This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3e3324-6e60-45a5-9433-e057a8bdcf96/1/PrYnJBMoJOVJBuJAqIA2QZo2W4Q.mft File: PrYnJBMoJOVJBuJAqIA2QZo2W4Q.mft (raw, json) Hash identifier: fKujve++GZQdXTT1/AfEXJMpukyUzWqDUgFh6mErnHU= Subject key identifier: 96:F3:1A:53:00:54:69:5E:0C:13:FB:67:84:57:4E:07:7F:8A:7A:CE Authority key identifier: 3E:B6:27:24:13:28:24:E5:49:06:E2:40:A8:80:36:41:9A:36:5B:84 Certificate issuer: /CN=3eb62724132824e54906e240a88036419a365b84 Certificate serial: 019B59766809F24ABF4FEDFDCD708408B5B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PrYnJBMoJOVJBuJAqIA2QZo2W4Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/3e3324-6e60-45a5-9433-e057a8bdcf96/1/PrYnJBMoJOVJBuJAqIA2QZo2W4Q.mft Manifest number: C8 Signing time: Fri 26 Dec 2025 07:01:30 +0000 Manifest this update: Fri 26 Dec 2025 07:01:30 +0000 Manifest next update: Sat 27 Dec 2025 07:01:30 +0000 Files and hashes: 1: LKYEcHRv13hCEn2ITZ6Ji002NW4.roa (hash: XBnCCt2ig9Uvd5g1UVG/Ee+HEig1GAa0vstmiIJNytc=) 2: PrYnJBMoJOVJBuJAqIA2QZo2W4Q.crl (hash: rfVx9ooZScmeXS3cgAKHL+nTpATrDRuFO81K85XSUDI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/3e3324-6e60-45a5-9433-e057a8bdcf96/1/PrYnJBMoJOVJBuJAqIA2QZo2W4Q.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/3e3324-6e60-45a5-9433-e057a8bdcf96/1/PrYnJBMoJOVJBuJAqIA2QZo2W4Q.mft rsync://rpki.ripe.net/repository/DEFAULT/PrYnJBMoJOVJBuJAqIA2QZo2W4Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 07:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:68:09:f2:4a:bf:4f:ed:fd:cd:70:84:08:b5:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3eb62724132824e54906e240a88036419a365b84 Validity Not Before: Dec 26 07:01:30 2025 GMT Not After : Dec 27 07:01:30 2025 GMT Subject: CN=96f31a530054695e0c13fb6784574e077f8a7ace Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:8d:2e:31:ba:e4:cd:d9:3c:5c:67:a1:d5:75: 64:a2:7c:0c:4b:33:b2:bd:be:15:c8:fc:3c:4a:c4: e9:9a:46:0d:fb:ac:56:f8:08:64:78:8b:bd:94:52: aa:c4:60:aa:20:e5:ab:0a:5e:55:7a:bb:23:c2:d2: d2:94:02:d2:cb:93:28:b6:7b:ad:58:83:8e:a8:fe: 33:22:31:ba:46:d7:16:0d:fa:3c:67:68:90:4f:0b: 9f:1f:8b:e5:4d:32:e9:44:ff:54:35:72:e7:51:b9: 56:b7:95:f1:93:23:f0:14:e6:d3:68:dc:4e:5b:01: 92:73:61:1e:05:5e:85:09:6d:be:48:e7:dc:52:ee: d3:8c:e9:9a:67:fb:57:20:c1:09:48:d6:7d:ac:e7: 15:9c:02:13:81:88:10:67:dc:7c:74:eb:14:d4:73: b4:5c:1c:6f:9d:33:57:9c:5a:38:64:4b:13:09:43: 62:dc:db:9b:3a:c5:bb:5c:10:cf:46:19:f0:b4:69: 6b:29:58:da:8f:fc:ce:9c:40:10:ba:f1:e5:12:71: 50:a8:a5:72:70:8d:f6:48:30:65:5e:11:5c:07:0c: c4:4b:6c:5d:0c:7c:88:d4:97:d6:4f:9a:0a:29:8e: b6:da:c3:44:70:e7:0d:e7:3d:6e:63:66:33:57:7e: 59:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:F3:1A:53:00:54:69:5E:0C:13:FB:67:84:57:4E:07:7F:8A:7A:CE X509v3 Authority Key Identifier: keyid:3E:B6:27:24:13:28:24:E5:49:06:E2:40:A8:80:36:41:9A:36:5B:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PrYnJBMoJOVJBuJAqIA2QZo2W4Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3e3324-6e60-45a5-9433-e057a8bdcf96/1/PrYnJBMoJOVJBuJAqIA2QZo2W4Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3e3324-6e60-45a5-9433-e057a8bdcf96/1/PrYnJBMoJOVJBuJAqIA2QZo2W4Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:b9:94:46:38:1d:e6:d0:30:fb:f8:0d:a1:ae:a0:a9:26:c3: 33:11:84:49:81:e3:fa:c2:26:82:2b:5b:64:f2:a7:d2:99:76: e6:20:e7:08:ee:49:76:31:33:a3:02:9b:bd:e6:57:0b:a7:11: 81:0a:78:8d:f6:c1:a5:b1:c1:e4:20:f3:dc:b5:9d:0b:3e:a7: 87:05:9a:48:9d:5b:71:3d:c8:d0:78:94:10:42:3a:9a:52:b8: 76:cc:bf:14:35:91:34:88:7d:6e:d5:f0:49:47:61:9f:22:76: 43:0e:b7:2e:95:f0:d7:38:49:36:89:2e:bf:fd:54:77:60:9d: 5e:a7:48:78:42:5c:d8:f0:fb:f7:f5:7b:01:d9:2f:31:be:ee: 60:1c:56:0f:d3:ae:95:90:7b:f8:fa:4e:ad:fc:d9:74:e7:cb: ba:87:49:31:7d:8d:e0:09:9f:82:60:ad:c7:ca:78:a7:8c:06: 7b:99:51:18:20:ee:fa:ab:5a:22:e8:2f:6e:50:80:85:47:00: de:2a:04:54:01:23:9c:3a:e6:fa:a5:bb:a4:3e:de:eb:32:7f: fa:0f:a7:28:1a:21:06:63:5f:2b:c2:25:9e:7c:f8:3c:ce:36: e6:ad:48:fe:7f:4c:fa:a3:a9:54:46:f0:b6:29:8e:25:c8:8c: 12:ca:b0:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdmgJ8kq/T+39zXCECLW0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlYjYyNzI0MTMyODI0ZTU0OTA2ZTI0MGE4ODAzNjQxOWEz NjViODQwHhcNMjUxMjI2MDcwMTMwWhcNMjUxMjI3MDcwMTMwWjAzMTEwLwYDVQQD Eyg5NmYzMWE1MzAwNTQ2OTVlMGMxM2ZiNjc4NDU3NGUwNzdmOGE3YWNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqI0uMbrkzdk8XGeh1XVkonwMSzOy vb4VyPw8SsTpmkYN+6xW+AhkeIu9lFKqxGCqIOWrCl5VersjwtLSlALSy5Motnut WIOOqP4zIjG6RtcWDfo8Z2iQTwufH4vlTTLpRP9UNXLnUblWt5XxkyPwFObTaNxO WwGSc2EeBV6FCW2+SOfcUu7TjOmaZ/tXIMEJSNZ9rOcVnAITgYgQZ9x8dOsU1HO0 XBxvnTNXnFo4ZEsTCUNi3NubOsW7XBDPRhnwtGlrKVjaj/zOnEAQuvHlEnFQqKVy cI32SDBlXhFcBwzES2xdDHyI1JfWT5oKKY622sNEcOcN5z1uY2YzV35ZsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJbzGlMAVGleDBP7Z4RXTgd/inrOMB8GA1UdIwQY MBaAFD62JyQTKCTlSQbiQKiANkGaNluEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHJZbkpCTW9KT1ZKQnVKQXFJQTJRWm8yVzRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8zZTMzMjQtNmU2MC00NWE1LTk0MzMt ZTA1N2E4YmRjZjk2LzEvUHJZbkpCTW9KT1ZKQnVKQXFJQTJRWm8yVzRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8zZTMzMjQtNmU2MC00NWE1LTk0MzMtZTA1N2E4YmRjZjk2 LzEvUHJZbkpCTW9KT1ZKQnVKQXFJQTJRWm8yVzRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJbmURjgd 5tAw+/gNoa6gqSbDMxGESYHj+sImgitbZPKn0pl25iDnCO5JdjEzowKbveZXC6cR gQp4jfbBpbHB5CDz3LWdCz6nhwWaSJ1bcT3I0HiUEEI6mlK4dsy/FDWRNIh9btXw SUdhnyJ2Qw63LpXw1zhJNokuv/1Ud2CdXqdIeEJc2PD79/V7AdkvMb7uYBxWD9Ou lZB7+PpOrfzZdOfLuodJMX2N4AmfgmCtx8p4p4wGe5lRGCDu+qtaIugvblCAhUcA 3ioEVAEjnDrm+qW7pD7e6zJ/+g+nKBohBmNfK8Ilnnz4PM425q1I/n9M+qOpVEbw timOJciMEsqwZw== -----END CERTIFICATE-----Generated at Fri Dec 26 16:06:39 2025 by rpki-client