This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/218b0e-54b5-4ad0-9aa0-efd1a098b485/1/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.mft File: Pr-vihqjvB_z4-Qwxn-3pkEKPfc.mft (raw, json) Hash identifier: dm2tvKNBKZ1vt6djGQQOqo4lA2SLRtlhjXU2c+XkU2Y= Subject key identifier: 39:4F:5A:1F:6D:71:F4:45:85:F5:73:3E:5D:7D:07:37:3F:37:10:0D Authority key identifier: 3E:BF:AF:8A:1A:A3:BC:1F:F3:E3:E4:30:C6:7F:B7:A6:41:0A:3D:F7 Certificate issuer: /CN=3ebfaf8a1aa3bc1ff3e3e430c67fb7a6410a3df7 Certificate serial: 019B24E361144380AF660C2459BAFCFFB0B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/218b0e-54b5-4ad0-9aa0-efd1a098b485/1/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.mft Manifest number: 067A Signing time: Tue 16 Dec 2025 02:00:39 +0000 Manifest this update: Tue 16 Dec 2025 02:00:39 +0000 Manifest next update: Wed 17 Dec 2025 02:00:39 +0000 Files and hashes: 1: Pr-vihqjvB_z4-Qwxn-3pkEKPfc.crl (hash: L7V3OCGr9CJUtki3B/NPidUeWYdctktu4r4LyKOur1I=) 2: Vdq57AskBeGBDlheyUDZPLCNdoE.roa (hash: lcSr2I4ArSoQ0YCCVynBh24JIyZ+E5ztrMNakx+ay84=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/218b0e-54b5-4ad0-9aa0-efd1a098b485/1/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/218b0e-54b5-4ad0-9aa0-efd1a098b485/1/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.mft rsync://rpki.ripe.net/repository/DEFAULT/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:e3:61:14:43:80:af:66:0c:24:59:ba:fc:ff:b0:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ebfaf8a1aa3bc1ff3e3e430c67fb7a6410a3df7 Validity Not Before: Dec 16 02:00:39 2025 GMT Not After : Dec 17 02:00:39 2025 GMT Subject: CN=394f5a1f6d71f44585f5733e5d7d07373f37100d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:34:ff:2d:93:64:00:50:a5:c8:8c:6e:77:17: 7e:6d:e7:ba:17:20:e2:7a:d5:7a:8f:b6:6c:e3:36: e3:33:9d:39:69:ed:6c:cb:e0:7c:0e:fa:02:55:22: ed:45:a3:99:36:7d:58:eb:17:d6:01:0f:5c:4c:90: 58:fa:0d:02:24:96:db:6c:20:19:c7:51:d7:eb:08: 11:e1:2f:16:d1:3e:bc:7f:29:3e:40:3c:38:17:66: be:3b:43:0f:5d:45:48:7b:49:2c:c2:b5:ec:bd:2b: 37:60:75:3a:10:5c:d0:44:4b:08:01:3c:e5:60:bc: 98:79:97:4c:04:f1:4e:df:85:5e:cb:90:b7:fd:2c: 22:88:10:ea:92:27:82:7d:f8:c7:2a:f6:ee:d2:65: fd:90:94:20:e0:6b:1c:da:d6:9d:49:1f:37:9a:c5: b1:88:c8:20:f6:99:e4:dc:05:85:2b:15:11:07:0b: 09:ba:03:ae:89:25:d3:95:8f:d1:4c:7e:83:3d:53: 3d:70:c7:88:55:55:28:9d:29:cb:9a:93:f2:21:50: 9e:f9:a4:9c:82:0d:f1:2e:48:45:85:88:5d:ea:79: 7d:da:15:75:4e:23:bd:b0:c0:43:91:fd:17:0c:39: 4c:60:99:4e:86:ce:5a:c3:e5:bb:3e:25:47:56:55: 78:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:4F:5A:1F:6D:71:F4:45:85:F5:73:3E:5D:7D:07:37:3F:37:10:0D X509v3 Authority Key Identifier: