This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/aa6565-5d97-4a80-9a5d-424c23f50ff3/1/PrkfNs_-gO_g3_JhI_j5fBXZdjw.mft File: PrkfNs_-gO_g3_JhI_j5fBXZdjw.mft (raw, json) Hash identifier: JuJJxbQ7yQaP1K6nNhc5pL0aCmbG0AoofPhwbTu0TbE= Subject key identifier: 25:CA:89:88:0F:BE:82:62:E1:3B:57:73:49:88:90:6E:7D:01:4A:37 Authority key identifier: 3E:B9:1F:36:CF:FE:80:EF:E0:DF:F2:61:23:F8:F9:7C:15:D9:76:3C Certificate issuer: /CN=3eb91f36cffe80efe0dff26123f8f97c15d9763c Certificate serial: 019B597743E4345FA75096F0FD96C408CA00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PrkfNs_-gO_g3_JhI_j5fBXZdjw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/aa6565-5d97-4a80-9a5d-424c23f50ff3/1/PrkfNs_-gO_g3_JhI_j5fBXZdjw.mft Manifest number: 1796 Signing time: Fri 26 Dec 2025 07:02:26 +0000 Manifest this update: Fri 26 Dec 2025 07:02:26 +0000 Manifest next update: Sat 27 Dec 2025 07:02:26 +0000 Files and hashes: 1: PrkfNs_-gO_g3_JhI_j5fBXZdjw.crl (hash: vo7VIihfc/X1qcJo/LPtfBUxZsoF1F/YMDZrqzLS1LM=) 2: nuDK-TC5cc4Dv5m-g_HwBrvB2yM.roa (hash: HAIc8rXtzi2UFMvUxwUOqrhRhKG5mpUAWpR1IBhhhmQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/aa6565-5d97-4a80-9a5d-424c23f50ff3/1/PrkfNs_-gO_g3_JhI_j5fBXZdjw.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/aa6565-5d97-4a80-9a5d-424c23f50ff3/1/PrkfNs_-gO_g3_JhI_j5fBXZdjw.mft rsync://rpki.ripe.net/repository/DEFAULT/PrkfNs_-gO_g3_JhI_j5fBXZdjw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:77:43:e4:34:5f:a7:50:96:f0:fd:96:c4:08:ca:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3eb91f36cffe80efe0dff26123f8f97c15d9763c Validity Not Before: Dec 26 07:02:26 2025 GMT Not After : Dec 27 07:02:26 2025 GMT Subject: CN=25ca89880fbe8262e13b57734988906e7d014a37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:97:55:c6:80:4a:d0:03:d1:86:18:f5:b0:d5: bc:09:42:86:83:8f:75:6a:e8:5a:eb:b8:09:cb:a9: 92:1b:21:ee:2f:1b:f3:30:0a:ed:a0:0b:04:8b:eb: df:9c:c1:bb:a6:a3:d1:f6:47:4b:47:ea:ef:4b:7c: df:4a:93:12:9b:76:2a:70:5a:3f:ac:55:00:38:40: 51:99:fe:f5:19:d1:69:7b:67:23:9a:9d:d8:7d:0b: 56:27:88:25:cf:a5:2a:e1:26:11:72:65:3a:40:84: 38:74:2a:e0:6d:10:f9:3a:6e:2c:86:f6:fa:f9:8f: 71:50:43:5e:aa:23:9d:ae:23:e9:91:cf:1f:48:ce: d8:e3:f2:e9:53:ad:4f:be:c1:75:42:dd:2c:47:0a: 90:6b:65:1e:4e:2e:c6:46:3a:ae:99:c3:b0:15:c5: 04:d4:14:f9:53:b1:f0:2f:7e:9f:f0:90:e6:ec:3a: fa:69:c1:09:d7:3b:b0:a6:c2:3a:26:52:26:de:8a: f6:65:60:7f:b8:07:88:55:36:2b:74:78:0b:5f:ff: b5:36:b1:f3:86:60:93:9f:ac:f5:51:fc:c1:45:5d: 71:af:ab:0c:b2:c8:27:0c:93:2c:2e:d5:5e:45:c7: 58:66:26:0e:3c:86:3c:57:1b:7a:d8:5c:9c:59:5c: de:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:CA:89:88:0F:BE:82:62:E1:3B:57:73:49:88:90:6E:7D:01:4A:37 X509v3 Authority Key Identifier: