This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/1693bf-6d40-469c-b056-5a8457121a0b/1/PRLRHJogPV58gmPt9URH47c1i38.mft File: PRLRHJogPV58gmPt9URH47c1i38.mft (raw, json) Hash identifier: Dnz3wS2oEVvfEDItTEfLH5clkm6qSY4AwPCel5A5jGw= Subject key identifier: 40:F1:A7:9E:AE:ED:CF:93:B1:74:19:84:1D:06:66:A4:E2:91:BC:2F Authority key identifier: 3D:12:D1:1C:9A:20:3D:5E:7C:82:63:ED:F5:44:47:E3:B7:35:8B:7F Certificate issuer: /CN=3d12d11c9a203d5e7c8263edf54447e3b7358b7f Certificate serial: 019AF1D232BD5A45207F5D26EF909D1AE0FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PRLRHJogPV58gmPt9URH47c1i38.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/1693bf-6d40-469c-b056-5a8457121a0b/1/PRLRHJogPV58gmPt9URH47c1i38.mft Manifest number: 1288 Signing time: Sat 06 Dec 2025 04:01:15 +0000 Manifest this update: Sat 06 Dec 2025 04:01:15 +0000 Manifest next update: Sun 07 Dec 2025 04:01:15 +0000 Files and hashes: 1: IFYqWjpdJxRaG3uyQLqw79JLTGo.roa (hash: alQatZzeYH3fzwBxC+QNB+5aLjO5V+OfKBsHgM/Tlv8=) 2: PRLRHJogPV58gmPt9URH47c1i38.crl (hash: /xpoelvamSDHycD+2tFS8mN+mDqYpPF2GomW9kovwNQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/1693bf-6d40-469c-b056-5a8457121a0b/1/PRLRHJogPV58gmPt9URH47c1i38.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/1693bf-6d40-469c-b056-5a8457121a0b/1/PRLRHJogPV58gmPt9URH47c1i38.mft rsync://rpki.ripe.net/repository/DEFAULT/PRLRHJogPV58gmPt9URH47c1i38.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:32:bd:5a:45:20:7f:5d:26:ef:90:9d:1a:e0:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d12d11c9a203d5e7c8263edf54447e3b7358b7f Validity Not Before: Dec 6 04:01:15 2025 GMT Not After : Dec 7 04:01:15 2025 GMT Subject: CN=40f1a79eaeedcf93b17419841d0666a4e291bc2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c5:14:74:a5:35:a5:39:e1:8e:0f:14:19:93: 2d:32:60:c9:74:94:80:6b:37:1f:0c:c5:e6:6e:95: 2d:74:c5:90:de:2a:9e:84:58:9e:04:e6:fb:40:74: 69:16:df:40:e8:29:66:69:c0:9d:92:1f:bc:68:f2: 35:4d:07:45:ff:53:a5:a9:26:52:25:3b:36:45:48: ff:15:24:eb:a5:ac:d6:17:f6:40:6d:f6:55:df:29: a8:8e:4a:5b:06:6d:8e:ca:75:06:d4:85:cb:4b:52: d8:3e:97:d3:38:c2:37:5e:e9:d1:1c:c3:f3:01:99: b1:68:18:7a:ab:e1:31:c2:19:da:35:90:de:8e:15: fd:5c:4f:62:69:bf:f6:6c:8a:51:3d:4b:a3:39:45: 2c:2d:30:d5:72:fb:4a:b5:de:b3:6c:81:49:c0:0e: 63:40:6c:8b:3d:53:c4:40:d0:fc:ef:a6:ec:06:4d: 98:cb:74:16:c9:6f:87:29:ac:cb:0f:8b:4e:52:d9: 05:73:30:9a:e0:91:6e:c4:71:70:e5:74:5f:fc:81: 37:a8:cf:4e:b1:bc:7c:ae:7a:2e:74:d5:9c:e5:d2: 50:e5:c3:95:b6:4c:fc:93:fb:04:9a:44:af:cb:3a: 2a:e1:36:0d:87:2a:0a:c2:b0:ec:4d:54:eb:e4:fa: 50:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:F1:A7:9E:AE:ED:CF:93:B1:74:19:84:1D:06:66:A4:E2:91:BC:2F X509v3 Authority Key Identifier: keyid:3D:12:D1:1C:9A:20:3D:5E:7C:82:63:ED:F5:44:47:E3:B7:35:8B:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRLRHJogPV58gmPt9URH47c1i38.