This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/3a0368-570c-4847-8d4a-ff4ad1e3daf5/1/Pr6uqg8H3D1UvBFcziAq2pggsdU.mft File: Pr6uqg8H3D1UvBFcziAq2pggsdU.mft (raw, json) Hash identifier: 4OmIaqH1T0xHsbD/OD9mONSU/R2c1fd8wgRoONfYTto= Subject key identifier: DA:9D:46:EF:62:0D:17:DC:79:5B:F9:86:AA:97:19:41:4C:0D:CD:9B Authority key identifier: 3E:BE:AE:AA:0F:07:DC:3D:54:BC:11:5C:CE:20:2A:DA:98:20:B1:D5 Certificate issuer: /CN=3ebeaeaa0f07dc3d54bc115cce202ada9820b1d5 Certificate serial: 019B3645213A8A648C96B585ECDD89A3473B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pr6uqg8H3D1UvBFcziAq2pggsdU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/3a0368-570c-4847-8d4a-ff4ad1e3daf5/1/Pr6uqg8H3D1UvBFcziAq2pggsdU.mft Manifest number: 0917 Signing time: Fri 19 Dec 2025 11:00:58 +0000 Manifest this update: Fri 19 Dec 2025 11:00:58 +0000 Manifest next update: Sat 20 Dec 2025 11:00:58 +0000 Files and hashes: 1: Pr6uqg8H3D1UvBFcziAq2pggsdU.crl (hash: pKDBag+jJGIHTBmAbZMvhJL67YKdc4fj5VVWVIg10qQ=) 2: nV3wzH_1I5VE4qLJ5nCrt9MPHjQ.roa (hash: db3hfBEW1jL4gbyVu0D2s50T0rgPqR4B0mvJEYFg7lA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/3a0368-570c-4847-8d4a-ff4ad1e3daf5/1/Pr6uqg8H3D1UvBFcziAq2pggsdU.crl rsync://rpki.ripe.net/repository/DEFAULT/49/3a0368-570c-4847-8d4a-ff4ad1e3daf5/1/Pr6uqg8H3D1UvBFcziAq2pggsdU.mft rsync://rpki.ripe.net/repository/DEFAULT/Pr6uqg8H3D1UvBFcziAq2pggsdU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:45:21:3a:8a:64:8c:96:b5:85:ec:dd:89:a3:47:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ebeaeaa0f07dc3d54bc115cce202ada9820b1d5 Validity Not Before: Dec 19 11:00:58 2025 GMT Not After : Dec 20 11:00:58 2025 GMT Subject: CN=da9d46ef620d17dc795bf986aa9719414c0dcd9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:64:46:b2:3c:98:e9:71:a0:f9:00:67:34:d7: 23:91:d0:51:44:aa:ec:85:05:0d:8f:e9:d9:90:82: 96:5c:09:f1:9a:b2:d2:19:0a:b6:2e:9e:13:12:27: be:c6:9d:22:d7:ea:43:13:11:b0:8f:6b:b3:e3:44: 05:90:5b:01:93:64:04:0d:20:15:37:ae:f3:08:1a: a8:f2:d2:bb:c3:51:d6:5c:7f:85:05:65:92:fe:79: 8c:bf:2f:7a:88:12:d8:c5:64:f1:0a:e9:f5:bd:be: f9:9c:a7:c7:4b:4e:92:da:67:a2:e0:b1:10:c4:2f: 02:cf:57:1e:06:fb:31:d3:98:5c:72:b0:74:4d:16: 8b:59:5e:dc:c0:8c:3f:a3:de:94:db:45:35:6d:f1: ab:bb:c9:ad:ec:7c:c4:97:83:45:02:6a:8b:37:ef: e0:a3:f6:aa:93:f6:1e:fe:92:26:2d:e9:55:4e:1d: 33:f7:7f:f2:ec:15:b6:a0:10:a5:fa:1b:9f:9c:6f: b1:f3:81:34:ae:76:a2:af:30:45:f0:ae:8e:d0:29: d5:2e:68:f7:03:4f:ee:22:2d:3f:c1:0d:2c:b4:b5: da:0c:49:7c:0d:50:08:ce:74:10:3d:d4:66:2d:b2: 9f:a5:1f:ea:d6:c0:06:06:6c:17:47:49:a9:72:4f: 98:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:9D:46:EF:62:0D:17:DC:79:5B:F9:86:AA:97:19:41:4C:0D:CD:9B X509v3 Authority Key Identifier: keyid:3E:BE:AE:AA:0F:07:DC:3D:54:BC:11:5C:CE:20:2A:DA:98:20:B1:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pr6uqg8H3D1UvBFcziAq2pggsdU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/3a0368-570c-4847-8d4a-ff4ad1e3daf5/1/Pr6uqg8H3D1UvBFcziAq2pggsdU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/3a0368-570c-4847-8d4a-ff4ad1e3daf5/1/Pr6uqg8H3D1UvBFcziAq2pggsdU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:2a:74:1f:63:3e:4a:4f:f5:6e:64:4c:2c:ab:fa:f1:2c:8e: 17:cc:70:16:cc:25:e5:ba:aa:7b:ce:b3:ef:59:4f:52:18:ce: 94:b6:8f:86:ec:ca:9a:70:95:a7:50:4a:4b:28:ff:8d:94:f8: e0:a4:3b:12:96:8c:60:f8:51:12:64:e9:c5:09:16:8f:df:22: 28:0e:6b:8c:80:6b:cb:a8:ce:79:85:dd:86:aa:de:04:eb:17: 77:cf:5c:11:6f:23:f6:70:7a:1c:15:44:a0:da:6c:86:bb:11: b5:4b:e4:9b:eb:2c:6c:e8:7d:1c:cf:47:51:53:8c:06:45:d9: 6c:e8:97:39:f4:41:60:de:34:74:7e:58:88:92:11:b8:07:83: ce:71:cf:1e:60:53:1f:78:0c:4d:36:48:ad:df:9b:be:4a:1b: dc:0d:89:74:07:cb:74:94:99:b5:5b:fd:a3:20:9d:85:3a:e6: 79:49:6c:dc:89:0b:f4:36:fd:b5:d5:f1:a3:0c:9e:c0:e5:1f: 0f:e5:38:99:d6:45:87:45:c4:b8:4d:5a:f1:94:17:3e:7c:01: 8d:c3:0f:b7:04:66:aa:00:b9:8d:89:e2:02:65:4b:56:a2:71: ac:0a:53:d5:07:26:7c:95:82:13:97:a1:b4:cf:69:7f:dd:d2: 7c:c2:da:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2RSE6imSMlrWF7N2Jo0c7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlYmVhZWFhMGYwN2RjM2Q1NGJjMTE1Y2NlMjAyYWRhOTgy MGIxZDUwHhcNMjUxMjE5MTEwMDU4WhcNMjUxMjIwMTEwMDU4WjAzMTEwLwYDVQQD EyhkYTlkNDZlZjYyMGQxN2RjNzk1YmY5ODZhYTk3MTk0MTRjMGRjZDliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmRGsjyY6XGg+QBnNNcjkdBRRKrs hQUNj+nZkIKWXAnxmrLSGQq2Lp4TEie+xp0i1+pDExGwj2uz40QFkFsBk2QEDSAV N67zCBqo8tK7w1HWXH+FBWWS/nmMvy96iBLYxWTxCun1vb75nKfHS06S2mei4LEQ xC8Cz1ceBvsx05hccrB0TRaLWV7cwIw/o96U20U1bfGru8mt7HzEl4NFAmqLN+/g o/aqk/Ye/pImLelVTh0z93/y7BW2oBCl+hufnG+x84E0rnairzBF8K6O0CnVLmj3 A0/uIi0/wQ0stLXaDEl8DVAIznQQPdRmLbKfpR/q1sAGBmwXR0mpck+YSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNqdRu9iDRfceVv5hqqXGUFMDc2bMB8GA1UdIwQY MBaAFD6+rqoPB9w9VLwRXM4gKtqYILHVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHI2dXFnOEgzRDFVdkJGY3ppQXEycGdnc2RVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS8zYTAzNjgtNTcwYy00ODQ3LThkNGEt ZmY0YWQxZTNkYWY1LzEvUHI2dXFnOEgzRDFVdkJGY3ppQXEycGdnc2RVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS8zYTAzNjgtNTcwYy00ODQ3LThkNGEtZmY0YWQxZTNkYWY1 LzEvUHI2dXFnOEgzRDFVdkJGY3ppQXEycGdnc2RVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjSp0H2M+ Sk/1bmRMLKv68SyOF8xwFswl5bqqe86z71lPUhjOlLaPhuzKmnCVp1BKSyj/jZT4 4KQ7EpaMYPhREmTpxQkWj98iKA5rjIBry6jOeYXdhqreBOsXd89cEW8j9nB6HBVE oNpshrsRtUvkm+ssbOh9HM9HUVOMBkXZbOiXOfRBYN40dH5YiJIRuAeDznHPHmBT H3gMTTZIrd+bvkob3A2JdAfLdJSZtVv9oyCdhTrmeUls3IkL9Db9tdXxowyewOUf D+U4mdZFh0XEuE1a8ZQXPnwBjcMPtwRmqgC5jYniAmVLVqJxrApT1QcmfJWCE5eh tM9pf93SfMLaIg== -----END CERTIFICATE-----Generated at Fri Dec 19 13:12:42 2025 by rpki-client