This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/cea5cf-0782-40d1-8913-92712f95e336/1/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.mft File: Pr1fi7WllNZ7XOgHqExZ3eVpp3U.mft (raw, json) Hash identifier: pSwI6CPsjW0CQkPoy/sQFIUWr81nj+YJlos68u3RA7Q= Subject key identifier: 3B:27:B4:35:64:EE:B8:0F:6F:BE:4D:F9:F1:95:73:D8:68:3E:D0:E8 Authority key identifier: 3E:BD:5F:8B:B5:A5:94:D6:7B:5C:E8:07:A8:4C:59:DD:E5:69:A7:75 Certificate issuer: /CN=3ebd5f8bb5a594d67b5ce807a84c59dde569a775 Certificate serial: 019B5976A38CF1A2E43E665A76A241DA4266 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/cea5cf-0782-40d1-8913-92712f95e336/1/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.mft Manifest number: 0B42 Signing time: Fri 26 Dec 2025 07:01:45 +0000 Manifest this update: Fri 26 Dec 2025 07:01:45 +0000 Manifest next update: Sat 27 Dec 2025 07:01:45 +0000 Files and hashes: 1: E5xFDK9_S5iJGP4sFeJ9ooZosHI.roa (hash: AbosUOGwDkylbwXsNTmNDaibnmXnMj0HIqZzxGPKQ6U=) 2: Pr1fi7WllNZ7XOgHqExZ3eVpp3U.crl (hash: +uBcUjOLOmMtsU4vqmzUmc3iB0VFxN++5bAppwIirP8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/cea5cf-0782-40d1-8913-92712f95e336/1/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.crl rsync://rpki.ripe.net/repository/DEFAULT/de/cea5cf-0782-40d1-8913-92712f95e336/1/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.mft rsync://rpki.ripe.net/repository/DEFAULT/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:a3:8c:f1:a2:e4:3e:66:5a:76:a2:41:da:42:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ebd5f8bb5a594d67b5ce807a84c59dde569a775 Validity Not Before: Dec 26 07:01:45 2025 GMT Not After : Dec 27 07:01:45 2025 GMT Subject: CN=3b27b43564eeb80f6fbe4df9f19573d8683ed0e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:17:ad:e7:99:65:73:01:a3:51:7c:6a:a8:52: d0:e1:6c:c9:f1:cc:f2:30:f4:d3:d6:c3:af:ea:35: d5:0d:b9:b0:76:47:4b:08:fc:d7:bb:f7:66:fb:5c: 3e:3c:c0:3c:c9:1c:14:46:27:0a:11:43:e0:45:16: 3e:7e:42:dd:5b:aa:86:38:37:35:48:ba:57:0d:5f: 05:d1:46:6b:78:f1:6a:0b:a2:c0:3f:e7:0f:b4:49: fc:44:98:80:53:24:43:aa:25:94:7a:55:03:03:2f: 5a:09:72:2b:9e:53:f1:f2:1b:82:44:dc:c6:bb:37: a9:8d:66:cc:08:67:da:5c:c0:c7:74:ae:ee:6e:23: c2:17:e8:10:bf:af:6f:4a:9a:6f:2a:d7:00:d2:e7: d6:a5:80:6d:ab:7b:41:07:df:8b:13:a5:5f:05:85: 69:cd:61:bd:b0:5c:18:11:12:a2:f6:33:14:f7:8e: b9:82:32:71:e9:4e:df:a7:63:63:cc:ef:d3:89:d0: be:b3:77:78:ab:9f:78:83:30:e1:15:a6:23:2e:95: ee:5b:41:0a:a5:66:2d:38:73:1a:7f:b2:c9:07:37: 83:ef:d4:a6:9a:80:25:23:e9:57:9c:2a:0c:12:54: eb:dc:3b:ed:c5:d6:a3:a4:b8:b2:e9:85:31:ad:ed: 38:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:27:B4:35:64:EE:B8:0F:6F:BE:4D:F9:F1:95:73:D8:68:3E:D0:E8 X509v3 Authority Key Identifier: keyid:3E:BD:5F:8B:B5:A5:94:D6:7B:5C:E8:07:A8:4C:59:DD:E5:69:A7:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/cea5cf-0782-40d1-8913-92712f95e336/1/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/cea5cf-0782-40d1-8913-92712f95e336/1/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:c2:83:c4:f6:61:a6:74:48:5e:17:17:b1:ba:a4:2d:e1:e8: e5:a8:07:e0:b5:f8:af:d6:91:2e:20:d6:9c:e3:47:32:20:1b: d7:1a:79:f8:0c:e6:0e:74:87:9f:20:27:49:c6:6f:ea:89:df: 8a:01:ba:2e:c6:79:26:09:0d:59:e1:bc:41:ed:96:49:ee:85: 1d:a2:37:29:62:58:bf:da:31:ae:7a:25:b3:85:06:49:0b:66: 39:fb:ff:3b:f7:c3:7a:64:3b:42:3c:9d:b5:91:ca:ee:cd:4d: d0:21:e6:3b:ba:db:39:00:05:76:96:eb:66:4e:b8:43:fe:c8: 5d:1e:cf:00:c5:e2:98:be:ad:cf:ff:9c:82:26:f8:9b:86:a6: b5:ed:54:ff:d7:92:46:5b:7c:6e:45:cf:45:21:35:c2:c2:9d: de:bb:9c:9f:71:e2:b5:7f:f3:ed:73:a7:3f:e3:86:7b:39:f2: 4f:42:41:0a:5d:c0:42:71:db:41:34:83:f0:a2:69:95:be:5c: 22:d2:c2:b6:aa:08:65:b7:6c:14:4c:2e:2c:b4:66:c9:b8:1b: 53:e8:1d:43:dd:ff:63:68:a9:72:42:9a:cb:9f:69:82:88:2b: c4:95:af:d8:17:fa:61:fe:02:49:ed:04:17:ef:49:93:3e:10: 91:7b:06:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdqOM8aLkPmZadqJB2kJmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlYmQ1ZjhiYjVhNTk0ZDY3YjVjZTgwN2E4NGM1OWRkZTU2 OWE3NzUwHhcNMjUxMjI2MDcwMTQ1WhcNMjUxMjI3MDcwMTQ1WjAzMTEwLwYDVQQD EygzYjI3YjQzNTY0ZWViODBmNmZiZTRkZjlmMTk1NzNkODY4M2VkMGU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxet55llcwGjUXxqqFLQ4WzJ8czy MPTT1sOv6jXVDbmwdkdLCPzXu/dm+1w+PMA8yRwURicKEUPgRRY+fkLdW6qGODc1 SLpXDV8F0UZrePFqC6LAP+cPtEn8RJiAUyRDqiWUelUDAy9aCXIrnlPx8huCRNzG uzepjWbMCGfaXMDHdK7ubiPCF+gQv69vSppvKtcA0ufWpYBtq3tBB9+LE6VfBYVp zWG9sFwYERKi9jMU9465gjJx6U7fp2NjzO/TidC+s3d4q594gzDhFaYjLpXuW0EK pWYtOHMaf7LJBzeD79SmmoAlI+lXnCoMElTr3DvtxdajpLiy6YUxre04DQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDsntDVk7rgPb75N+fGVc9hoPtDoMB8GA1UdIwQY MBaAFD69X4u1pZTWe1zoB6hMWd3laad1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHIxZmk3V2xsTlo3WE9nSHFFeFozZVZwcDNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9jZWE1Y2YtMDc4Mi00MGQxLTg5MTMt OTI3MTJmOTVlMzM2LzEvUHIxZmk3V2xsTlo3WE9nSHFFeFozZVZwcDNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS9jZWE1Y2YtMDc4Mi00MGQxLTg5MTMtOTI3MTJmOTVlMzM2 LzEvUHIxZmk3V2xsTlo3WE9nSHFFeFozZVZwcDNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj8KDxPZh pnRIXhcXsbqkLeHo5agH4LX4r9aRLiDWnONHMiAb1xp5+AzmDnSHnyAnScZv6onf igG6LsZ5JgkNWeG8Qe2WSe6FHaI3KWJYv9oxrnols4UGSQtmOfv/O/fDemQ7Qjyd tZHK7s1N0CHmO7rbOQAFdpbrZk64Q/7IXR7PAMXimL6tz/+cgib4m4amte1U/9eS Rlt8bkXPRSE1wsKd3rucn3HitX/z7XOnP+OGeznyT0JBCl3AQnHbQTSD8KJplb5c ItLCtqoIZbdsFEwuLLRmybgbU+gdQ93/Y2ipckKay59pgogrxJWv2Bf6Yf4CSe0E F+9Jkz4QkXsGxw== -----END CERTIFICATE-----Generated at Fri Dec 26 16:00:56 2025 by rpki-client