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/1693bf-6d40-469c-b056-5a8457121a0b/1/PRLRHJogPV58gmPt9URH47c1i38.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/1693bf-6d40-469c-b056-5a8457121a0b/1/PRLRHJogPV58gmPt9URH47c1i38.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:fd:84:d8:01:7a:1e:af:63:bd:73:b7:59:7c:c7:ed:51:01: f1:0d:30:17:5b:4e:ea:08:1e:fe:51:46:d4:f6:5c:cf:11:f9: 68:a7:48:23:b0:f3:72:2b:c9:95:68:a3:76:88:46:4f:20:5b: d1:b2:c9:2c:28:5b:ae:66:2e:cc:75:41:a9:9c:65:09:f8:c3: a6:b7:b2:0e:61:8b:1f:93:70:1f:05:e3:eb:3b:3b:d7:39:f9: 7d:a0:08:08:c1:a9:33:bf:93:0c:a5:f4:6a:34:e6:d6:1c:48: 47:41:35:0e:8d:b3:b9:73:60:b1:d2:11:75:70:39:81:a7:71: 45:c1:ee:ae:2c:db:7c:38:0b:72:d7:50:5b:df:7b:30:0e:b2: 2a:58:51:52:b6:fe:aa:60:01:6c:35:7d:3c:1d:44:33:10:9f: fc:be:ea:c5:95:46:ed:72:48:22:38:8a:ec:b4:cf:29:34:ce: a7:24:53:49:d0:23:e0:c1:69:a6:05:57:dc:2c:07:f3:d3:40: 71:18:2e:b4:f9:83:3a:9c:ff:fc:a4:b5:61:15:b2:0b:2a:64: 37:8b:a9:24:f9:a6:fd:4f:e1:42:4a:69:bd:ee:34:18:30:dd: d7:5c:37:5c:23:12:0f:13:e4:3b:8d:6d:cf:88:cd:47:05:19: 82:c3:6d:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0jK9WkUgf10m75CdGuD+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkMTJkMTFjOWEyMDNkNWU3YzgyNjNlZGY1NDQ0N2UzYjcz NThiN2YwHhcNMjUxMjA2MDQwMTE1WhcNMjUxMjA3MDQwMTE1WjAzMTEwLwYDVQQD Eyg0MGYxYTc5ZWFlZWRjZjkzYjE3NDE5ODQxZDA2NjZhNGUyOTFiYzJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8UUdKU1pTnhjg8UGZMtMmDJdJSA azcfDMXmbpUtdMWQ3iqehFieBOb7QHRpFt9A6ClmacCdkh+8aPI1TQdF/1OlqSZS JTs2RUj/FSTrpazWF/ZAbfZV3ymojkpbBm2OynUG1IXLS1LYPpfTOMI3XunRHMPz AZmxaBh6q+ExwhnaNZDejhX9XE9iab/2bIpRPUujOUUsLTDVcvtKtd6zbIFJwA5j QGyLPVPEQND876bsBk2Yy3QWyW+HKazLD4tOUtkFczCa4JFuxHFw5XRf/IE3qM9O sbx8rnoudNWc5dJQ5cOVtkz8k/sEmkSvyzoq4TYNhyoKwrDsTVTr5PpQPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEDxp56u7c+TsXQZhB0GZqTikbwvMB8GA1UdIwQY MBaAFD0S0RyaID1efIJj7fVER+O3NYt/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFJMUkhKb2dQVjU4Z21QdDlVUkg0N2MxaTM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8xNjkzYmYtNmQ0MC00NjljLWIwNTYt NWE4NDU3MTIxYTBiLzEvUFJMUkhKb2dQVjU4Z21QdDlVUkg0N2MxaTM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS8xNjkzYmYtNmQ0MC00NjljLWIwNTYtNWE4NDU3MTIxYTBi LzEvUFJMUkhKb2dQVjU4Z21QdDlVUkg0N2MxaTM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZf2E2AF6 Hq9jvXO3WXzH7VEB8Q0wF1tO6gge/lFG1PZczxH5aKdII7DzcivJlWijdohGTyBb 0bLJLChbrmYuzHVBqZxlCfjDpreyDmGLH5NwHwXj6zs71zn5faAICMGpM7+TDKX0 ajTm1hxIR0E1Do2zuXNgsdIRdXA5gadxRcHurizbfDgLctdQW997MA6yKlhRUrb+ qmABbDV9PB1EMxCf/L7qxZVG7XJIIjiK7LTPKTTOpyRTSdAj4MFppgVX3CwH89NA cRgutPmDOpz//KS1YRWyCypkN4upJPmm/U/hQkppve40GDDd11w3XCMSDxPkO41t z4jNRwUZgsNtgg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:12:19 2025 by rpki-client