This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/b281c7-cd9a-4375-b84a-851ed529f222/1/PRf0av89iyHwD-6PY16uNKf0pNc.mft File: PRf0av89iyHwD-6PY16uNKf0pNc.mft (raw, json) Hash identifier: 44cIrj8k693qk34aqOt6UZm9/iYt7I25EBAJlIf2FEk= Subject key identifier: 38:DE:39:6E:BE:26:9A:89:C5:38:C1:09:3F:67:49:2B:1F:AD:2F:9F Authority key identifier: 3D:17:F4:6A:FF:3D:8B:21:F0:0F:EE:8F:63:5E:AE:34:A7:F4:A4:D7 Certificate issuer: /CN=3d17f46aff3d8b21f00fee8f635eae34a7f4a4d7 Certificate serial: 019AF31C98375F999E85746A3371D80A2714 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PRf0av89iyHwD-6PY16uNKf0pNc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/b281c7-cd9a-4375-b84a-851ed529f222/1/PRf0av89iyHwD-6PY16uNKf0pNc.mft Manifest number: 0C50 Signing time: Sat 06 Dec 2025 10:02:08 +0000 Manifest this update: Sat 06 Dec 2025 10:02:08 +0000 Manifest next update: Sun 07 Dec 2025 10:02:08 +0000 Files and hashes: 1: PRf0av89iyHwD-6PY16uNKf0pNc.crl (hash: IvTMt8KcLwV+XWDaiZMCKeBK99MB9RkfRAnwMRzaAro=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/b281c7-cd9a-4375-b84a-851ed529f222/1/PRf0av89iyHwD-6PY16uNKf0pNc.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/b281c7-cd9a-4375-b84a-851ed529f222/1/PRf0av89iyHwD-6PY16uNKf0pNc.mft rsync://rpki.ripe.net/repository/DEFAULT/PRf0av89iyHwD-6PY16uNKf0pNc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:98:37:5f:99:9e:85:74:6a:33:71:d8:0a:27:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d17f46aff3d8b21f00fee8f635eae34a7f4a4d7 Validity Not Before: Dec 6 10:02:08 2025 GMT Not After : Dec 7 10:02:08 2025 GMT Subject: CN=38de396ebe269a89c538c1093f67492b1fad2f9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e2:f5:8d:cd:28:13:60:b5:a5:0d:1c:5f:3c: 4a:9a:e3:d5:b3:88:84:61:7e:9a:e6:9f:7b:b9:4f: 6a:dc:06:95:2c:6f:df:e2:99:a4:b9:ce:9b:e7:3c: dd:42:5f:b1:f7:de:a8:47:d9:d8:42:c3:1d:89:df: 88:f8:53:2f:f6:60:7f:e2:9c:b1:b3:c4:13:18:ff: 8e:17:4b:4f:66:de:c0:9a:58:46:22:0d:4c:17:65: b0:32:e3:fe:66:27:c4:dc:89:76:e1:39:38:11:70: 9b:5d:f6:1c:51:87:09:6b:e2:2d:b3:92:a1:68:21: 86:b7:00:b3:37:42:d7:0a:d4:fc:0c:df:4d:5f:f0: 15:14:2e:d9:96:7f:b5:46:9c:b0:9d:d3:ff:58:e6: 7b:c8:1c:2b:e5:d8:76:b7:52:36:81:91:a0:97:28: 84:79:9e:4e:95:3f:2c:33:6e:2b:96:c5:bb:95:5a: 15:9f:fa:40:16:de:42:74:9f:0a:a4:9c:d2:f1:1e: 1f:ee:bb:cb:19:4e:2a:63:fe:bb:08:0c:6b:2f:48: c5:a7:fa:99:24:9b:5f:d8:ea:63:4b:2d:70:1b:57: 5b:2d:71:8d:7c:82:13:50:d1:e3:83:05:8b:41:cf: d8:11:6c:66:d6:3c:55:ec:ec:aa:bf:eb:45:f4:ff: b7:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:DE:39:6E:BE:26:9A:89:C5:38:C1:09:3F:67:49:2B:1F:AD:2F:9F X509v3 Authority Key Identifier: