This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.mft File: PRH7pD9XqwRF5UL87suHaBZXzPM.mft (raw, json) Hash identifier: 0131zCiLLn4JyUv66Fnguq5txBF0nuSQCps3t6w90kA= Subject key identifier: 9C:F5:2A:67:D4:67:39:14:19:3B:CD:F1:4A:B3:54:BD:F1:3E:37:47 Authority key identifier: 3D:11:FB:A4:3F:57:AB:04:45:E5:42:FC:EE:CB:87:68:16:57:CC:F3 Certificate issuer: /CN=3d11fba43f57ab0445e542fceecb87681657ccf3 Certificate serial: 019B19BC0FD3F49405055EA3D7597377E934 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PRH7pD9XqwRF5UL87suHaBZXzPM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.mft Manifest number: 03FF Signing time: Sat 13 Dec 2025 22:01:53 +0000 Manifest this update: Sat 13 Dec 2025 22:01:53 +0000 Manifest next update: Sun 14 Dec 2025 22:01:53 +0000 Files and hashes: 1: 2DxOeFRwGr0ZkLmLFLoh-xJZObE.roa (hash: aeAg8fL5FqA68LiiZmemChuMc/666QpvAefI6BAnFLU=) 2: PRH7pD9XqwRF5UL87suHaBZXzPM.crl (hash: xGAWPc+AMa9uz0Y6Kcknqd9lEBOWKpZ3EgeF2A6LqCE=) 3: QubVM_6N5lx1EgDJtxcjPI_RV3o.roa (hash: 0U5OEeLVzA3Fo3jdio9FkyyDkZiO1CmcUt6CGyuWF74=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.mft rsync://rpki.ripe.net/repository/DEFAULT/PRH7pD9XqwRF5UL87suHaBZXzPM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:bc:0f:d3:f4:94:05:05:5e:a3:d7:59:73:77:e9:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d11fba43f57ab0445e542fceecb87681657ccf3 Validity Not Before: Dec 13 22:01:53 2025 GMT Not After : Dec 14 22:01:53 2025 GMT Subject: CN=9cf52a67d4673914193bcdf14ab354bdf13e3747 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:90:1c:8a:88:89:51:ad:84:e5:b5:99:ae:ef: 48:9d:b7:19:93:ad:51:77:aa:0f:43:6c:90:3e:a7: 30:cd:d6:be:42:93:8a:b1:b9:53:b0:93:0b:cf:dd: a7:30:53:51:93:08:4e:1d:6d:13:1e:e0:58:0e:fa: 2c:fb:99:f8:c6:8a:fd:a8:43:ca:24:f3:13:3e:8f: 08:06:26:77:a9:0e:ea:9f:bc:ad:78:3c:1d:9f:16: 42:ee:a3:94:03:7e:2c:7c:ce:5a:25:ff:f1:b7:33: 48:eb:af:5c:10:76:d4:8c:51:d8:75:6c:a3:81:8d: 3b:8d:ce:e1:18:7c:5e:e2:93:d3:5d:95:d5:21:af: 1f:83:33:ec:02:8c:c2:36:f4:07:69:38:60:89:e8: 22:16:71:18:a8:9c:bc:b7:21:ce:85:57:42:1c:58: 89:12:88:05:14:fc:b1:41:7c:88:3b:51:a8:2a:09: 96:d8:5b:83:85:95:e3:86:2c:28:f4:2b:f2:9e:3c: 99:09:2d:63:a8:9b:ad:dd:77:7b:de:ef:08:9a:a5: a2:2f:74:7b:57:c8:7f:38:c8:7a:d6:ae:2f:38:3c: 24:0f:db:49:8f:4c:fa:4e:c2:30:eb:21:ef:bc:7e: 50:5e:15:8e:0e:2b:79:fd:8e:bb:55:34:b8:ab:41: 28:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:F5:2A:67:D4:67:39:14:19:3B:CD:F1:4A:B3:54:BD:F1:3E:37:47 X509v3 Authority Key Identifier: