This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/56e9d5-ff45-4464-b2bb-610b9e72a6be/1/PRKXkoZrFiE7VsW_pr66x8YYsVA.mft File: PRKXkoZrFiE7VsW_pr66x8YYsVA.mft (raw, json) Hash identifier: rtylbH4C7qkdGLowQZRvLQA6Z9KoquLPhFIFgAAr8D8= Subject key identifier: A6:F4:6D:CA:8A:3D:4A:69:2F:0B:A6:F3:8B:8B:C2:0A:FC:D4:6C:9D Authority key identifier: 3D:12:97:92:86:6B:16:21:3B:56:C5:BF:A6:BE:BA:C7:C6:18:B1:50 Certificate issuer: /CN=3d129792866b16213b56c5bfa6bebac7c618b150 Certificate serial: 019B32D7C4C3B45F66D7823369ED5745FED4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PRKXkoZrFiE7VsW_pr66x8YYsVA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/56e9d5-ff45-4464-b2bb-610b9e72a6be/1/PRKXkoZrFiE7VsW_pr66x8YYsVA.mft Manifest number: 1311 Signing time: Thu 18 Dec 2025 19:02:39 +0000 Manifest this update: Thu 18 Dec 2025 19:02:39 +0000 Manifest next update: Fri 19 Dec 2025 19:02:39 +0000 Files and hashes: 1: PRKXkoZrFiE7VsW_pr66x8YYsVA.crl (hash: wOyo8tAMvpUE/TL7wgombLWEhRkcanbmXAyvtkO19bw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/56e9d5-ff45-4464-b2bb-610b9e72a6be/1/PRKXkoZrFiE7VsW_pr66x8YYsVA.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/56e9d5-ff45-4464-b2bb-610b9e72a6be/1/PRKXkoZrFiE7VsW_pr66x8YYsVA.mft rsync://rpki.ripe.net/repository/DEFAULT/PRKXkoZrFiE7VsW_pr66x8YYsVA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:02:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d7:c4:c3:b4:5f:66:d7:82:33:69:ed:57:45:fe:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d129792866b16213b56c5bfa6bebac7c618b150 Validity Not Before: Dec 18 19:02:39 2025 GMT Not After : Dec 19 19:02:39 2025 GMT Subject: CN=a6f46dca8a3d4a692f0ba6f38b8bc20afcd46c9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:10:1b:1c:06:ce:94:35:89:d1:73:61:6b:29: 14:f3:af:99:cd:a3:9b:11:0c:d4:c7:5a:e1:73:cb: 44:a1:a1:27:3a:dc:c4:80:0a:3a:28:56:95:bb:5d: 18:0d:11:62:21:35:b1:01:c1:b5:8b:b0:bd:44:6a: 6f:05:82:d2:44:a2:b3:46:db:51:65:fb:02:5b:bf: 78:3f:df:d2:53:29:6e:84:c4:1d:90:7a:0c:f2:c3: a7:8c:55:c4:a3:f5:44:23:df:db:2b:4d:44:c8:46: b4:4f:81:38:3a:f1:10:b3:ad:21:30:ee:61:b0:02: c9:ab:52:d8:20:06:f3:41:4b:07:31:e9:8d:35:44: 00:aa:c8:6b:31:14:83:08:04:9f:54:ed:c0:75:a2: 1f:d2:1a:b8:0e:e0:09:d6:cc:94:4a:fc:6c:f1:43: 08:73:da:d7:0f:e9:f1:ce:6e:80:99:8a:78:1b:5a: 6d:9f:58:82:b3:7d:25:19:1c:de:15:38:a9:b3:19: d7:a8:01:71:74:fb:59:2f:bd:b2:00:5a:93:34:cd: c5:59:51:7f:3b:61:74:87:0c:d7:b0:80:e8:f9:e2: 04:c4:d3:5a:08:d0:a0:6b:38:c0:f8:d5:12:4d:9c: 47:b8:7b:2a:41:3a:4c:ff:c8:23:a7:b7:51:11:d2: 4a:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:F4:6D:CA:8A:3D:4A:69:2F:0B:A6:F3:8B:8B:C2:0A:FC:D4:6C:9D X509v3 Authority Key Identifier: