This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/336070-028b-476f-8606-55c1c84aed79/1/pRJgm-HwV0eSjF8HvRl-YxQ132I.mft File: pRJgm-HwV0eSjF8HvRl-YxQ132I.mft (raw, json) Hash identifier: YOTqciC8iw6Z2qAjoMP0S+Tmdqo5/mOqeKm/VQwSaiE= Subject key identifier: 91:9A:01:24:93:8A:D9:24:13:85:9B:C1:26:29:7E:1A:C5:0E:03:3F Authority key identifier: A5:12:60:9B:E1:F0:57:47:92:8C:5F:07:BD:19:7E:63:14:35:DF:62 Certificate issuer: /CN=a512609be1f05747928c5f07bd197e631435df62 Certificate serial: 019B5AF6939D4D014910943063265A1E7400 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pRJgm-HwV0eSjF8HvRl-YxQ132I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/336070-028b-476f-8606-55c1c84aed79/1/pRJgm-HwV0eSjF8HvRl-YxQ132I.mft Manifest number: 51 Signing time: Fri 26 Dec 2025 14:01:07 +0000 Manifest this update: Fri 26 Dec 2025 14:01:07 +0000 Manifest next update: Sat 27 Dec 2025 14:01:07 +0000 Files and hashes: 1: pRJgm-HwV0eSjF8HvRl-YxQ132I.crl (hash: ObFE7iGHVYEL3uBu+OwJt6vqtfW3vmiTI7fJkZycANQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/336070-028b-476f-8606-55c1c84aed79/1/pRJgm-HwV0eSjF8HvRl-YxQ132I.crl rsync://rpki.ripe.net/repository/DEFAULT/62/336070-028b-476f-8606-55c1c84aed79/1/pRJgm-HwV0eSjF8HvRl-YxQ132I.mft rsync://rpki.ripe.net/repository/DEFAULT/pRJgm-HwV0eSjF8HvRl-YxQ132I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:f6:93:9d:4d:01:49:10:94:30:63:26:5a:1e:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a512609be1f05747928c5f07bd197e631435df62 Validity Not Before: Dec 26 14:01:07 2025 GMT Not After : Dec 27 14:01:07 2025 GMT Subject: CN=919a0124938ad92413859bc126297e1ac50e033f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:84:25:1d:dd:5f:6c:81:0d:22:87:b3:91:ad: 88:e9:e2:ad:3b:20:bb:c7:90:cd:36:42:30:56:a4: 0b:ef:2b:06:3d:7b:61:ad:35:bf:a5:d0:23:ca:a2: ca:8d:13:0c:39:de:1b:a6:73:1c:d0:7c:bf:65:ae: 27:e2:09:f2:7e:af:8a:41:6a:3f:b7:ce:0a:4d:39: 2a:4a:65:59:e7:9e:4b:eb:8b:c7:a7:f1:f8:ca:b5: b4:74:e8:34:91:ed:f1:d5:22:e2:c3:bf:c5:32:b6: 81:ff:82:05:80:aa:a1:44:1b:06:f6:1e:77:5a:fe: a2:84:9c:cc:e4:79:4c:d6:49:6b:4e:d2:f1:8f:e8: 28:38:41:60:b1:65:f3:e6:66:57:52:ca:ba:de:d2: 66:91:d4:f6:d7:8c:88:b5:0d:39:c6:3a:05:b7:70: 29:49:9c:52:b3:87:9a:01:94:47:2d:d7:05:b7:d3: 20:e3:1e:09:19:ab:a6:03:17:a2:c2:9d:f4:a0:73: 41:85:87:62:cd:21:2f:43:b8:08:21:69:0d:70:4c: 77:c8:e2:c6:b0:5e:e9:11:08:4e:5c:46:e7:61:a6: 71:ef:31:6b:5b:6f:5f:70:96:eb:0d:ec:28:0c:01: f9:58:97:65:da:2f:82:91:4b:9e:6d:78:c3:63:35: 30:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:9A:01:24:93:8A:D9:24:13:85:9B:C1:26:29:7E:1A:C5:0E:03:3F X509v3 Authority Key Identifier: keyid:A5:12:60:9B:E1:F0:57:47:92:8C:5F:07:BD:19:7E:63:14:35:DF:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pRJgm-HwV0eSjF8HvRl-YxQ132I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/336070-028b-476f-8606-55c1c84aed79/1/pRJgm-HwV0eSjF8HvRl-YxQ132I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/336070-028b-476f-8606-55c1c84aed79/1/pRJgm-HwV0eSjF8HvRl-YxQ132I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:8e:89:cc:62:07:68:ec:f9:73:8a:39:19:06:0d:11:04:32: ab:7c:f4:01:8d:5a:0d:9b:ba:f0:fd:ca:e7:17:84:a8:72:9c: 62:22:14:f6:1b:fe:db:a5:ab:7a:8f:5d:91:51:8d:e4:8d:83: d9:e6:da:69:7f:61:cd:f6:0b:73:27:3c:38:bb:52:16:73:70: a2:80:8b:8d:0d:97:5f:01:2c:f9:79:90:57:b9:04:30:3b:70: 74:b3:62:7e:51:b5:58:5b:18:49:5c:28:47:4c:13:5a:d7:3b: 3b:7d:dc:46:7e:a7:c1:95:a1:d0:be:eb:cf:61:c2:86:60:79: 3b:81:ec:d8:31:3b:b4:9f:74:2d:c5:a7:1d:e6:c7:a0:26:19: 27:9e:05:14:1a:c9:6a:46:f3:6c:20:30:f0:07:c7:87:0d:8d: 16:22:f8:64:69:ae:41:73:87:6b:c1:b7:8b:d2:62:eb:b9:0a: 21:df:5c:8f:df:60:29:57:ca:48:cf:16:0e:3a:52:c2:35:16: a6:dc:71:38:2d:a5:49:0b:d3:32:b8:62:60:98:a9:35:bd:e6: e4:e3:fb:ec:78:e3:ab:e3:ea:68:a1:0c:6b:0e:62:88:16:04: 6c:78:d8:e7:92:e4:66:db:0c:2f:38:77:50:83:fe:5d:95:19: f9:9e:04:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZta9pOdTQFJEJQwYyZaHnQAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1MTI2MDliZTFmMDU3NDc5MjhjNWYwN2JkMTk3ZTYzMTQz NWRmNjIwHhcNMjUxMjI2MTQwMTA3WhcNMjUxMjI3MTQwMTA3WjAzMTEwLwYDVQQD Eyg5MTlhMDEyNDkzOGFkOTI0MTM4NTliYzEyNjI5N2UxYWM1MGUwMzNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYQlHd1fbIENIoezka2I6eKtOyC7 x5DNNkIwVqQL7ysGPXthrTW/pdAjyqLKjRMMOd4bpnMc0Hy/Za4n4gnyfq+KQWo/ t84KTTkqSmVZ555L64vHp/H4yrW0dOg0ke3x1SLiw7/FMraB/4IFgKqhRBsG9h53 Wv6ihJzM5HlM1klrTtLxj+goOEFgsWXz5mZXUsq63tJmkdT214yItQ05xjoFt3Ap SZxSs4eaAZRHLdcFt9Mg4x4JGaumAxeiwp30oHNBhYdizSEvQ7gIIWkNcEx3yOLG sF7pEQhOXEbnYaZx7zFrW29fcJbrDewoDAH5WJdl2i+CkUuebXjDYzUweQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJGaASSTitkkE4WbwSYpfhrFDgM/MB8GA1UdIwQY MBaAFKUSYJvh8FdHkoxfB70ZfmMUNd9iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFJKZ20tSHdWMGVTakY4SHZSbC1ZeFExMzJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8zMzYwNzAtMDI4Yi00NzZmLTg2MDYt NTVjMWM4NGFlZDc5LzEvcFJKZ20tSHdWMGVTakY4SHZSbC1ZeFExMzJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi8zMzYwNzAtMDI4Yi00NzZmLTg2MDYtNTVjMWM4NGFlZDc5 LzEvcFJKZ20tSHdWMGVTakY4SHZSbC1ZeFExMzJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP46JzGIH aOz5c4o5GQYNEQQyq3z0AY1aDZu68P3K5xeEqHKcYiIU9hv+26Wreo9dkVGN5I2D 2ebaaX9hzfYLcyc8OLtSFnNwooCLjQ2XXwEs+XmQV7kEMDtwdLNiflG1WFsYSVwo R0wTWtc7O33cRn6nwZWh0L7rz2HChmB5O4Hs2DE7tJ90LcWnHebHoCYZJ54FFBrJ akbzbCAw8AfHhw2NFiL4ZGmuQXOHa8G3i9Ji67kKId9cj99gKVfKSM8WDjpSwjUW ptxxOC2lSQvTMrhiYJipNb3m5OP77Hjjq+PqaKEMaw5iiBYEbHjY55LkZtsMLzh3 UIP+XZUZ+Z4EvA== -----END CERTIFICATE-----Generated at Fri Dec 26 15:43:33 2025 by rpki-client