keyid:3E:BF:AF:8A:1A:A3:BC:1F:F3:E3:E4:30:C6:7F:B7:A6:41:0A:3D:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/218b0e-54b5-4ad0-9aa0-efd1a098b485/1/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/218b0e-54b5-4ad0-9aa0-efd1a098b485/1/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:22:59:7c:16:ac:96:a9:96:9e:27:cc:16:d9:af:ac:6a:16: e4:1a:05:6f:20:c7:c2:9b:45:be:86:e2:d2:12:b4:c1:ce:f9: a6:07:b3:bd:48:50:99:4d:d9:2e:f9:3a:0d:3f:68:f2:4c:45: f2:07:fe:b5:56:f8:e4:e4:1f:16:48:65:3f:a8:2c:49:0a:5c: a2:56:a0:31:96:e6:da:e2:e7:df:51:44:f6:c3:ac:a3:a9:e1: 90:0d:56:c9:75:63:7b:f8:67:9a:b4:82:4d:0a:a5:72:1e:cb: 2f:1a:cc:82:48:5d:3e:7c:c1:cd:37:92:54:10:c8:d4:d8:bd: b4:08:5e:96:d5:9d:1b:50:b7:4f:1e:f2:90:dc:a1:2f:4d:e3: 93:1e:95:9d:dd:f7:89:7a:8b:e8:8a:10:0c:87:47:5c:9c:61: 55:33:e7:d5:47:b3:34:a8:7e:ee:34:ff:90:5b:38:ba:ac:2f: 1f:a7:db:ee:6a:52:83:f9:e5:bf:38:49:92:24:2c:ea:05:29: b2:5f:d8:dd:ad:79:dc:28:02:f4:76:f4:22:07:b0:1d:66:e8: fd:29:ba:02:80:58:cc:cf:3d:05:f5:0d:b5:7e:12:08:85:16: 06:56:f3:f9:45:dd:1f:28:a1:b5:3f:31:c8:3e:84:57:30:d7: fa:9e:a3:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsk42EUQ4CvZgwkWbr8/7C5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlYmZhZjhhMWFhM2JjMWZmM2UzZTQzMGM2N2ZiN2E2NDEw YTNkZjcwHhcNMjUxMjE2MDIwMDM5WhcNMjUxMjE3MDIwMDM5WjAzMTEwLwYDVQQD EygzOTRmNWExZjZkNzFmNDQ1ODVmNTczM2U1ZDdkMDczNzNmMzcxMDBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTT/LZNkAFClyIxudxd+bee6FyDi etV6j7Zs4zbjM505ae1sy+B8DvoCVSLtRaOZNn1Y6xfWAQ9cTJBY+g0CJJbbbCAZ x1HX6wgR4S8W0T68fyk+QDw4F2a+O0MPXUVIe0kswrXsvSs3YHU6EFzQREsIATzl YLyYeZdMBPFO34Vey5C3/SwiiBDqkieCffjHKvbu0mX9kJQg4Gsc2tadSR83msWx iMgg9pnk3AWFKxURBwsJugOuiSXTlY/RTH6DPVM9cMeIVVUonSnLmpPyIVCe+aSc gg3xLkhFhYhd6nl92hV1TiO9sMBDkf0XDDlMYJlOhs5aw+W7PiVHVlV4IwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDlPWh9tcfRFhfVzPl19Bzc/NxANMB8GA1UdIwQY MBaAFD6/r4oao7wf8+PkMMZ/t6ZBCj33MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHItdmlocWp2Ql96NC1Rd3huLTNwa0VLUGZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi8yMThiMGUtNTRiNS00YWQwLTlhYTAt ZWZkMWEwOThiNDg1LzEvUHItdmlocWp2Ql96NC1Rd3huLTNwa0VLUGZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi8yMThiMGUtNTRiNS00YWQwLTlhYTAtZWZkMWEwOThiNDg1 LzEvUHItdmlocWp2Ql96NC1Rd3huLTNwa0VLUGZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALiJZfBas lqmWnifMFtmvrGoW5BoFbyDHwptFvobi0hK0wc75pgezvUhQmU3ZLvk6DT9o8kxF 8gf+tVb45OQfFkhlP6gsSQpcolagMZbm2uLn31FE9sOso6nhkA1WyXVje/hnmrSC TQqlch7LLxrMgkhdPnzBzTeSVBDI1Ni9tAheltWdG1C3Tx7ykNyhL03jkx6Vnd33 iXqL6IoQDIdHXJxhVTPn1UezNKh+7jT/kFs4uqwvH6fb7mpSg/nlvzhJkiQs6gUp sl/Y3a153CgC9Hb0IgewHWbo/Sm6AoBYzM89BfUNtX4SCIUWBlbz+UXdHyihtT8x yD6EVzDX+p6jsQ== -----END CERTIFICATE-----Generated at Tue Dec 16 09:28:55 2025 by rpki-client