keyid:3D:12:97:92:86:6B:16:21:3B:56:C5:BF:A6:BE:BA:C7:C6:18:B1:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRKXkoZrFiE7VsW_pr66x8YYsVA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/56e9d5-ff45-4464-b2bb-610b9e72a6be/1/PRKXkoZrFiE7VsW_pr66x8YYsVA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/56e9d5-ff45-4464-b2bb-610b9e72a6be/1/PRKXkoZrFiE7VsW_pr66x8YYsVA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:be:67:7b:8a:ee:e9:f2:31:57:3b:c5:72:d9:d7:c6:0f:84: 57:57:e2:de:cb:f1:92:96:ae:d3:c2:89:e7:8b:11:e7:5a:ef: 42:6e:c4:d5:2f:95:fe:e5:89:32:90:c6:49:9a:17:fd:57:76: f5:b0:59:65:d4:55:0d:24:aa:6d:15:26:9d:48:9e:ff:98:a0: e7:c2:dd:3e:2d:3b:17:90:0c:10:25:cd:b0:60:1e:12:f1:40: 43:ce:62:1a:14:ba:ce:a5:a1:54:6c:35:e2:4e:31:1e:57:c8: 1b:fe:47:4f:f0:5f:ee:6b:ca:7c:15:d4:41:cb:16:22:7c:a2: 30:57:7e:9f:b8:3e:c8:dd:03:bf:e9:26:46:5d:b7:32:ce:20: a7:1d:24:a2:33:96:dc:dd:9f:83:1c:2a:ed:19:31:bc:d8:9f: a2:68:f3:11:e3:61:11:7a:c3:31:97:ba:2d:4a:da:41:a1:dc: f8:91:a3:62:0c:97:a8:09:e2:ae:ca:d0:24:79:b4:99:1e:a2: 97:80:a5:7b:ce:e2:b1:c9:5c:2e:f9:94:f6:af:d8:8e:97:95: 45:42:a9:2f:10:96:55:52:98:b5:0b:66:4c:da:88:e5:68:03: bc:66:33:c1:25:3d:34:5f:4c:9c:32:9d:d0:33:0a:f2:7b:61: cc:2c:9d:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy18TDtF9m14Izae1XRf7UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkMTI5NzkyODY2YjE2MjEzYjU2YzViZmE2YmViYWM3YzYx OGIxNTAwHhcNMjUxMjE4MTkwMjM5WhcNMjUxMjE5MTkwMjM5WjAzMTEwLwYDVQQD EyhhNmY0NmRjYThhM2Q0YTY5MmYwYmE2ZjM4YjhiYzIwYWZjZDQ2YzlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBAbHAbOlDWJ0XNhaykU86+ZzaOb EQzUx1rhc8tEoaEnOtzEgAo6KFaVu10YDRFiITWxAcG1i7C9RGpvBYLSRKKzRttR ZfsCW794P9/SUyluhMQdkHoM8sOnjFXEo/VEI9/bK01EyEa0T4E4OvEQs60hMO5h sALJq1LYIAbzQUsHMemNNUQAqshrMRSDCASfVO3AdaIf0hq4DuAJ1syUSvxs8UMI c9rXD+nxzm6AmYp4G1ptn1iCs30lGRzeFTipsxnXqAFxdPtZL72yAFqTNM3FWVF/ O2F0hwzXsIDo+eIExNNaCNCgazjA+NUSTZxHuHsqQTpM/8gjp7dREdJKIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKb0bcqKPUppLwum84uLwgr81GydMB8GA1UdIwQY MBaAFD0Sl5KGaxYhO1bFv6a+usfGGLFQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFJLWGtvWnJGaUU3VnNXX3ByNjZ4OFlZc1ZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC81NmU5ZDUtZmY0NS00NDY0LWIyYmIt NjEwYjllNzJhNmJlLzEvUFJLWGtvWnJGaUU3VnNXX3ByNjZ4OFlZc1ZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC81NmU5ZDUtZmY0NS00NDY0LWIyYmItNjEwYjllNzJhNmJl LzEvUFJLWGtvWnJGaUU3VnNXX3ByNjZ4OFlZc1ZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhL5ne4ru 6fIxVzvFctnXxg+EV1fi3svxkpau08KJ54sR51rvQm7E1S+V/uWJMpDGSZoX/Vd2 9bBZZdRVDSSqbRUmnUie/5ig58LdPi07F5AMECXNsGAeEvFAQ85iGhS6zqWhVGw1 4k4xHlfIG/5HT/Bf7mvKfBXUQcsWInyiMFd+n7g+yN0Dv+kmRl23Ms4gpx0kojOW 3N2fgxwq7RkxvNifomjzEeNhEXrDMZe6LUraQaHc+JGjYgyXqAnirsrQJHm0mR6i l4Cle87isclcLvmU9q/YjpeVRUKpLxCWVVKYtQtmTNqI5WgDvGYzwSU9NF9MnDKd 0DMK8nthzCydXA== -----END CERTIFICATE-----Generated at Fri Dec 19 01:57:49 2025 by rpki-client