keyid:3D:17:F4:6A:FF:3D:8B:21:F0:0F:EE:8F:63:5E:AE:34:A7:F4:A4:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRf0av89iyHwD-6PY16uNKf0pNc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b281c7-cd9a-4375-b84a-851ed529f222/1/PRf0av89iyHwD-6PY16uNKf0pNc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b281c7-cd9a-4375-b84a-851ed529f222/1/PRf0av89iyHwD-6PY16uNKf0pNc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:0b:77:9e:d7:56:d7:08:35:a6:28:8b:11:61:ad:d9:b1:6a: 99:85:b9:32:be:90:33:16:16:ed:23:41:68:d9:d1:a8:31:82: 53:28:e5:e7:5e:38:19:40:dc:41:2e:29:ef:1e:67:13:02:81: d3:c4:0b:f6:43:c8:e6:6c:b4:43:53:d9:34:55:a2:f3:80:a9: 67:27:6c:ef:47:df:e6:7f:f7:b6:c7:a2:5a:23:c5:a4:c5:4b: 39:c8:65:ff:f8:64:af:73:67:f8:fd:0d:7e:25:f6:5b:d8:d5: 96:4e:3b:e5:97:75:26:7e:2b:74:05:4e:fe:bc:a4:be:de:db: d2:5f:c3:df:a1:f0:30:b2:5e:5a:ed:83:48:7b:06:a0:12:80: 11:0d:cb:57:a7:d7:a8:0c:40:c6:2d:47:48:96:b0:2b:2f:cd: 1d:b6:67:6a:a1:9a:ab:59:ef:33:be:8b:ed:03:07:89:47:66: 88:0a:f7:41:2f:fd:db:c6:8c:32:7e:84:93:92:61:c7:ac:cc: 74:7e:a5:94:a5:28:52:14:b5:ec:61:f7:7a:da:62:af:58:6a: 68:5a:a7:46:69:4c:63:03:b8:13:cc:70:53:c7:67:46:a4:f8: bd:ab:1d:b0:63:1d:04:dc:d5:97:b1:4e:c9:91:50:d3:7a:95: 10:19:b9:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHJg3X5mehXRqM3HYCicUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkMTdmNDZhZmYzZDhiMjFmMDBmZWU4ZjYzNWVhZTM0YTdm NGE0ZDcwHhcNMjUxMjA2MTAwMjA4WhcNMjUxMjA3MTAwMjA4WjAzMTEwLwYDVQQD EygzOGRlMzk2ZWJlMjY5YTg5YzUzOGMxMDkzZjY3NDkyYjFmYWQyZjlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruL1jc0oE2C1pQ0cXzxKmuPVs4iE YX6a5p97uU9q3AaVLG/f4pmkuc6b5zzdQl+x996oR9nYQsMdid+I+FMv9mB/4pyx s8QTGP+OF0tPZt7AmlhGIg1MF2WwMuP+ZifE3Il24Tk4EXCbXfYcUYcJa+Its5Kh aCGGtwCzN0LXCtT8DN9NX/AVFC7Zln+1RpywndP/WOZ7yBwr5dh2t1I2gZGglyiE eZ5OlT8sM24rlsW7lVoVn/pAFt5CdJ8KpJzS8R4f7rvLGU4qY/67CAxrL0jFp/qZ JJtf2OpjSy1wG1dbLXGNfIITUNHjgwWLQc/YEWxm1jxV7Oyqv+tF9P+3rQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDjeOW6+JpqJxTjBCT9nSSsfrS+fMB8GA1UdIwQY MBaAFD0X9Gr/PYsh8A/uj2NerjSn9KTXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFJmMGF2ODlpeUh3RC02UFkxNnVOS2YwcE5jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9iMjgxYzctY2Q5YS00Mzc1LWI4NGEt ODUxZWQ1MjlmMjIyLzEvUFJmMGF2ODlpeUh3RC02UFkxNnVOS2YwcE5jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS9iMjgxYzctY2Q5YS00Mzc1LWI4NGEtODUxZWQ1MjlmMjIy LzEvUFJmMGF2ODlpeUh3RC02UFkxNnVOS2YwcE5jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUwt3ntdW 1wg1piiLEWGt2bFqmYW5Mr6QMxYW7SNBaNnRqDGCUyjl5144GUDcQS4p7x5nEwKB 08QL9kPI5my0Q1PZNFWi84CpZyds70ff5n/3tseiWiPFpMVLOchl//hkr3Nn+P0N fiX2W9jVlk475Zd1Jn4rdAVO/rykvt7b0l/D36HwMLJeWu2DSHsGoBKAEQ3LV6fX qAxAxi1HSJawKy/NHbZnaqGaq1nvM76L7QMHiUdmiAr3QS/928aMMn6Ek5Jhx6zM dH6llKUoUhS17GH3etpir1hqaFqnRmlMYwO4E8xwU8dnRqT4vasdsGMdBNzVl7FO yZFQ03qVEBm5Nw== -----END CERTIFICATE-----Generated at Sat Dec 6 13:52:02 2025 by rpki-client