This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/54c1d1-363b-45ba-8927-9689fbf6f6ee/1/PryeUbqrPD5qtpn8tEPwB_VGw_s.mft File: PryeUbqrPD5qtpn8tEPwB_VGw_s.mft (raw, json) Hash identifier: sjzw5qEqRiU9KK60rWXwDPpA+8qz5+MbDDU8JF9EAMg= Subject key identifier: 55:03:A4:13:6F:0F:E9:0B:54:37:C9:3D:D7:06:38:64:60:04:6B:4D Authority key identifier: 3E:BC:9E:51:BA:AB:3C:3E:6A:B6:99:FC:B4:43:F0:07:F5:46:C3:FB Certificate issuer: /CN=3ebc9e51baab3c3e6ab699fcb443f007f546c3fb Certificate serial: 019B22BDF5BDD5885991BB88320E5B44AFCB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PryeUbqrPD5qtpn8tEPwB_VGw_s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/54c1d1-363b-45ba-8927-9689fbf6f6ee/1/PryeUbqrPD5qtpn8tEPwB_VGw_s.mft Manifest number: 177D Signing time: Mon 15 Dec 2025 16:00:32 +0000 Manifest this update: Mon 15 Dec 2025 16:00:32 +0000 Manifest next update: Tue 16 Dec 2025 16:00:32 +0000 Files and hashes: 1: PryeUbqrPD5qtpn8tEPwB_VGw_s.crl (hash: 0H6UgGD3URCNmBSSHPvKYhoDL/WlHP5/QUfgWmzZRls=) 2: dNeuYEAQmOoidPn9sPTHpBf3kwM.roa (hash: XKk9IUkG18VeN9nDomy3arFXLgPu8Jw+AjyCy/j87MA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/54c1d1-363b-45ba-8927-9689fbf6f6ee/1/PryeUbqrPD5qtpn8tEPwB_VGw_s.crl rsync://rpki.ripe.net/repository/DEFAULT/18/54c1d1-363b-45ba-8927-9689fbf6f6ee/1/PryeUbqrPD5qtpn8tEPwB_VGw_s.mft rsync://rpki.ripe.net/repository/DEFAULT/PryeUbqrPD5qtpn8tEPwB_VGw_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:bd:f5:bd:d5:88:59:91:bb:88:32:0e:5b:44:af:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ebc9e51baab3c3e6ab699fcb443f007f546c3fb Validity Not Before: Dec 15 16:00:32 2025 GMT Not After : Dec 16 16:00:32 2025 GMT Subject: CN=5503a4136f0fe90b5437c93dd706386460046b4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c7:34:95:14:65:56:bc:50:76:b6:d8:60:e1: 25:ad:c3:22:ba:9a:56:05:32:88:62:23:e8:72:89: fa:b8:a5:c8:73:3a:60:e7:66:7d:e6:a8:f5:ea:b6: 2c:dc:3e:e3:99:a5:e3:0e:8f:8a:55:0d:a3:84:06: 81:ad:a6:fc:9c:da:c7:43:bd:fd:c7:73:60:9e:88: e2:85:ec:65:25:25:47:b6:87:da:92:2a:1f:1f:2f: d1:4e:57:06:f3:29:6e:f9:a3:cb:5a:0d:87:c9:59: 2a:90:3d:62:90:f5:83:d3:17:81:43:c2:ae:73:c5: ef:3c:6b:8c:5d:9b:0e:c1:e6:ae:84:da:bb:25:cf: 02:94:34:e0:06:ca:b7:b9:aa:58:79:ba:38:f1:0a: 75:7f:de:5c:3f:46:36:b5:b4:34:77:de:74:ff:50: 2b:55:95:7d:33:89:55:3a:e4:b2:39:bf:86:9d:0e: e5:9d:8f:b3:26:24:39:88:e1:e3:39:35:55:e3:5c: d6:61:10:19:78:56:1f:5c:68:d0:d9:38:46:54:93: 4d:57:9d:0d:04:f1:b1:d1:e0:50:f7:70:ea:02:b3: bf:57:fc:55:e7:20:40:d8:ae:a3:d8:63:5e:7b:b1: 6a:fa:ce:c7:71:a8:5e:6e:8e:11:ce:d5:e9:63:4d: b2:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:03:A4:13:6F:0F:E9:0B:54:37:C9:3D:D7:06:38:64:60:04:6B:4D X509v3 Authority Key Identifier: keyid:3E:BC:9E:51:BA:AB:3C:3E:6A:B6:99:FC:B4:43:F0:07:F5:46:C3:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PryeUbqrPD5qtpn8tEPwB_VGw_s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/54c1d1-363b-45ba-8927-9689fbf6f6ee/1/PryeUbqrPD5qtpn8tEPwB_VGw_s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/54c1d1-363b-45ba-8927-9689fbf6f6ee/1/PryeUbqrPD5qtpn8tEPwB_VGw_s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:69:21:6d:f7:80:77:b0:1c:16:bd:39:ae:e8:12:ef:fa:2e: a0:11:1b:8a:cc:eb:86:c8:5c:5b:b6:85:71:68:e4:8a:3a:0d: 5d:d8:0a:ae:a1:2c:a0:f4:74:ef:bf:2f:2c:a0:70:e7:f1:03: 87:59:71:9a:76:f9:6e:9b:eb:d7:fc:f7:62:45:d0:cf:5e:f5: e5:da:4b:d6:2b:1a:91:ea:30:f8:6a:d5:b6:45:c2:27:42:3d: 86:e8:40:4e:00:ca:7e:d1:56:91:f4:eb:36:cf:97:c1:59:05: 83:3e:ca:35:26:82:ff:f5:d3:db:b1:88:90:b4:95:f2:41:e0: 03:c3:64:fd:c9:e5:7b:c3:d7:f8:8b:68:eb:dd:0a:e1:f8:f3: 3e:aa:d7:e0:53:4c:d1:fc:3a:15:94:b3:77:9f:af:bd:f4:c0: 0a:7d:6e:2f:67:8e:76:07:31:14:c4:f1:b8:1a:b8:ed:4e:57: 00:eb:a5:34:ac:81:f3:67:0d:54:6d:96:c7:4f:80:8c:39:54: 54:d5:a7:10:10:ce:ac:16:7a:98:a1:99:e0:24:bc:37:f8:97: bb:dc:a3:64:fe:49:d7:7a:27:32:83:f8:69:40:70:21:70:22: b3:22:52:0f:c3:27:07:86:58:b3:4d:09:ec:1a:a2:ca:a1:1c: e1:df:2f:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsivfW91YhZkbuIMg5bRK/LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlYmM5ZTUxYmFhYjNjM2U2YWI2OTlmY2I0NDNmMDA3ZjU0 NmMzZmIwHhcNMjUxMjE1MTYwMDMyWhcNMjUxMjE2MTYwMDMyWjAzMTEwLwYDVQQD Eyg1NTAzYTQxMzZmMGZlOTBiNTQzN2M5M2RkNzA2Mzg2NDYwMDQ2YjRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsc0lRRlVrxQdrbYYOElrcMiuppW BTKIYiPocon6uKXIczpg52Z95qj16rYs3D7jmaXjDo+KVQ2jhAaBrab8nNrHQ739 x3NgnojihexlJSVHtofakiofHy/RTlcG8ylu+aPLWg2HyVkqkD1ikPWD0xeBQ8Ku c8XvPGuMXZsOweauhNq7Jc8ClDTgBsq3uapYebo48Qp1f95cP0Y2tbQ0d950/1Ar VZV9M4lVOuSyOb+GnQ7lnY+zJiQ5iOHjOTVV41zWYRAZeFYfXGjQ2ThGVJNNV50N BPGx0eBQ93DqArO/V/xV5yBA2K6j2GNee7Fq+s7Hcahebo4RztXpY02yTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFUDpBNvD+kLVDfJPdcGOGRgBGtNMB8GA1UdIwQY MBaAFD68nlG6qzw+araZ/LRD8Af1RsP7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHJ5ZVVicXJQRDVxdHBuOHRFUHdCX1ZHd19zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC81NGMxZDEtMzYzYi00NWJhLTg5Mjct OTY4OWZiZjZmNmVlLzEvUHJ5ZVVicXJQRDVxdHBuOHRFUHdCX1ZHd19zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC81NGMxZDEtMzYzYi00NWJhLTg5MjctOTY4OWZiZjZmNmVl LzEvUHJ5ZVVicXJQRDVxdHBuOHRFUHdCX1ZHd19zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANmkhbfeA d7AcFr05rugS7/ouoBEbiszrhshcW7aFcWjkijoNXdgKrqEsoPR0778vLKBw5/ED h1lxmnb5bpvr1/z3YkXQz1715dpL1isakeow+GrVtkXCJ0I9huhATgDKftFWkfTr Ns+XwVkFgz7KNSaC//XT27GIkLSV8kHgA8Nk/cnle8PX+Ito690K4fjzPqrX4FNM 0fw6FZSzd5+vvfTACn1uL2eOdgcxFMTxuBq47U5XAOulNKyB82cNVG2Wx0+AjDlU VNWnEBDOrBZ6mKGZ4CS8N/iXu9yjZP5J13onMoP4aUBwIXAisyJSD8MnB4ZYs00J 7BqiyqEc4d8vRg== -----END CERTIFICATE-----Generated at Tue Dec 16 00:20:07 2025 by rpki-client