keyid:3E:B9:1F:36:CF:FE:80:EF:E0:DF:F2:61:23:F8:F9:7C:15:D9:76:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PrkfNs_-gO_g3_JhI_j5fBXZdjw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/aa6565-5d97-4a80-9a5d-424c23f50ff3/1/PrkfNs_-gO_g3_JhI_j5fBXZdjw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/aa6565-5d97-4a80-9a5d-424c23f50ff3/1/PrkfNs_-gO_g3_JhI_j5fBXZdjw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:f4:e5:b4:2a:9a:8d:3f:40:dc:0f:0c:6e:36:6e:19:40:f3: 72:64:23:e4:b6:8d:73:a8:51:bd:10:41:85:1d:9c:90:c7:26: d3:7d:35:86:43:6b:cc:8c:d6:01:70:52:b3:7b:bb:ff:74:05: ce:15:4b:d2:53:8a:6c:9d:76:77:01:63:ac:c6:f1:3a:84:d8: 5b:f3:35:c0:58:aa:f5:f2:77:0e:f2:ab:27:57:b4:95:14:5c: 74:42:92:57:06:06:69:f2:d6:45:45:c4:fc:70:94:5f:59:07: 36:a4:cf:b5:5b:c1:b3:dc:c0:a0:e0:ba:d7:a0:d8:ce:d3:a2: ba:3d:ff:d6:37:b8:61:83:ce:3d:3b:a7:ce:d1:67:74:21:4c: 09:c1:7c:4c:7e:08:cb:cb:b3:2d:80:e7:4a:d0:4c:7f:0c:38: 1b:83:4e:a5:76:5e:e3:8f:3a:58:40:db:2b:ea:e2:20:ab:c0: 36:db:b6:28:e1:8e:d9:d4:ce:36:8c:8d:2b:ad:92:af:b7:ea: 65:4c:65:ea:e1:e9:da:5f:a7:36:88:c1:ce:6f:63:b8:26:41: 7a:b1:0b:32:33:a7:a3:81:56:bb:48:6b:f0:33:20:59:a1:9d: 67:b4:b4:33:2a:7b:e0:4a:81:30:50:d2:f9:5b:00:54:e9:9b: 5d:1f:5c:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZd0PkNF+nUJbw/ZbECMoAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlYjkxZjM2Y2ZmZTgwZWZlMGRmZjI2MTIzZjhmOTdjMTVk OTc2M2MwHhcNMjUxMjI2MDcwMjI2WhcNMjUxMjI3MDcwMjI2WjAzMTEwLwYDVQQD EygyNWNhODk4ODBmYmU4MjYyZTEzYjU3NzM0OTg4OTA2ZTdkMDE0YTM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpdVxoBK0APRhhj1sNW8CUKGg491 auha67gJy6mSGyHuLxvzMArtoAsEi+vfnMG7pqPR9kdLR+rvS3zfSpMSm3YqcFo/ rFUAOEBRmf71GdFpe2cjmp3YfQtWJ4glz6Uq4SYRcmU6QIQ4dCrgbRD5Om4shvb6 +Y9xUENeqiOdriPpkc8fSM7Y4/LpU61PvsF1Qt0sRwqQa2UeTi7GRjqumcOwFcUE 1BT5U7HwL36f8JDm7Dr6acEJ1zuwpsI6JlIm3or2ZWB/uAeIVTYrdHgLX/+1NrHz hmCTn6z1UfzBRV1xr6sMssgnDJMsLtVeRcdYZiYOPIY8Vxt62FycWVzeDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCXKiYgPvoJi4TtXc0mIkG59AUo3MB8GA1UdIwQY MBaAFD65HzbP/oDv4N/yYSP4+XwV2XY8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHJrZk5zXy1nT19nM19KaElfajVmQlhaZGp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9hYTY1NjUtNWQ5Ny00YTgwLTlhNWQt NDI0YzIzZjUwZmYzLzEvUHJrZk5zXy1nT19nM19KaElfajVmQlhaZGp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9hYTY1NjUtNWQ5Ny00YTgwLTlhNWQtNDI0YzIzZjUwZmYz LzEvUHJrZk5zXy1nT19nM19KaElfajVmQlhaZGp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOPTltCqa jT9A3A8MbjZuGUDzcmQj5LaNc6hRvRBBhR2ckMcm0301hkNrzIzWAXBSs3u7/3QF zhVL0lOKbJ12dwFjrMbxOoTYW/M1wFiq9fJ3DvKrJ1e0lRRcdEKSVwYGafLWRUXE /HCUX1kHNqTPtVvBs9zAoOC616DYztOiuj3/1je4YYPOPTunztFndCFMCcF8TH4I y8uzLYDnStBMfww4G4NOpXZe4486WEDbK+riIKvANtu2KOGO2dTONoyNK62Sr7fq ZUxl6uHp2l+nNojBzm9juCZBerELMjOno4FWu0hr8DMgWaGdZ7S0Myp74EqBMFDS +VsAVOmbXR9ckw== -----END CERTIFICATE-----Generated at Fri Dec 26 16:00:37 2025 by rpki-client