keyid:3D:11:FB:A4:3F:57:AB:04:45:E5:42:FC:EE:CB:87:68:16:57:CC:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRH7pD9XqwRF5UL87suHaBZXzPM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:59:7b:d2:11:49:f8:48:05:e5:70:22:46:35:c4:bc:a2:c2: d3:19:dc:15:4e:f4:51:a9:d9:eb:c0:99:7b:8e:5b:c3:0c:b7: d7:e4:7a:ad:d9:e4:7d:eb:a4:42:37:be:cd:8e:ee:70:a1:f1: 54:b3:24:f9:0b:c2:3c:03:d0:2a:7f:a1:78:34:cb:80:85:9f: de:00:1e:5c:aa:20:49:22:bf:df:93:0a:f4:ac:ef:9f:d1:02: 6d:f9:da:19:a5:df:4b:9a:9b:69:a4:7f:bd:34:9d:36:1d:26: 39:8c:96:d4:05:a0:4f:87:81:cc:5b:67:48:3f:08:11:52:59: 60:25:6f:0f:c4:22:ea:b6:8b:79:66:49:60:af:50:03:af:db: ff:1b:65:22:3d:83:10:ad:8a:f7:a4:ff:ac:4c:50:d0:4b:b6: 92:9b:88:df:0f:2a:e9:a3:3d:74:41:ac:c6:bb:26:e6:f2:7a: ed:63:5e:b0:c6:d7:c8:03:30:90:32:92:f9:df:97:10:91:f8: 32:1f:80:86:60:30:9f:47:48:30:7a:0e:00:57:bc:60:f8:1a: 30:0e:3d:79:e7:e3:49:7e:0b:fb:35:24:6b:18:45:90:f9:e8: a5:4c:b8:bc:3f:f8:2d:33:43:3a:db:7c:77:b6:9d:9b:20:a6: d4:6d:99:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZvA/T9JQFBV6j11lzd+k0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkMTFmYmE0M2Y1N2FiMDQ0NWU1NDJmY2VlY2I4NzY4MTY1 N2NjZjMwHhcNMjUxMjEzMjIwMTUzWhcNMjUxMjE0MjIwMTUzWjAzMTEwLwYDVQQD Eyg5Y2Y1MmE2N2Q0NjczOTE0MTkzYmNkZjE0YWIzNTRiZGYxM2UzNzQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZAcioiJUa2E5bWZru9InbcZk61R d6oPQ2yQPqcwzda+QpOKsblTsJMLz92nMFNRkwhOHW0THuBYDvos+5n4xor9qEPK JPMTPo8IBiZ3qQ7qn7yteDwdnxZC7qOUA34sfM5aJf/xtzNI669cEHbUjFHYdWyj gY07jc7hGHxe4pPTXZXVIa8fgzPsAozCNvQHaThgiegiFnEYqJy8tyHOhVdCHFiJ EogFFPyxQXyIO1GoKgmW2FuDhZXjhiwo9CvynjyZCS1jqJut3Xd73u8ImqWiL3R7 V8h/OMh61q4vODwkD9tJj0z6TsIw6yHvvH5QXhWODit5/Y67VTS4q0EokwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJz1KmfUZzkUGTvN8UqzVL3xPjdHMB8GA1UdIwQY MBaAFD0R+6Q/V6sEReVC/O7Lh2gWV8zzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFJIN3BEOVhxd1JGNVVMODdzdUhhQlpYelBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80NzNhZGUtYjUwNC00YjEwLWFlZDYt YzVkZDM4NTdhNGQyLzEvUFJIN3BEOVhxd1JGNVVMODdzdUhhQlpYelBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80NzNhZGUtYjUwNC00YjEwLWFlZDYtYzVkZDM4NTdhNGQy LzEvUFJIN3BEOVhxd1JGNVVMODdzdUhhQlpYelBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX1l70hFJ +EgF5XAiRjXEvKLC0xncFU70UanZ68CZe45bwwy31+R6rdnkfeukQje+zY7ucKHx VLMk+QvCPAPQKn+heDTLgIWf3gAeXKogSSK/35MK9Kzvn9ECbfnaGaXfS5qbaaR/ vTSdNh0mOYyW1AWgT4eBzFtnSD8IEVJZYCVvD8Qi6raLeWZJYK9QA6/b/xtlIj2D EK2K96T/rExQ0Eu2kpuI3w8q6aM9dEGsxrsm5vJ67WNesMbXyAMwkDKS+d+XEJH4 Mh+AhmAwn0dIMHoOAFe8YPgaMA49eefjSX4L+zUkaxhFkPnopUy4vD/4LTNDOtt8 d7admyCm1G2Z+A== -----END CERTIFICATE-----Generated at Sun Dec 14 00:05:02 2025 by rpki-client