This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1fcfba-cda0-4ad3-9893-94587d8331f9/1/pRZKRoFl6caTvYGEw8pWbKcP1WA.mft File: pRZKRoFl6caTvYGEw8pWbKcP1WA.mft (raw, json) Hash identifier: K1ynW3hGBXwxuUE9xISyihYjUPT/bk6MW1AutGjYBXc= Subject key identifier: 67:14:F7:10:65:C5:BB:18:98:FE:F2:D4:17:06:6A:0E:A8:08:8C:85 Authority key identifier: A5:16:4A:46:81:65:E9:C6:93:BD:81:84:C3:CA:56:6C:A7:0F:D5:60 Certificate issuer: /CN=a5164a468165e9c693bd8184c3ca566ca70fd560 Certificate serial: 019B33B1B1AE9E406904CB53120F2CDFE7DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pRZKRoFl6caTvYGEw8pWbKcP1WA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1fcfba-cda0-4ad3-9893-94587d8331f9/1/pRZKRoFl6caTvYGEw8pWbKcP1WA.mft Manifest number: 0245 Signing time: Thu 18 Dec 2025 23:00:41 +0000 Manifest this update: Thu 18 Dec 2025 23:00:41 +0000 Manifest next update: Fri 19 Dec 2025 23:00:41 +0000 Files and hashes: 1: pRZKRoFl6caTvYGEw8pWbKcP1WA.crl (hash: H6v3KCN3AtHgQZYjjlsOtfdtlmBEuuK+j1AN8D2VyZ4=) 2: rIL66Wr2JO0hUiDgtrzPfwsPCdg.roa (hash: IzHYSyi3wxidgryTdPg9C85nPJtyfKau5Hu7/N9OG4I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/1fcfba-cda0-4ad3-9893-94587d8331f9/1/pRZKRoFl6caTvYGEw8pWbKcP1WA.crl rsync://rpki.ripe.net/repository/DEFAULT/24/1fcfba-cda0-4ad3-9893-94587d8331f9/1/pRZKRoFl6caTvYGEw8pWbKcP1WA.mft rsync://rpki.ripe.net/repository/DEFAULT/pRZKRoFl6caTvYGEw8pWbKcP1WA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:b1:b1:ae:9e:40:69:04:cb:53:12:0f:2c:df:e7:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5164a468165e9c693bd8184c3ca566ca70fd560 Validity Not Before: Dec 18 23:00:41 2025 GMT Not After : Dec 19 23:00:41 2025 GMT Subject: CN=6714f71065c5bb1898fef2d417066a0ea8088c85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b6:b9:db:d2:72:18:54:e3:72:d3:45:96:84: fd:8e:d5:8a:8e:22:0b:09:c2:a0:f6:cc:48:32:d4: c2:8c:67:37:a2:2c:ab:e6:80:57:37:ff:5e:59:64: 61:2d:de:b3:ec:1a:34:fa:4e:6d:0f:78:28:30:52: cb:20:95:db:5d:02:7e:c1:b8:fc:44:86:00:4a:a2: 38:14:6d:9c:d3:5f:70:4c:ca:b1:02:4c:d0:c2:54: 2f:65:57:b1:10:7f:b6:98:68:a8:97:5d:fc:d0:43: 21:cf:de:66:b0:c2:d2:c4:b0:56:9f:ef:78:a6:f1: ae:f7:1f:66:7f:d7:27:27:6e:03:7e:84:91:04:cd: ab:93:01:aa:2d:ed:78:10:0f:ac:62:87:b7:9f:6b: 01:ff:b7:1b:e2:d7:2f:45:00:96:a3:28:4a:cb:71: a8:36:f0:61:e1:6b:b9:ac:b8:1f:67:fd:a1:66:ad: ea:20:4f:b7:b8:3b:aa:eb:ad:b6:e5:5f:fd:74:33: a3:5d:1f:c0:ca:51:77:7b:ff:b3:8c:68:ed:e2:b6: 5c:da:78:e8:7d:a2:e8:7d:94:5b:3d:56:dc:41:bd: 43:16:2a:93:52:66:58:c7:db:66:32:9f:e0:57:b9: e6:6b:39:fa:f6:1e:6d:3b:f7:d0:93:ed:f1:5b:9a: 15:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:14:F7:10:65:C5:BB:18:98:FE:F2:D4:17:06:6A:0E:A8:08:8C:85 X509v3 Authority Key Identifier: keyid:A5:16:4A:46:81:65:E9:C6:93:BD:81:84:C3:CA:56:6C:A7:0F:D5:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pRZKRoFl6caTvYGEw8pWbKcP1WA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1fcfba-cda0-4ad3-9893-94587d8331f9/1/pRZKRoFl6caTvYGEw8pWbKcP1WA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1fcfba-cda0-4ad3-9893-94587d8331f9/1/pRZKRoFl6caTvYGEw8pWbKcP1WA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:ef:8c:60:3c:7c:9a:0b:10:ae:b4:30:35:03:84:09:b1:d9: 81:49:13:e9:da:99:b2:93:4e:9c:4d:98:30:6e:a6:49:f5:60: 3b:24:c3:e5:84:b6:bd:89:26:c7:20:68:81:0c:5e:63:58:86: 6c:80:5f:b8:17:c6:09:68:4c:97:8d:12:19:64:ab:ac:8e:ac: e5:43:26:7d:15:d5:8a:10:91:cc:9b:26:1a:ff:f2:99:f9:c6: 45:84:d8:1b:99:dc:f4:0d:9d:85:da:e9:ad:02:39:d4:19:0a: e7:dc:33:1c:68:e9:dc:b9:09:5d:84:ee:61:1f:90:0d:c4:a1: 32:7b:d4:e6:35:e2:23:cf:fa:f5:5b:47:c8:4f:52:3f:89:3b: c5:ba:0f:38:a0:20:e3:33:43:9e:5b:5c:a2:96:f4:87:a2:5c: 94:c0:d7:88:2b:12:08:92:44:25:66:27:19:b4:12:56:29:c1: c5:c1:4c:45:71:74:e9:e2:49:cb:b9:85:cf:8c:49:7b:35:e0: 71:95:fd:27:5b:69:31:5a:75:bd:05:46:15:57:f8:c3:d3:51: 4e:35:0e:94:fb:d9:ce:41:59:e2:d4:f4:fd:af:aa:a8:ed:ad: 4a:57:17:92:e1:e0:b6:c6:57:0f:92:ef:2e:59:8d:ce:33:af: 14:f0:f1:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszsbGunkBpBMtTEg8s3+ffMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1MTY0YTQ2ODE2NWU5YzY5M2JkODE4NGMzY2E1NjZjYTcw ZmQ1NjAwHhcNMjUxMjE4MjMwMDQxWhcNMjUxMjE5MjMwMDQxWjAzMTEwLwYDVQQD Eyg2NzE0ZjcxMDY1YzViYjE4OThmZWYyZDQxNzA2NmEwZWE4MDg4Yzg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuba529JyGFTjctNFloT9jtWKjiIL CcKg9sxIMtTCjGc3oiyr5oBXN/9eWWRhLd6z7Bo0+k5tD3goMFLLIJXbXQJ+wbj8 RIYASqI4FG2c019wTMqxAkzQwlQvZVexEH+2mGiol1380EMhz95msMLSxLBWn+94 pvGu9x9mf9cnJ24DfoSRBM2rkwGqLe14EA+sYoe3n2sB/7cb4tcvRQCWoyhKy3Go NvBh4Wu5rLgfZ/2hZq3qIE+3uDuq66225V/9dDOjXR/AylF3e/+zjGjt4rZc2njo faLofZRbPVbcQb1DFiqTUmZYx9tmMp/gV7nmazn69h5tO/fQk+3xW5oVwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGcU9xBlxbsYmP7y1BcGag6oCIyFMB8GA1UdIwQY MBaAFKUWSkaBZenGk72BhMPKVmynD9VgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFJaS1JvRmw2Y2FUdllHRXc4cFdiS2NQMVdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8xZmNmYmEtY2RhMC00YWQzLTk4OTMt OTQ1ODdkODMzMWY5LzEvcFJaS1JvRmw2Y2FUdllHRXc4cFdiS2NQMVdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC8xZmNmYmEtY2RhMC00YWQzLTk4OTMtOTQ1ODdkODMzMWY5 LzEvcFJaS1JvRmw2Y2FUdllHRXc4cFdiS2NQMVdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAie+MYDx8 mgsQrrQwNQOECbHZgUkT6dqZspNOnE2YMG6mSfVgOyTD5YS2vYkmxyBogQxeY1iG bIBfuBfGCWhMl40SGWSrrI6s5UMmfRXVihCRzJsmGv/ymfnGRYTYG5nc9A2dhdrp rQI51BkK59wzHGjp3LkJXYTuYR+QDcShMnvU5jXiI8/69VtHyE9SP4k7xboPOKAg 4zNDnltcopb0h6JclMDXiCsSCJJEJWYnGbQSVinBxcFMRXF06eJJy7mFz4xJezXg cZX9J1tpMVp1vQVGFVf4w9NRTjUOlPvZzkFZ4tT0/a+qqO2tSlcXkuHgtsZXD5Lv LlmNzjOvFPDxiw== -----END CERTIFICATE-----Generated at Fri Dec 19 01:11:34 2025 by rpki-client