This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.mft File: PRYHLKAlL6tQZY1zb_LGDBYp3HY.mft (raw, json) Hash identifier: PwVocnUmNykdfUUvtrvYpu2EealqIzs5XYWeKgOTNsE= Subject key identifier: 1F:5C:4E:7F:A0:EE:82:4F:F5:80:80:5E:A5:44:E1:2B:A8:85:0A:6A Authority key identifier: 3D:16:07:2C:A0:25:2F:AB:50:65:8D:73:6F:F2:C6:0C:16:29:DC:76 Certificate issuer: /CN=3d16072ca0252fab50658d736ff2c60c1629dc76 Certificate serial: 019B59ACA2A6A4CA88127BBEF49791690E9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PRYHLKAlL6tQZY1zb_LGDBYp3HY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.mft Manifest number: 105D Signing time: Fri 26 Dec 2025 08:00:44 +0000 Manifest this update: Fri 26 Dec 2025 08:00:44 +0000 Manifest next update: Sat 27 Dec 2025 08:00:44 +0000 Files and hashes: 1: 8e7eehP1l-DLf5STdKJWnoHYbKQ.roa (hash: K8SacJP+Z6piM83BegnBqW6J1m/glPf8EgTcnUYrotM=) 2: PRYHLKAlL6tQZY1zb_LGDBYp3HY.crl (hash: ayM1SjfRmQxGn2GHOqXPjiaoPzqWkAXMelzFDDABCxA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.mft rsync://rpki.ripe.net/repository/DEFAULT/PRYHLKAlL6tQZY1zb_LGDBYp3HY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ac:a2:a6:a4:ca:88:12:7b:be:f4:97:91:69:0e:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d16072ca0252fab50658d736ff2c60c1629dc76 Validity Not Before: Dec 26 08:00:44 2025 GMT Not After : Dec 27 08:00:44 2025 GMT Subject: CN=1f5c4e7fa0ee824ff580805ea544e12ba8850a6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:cb:85:28:5c:7b:34:27:1f:0a:d9:49:ad:0a: 1e:d8:b7:44:af:87:20:73:70:20:12:16:45:03:e7: ec:39:51:45:33:0b:10:7d:21:1e:4c:f9:d0:a1:a7: 62:f5:0d:e5:04:58:3c:42:1c:cb:98:1f:62:bb:ed: bb:d2:01:cd:8b:59:4d:14:d3:ce:ca:90:ff:4a:f4: e2:cb:78:b0:c5:67:eb:e8:c3:2e:e7:72:57:aa:d9: 3d:40:5d:63:71:d1:57:e1:45:78:92:47:75:31:ca: 53:cb:30:ab:c1:86:c4:ad:fc:5e:86:3c:43:da:9a: 7e:2f:0e:e9:1f:fa:86:ab:64:6a:6f:d3:d9:fc:61: 68:5d:5e:93:b9:ca:b3:12:b4:26:fb:f0:3d:bd:65: 9c:29:54:e1:ff:36:1a:36:c8:53:3f:49:7f:9b:cb: 7d:af:18:18:7f:0b:27:bc:a1:6a:aa:67:53:2f:64: e0:b8:48:ef:9b:90:86:a6:f3:35:b7:14:24:ba:75: d9:03:09:cf:2c:12:34:19:6d:c3:ef:95:ee:87:81: 34:e5:cb:7e:85:3c:d0:30:63:10:9a:e1:e5:30:90: 28:28:be:ed:12:ba:f0:00:07:d3:74:e5:f8:e7:fd: 8e:87:47:65:ab:63:07:b4:6a:6d:71:11:9f:1f:49: cd:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:5C:4E:7F:A0:EE:82:4F:F5:80:80:5E:A5:44:E1:2B:A8:85:0A:6A X509v3 Authority Key Identifier: keyid:3D:16:07:2C:A0:25:2F:AB:50:65:8D:73:6F:F2:C6:0C:16:29:DC:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRYHLKAlL6tQZY1zb_LGDBYp3HY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:c1:e5:9f:65:63:cc:36:29:33:28:28:f1:7d:68:06:97:37: 19:d8:f9:25:93:d1:29:2d:10:c2:07:fb:18:0b:b9:b5:a3:cb: 24:1e:89:d2:b8:9a:d2:59:44:b1:1b:a3:66:dc:0f:eb:e3:32: 00:3d:23:ca:8e:c1:35:a4:86:68:aa:80:36:0e:a3:b3:3a:69: 85:57:c2:67:13:27:56:cc:c7:24:59:11:d0:99:42:8b:40:a8: 2f:04:b1:e8:59:7c:da:77:ed:9b:12:ca:71:28:4c:cc:1b:4b: b6:96:f4:fe:45:01:df:0b:11:2f:82:af:0f:ed:12:c2:2f:f8: d3:c7:61:54:1a:09:c5:b8:25:30:23:0e:ff:56:ec:35:1f:05: 5c:35:a6:09:c2:e8:e8:dc:52:6d:2e:f8:50:50:1c:5d:0f:9d: ad:be:9d:88:87:7c:51:5f:cf:4a:0c:93:be:7d:1d:8d:7f:0c: cd:39:3a:2b:e5:c7:66:2b:05:12:61:7a:26:52:16:1a:96:d7: af:57:6e:42:9e:97:9b:85:8a:eb:ef:89:6a:7f:51:e2:30:f6: 73:44:fa:f7:3f:dc:24:59:16:d4:a9:df:08:d7:fc:d2:3b:73: e4:bb:95:35:85:13:25:f6:9c:e5:ad:60:2e:64:20:d5:7d:4a: a4:0d:38:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrKKmpMqIEnu+9JeRaQ6fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkMTYwNzJjYTAyNTJmYWI1MDY1OGQ3MzZmZjJjNjBjMTYy OWRjNzYwHhcNMjUxMjI2MDgwMDQ0WhcNMjUxMjI3MDgwMDQ0WjAzMTEwLwYDVQQD EygxZjVjNGU3ZmEwZWU4MjRmZjU4MDgwNWVhNTQ0ZTEyYmE4ODUwYTZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8uFKFx7NCcfCtlJrQoe2LdEr4cg c3AgEhZFA+fsOVFFMwsQfSEeTPnQoadi9Q3lBFg8QhzLmB9iu+270gHNi1lNFNPO ypD/SvTiy3iwxWfr6MMu53JXqtk9QF1jcdFX4UV4kkd1McpTyzCrwYbErfxehjxD 2pp+Lw7pH/qGq2Rqb9PZ/GFoXV6TucqzErQm+/A9vWWcKVTh/zYaNshTP0l/m8t9 rxgYfwsnvKFqqmdTL2TguEjvm5CGpvM1txQkunXZAwnPLBI0GW3D75Xuh4E05ct+ hTzQMGMQmuHlMJAoKL7tErrwAAfTdOX45/2Oh0dlq2MHtGptcRGfH0nNxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB9cTn+g7oJP9YCAXqVE4SuohQpqMB8GA1UdIwQY MBaAFD0WByygJS+rUGWNc2/yxgwWKdx2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFJZSExLQWxMNnRRWlkxemJfTEdEQllwM0hZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8yZmJmMmMtNTQyZi00Yzk4LTk5ZGIt YTRlNWRlOGVlNzE2LzEvUFJZSExLQWxMNnRRWlkxemJfTEdEQllwM0hZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi8yZmJmMmMtNTQyZi00Yzk4LTk5ZGItYTRlNWRlOGVlNzE2 LzEvUFJZSExLQWxMNnRRWlkxemJfTEdEQllwM0hZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATcHln2Vj zDYpMygo8X1oBpc3Gdj5JZPRKS0Qwgf7GAu5taPLJB6J0ria0llEsRujZtwP6+My AD0jyo7BNaSGaKqANg6jszpphVfCZxMnVszHJFkR0JlCi0CoLwSx6Fl82nftmxLK cShMzBtLtpb0/kUB3wsRL4KvD+0Swi/408dhVBoJxbglMCMO/1bsNR8FXDWmCcLo 6NxSbS74UFAcXQ+drb6diId8UV/PSgyTvn0djX8MzTk6K+XHZisFEmF6JlIWGpbX r1duQp6Xm4WK6++Jan9R4jD2c0T69z/cJFkW1KnfCNf80jtz5LuVNYUTJfac5a1g LmQg1X1KpA041A== -----END CERTIFICATE-----Generated at Fri Dec 26 14:19:49 2025 by rpki-client