8:21:3f:b7:89:52:16:f2:ba: e2:e9:01:68:da:95:b8:38:6f:51:19:46:e5:c5:c3:80:56:db: de:c5:e4:3e:4c:ce:19:5a:06:76:38:6a:55:b5:a0:c5:34:cb: f0:ee:54:1d:be:28:8e:13:13:7b:9b:fb:ae:38:ac:c9:bf:44: 46:82:b9:de:14:f5:b9:9a:78:f2:ca:9b:eb:e9:57:ed:42:1f: 9f:4d:35:ae:95:11:87:4f:55:22:9c:05:f0:4e:17:4e:7c:ba: 56:f4:36:96:1d:27:f6:67:d2:b4:8b:e9:48:8b:fc:ff:25:8e: 18:eb:13:85:71:99:34:73:67:7b:a5:b3:3e:91:65:8c:29:9f: e1:d3:48:f5:ef:e5:a6:32:cd:95:e6:2e:f9:2d:81:7b:04:00: 4e:cd:52:1e:fb:04:88:0d:53:92:ee:21:60:e2:eb:05:3d:fb: 18:9a:99:9f:34:d8:ae:fa:1e:56:36:a1:68:85:1a:ba:a9:a1: 39:b7:ed:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLY3GmUfb5wBao6Z+KwrdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkMTI5NzkyODY2YjE2MjEzYjU2YzViZmE2YmViYWM3YzYx OGIxNTAwHhcNMjUxMjA2MDEwMTI1WhcNMjUxMjA3MDEwMTI1WjAzMTEwLwYDVQQD Eyg3NGEzMTk0YTMyMzUxNDU4MDE2OTAxZTU5MDBlOTc0M2YwZjFhMGUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvG2GroJRPcKJguLjDJ8E2L2/coMy VXyMtui/SnR2v3j+DoyOaPaPWhtxTCcwkWvG+b8BmgzTEuDowubLcAHdDMzqvlV3 jj/iEHOTAUiEYlk3q6S8g3639NS6aM4p8Ykx/XyWy09SUnpl1kdxS6/wMID+xH1r cg/FFqv33BfvNwJIPgPfwhJR/AtyPsnfd++op9UyGFUqB2XafOoYx6HvVRgkiioI daovYhTdAb+9H/OEAcuruZe+7krHKwyWyqln+/3xzIqCBVSfwQPgOucrz7f7I2rM qr+mbgYfu3hcUHfFse2MKSnuiR/KAELDky2MVPRBuk/Kb7ovmz3bk6qkZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHSjGUoyNRRYAWkB5ZAOl0Pw8aDgMB8GA1UdIwQY MBaAFD0Sl5KGaxYhO1bFv6a+usfGGLFQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFJLWGtvWnJGaUU3VnNXX3ByNjZ4OFlZc1ZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC81NmU5ZDUtZmY0NS00NDY0LWIyYmIt NjEwYjllNzJhNmJlLzEvUFJLWGtvWnJGaUU3VnNXX3ByNjZ4OFlZc1ZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC81NmU5ZDUtZmY0NS00NDY0LWIyYmItNjEwYjllNzJhNmJl LzEvUFJLWGtvWnJGaUU3VnNXX3ByNjZ4OFlZc1ZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAExOSWziT XzQlMSLHEDjkeHxsGMYUtl09HybfNiqlluStaMuZInfPrgw43mHb+1Wqmv3Ejffq QJZ+0E4GKeka+CE/t4lSFvK64ukBaNqVuDhvURlG5cXDgFbb3sXkPkzOGVoGdjhq VbWgxTTL8O5UHb4ojhMTe5v7rjisyb9ERoK53hT1uZp48sqb6+lX7UIfn001rpUR h09VIpwF8E4XTny6VvQ2lh0n9mfStIvpSIv8/yWOGOsThXGZNHNne6WzPpFljCmf 4dNI9e/lpjLNleYu+S2BewQATs1SHvsEiA1Tku4hYOLrBT37GJqZnzTYrvoeVjah aIUauqmhObftKQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:12:31 2025 by rpki-client